[Pkg-samba-maint] Bug#782628: samba: bsd virtual printers doesnt works on clients win2k or winxp

Piviul piviul at riminilug.it
Wed Apr 15 07:27:14 UTC 2015


Package: samba
Version: 2:4.1.17+dfsg-2
Severity: important

Dear Maintainer,
In debian jessie (samba 4.1.17) but the same seems to happens using wheezy and
samba 4.1.17 from backports, if you set a bsd virtual printer  (printing = bsd)
like this one

[testbsd]
        comment = Test BSD printing
        path = /tmp
        guest ok = Yes
        printable = Yes
        print ok = Yes
        printing = bsd
        print command = /usr/local/bin/bsdprinting.sh %s %H "%J" %p %m %S
'default'

I expect that the script /usr/local/bin/bsdprinting.sh will be invoked every
time a client print on this virtual printer. In effect win7 clients doesn't
have any problem but winxp and win2k clients can't print (there is no call to
the file /usr/local/bin/bsdprinting.sh).

I attach the log level 10 of the client (log.vbox-winxp) and of the daemon
(log.smbd) when the client vbox-winxp (having windows xp) try to print to the
bsd virtual printer.

If you need more infos about this bug please doesn't esitate to contact me

Piviul



-- System Information:
Debian Release: 8.0
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages samba depends on:
ii  adduser                              3.113+nmu3
ii  dpkg                                 1.17.24
ii  libasn1-8-heimdal                    1.6~rc2+dfsg-9
ii  libbsd0                              0.7.0-2
ii  libc6                                2.19-17
ii  libcomerr2                           1.42.12-1.1
ii  libhdb9-heimdal [heimdal-hdb-api-8]  1.6~rc2+dfsg-9
ii  libkdc2-heimdal                      1.6~rc2+dfsg-9
ii  libkrb5-26-heimdal                   1.6~rc2+dfsg-9
ii  libldb1                              2:1.1.17-2
ii  libpam-modules                       1.1.8-3.1
ii  libpam-runtime                       1.1.8-3.1
ii  libpopt0                             1.16-10
ii  libpython2.7                         2.7.9-2
ii  libroken18-heimdal                   1.6~rc2+dfsg-9
ii  libtalloc2                           2.1.1-2
ii  libtdb1                              1.3.1-1
ii  libtevent0                           0.9.21-1
ii  lsb-base                             4.1+Debian13+nmu1
ii  multiarch-support                    2.19-17
ii  procps                               2:3.3.9-9
ii  python                               2.7.9-1
ii  python-dnspython                     1.12.0-1
ii  python-ntdb                          1.0-5
ii  python-samba                         2:4.1.17+dfsg-2
pn  python2.7:any                        <none>
ii  samba-common                         2:4.1.17+dfsg-2
ii  samba-common-bin                     2:4.1.17+dfsg-2
ii  samba-dsdb-modules                   2:4.1.17+dfsg-2
ii  samba-libs                           2:4.1.17+dfsg-2
ii  tdb-tools                            1.3.1-1
ii  update-inetd                         4.43

Versions of packages samba recommends:
ii  attr               1:2.4.47-2
ii  logrotate          3.8.7-1+b1
ii  samba-vfs-modules  2:4.1.17+dfsg-2

Versions of packages samba suggests:
pn  bind9          <none>
pn  bind9utils     <none>
pn  ctdb           <none>
pn  ldb-tools      <none>
ii  ntp            1:4.2.6.p5+dfsg-7
pn  smbldap-tools  <none>
ii  winbind        2:4.1.17+dfsg-2

-- no debconf information
-------------- next part --------------
[2015/04/15 08:58:44.174617,  6, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed)
  lp_file_list_changed()
  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Wed Apr 15 08:52:33 2015
  
[2015/04/15 08:58:44.174681,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/reply.c:667(reply_special)
  init msg_type=0x81 msg_flags=0x0
[2015/04/15 08:58:44.234030, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive)
  got smb length of 133
[2015/04/15 08:58:44.234180,  6, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1800(process_smb)
  got message type 0x0 of len 0x85
[2015/04/15 08:58:44.234220,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1802(process_smb)
  Transaction 0 of length 137 (0 toread)
[2015/04/15 08:58:44.234259,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg)
[2015/04/15 08:58:44.234281,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg)
  size=133
  smb_com=0x72
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51283
  smb_tid=0
  smb_pid=65279
  smb_uid=0
  smb_mid=0
  smt_wct=0
  smb_bcc=98
[2015/04/15 08:58:44.234433, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data)
  [0000] 02 50 43 20 4E 45 54 57   4F 52 4B 20 50 52 4F 47   .PC NETW ORK PROG
  [0010] 52 41 4D 20 31 2E 30 00   02 4C 41 4E 4D 41 4E 31   RAM 1.0. .LANMAN1
  [0020] 2E 30 00 02 57 69 6E 64   6F 77 73 20 66 6F 72 20   .0..Wind ows for 
  [0030] 57 6F 72 6B 67 72 6F 75   70 73 20 33 2E 31 61 00   Workgrou ps 3.1a.
  [0040] 02 4C 4D 31 2E 32 58 30   30 32 00 02 4C 41 4E 4D   .LM1.2X0 02..LANM
  [0050] 41 4E 32 2E 31 00 02 4E   54 20 4C 4D 20 30 2E 31   AN2.1..N T LM 0.1
  [0060] 32 00                                             2. 
[2015/04/15 08:58:44.234662,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1405(switch_message)
  switch message SMBnegprot (pid 4127) conn 0x0
[2015/04/15 08:58:44.234718,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:44.234754,  5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:58:44.234792,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.234860,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2015/04/15 08:58:44.235579,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot)
  Requested protocol [PC NETWORK PROGRAM 1.0]
[2015/04/15 08:58:44.235642,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot)
  Requested protocol [LANMAN1.0]
[2015/04/15 08:58:44.235678,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot)
  Requested protocol [Windows for Workgroups 3.1a]
[2015/04/15 08:58:44.235711,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot)
  Requested protocol [LM1.2X002]
[2015/04/15 08:58:44.235744,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot)
  Requested protocol [LANMAN2.1]
[2015/04/15 08:58:44.235778,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot)
  Requested protocol [NT LM 0.12]
[2015/04/15 08:58:44.235818, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1286(set_remote_arch)
  set_remote_arch: Client arch is 'Win2K'
[2015/04/15 08:58:44.235882,  6, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed)
  lp_file_list_changed()
  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Wed Apr 15 08:52:33 2015
  
[2015/04/15 08:58:44.235970,  5, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
  check lock order 2 for /var/run/samba/serverid.tdb
[2015/04/15 08:58:44.236005, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:<none> 2:/var/run/samba/serverid.tdb 3:<none>
[2015/04/15 08:58:44.236041, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Locking key 1F10000000000000FFFF
[2015/04/15 08:58:44.236085, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
  Allocated locked data 0x0x7fbe441bf580
[2015/04/15 08:58:44.236136, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Unlocking key 1F10000000000000FFFF
[2015/04/15 08:58:44.236175,  5, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
  release lock order 2 for /var/run/samba/serverid.tdb
[2015/04/15 08:58:44.236209, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:<none> 2:<none> 3:<none>
[2015/04/15 08:58:44.236262,  6, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed)
  lp_file_list_changed()
  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Wed Apr 15 08:52:33 2015
  
[2015/04/15 08:58:44.236417,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  Registering messaging pointer for type 1536 - private_data=0x7fbe441bfa10
[2015/04/15 08:58:44.236517,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:450(make_auth_context_subsystem)
  Making default auth method list for server role = 'domain member'
[2015/04/15 08:58:44.236575,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend sam
[2015/04/15 08:58:44.236615,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'sam'
[2015/04/15 08:58:44.236648,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend sam_ignoredomain
[2015/04/15 08:58:44.236685,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'sam_ignoredomain'
[2015/04/15 08:58:44.236720,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend unix
[2015/04/15 08:58:44.236753,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'unix'
[2015/04/15 08:58:44.236786,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend winbind
[2015/04/15 08:58:44.236816,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'winbind'
[2015/04/15 08:58:44.236848,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend wbc
[2015/04/15 08:58:44.236878,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'wbc'
[2015/04/15 08:58:44.236909,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend trustdomain
[2015/04/15 08:58:44.236942,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'trustdomain'
[2015/04/15 08:58:44.236974,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend ntdomain
[2015/04/15 08:58:44.237015,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'ntdomain'
[2015/04/15 08:58:44.237050,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend guest
[2015/04/15 08:58:44.237084,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'guest'
[2015/04/15 08:58:44.237116,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module)
  load_auth_module: Attempting to find an auth method to match guest
[2015/04/15 08:58:44.237154,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module)
  load_auth_module: auth method guest has a valid init
[2015/04/15 08:58:44.237193,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module)
  load_auth_module: Attempting to find an auth method to match sam
[2015/04/15 08:58:44.237228,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module)
  load_auth_module: auth method sam has a valid init
[2015/04/15 08:58:44.237260,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module)
  load_auth_module: Attempting to find an auth method to match winbind:ntdomain
[2015/04/15 08:58:44.237294,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module)
  load_auth_module: Attempting to find an auth method to match ntdomain
[2015/04/15 08:58:44.237325,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module)
  load_auth_module: auth method ntdomain has a valid init
[2015/04/15 08:58:44.237357,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module)
  load_auth_module: auth method winbind has a valid init
[2015/04/15 08:58:44.269236,  3, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register)
  GENSEC backend 'gssapi_spnego' registered
[2015/04/15 08:58:44.269319,  3, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register)
  GENSEC backend 'gssapi_krb5' registered
[2015/04/15 08:58:44.269352,  3, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register)
  GENSEC backend 'gssapi_krb5_sasl' registered
[2015/04/15 08:58:44.269382,  3, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register)
  GENSEC backend 'schannel' registered
[2015/04/15 08:58:44.269410,  3, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register)
  GENSEC backend 'spnego' registered
[2015/04/15 08:58:44.269440,  3, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register)
  GENSEC backend 'ntlmssp' registered
[2015/04/15 08:58:44.269472,  3, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register)
  GENSEC backend 'krb5' registered
[2015/04/15 08:58:44.269502,  3, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register)
  GENSEC backend 'fake_gssapi_krb5' registered
[2015/04/15 08:58:44.269674,  5, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:649(gensec_start_mech)
  Starting GENSEC mechanism spnego
[2015/04/15 08:58:44.269754,  5, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:649(gensec_start_mech)
  Starting GENSEC submechanism ntlmssp
[2015/04/15 08:58:44.269894,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:385(reply_nt1)
  using SPNEGO
[2015/04/15 08:58:44.269920,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:672(reply_negprot)
  Selected protocol NT LM 0.12
[2015/04/15 08:58:44.269938,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:679(reply_negprot)
  negprot index=5
[2015/04/15 08:58:44.269971,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg)
[2015/04/15 08:58:44.269983,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg)
  size=159
  smb_com=0x72
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51283
  smb_tid=0
  smb_pid=65279
  smb_uid=0
  smb_mid=0
  smt_wct=17
  smb_vwv[ 0]=    5 (0x5)
  smb_vwv[ 1]=12803 (0x3203)
  smb_vwv[ 2]=  256 (0x100)
  smb_vwv[ 3]= 1024 (0x400)
  smb_vwv[ 4]=   65 (0x41)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=  256 (0x100)
  smb_vwv[ 7]= 7936 (0x1F00)
  smb_vwv[ 8]=   16 (0x10)
  smb_vwv[ 9]=64768 (0xFD00)
  smb_vwv[10]=33011 (0x80F3)
  smb_vwv[11]=53120 (0xCF80)
  smb_vwv[12]=58815 (0xE5BF)
  smb_vwv[13]=18844 (0x499C)
  smb_vwv[14]=53367 (0xD077)
  smb_vwv[15]=34817 (0x8801)
  smb_vwv[16]=  255 (0xFF)
  smb_bcc=90
[2015/04/15 08:58:44.270184, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data)
  [0000] 70 73 61 6C 61 2D 6C 78   32 00 00 00 00 00 00 00   psala-lx 2.......
  [0010] 60 48 06 06 2B 06 01 05   05 02 A0 3E 30 3C A0 0E   `H..+... ...>0<..
  [0020] 30 0C 06 0A 2B 06 01 04   01 82 37 02 02 0A A3 2A   0...+... ..7....*
  [0030] 30 28 A0 26 1B 24 6E 6F   74 5F 64 65 66 69 6E 65   0(.&.$no t_define
  [0040] 64 5F 69 6E 5F 52 46 43   34 31 37 38 40 70 6C 65   d_in_RFC 4178 at ple
  [0050] 61 73 65 5F 69 67 6E 6F   72 65                    ase_igno re
[2015/04/15 08:58:44.270748, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive)
  got smb length of 236
[2015/04/15 08:58:44.270807,  6, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1800(process_smb)
  got message type 0x0 of len 0xec
[2015/04/15 08:58:44.270845,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1802(process_smb)
  Transaction 1 of length 240 (0 toread)
[2015/04/15 08:58:44.270882,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg)
[2015/04/15 08:58:44.270897,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg)
  size=236
  smb_com=0x73
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=0
  smb_pid=65279
  smb_uid=0
  smb_mid=64
  smt_wct=12
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=  236 (0xEC)
  smb_vwv[ 2]=16644 (0x4104)
  smb_vwv[ 3]=   50 (0x32)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=   74 (0x4A)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_vwv[10]=  212 (0xD4)
  smb_vwv[11]=40960 (0xA000)
  smb_bcc=177
[2015/04/15 08:58:44.271063, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data)
  [0000] 60 48 06 06 2B 06 01 05   05 02 A0 3E 30 3C A0 0E   `H..+... ...>0<..
  [0010] 30 0C 06 0A 2B 06 01 04   01 82 37 02 02 0A A2 2A   0...+... ..7....*
  [0020] 04 28 4E 54 4C 4D 53 53   50 00 01 00 00 00 07 82   .(NTLMSS P.......
  [0030] 08 A2 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
  [0040] 00 00 05 01 28 0A 00 00   00 0F 00 57 00 69 00 6E   ....(... ...W.i.n
  [0050] 00 64 00 6F 00 77 00 73   00 20 00 32 00 30 00 30   .d.o.w.s . .2.0.0
  [0060] 00 32 00 20 00 53 00 65   00 72 00 76 00 69 00 63   .2. .S.e .r.v.i.c
  [0070] 00 65 00 20 00 50 00 61   00 63 00 6B 00 20 00 33   .e. .P.a .c.k. .3
  [0080] 00 20 00 32 00 36 00 30   00 30 00 00 00 57 00 69   . .2.6.0 .0...W.i
  [0090] 00 6E 00 64 00 6F 00 77   00 73 00 20 00 32 00 30   .n.d.o.w .s. .2.0
  [00A0] 00 30 00 32 00 20 00 35   00 2E 00 31 00 00 00 00   .0.2. .5 ...1....
  [00B0] 00                                                . 
[2015/04/15 08:58:44.271251,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1405(switch_message)
  switch message SMBsesssetupX (pid 4127) conn 0x0
[2015/04/15 08:58:44.271272,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:44.271291,  5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:58:44.271316,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.271350,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2015/04/15 08:58:44.271376,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:604(reply_sesssetup_and_X)
  wct=12 flg2=0xc807
[2015/04/15 08:58:44.271402,  2, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:545(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2015/04/15 08:58:44.271425,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:138(reply_sesssetup_and_X_spnego)
  Doing spnego session setup
[2015/04/15 08:58:44.271454,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:179(reply_sesssetup_and_X_spnego)
  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
[2015/04/15 08:58:44.271478, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1286(set_remote_arch)
  set_remote_arch: Client arch is 'WinXP'
[2015/04/15 08:58:44.271507,  5, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
  check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb
[2015/04/15 08:58:44.271527, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:/var/run/samba/smbXsrv_session_global.tdb 2:<none> 3:<none>
[2015/04/15 08:58:44.271548, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Locking key 13DB52A4
[2015/04/15 08:58:44.271578, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
  Allocated locked data 0x0x7fbe441bd260
[2015/04/15 08:58:44.271766, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:853(smbXsrv_session_global_store)
[2015/04/15 08:58:44.271786, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:855(smbXsrv_session_global_store)
  smbXsrv_session_global_store: key '13DB52A4' stored
[2015/04/15 08:58:44.271808,  1, pid=4127, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
       &global_blob: struct smbXsrv_session_globalB
          version                  : SMBXSRV_VERSION_0 (0)
          seqnum                   : 0x00000001 (1)
          info                     : union smbXsrv_session_globalU(case 0)
          info0                    : *
              info0: struct smbXsrv_session_global0
                  db_rec                   : *
                  session_global_id        : 0x13db52a4 (333140644)
                  session_wire_id          : 0x000000000000b4b9 (46265)
                  creation_time            : mer apr 15 08:58:44 2015 CEST
                  expiration_time          : gio gen  1 01:00:00 1970 CET
                  auth_session_info_seqnum : 0x00000000 (0)
                  auth_session_info        : NULL
                  connection_dialect       : 0x0000 (0)
                  signing_required         : 0x00 (0)
                  encryption_required      : 0x00 (0)
                  num_channels             : 0x00000001 (1)
                  channels: ARRAY(1)
                      channels: struct smbXsrv_channel_global0
                          server_id: struct server_id
                              pid                      : 0x000000000000101f (4127)
                              task_id                  : 0x00000000 (0)
                              vnn                      : 0xffffffff (4294967295)
                              unique_id                : 0xfdea2051dbfd5741 (-150272101608237247)
                          local_address            : 'ipv4:192.168.70.10:139'
                          remote_address           : 'ipv4:192.168.70.150:1049'
                          remote_name              : 'vbox-winxp'
                          auth_session_info_seqnum : 0x00000000 (0)
[2015/04/15 08:58:44.272143, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Unlocking key 13DB52A4
[2015/04/15 08:58:44.272165,  5, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
  release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb
[2015/04/15 08:58:44.272184, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:<none> 2:<none> 3:<none>
[2015/04/15 08:58:44.272203, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1215(smbXsrv_session_create)
[2015/04/15 08:58:44.272213, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1223(smbXsrv_session_create)
  smbXsrv_session_create: global_id (0x13db52a4) stored
[2015/04/15 08:58:44.272231,  1, pid=4127, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
       &session_blob: struct smbXsrv_sessionB
          version                  : SMBXSRV_VERSION_0 (0)
          reserved                 : 0x00000000 (0)
          info                     : union smbXsrv_sessionU(case 0)
          info0                    : *
              info0: struct smbXsrv_session
                  table                    : *
                  db_rec                   : NULL
                  connection               : *
                  local_id                 : 0x0000b4b9 (46265)
                  global                   : *
                      global: struct smbXsrv_session_global0
                          db_rec                   : NULL
                          session_global_id        : 0x13db52a4 (333140644)
                          session_wire_id          : 0x000000000000b4b9 (46265)
                          creation_time            : mer apr 15 08:58:44 2015 CEST
                          expiration_time          : gio gen  1 01:00:00 1970 CET
                          auth_session_info_seqnum : 0x00000000 (0)
                          auth_session_info        : NULL
                          connection_dialect       : 0x0000 (0)
                          signing_required         : 0x00 (0)
                          encryption_required      : 0x00 (0)
                          num_channels             : 0x00000001 (1)
                          channels: ARRAY(1)
                              channels: struct smbXsrv_channel_global0
                                  server_id: struct server_id
                                      pid                      : 0x000000000000101f (4127)
                                      task_id                  : 0x00000000 (0)
                                      vnn                      : 0xffffffff (4294967295)
                                      unique_id                : 0xfdea2051dbfd5741 (-150272101608237247)
                                  local_address            : 'ipv4:192.168.70.10:139'
                                  remote_address           : 'ipv4:192.168.70.150:1049'
                                  remote_name              : 'vbox-winxp'
                                  auth_session_info_seqnum : 0x00000000 (0)
                  status                   : NT_STATUS_MORE_PROCESSING_REQUIRED
                  idle_time                : mer apr 15 08:58:44 2015 CEST
                  nonce_high               : 0x0000000000000000 (0)
                  nonce_low                : 0x0000000000000000 (0)
                  gensec                   : NULL
                  compat                   : NULL
                  tcon_table               : NULL
[2015/04/15 08:58:44.272690,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:450(make_auth_context_subsystem)
  Making default auth method list for server role = 'domain member'
[2015/04/15 08:58:44.272716,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module)
  load_auth_module: Attempting to find an auth method to match guest
[2015/04/15 08:58:44.272742,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module)
  load_auth_module: auth method guest has a valid init
[2015/04/15 08:58:44.272761,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module)
  load_auth_module: Attempting to find an auth method to match sam
[2015/04/15 08:58:44.272779,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module)
  load_auth_module: auth method sam has a valid init
[2015/04/15 08:58:44.272797,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module)
  load_auth_module: Attempting to find an auth method to match winbind:ntdomain
[2015/04/15 08:58:44.272817,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module)
  load_auth_module: Attempting to find an auth method to match ntdomain
[2015/04/15 08:58:44.272836,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module)
  load_auth_module: auth method ntdomain has a valid init
[2015/04/15 08:58:44.272853,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module)
  load_auth_module: auth method winbind has a valid init
[2015/04/15 08:58:44.272898,  5, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:649(gensec_start_mech)
  Starting GENSEC mechanism spnego
[2015/04/15 08:58:44.272925,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.272956,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:58:44.272985,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.273010,  5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:58:44.273029,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.273118,  5, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:649(gensec_start_mech)
  Starting GENSEC submechanism ntlmssp
[2015/04/15 08:58:44.273161,  3, pid=4127, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  Got NTLMSSP neg_flags=0xa2088207
    NTLMSSP_NEGOTIATE_UNICODE
    NTLMSSP_NEGOTIATE_OEM
    NTLMSSP_REQUEST_TARGET
    NTLMSSP_NEGOTIATE_NTLM
    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
    NTLMSSP_NEGOTIATE_NTLM2
    NTLMSSP_NEGOTIATE_VERSION
    NTLMSSP_NEGOTIATE_128
    NTLMSSP_NEGOTIATE_56
[2015/04/15 08:58:44.273301,  1, pid=4127, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
       negotiate: struct NEGOTIATE_MESSAGE
          Signature                : 'NTLMSSP'
          MessageType              : NtLmNegotiate (1)
          NegotiateFlags           : 0xa2088207 (2718466567)
                 1: NTLMSSP_NEGOTIATE_UNICODE
                 1: NTLMSSP_NEGOTIATE_OEM    
                 1: NTLMSSP_REQUEST_TARGET   
                 0: NTLMSSP_NEGOTIATE_SIGN   
                 0: NTLMSSP_NEGOTIATE_SEAL   
                 0: NTLMSSP_NEGOTIATE_DATAGRAM
                 0: NTLMSSP_NEGOTIATE_LM_KEY 
                 0: NTLMSSP_NEGOTIATE_NETWARE
                 1: NTLMSSP_NEGOTIATE_NTLM   
                 0: NTLMSSP_NEGOTIATE_NT_ONLY
                 0: NTLMSSP_ANONYMOUS        
                 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
                 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
                 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
                 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
                 0: NTLMSSP_TARGET_TYPE_DOMAIN
                 0: NTLMSSP_TARGET_TYPE_SERVER
                 0: NTLMSSP_TARGET_TYPE_SHARE
                 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
                 0: NTLMSSP_NEGOTIATE_IDENTIFY
                 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
                 0: NTLMSSP_NEGOTIATE_TARGET_INFO
                 1: NTLMSSP_NEGOTIATE_VERSION
                 1: NTLMSSP_NEGOTIATE_128    
                 0: NTLMSSP_NEGOTIATE_KEY_EXCH
                 1: NTLMSSP_NEGOTIATE_56     
          DomainNameLen            : 0x0000 (0)
          DomainNameMaxLen         : 0x0000 (0)
          DomainName               : NULL
          WorkstationLen           : 0x0000 (0)
          WorkstationMaxLen        : 0x0000 (0)
          Workstation              : NULL
          Version: struct ntlmssp_VERSION
              ProductMajorVersion      : NTLMSSP_WINDOWS_MAJOR_VERSION_5 (5)
              ProductMinorVersion      : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1)
              ProductBuild             : 0x0a28 (2600)
              Reserved: ARRAY(3)
                  [0]                      : 0x00 (0)
                  [1]                      : 0x00 (0)
                  [2]                      : 0x00 (0)
              NTLMRevisionCurrent      : NTLMSSP_REVISION_W2K3 (15)
[2015/04/15 08:58:44.273770,  1, pid=4127, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
       challenge: struct CHALLENGE_MESSAGE
          Signature                : 'NTLMSSP'
          MessageType              : NtLmChallenge (0x2)
          TargetNameLen            : 0x0014 (20)
          TargetNameMaxLen         : 0x0014 (20)
          TargetName               : *
              TargetName               : 'DOMINIOCSA'
          NegotiateFlags           : 0xa2898205 (2726920709)
                 1: NTLMSSP_NEGOTIATE_UNICODE
                 0: NTLMSSP_NEGOTIATE_OEM    
                 1: NTLMSSP_REQUEST_TARGET   
                 0: NTLMSSP_NEGOTIATE_SIGN   
                 0: NTLMSSP_NEGOTIATE_SEAL   
                 0: NTLMSSP_NEGOTIATE_DATAGRAM
                 0: NTLMSSP_NEGOTIATE_LM_KEY 
                 0: NTLMSSP_NEGOTIATE_NETWARE
                 1: NTLMSSP_NEGOTIATE_NTLM   
                 0: NTLMSSP_NEGOTIATE_NT_ONLY
                 0: NTLMSSP_ANONYMOUS        
                 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
                 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
                 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
                 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
                 1: NTLMSSP_TARGET_TYPE_DOMAIN
                 0: NTLMSSP_TARGET_TYPE_SERVER
                 0: NTLMSSP_TARGET_TYPE_SHARE
                 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
                 0: NTLMSSP_NEGOTIATE_IDENTIFY
                 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
                 1: NTLMSSP_NEGOTIATE_TARGET_INFO
                 1: NTLMSSP_NEGOTIATE_VERSION
                 1: NTLMSSP_NEGOTIATE_128    
                 0: NTLMSSP_NEGOTIATE_KEY_EXCH
                 1: NTLMSSP_NEGOTIATE_56     
          ServerChallenge          : 2cc567903fef9041
          Reserved                 : 0000000000000000
          TargetInfoLen            : 0x008a (138)
          TargetNameInfoMaxLen     : 0x008a (138)
          TargetInfo               : *
              TargetInfo: struct AV_PAIR_LIST
                  count                    : 0x00000005 (5)
                  pair: ARRAY(5)
                      pair: struct AV_PAIR
                          AvId                     : MsvAvNbDomainName (0x2)
                          AvLen                    : 0x0014 (20)
                          Value                    : union ntlmssp_AvValue(case 0x2)
                          AvNbDomainName           : 'DOMINIOCSA'
                      pair: struct AV_PAIR
                          AvId                     : MsvAvNbComputerName (0x1)
                          AvLen                    : 0x0012 (18)
                          Value                    : union ntlmssp_AvValue(case 0x1)
                          AvNbComputerName         : 'PSALA-LX2'
                      pair: struct AV_PAIR
                          AvId                     : MsvAvDnsDomainName (0x4)
                          AvLen                    : 0x001e (30)
                          Value                    : union ntlmssp_AvValue(case 0x4)
                          AvDnsDomainName          : 'csaricerche.com'
                      pair: struct AV_PAIR
                          AvId                     : MsvAvDnsComputerName (0x3)
                          AvLen                    : 0x0032 (50)
                          Value                    : union ntlmssp_AvValue(case 0x3)
                          AvDnsComputerName        : 'psala-lx2.csaricerche.com'
                      pair: struct AV_PAIR
                          AvId                     : MsvAvEOL (0x0)
                          AvLen                    : 0x0000 (0)
                          Value                    : union ntlmssp_AvValue(case 0x0)
          Version: struct ntlmssp_VERSION
              ProductMajorVersion      : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (0x6)
              ProductMinorVersion      : NTLMSSP_WINDOWS_MINOR_VERSION_1 (0x1)
              ProductBuild             : 0x0000 (0)
              Reserved                 : 000000
              NTLMRevisionCurrent      : NTLMSSP_REVISION_W2K3 (0xF)
[2015/04/15 08:58:44.274397,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:44.274440,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg)
[2015/04/15 08:58:44.274453,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg)
  size=360
  smb_com=0x73
  smb_rcls=22
  smb_reh=0
  smb_err=49152
  smb_flg=136
  smb_flg2=51207
  smb_tid=0
  smb_pid=65279
  smb_uid=46265
  smb_mid=64
  smt_wct=4
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=    0 (0x0)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=  245 (0xF5)
  smb_bcc=317
[2015/04/15 08:58:44.274569, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data)
  [0000] A1 81 F2 30 81 EF A0 03   0A 01 01 A1 0C 06 0A 2B   ...0.... .......+
  [0010] 06 01 04 01 82 37 02 02   0A A2 81 D9 04 81 D6 4E   .....7.. .......N
  [0020] 54 4C 4D 53 53 50 00 02   00 00 00 14 00 14 00 38   TLMSSP.. .......8
  [0030] 00 00 00 05 82 89 A2 2C   C5 67 90 3F EF 90 41 00   ......., .g.?..A.
  [0040] 00 00 00 00 00 00 00 8A   00 8A 00 4C 00 00 00 06   ........ ...L....
  [0050] 01 00 00 00 00 00 0F 44   00 4F 00 4D 00 49 00 4E   .......D .O.M.I.N
  [0060] 00 49 00 4F 00 43 00 53   00 41 00 02 00 14 00 44   .I.O.C.S .A.....D
  [0070] 00 4F 00 4D 00 49 00 4E   00 49 00 4F 00 43 00 53   .O.M.I.N .I.O.C.S
  [0080] 00 41 00 01 00 12 00 50   00 53 00 41 00 4C 00 41   .A.....P .S.A.L.A
  [0090] 00 2D 00 4C 00 58 00 32   00 04 00 1E 00 63 00 73   .-.L.X.2 .....c.s
  [00A0] 00 61 00 72 00 69 00 63   00 65 00 72 00 63 00 68   .a.r.i.c .e.r.c.h
  [00B0] 00 65 00 2E 00 63 00 6F   00 6D 00 03 00 32 00 70   .e...c.o .m...2.p
  [00C0] 00 73 00 61 00 6C 00 61   00 2D 00 6C 00 78 00 32   .s.a.l.a .-.l.x.2
  [00D0] 00 2E 00 63 00 73 00 61   00 72 00 69 00 63 00 65   ...c.s.a .r.i.c.e
  [00E0] 00 72 00 63 00 68 00 65   00 2E 00 63 00 6F 00 6D   .r.c.h.e ...c.o.m
  [00F0] 00 00 00 00 00 55 00 6E   00 69 00 78 00 00 00 53   .....U.n .i.x...S
  [0100] 00 61 00 6D 00 62 00 61   00 20 00 34 00 2E 00 31   .a.m.b.a . .4...1
  [0110] 00 2E 00 31 00 37 00 2D   00 44 00 65 00 62 00 69   ...1.7.- .D.e.b.i
  [0120] 00 61 00 6E 00 00 00 44   00 4F 00 4D 00 49 00 4E   .a.n...D .O.M.I.N
  [0130] 00 49 00 4F 00 43 00 53   00 41 00 00 00           .I.O.C.S .A...
[2015/04/15 08:58:44.283748, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive)
  got smb length of 344
[2015/04/15 08:58:44.283852,  6, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1800(process_smb)
  got message type 0x0 of len 0x158
[2015/04/15 08:58:44.283892,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1802(process_smb)
  Transaction 2 of length 348 (0 toread)
[2015/04/15 08:58:44.283911,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg)
[2015/04/15 08:58:44.283922,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg)
  size=344
  smb_com=0x73
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=0
  smb_pid=65279
  smb_uid=46265
  smb_mid=128
  smt_wct=12
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=  344 (0x158)
  smb_vwv[ 2]=16644 (0x4104)
  smb_vwv[ 3]=   50 (0x32)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=  182 (0xB6)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_vwv[10]=  212 (0xD4)
  smb_vwv[11]=40960 (0xA000)
  smb_bcc=285
[2015/04/15 08:58:44.284091, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data)
  [0000] A1 81 B3 30 81 B0 A2 81   AD 04 81 AA 4E 54 4C 4D   ...0.... ....NTLM
  [0010] 53 53 50 00 03 00 00 00   18 00 18 00 7A 00 00 00   SSP..... ....z...
  [0020] 18 00 18 00 92 00 00 00   14 00 14 00 48 00 00 00   ........ ....H...
  [0030] 0A 00 0A 00 5C 00 00 00   14 00 14 00 66 00 00 00   ....\... ....f...
  [0040] 00 00 00 00 AA 00 00 00   05 82 88 A2 05 01 28 0A   ........ ......(.
  [0050] 00 00 00 0F 44 00 4F 00   4D 00 49 00 4E 00 49 00   ....D.O. M.I.N.I.
  [0060] 4F 00 43 00 53 00 41 00   61 00 64 00 6D 00 69 00   O.C.S.A. a.d.m.i.
  [0070] 6E 00 56 00 42 00 4F 00   58 00 2D 00 57 00 49 00   n.V.B.O. X.-.W.I.
  [0080] 4E 00 58 00 50 00 AF F6   45 39 50 D2 2F EF 00 00   N.X.P... E9P./...
  [0090] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 98 10   ........ ........
  [00A0] CC 3B F6 96 E2 4B 86 EC   DF D4 48 0A A6 E7 63 CC   .;...K.. ..H...c.
  [00B0] 47 5B 82 DC 44 33 00 57   00 69 00 6E 00 64 00 6F   G[..D3.W .i.n.d.o
  [00C0] 00 77 00 73 00 20 00 32   00 30 00 30 00 32 00 20   .w.s. .2 .0.0.2. 
  [00D0] 00 53 00 65 00 72 00 76   00 69 00 63 00 65 00 20   .S.e.r.v .i.c.e. 
  [00E0] 00 50 00 61 00 63 00 6B   00 20 00 33 00 20 00 32   .P.a.c.k . .3. .2
  [00F0] 00 36 00 30 00 30 00 00   00 57 00 69 00 6E 00 64   .6.0.0.. .W.i.n.d
  [0100] 00 6F 00 77 00 73 00 20   00 32 00 30 00 30 00 32   .o.w.s.  .2.0.0.2
  [0110] 00 20 00 35 00 2E 00 31   00 00 00 00 00           . .5...1 .....
[2015/04/15 08:58:44.284374,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1405(switch_message)
  switch message SMBsesssetupX (pid 4127) conn 0x0
[2015/04/15 08:58:44.284415,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:44.284436,  5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:58:44.284455,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.284489,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2015/04/15 08:58:44.284510,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:604(reply_sesssetup_and_X)
  wct=12 flg2=0xc807
[2015/04/15 08:58:44.284529,  2, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:545(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2015/04/15 08:58:44.284547,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:138(reply_sesssetup_and_X_spnego)
  Doing spnego session setup
[2015/04/15 08:58:44.284586,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:179(reply_sesssetup_and_X_spnego)
  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
[2015/04/15 08:58:44.284613,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.284639,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:58:44.284657,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.284674,  5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:58:44.284691,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.284771,  1, pid=4127, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
       authenticate: struct AUTHENTICATE_MESSAGE
          Signature                : 'NTLMSSP'
          MessageType              : NtLmAuthenticate (3)
          LmChallengeResponseLen   : 0x0018 (24)
          LmChallengeResponseMaxLen: 0x0018 (24)
          LmChallengeResponse      : *
              LmChallengeResponse      : union ntlmssp_LM_RESPONSE(case 24)
              v1: struct LM_RESPONSE
                  Response                 : aff6453950d22fef00000000000000000000000000000000
          NtChallengeResponseLen   : 0x0018 (24)
          NtChallengeResponseMaxLen: 0x0018 (24)
          NtChallengeResponse      : *
              NtChallengeResponse      : union ntlmssp_NTLM_RESPONSE(case 24)
              v1: struct NTLM_RESPONSE
                  Response                 : 9810cc3bf696e24b86ecdfd4480aa6e763cc475b82dc4433
          DomainNameLen            : 0x0014 (20)
          DomainNameMaxLen         : 0x0014 (20)
          DomainName               : *
              DomainName               : 'DOMINIOCSA'
          UserNameLen              : 0x000a (10)
          UserNameMaxLen           : 0x000a (10)
          UserName                 : *
              UserName                 : 'admin'
          WorkstationLen           : 0x0014 (20)
          WorkstationMaxLen        : 0x0014 (20)
          Workstation              : *
              Workstation              : 'VBOX-WINXP'
          EncryptedRandomSessionKeyLen: 0x0000 (0)
          EncryptedRandomSessionKeyMaxLen: 0x0000 (0)
          EncryptedRandomSessionKey: *
              EncryptedRandomSessionKey: DATA_BLOB length=0
          NegotiateFlags           : 0xa2888205 (2726855173)
                 1: NTLMSSP_NEGOTIATE_UNICODE
                 0: NTLMSSP_NEGOTIATE_OEM    
                 1: NTLMSSP_REQUEST_TARGET   
                 0: NTLMSSP_NEGOTIATE_SIGN   
                 0: NTLMSSP_NEGOTIATE_SEAL   
                 0: NTLMSSP_NEGOTIATE_DATAGRAM
                 0: NTLMSSP_NEGOTIATE_LM_KEY 
                 0: NTLMSSP_NEGOTIATE_NETWARE
                 1: NTLMSSP_NEGOTIATE_NTLM   
                 0: NTLMSSP_NEGOTIATE_NT_ONLY
                 0: NTLMSSP_ANONYMOUS        
                 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
                 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
                 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
                 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
                 0: NTLMSSP_TARGET_TYPE_DOMAIN
                 0: NTLMSSP_TARGET_TYPE_SERVER
                 0: NTLMSSP_TARGET_TYPE_SHARE
                 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
                 0: NTLMSSP_NEGOTIATE_IDENTIFY
                 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
                 1: NTLMSSP_NEGOTIATE_TARGET_INFO
                 1: NTLMSSP_NEGOTIATE_VERSION
                 1: NTLMSSP_NEGOTIATE_128    
                 0: NTLMSSP_NEGOTIATE_KEY_EXCH
                 1: NTLMSSP_NEGOTIATE_56     
          Version: struct ntlmssp_VERSION
              ProductMajorVersion      : NTLMSSP_WINDOWS_MAJOR_VERSION_5 (5)
              ProductMinorVersion      : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1)
              ProductBuild             : 0x0a28 (2600)
              Reserved: ARRAY(3)
                  [0]                      : 0x00 (0)
                  [1]                      : 0x00 (0)
                  [2]                      : 0x00 (0)
              NTLMRevisionCurrent      : NTLMSSP_REVISION_W2K3 (15)
[2015/04/15 08:58:44.285361,  3, pid=4127, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  Got user=[admin] domain=[DOMINIOCSA] workstation=[VBOX-WINXP] len1=24 len2=24
[2015/04/15 08:58:44.285400,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:83(auth3_set_challenge)
  auth_context challenge set by NTLMSSP callback (NTLM2)
[2015/04/15 08:58:44.285421,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:84(auth3_set_challenge)
  challenge is: 
[2015/04/15 08:58:44.285440,  5, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data)
  [0000] 12 11 CD 8A BF 83 43 92                            ......C. 
[2015/04/15 08:58:44.285478,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4839(lp_load_ex)
  lp_load_ex: refreshing parameters
[2015/04/15 08:58:44.285498,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1488(free_param_opts)
  Freeing parametrics:
[2015/04/15 08:58:44.285544,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:750(init_globals)
  Initialising global parameters
[2015/04/15 08:58:44.285614,  3, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
[2015/04/15 08:58:44.285643,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3565(do_section)
  Processing section "[global]"
  doing parameter workgroup = DOMINIOCSA
  doing parameter server string = %h server (Samba, Ubuntu)
  doing parameter dns proxy = no
  doing parameter log file = /var/log/samba/log.%m
  doing parameter max log size = 1000
  doing parameter syslog = 0
  doing parameter panic action = /usr/share/samba/panic-action %d
  doing parameter log level = 10 all:10
[2015/04/15 08:58:44.285757,  5, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/debug.c:334(debug_dump_status)
  INFO: Current debug levels:
    all: 10
    tdb: 10
    printdrivers: 10
    lanman: 10
    smb: 10
    rpc_parse: 10
    rpc_srv: 10
    rpc_cli: 10
    passdb: 10
    sam: 10
    auth: 10
    winbind: 10
    vfs: 10
    idmap: 10
    quota: 10
    acls: 10
    locking: 10
    msdfs: 10
    dmapi: 10
    registry: 10
    scavenger: 10
    dns: 10
    ldb: 10
  doing parameter security = domain
  doing parameter encrypt passwords = true
  doing parameter passdb backend = tdbsam
  doing parameter obey pam restrictions = yes
  doing parameter unix password sync = yes
  doing parameter passwd program = /usr/bin/passwd %u
  doing parameter passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
  doing parameter pam password change = yes
  doing parameter map to guest = bad user
  doing parameter idmap config DOMINIOCSA : backend = rid
  doing parameter idmap config DOMINIOCSA : range = 10000-99999
  doing parameter idmap config * : backend = tdb
  doing parameter idmap config * : range = 100000-200000
  doing parameter allow trusted domains = No
  doing parameter winbind enum users = yes
  doing parameter winbind enum groups = yes
  doing parameter template shell = /bin/bash
  doing parameter winbind offline logon = true
  doing parameter usershare allow guests = yes
[2015/04/15 08:58:44.286199,  2, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3582(do_section)
  Processing section "[printers]"
  doing parameter comment = All Printers
  doing parameter browseable = no
  doing parameter path = /var/spool/samba
  doing parameter printable = yes
  doing parameter guest ok = no
  doing parameter read only = yes
  doing parameter create mask = 0700
[2015/04/15 08:58:44.286322,  2, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3582(do_section)
  Processing section "[print$]"
  doing parameter comment = Printer Drivers
  doing parameter path = /var/lib/samba/printers
  doing parameter browseable = yes
  doing parameter read only = no
  doing parameter guest ok = no
  doing parameter writeable = yes
[2015/04/15 08:58:44.286418,  2, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3582(do_section)
  Processing section "[testbsd]"
  doing parameter comment = Test BSD printing
  doing parameter printing = bsd
  doing parameter path = /tmp
  doing parameter guest ok = Yes
  doing parameter printable = Yes
  doing parameter print ok = Yes
  doing parameter print command = /usr/local/bin/bsdprinting.sh %s %H "%J" %p %m %S 'default'
[2015/04/15 08:58:44.286526,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4878(lp_load_ex)
  pm_process() returned Yes
[2015/04/15 08:58:44.286552,  7, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:5168(lp_servicenumber)
  lp_servicenumber: couldn't find homes
[2015/04/15 08:58:44.286575,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1774(lp_add_ipc)
  adding IPC service
[2015/04/15 08:58:44.286611,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:115(make_user_info_map)
  Mapping user [DOMINIOCSA]\[admin] from workstation [VBOX-WINXP]
[2015/04/15 08:58:44.287462,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:61(make_user_info)
  attempting to make a user_info for admin (admin)
[2015/04/15 08:58:44.287505,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:72(make_user_info)
  making strings for admin's user_info struct
[2015/04/15 08:58:44.287570,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:92(make_user_info)
  making blobs for admin's user_info struct
[2015/04/15 08:58:44.287600, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:128(make_user_info)
  made a user_info for admin (admin)
[2015/04/15 08:58:44.287620,  3, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  check_ntlm_password:  Checking password for unmapped user [DOMINIOCSA]\[admin]@[VBOX-WINXP] with the new password interface
[2015/04/15 08:58:44.287640,  3, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  check_ntlm_password:  mapped user is: [DOMINIOCSA]\[admin]@[VBOX-WINXP]
[2015/04/15 08:58:44.287658, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:189(auth_check_ntlm_password)
  check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2)
[2015/04/15 08:58:44.287675, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:191(auth_check_ntlm_password)
  challenge is: 
[2015/04/15 08:58:44.287692,  5, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data)
  [0000] 12 11 CD 8A BF 83 43 92                            ......C. 
[2015/04/15 08:58:44.287721, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_builtin.c:44(check_guest_security)
  Check auth for: [admin]
[2015/04/15 08:58:44.287740, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:217(auth_check_ntlm_password)
  check_ntlm_password: guest had nothing to say
[2015/04/15 08:58:44.287758, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:75(auth_samstrict_auth)
  Check auth for: [admin]
[2015/04/15 08:58:44.287777,  8, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1200(is_myname)
  is_myname("DOMINIOCSA") returns 0
[2015/04/15 08:58:44.287796,  6, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:88(auth_samstrict_auth)
  check_samstrict_security: DOMINIOCSA is not one of my local names (ROLE_DOMAIN_MEMBER)
[2015/04/15 08:58:44.287814, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:217(auth_check_ntlm_password)
  check_ntlm_password: sam had nothing to say
[2015/04/15 08:58:44.287839, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_winbind.c:50(check_winbind_security)
  Check auth for: [admin]
[2015/04/15 08:58:44.287858,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2015/04/15 08:58:44.287877,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2015/04/15 08:58:44.287895,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2015/04/15 08:58:44.287912,  5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:58:44.287929,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.347175,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.347276,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
  Finding user DOMINIOCSA\admin
[2015/04/15 08:58:44.347304,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is dominiocsa\admin
[2015/04/15 08:58:44.430338,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
  Get_Pwnam_internals did find user [DOMINIOCSA\admin]!
[2015/04/15 08:58:44.430427,  3, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  check_ntlm_password: winbind authentication for user [admin] succeeded
[2015/04/15 08:58:44.430471,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2015/04/15 08:58:44.430494,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2015/04/15 08:58:44.430513,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2015/04/15 08:58:44.430531,  5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:58:44.430549,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.430588,  4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:483(smb_pam_start)
  smb_pam_start: PAM: Init user: DOMINIOCSA\admin
[2015/04/15 08:58:44.491270,  4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:492(smb_pam_start)
  smb_pam_start: PAM: setting rhost to: 192.168.70.150
[2015/04/15 08:58:44.491313,  4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:501(smb_pam_start)
  smb_pam_start: PAM: setting tty
[2015/04/15 08:58:44.491337,  4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:509(smb_pam_start)
  smb_pam_start: PAM: Init passed for user: DOMINIOCSA\admin
[2015/04/15 08:58:44.491355,  4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:567(smb_pam_account)
  smb_pam_account: PAM: Account Management for User: DOMINIOCSA\admin
[2015/04/15 08:58:44.497881,  4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:586(smb_pam_account)
  smb_pam_account: PAM: Account OK for User: DOMINIOCSA\admin
[2015/04/15 08:58:44.498273,  4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:465(smb_pam_end)
  smb_pam_end: PAM: PAM_END OK.
[2015/04/15 08:58:44.498310,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.498338,  5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:265(auth_check_ntlm_password)
  check_ntlm_password:  PAM Account for user [DOMINIOCSA\admin] succeeded
[2015/04/15 08:58:44.498356,  2, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:278(auth_check_ntlm_password)
  check_ntlm_password:  authentication for user [admin] -> [admin] -> [DOMINIOCSA\admin] succeeded
[2015/04/15 08:58:44.498378, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:168(auth3_check_password)
  Got NT session key of length 16
[2015/04/15 08:58:44.498397, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:175(auth3_check_password)
  Got LM session key of length 0
[2015/04/15 08:58:44.498429, 10, pid=4127, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:494(ntlmssp_server_postauth)
  ntlmssp_server_auth: Created NTLM2 session key.
[2015/04/15 08:58:44.498453,  3, pid=4127, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  NTLMSSP Sign/Seal - Initialising with flags:
[2015/04/15 08:58:44.498472,  3, pid=4127, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  Got NTLMSSP neg_flags=0xa2088205
    NTLMSSP_NEGOTIATE_UNICODE
    NTLMSSP_REQUEST_TARGET
    NTLMSSP_NEGOTIATE_NTLM
    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
    NTLMSSP_NEGOTIATE_NTLM2
    NTLMSSP_NEGOTIATE_VERSION
    NTLMSSP_NEGOTIATE_128
    NTLMSSP_NEGOTIATE_56
[2015/04/15 08:58:44.498567,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:44.498727, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:224(create_local_nt_token_from_info3)
  Create local NT token for admin
[2015/04/15 08:58:44.498811, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-1202]: value=[11202:B]
[2015/04/15 08:58:44.498849, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-1202]: id=[11202], endptr=[:B]
[2015/04/15 08:58:44.498879, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1388(sid_to_uid)
  sid S-1-5-21-2943704632-3037471470-1787688681-1202 -> uid 11202
[2015/04/15 08:58:44.500024, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist)
  sys_getgrouplist: user [DOMINIOCSA\admin]
[2015/04/15 08:58:44.500138, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1220(gid_to_sid)
  gid 11203 -> sid S-1-5-21-2943704632-3037471470-1787688681-1203
[2015/04/15 08:58:44.500183, 10, pid=4127, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:296(gencache_set_data_blob)
  Adding cache entry with key=[IDMAP/GID2SID/27] and timeout=[gio gen  1 01:00:00 1970 CET] (-1429081124 seconds in the past)
[2015/04/15 08:58:44.501306,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1212(gid_to_sid)
  gid_to_sid: winbind failed to find a sid for gid 27
[2015/04/15 08:58:44.501354,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.501392,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:58:44.501428,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.501457,  5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:58:44.501481,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.501551, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/groupdb/mapping_tdb.c:272(find_map)
  failed to unpack map
[2015/04/15 08:58:44.501578, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/groupdb/mapping_tdb.c:272(find_map)
  failed to unpack map
[2015/04/15 08:58:44.501602,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:44.501623, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1075(legacy_gid_to_sid)
  LEGACY: gid 27 -> sid S-1-22-2-27
[2015/04/15 08:58:44.501660, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-32-544]: value=[25000:G]
[2015/04/15 08:58:44.501681, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-32-544]: id=[25000], endptr=[:G]
[2015/04/15 08:58:44.501699, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1442(sid_to_gid)
  sid S-1-5-32-544 -> gid 25000
[2015/04/15 08:58:44.501724, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-32-545]: value=[25003:G]
[2015/04/15 08:58:44.501742, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-32-545]: id=[25003], endptr=[:G]
[2015/04/15 08:58:44.501760, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1442(sid_to_gid)
  sid S-1-5-32-545 -> gid 25003
[2015/04/15 08:58:44.501779,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.501797,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:58:44.501814,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.501831,  5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:58:44.501848,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.501967,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:44.502001,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-1202]
[2015/04/15 08:58:44.502026,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-1203]
[2015/04/15 08:58:44.502050,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-513]
[2015/04/15 08:58:44.502073,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids)
  get_privileges_for_sids: sid = S-1-5-21-2943704632-3037471470-1787688681-512
  Privilege set: 0x20
[2015/04/15 08:58:44.502102,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-11157]
[2015/04/15 08:58:44.502125,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-1005]
[2015/04/15 08:58:44.502154,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-11693]
[2015/04/15 08:58:44.502177,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-11543]
[2015/04/15 08:58:44.502200,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-11729]
[2015/04/15 08:58:44.502223,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-11551]
[2015/04/15 08:58:44.502245,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-11569]
[2015/04/15 08:58:44.502268,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-11163]
[2015/04/15 08:58:44.502290,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-22-2-27]
[2015/04/15 08:58:44.502312,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids)
  get_privileges_for_sids: sid = S-1-1-0
  Privilege set: 0x0
[2015/04/15 08:58:44.502340,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-2]
[2015/04/15 08:58:44.502362,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-11]
[2015/04/15 08:58:44.502383,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-32-545]
[2015/04/15 08:58:44.502405,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids)
  get_privileges_for_sids: sid = S-1-5-32-544
  Privilege set: 0x1ffffff0
[2015/04/15 08:58:44.502439, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-1202]: value=[11202:B]
[2015/04/15 08:58:44.502460, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-1202]: id=[11202], endptr=[:B]
[2015/04/15 08:58:44.502484, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-1203]: value=[11203:B]
[2015/04/15 08:58:44.502504, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-1203]: id=[11203], endptr=[:B]
[2015/04/15 08:58:44.502528, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-513]: value=[10513:B]
[2015/04/15 08:58:44.502547, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-513]: id=[10513], endptr=[:B]
[2015/04/15 08:58:44.502570, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-512]: value=[10512:B]
[2015/04/15 08:58:44.502594, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-512]: id=[10512], endptr=[:B]
[2015/04/15 08:58:44.502619, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11157]: value=[21157:B]
[2015/04/15 08:58:44.502638, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11157]: id=[21157], endptr=[:B]
[2015/04/15 08:58:44.502662, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-1005]: value=[11005:B]
[2015/04/15 08:58:44.502681, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-1005]: id=[11005], endptr=[:B]
[2015/04/15 08:58:44.502705, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11693]: value=[21693:B]
[2015/04/15 08:58:44.502724, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11693]: id=[21693], endptr=[:B]
[2015/04/15 08:58:44.502748, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11543]: value=[21543:B]
[2015/04/15 08:58:44.502766, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11543]: id=[21543], endptr=[:B]
[2015/04/15 08:58:44.502790, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11729]: value=[21729:B]
[2015/04/15 08:58:44.502809, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11729]: id=[21729], endptr=[:B]
[2015/04/15 08:58:44.502833, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11551]: value=[21551:B]
[2015/04/15 08:58:44.502852, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11551]: id=[21551], endptr=[:B]
[2015/04/15 08:58:44.502877, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11569]: value=[21569:B]
[2015/04/15 08:58:44.502895, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11569]: id=[21569], endptr=[:B]
[2015/04/15 08:58:44.502919, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11163]: value=[21163:B]
[2015/04/15 08:58:44.502938, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11163]: id=[21163], endptr=[:B]
[2015/04/15 08:58:44.502965, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-1-0]: value=[-1:N]
[2015/04/15 08:58:44.502985, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-1-0]: id=[4294967295], endptr=[:N]
[2015/04/15 08:58:44.503006, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-2]: value=[-1:N]
[2015/04/15 08:58:44.503025, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-2]: id=[4294967295], endptr=[:N]
[2015/04/15 08:58:44.503051, 10, pid=4127, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:296(gencache_set_data_blob)
  Adding cache entry with key=[IDMAP/SID2XID/S-1-5-11] and timeout=[gio gen  1 01:00:00 1970 CET] (-1429081124 seconds in the past)
[2015/04/15 08:58:44.503088, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-32-545]: value=[25003:G]
[2015/04/15 08:58:44.503108, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-32-545]: id=[25003], endptr=[:G]
[2015/04/15 08:58:44.503131, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-32-544]: value=[25000:G]
[2015/04/15 08:58:44.503149, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-32-544]: id=[25000], endptr=[:G]
[2015/04/15 08:58:44.508900,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.508948,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:58:44.508985,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.509021,  5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:58:44.509047,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.509083,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:44.509102, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
  LEGACY: mapping failed for sid S-1-1-0
[2015/04/15 08:58:44.509121,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.509139,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:58:44.509156,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.509173,  5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:58:44.509190,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.509223,  4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:44.509244, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
  LEGACY: mapping failed for sid S-1-1-0
[2015/04/15 08:58:44.509265, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token)
  Could not convert SID S-1-1-0 to gid, ignoring it
[2015/04/15 08:58:44.509285, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token)
  Could not convert SID S-1-5-2 to gid, ignoring it
[2015/04/15 08:58:44.509303, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token)
  Could not convert SID S-1-5-11 to gid, ignoring it
[2015/04/15 08:58:44.509327, 10, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug)
  Security token SIDs (33):
    SID[  0]: S-1-5-21-2943704632-3037471470-1787688681-1202
    SID[  1]: S-1-5-21-2943704632-3037471470-1787688681-1203
    SID[  2]: S-1-5-21-2943704632-3037471470-1787688681-513
    SID[  3]: S-1-5-21-2943704632-3037471470-1787688681-512
    SID[  4]: S-1-5-21-2943704632-3037471470-1787688681-11157
    SID[  5]: S-1-5-21-2943704632-3037471470-1787688681-1005
    SID[  6]: S-1-5-21-2943704632-3037471470-1787688681-11693
    SID[  7]: S-1-5-21-2943704632-3037471470-1787688681-11543
    SID[  8]: S-1-5-21-2943704632-3037471470-1787688681-11729
    SID[  9]: S-1-5-21-2943704632-3037471470-1787688681-11551
    SID[ 10]: S-1-5-21-2943704632-3037471470-1787688681-11569
    SID[ 11]: S-1-5-21-2943704632-3037471470-1787688681-11163
    SID[ 12]: S-1-22-2-27
    SID[ 13]: S-1-1-0
    SID[ 14]: S-1-5-2
    SID[ 15]: S-1-5-11
    SID[ 16]: S-1-5-32-545
    SID[ 17]: S-1-5-32-544
    SID[ 18]: S-1-22-1-11202
    SID[ 19]: S-1-22-2-11202
    SID[ 20]: S-1-22-2-11203
    SID[ 21]: S-1-22-2-10513
    SID[ 22]: S-1-22-2-10512
    SID[ 23]: S-1-22-2-21157
    SID[ 24]: S-1-22-2-11005
    SID[ 25]: S-1-22-2-21693
    SID[ 26]: S-1-22-2-21543
    SID[ 27]: S-1-22-2-21729
    SID[ 28]: S-1-22-2-21551
    SID[ 29]: S-1-22-2-21569
    SID[ 30]: S-1-22-2-21163
    SID[ 31]: S-1-22-2-25003
    SID[ 32]: S-1-22-2-25000
   Privileges (0x        1FFFFFF0):
    Privilege[  0]: SeMachineAccountPrivilege
    Privilege[  1]: SeTakeOwnershipPrivilege
    Privilege[  2]: SeBackupPrivilege
    Privilege[  3]: SeRestorePrivilege
    Privilege[  4]: SeRemoteShutdownPrivilege
    Privilege[  5]: SePrintOperatorPrivilege
    Privilege[  6]: SeAddUsersPrivilege
    Privilege[  7]: SeDiskOperatorPrivilege
    Privilege[  8]: SeSecurityPrivilege
    Privilege[  9]: SeSystemtimePrivilege
    Privilege[ 10]: SeShutdownPrivilege
    Privilege[ 11]: SeDebugPrivilege
    Privilege[ 12]: SeSystemEnvironmentPrivilege
    Privilege[ 13]: SeSystemProfilePrivilege
    Privilege[ 14]: SeProfileSingleProcessPrivilege
    Privilege[ 15]: SeIncreaseBasePriorityPrivilege
    Privilege[ 16]: SeLoadDriverPrivilege
    Privilege[ 17]: SeCreatePagefilePrivilege
    Privilege[ 18]: SeIncreaseQuotaPrivilege
    Privilege[ 19]: SeChangeNotifyPrivilege
    Privilege[ 20]: SeUndockPrivilege
    Privilege[ 21]: SeManageVolumePrivilege
    Privilege[ 22]: SeImpersonatePrivilege
    Privilege[ 23]: SeCreateGlobalPrivilege
    Privilege[ 24]: SeEnableDelegationPrivilege
   Rights (0x               0):
[2015/04/15 08:58:44.509765, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 11202
  Primary group is 11203 and contains 15 supplementary groups
  Group[  0]: 11202
  Group[  1]: 11203
  Group[  2]: 10513
  Group[  3]: 10512
  Group[  4]: 21157
  Group[  5]: 11005
  Group[  6]: 21693
  Group[  7]: 21543
  Group[  8]: 21729
  Group[  9]: 21551
  Group[ 10]: 21569
  Group[ 11]: 21163
  Group[ 12]: 27
  Group[ 13]: 25003
  Group[ 14]: 25000
[2015/04/15 08:58:44.509919,  7, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:5168(lp_servicenumber)
  lp_servicenumber: couldn't find DOMINIOCSA\admin
[2015/04/15 08:58:44.509949,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
  Finding user DOMINIOCSA\admin
[2015/04/15 08:58:44.509968,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is dominiocsa\admin
[2015/04/15 08:58:44.509989,  5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
  Get_Pwnam_internals did find user [DOMINIOCSA\admin]!
[2015/04/15 08:58:44.510006,  3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/password.c:144(register_homes_share)
  Adding homes service for user 'DOMINIOCSA\admin' using home directory: '/home/DOMINIOCSA/admin'
[2015/04/15 08:58:44.510034,  7, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:5168(lp_servicenumber)
  lp_servicenumber: couldn't find homes
[2015/04/15 08:58:44.510079,  4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:483(smb_pam_start)
  smb_pam_start: PAM: Init user: DOMINIOCSA\admin
[2015/04/15 08:58:44.512880,  4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:492(smb_pam_start)
  smb_pam_start: PAM: setting rhost to: vbox-winxp
[2015/04/15 08:58:44.512915,  4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:501(smb_pam_start)
  smb_pam_start: PAM: setting tty
[2015/04/15 08:58:44.512933,  4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:509(smb_pam_start)
  smb_pam_start: PAM: Init passed for user: DOMINIOCSA\admin
[2015/04/15 08:58:44.512951,  4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:646(smb_internal_pam_session)
  smb_internal_pam_session: PAM: tty set to: smb/333140644
[2015/04/15 08:58:51.939396,  0] ../source3/rpc_server/srv_pipe.c:1395(api_rpcTNP)
  api_rpcTNP: \spoolss: SPOOLSS_GETJOB failed.
-------------- next part --------------
[2015/04/15 08:57:25,  0] ../source3/smbd/server.c:1189(main)
  smbd version 4.1.17-Debian started.
  Copyright Andrew Tridgell and the Samba Team 1992-2013
[2015/04/15 08:57:25,  5, pid=3841, effective(0, 0), real(0, 0)] ../lib/util/debug.c:334(debug_dump_status)
  INFO: Current debug levels:
    all: 10
    tdb: 10
    printdrivers: 10
    lanman: 10
    smb: 10
    rpc_parse: 10
    rpc_srv: 10
    rpc_cli: 10
    passdb: 10
    sam: 10
    auth: 10
    winbind: 10
    vfs: 10
    idmap: 10
    quota: 10
    acls: 10
    locking: 10
    msdfs: 10
    dmapi: 10
    registry: 10
    scavenger: 10
    dns: 10
    ldb: 10
  doing parameter security = domain
  doing parameter encrypt passwords = true
  doing parameter passdb backend = tdbsam
  doing parameter obey pam restrictions = yes
  doing parameter unix password sync = yes
  doing parameter passwd program = /usr/bin/passwd %u
  doing parameter passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
  doing parameter pam password change = yes
  doing parameter map to guest = bad user
  doing parameter idmap config DOMINIOCSA : backend = rid
  doing parameter idmap config DOMINIOCSA : range = 10000-99999
  doing parameter idmap config * : backend = tdb
  doing parameter idmap config * : range = 100000-200000
  doing parameter allow trusted domains = No
  doing parameter winbind enum users = yes
  doing parameter winbind enum groups = yes
  doing parameter template shell = /bin/bash
  doing parameter winbind offline logon = true
  doing parameter usershare allow guests = yes
[2015/04/15 08:57:25,  4, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4878(lp_load_ex)
  pm_process() returned Yes
[2015/04/15 08:57:25,  7, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:5168(lp_servicenumber)
  lp_servicenumber: couldn't find homes
[2015/04/15 08:57:25,  5, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  Registering messaging pointer for type 2 - private_data=(nil)
[2015/04/15 08:57:25,  5, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  Registering messaging pointer for type 9 - private_data=(nil)
[2015/04/15 08:57:25,  2, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/tallocmsg.c:124(register_msg_pool_usage)
  Registered MSG_REQ_POOL_USAGE
[2015/04/15 08:57:25,  5, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  Registering messaging pointer for type 11 - private_data=(nil)
[2015/04/15 08:57:25,  5, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  Registering messaging pointer for type 12 - private_data=(nil)
[2015/04/15 08:57:25,  2, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/dmallocmsg.c:78(register_dmalloc_msgs)
  Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
[2015/04/15 08:57:25,  5, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  Registering messaging pointer for type 1 - private_data=(nil)
[2015/04/15 08:57:25,  5, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  Registering messaging pointer for type 5 - private_data=(nil)
[2015/04/15 08:57:25.199224,  3, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4839(lp_load_ex)
  lp_load_ex: refreshing parameters
[2015/04/15 08:57:25.199247,  5, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1488(free_param_opts)
  Freeing parametrics:
[2015/04/15 08:57:25.199277,  3, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:750(init_globals)
  Initialising global parameters
[2015/04/15 08:57:25.199300,  2, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:543(max_open_files)
  rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
[2015/04/15 08:57:25.199343,  3, pid=3841, effective(0, 0), real(0, 0)] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
[2015/04/15 08:57:25.199375,  3, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3565(do_section)
  Processing section "[global]"
  doing parameter workgroup = DOMINIOCSA
  doing parameter server string = %h server (Samba, Ubuntu)
  doing parameter dns proxy = no
  doing parameter log file = /var/log/samba/log.%m
  doing parameter max log size = 1000
  doing parameter syslog = 0
  doing parameter panic action = /usr/share/samba/panic-action %d
  doing parameter log level = 10 all:10
[2015/04/15 08:57:25.199483,  5, pid=3841, effective(0, 0), real(0, 0)] ../lib/util/debug.c:334(debug_dump_status)
  INFO: Current debug levels:
    all: 10
    tdb: 10
    printdrivers: 10
    lanman: 10
    smb: 10
    rpc_parse: 10
    rpc_srv: 10
    rpc_cli: 10
    passdb: 10
    sam: 10
    auth: 10
    winbind: 10
    vfs: 10
    idmap: 10
    quota: 10
    acls: 10
    locking: 10
    msdfs: 10
    dmapi: 10
    registry: 10
    scavenger: 10
    dns: 10
    ldb: 10
  doing parameter security = domain
  doing parameter encrypt passwords = true
  doing parameter passdb backend = tdbsam
  doing parameter obey pam restrictions = yes
  doing parameter unix password sync = yes
  doing parameter passwd program = /usr/bin/passwd %u
  doing parameter passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
  doing parameter pam password change = yes
  doing parameter map to guest = bad user
  doing parameter idmap config DOMINIOCSA : backend = rid
  doing parameter idmap config DOMINIOCSA : range = 10000-99999
  doing parameter idmap config * : backend = tdb
  doing parameter idmap config * : range = 100000-200000
  doing parameter allow trusted domains = No
  doing parameter winbind enum users = yes
  doing parameter winbind enum groups = yes
  doing parameter template shell = /bin/bash
  doing parameter winbind offline logon = true
  doing parameter usershare allow guests = yes
[2015/04/15 08:57:25.199890,  2, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3582(do_section)
  Processing section "[printers]"
[2015/04/15 08:57:25.199927,  8, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1620(add_a_service)
  add_a_service: Creating snum = 0 for printers
[2015/04/15 08:57:25.199947, 10, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1661(hash_a_service)
  hash_a_service: creating servicehash
[2015/04/15 08:57:25.199969, 10, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1670(hash_a_service)
  hash_a_service: hashing index 0 for service name printers
  doing parameter comment = All Printers
  doing parameter browseable = no
  doing parameter path = /var/spool/samba
  doing parameter printable = yes
  doing parameter guest ok = no
  doing parameter read only = yes
  doing parameter create mask = 0700
[2015/04/15 08:57:25.200100,  2, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3582(do_section)
  Processing section "[print$]"
[2015/04/15 08:57:25.200142,  8, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1620(add_a_service)
  add_a_service: Creating snum = 1 for print$
[2015/04/15 08:57:25.200163, 10, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1670(hash_a_service)
  hash_a_service: hashing index 1 for service name print$
  doing parameter comment = Printer Drivers
  doing parameter path = /var/lib/samba/printers
  doing parameter browseable = yes
  doing parameter read only = no
  doing parameter guest ok = no
  doing parameter writeable = yes
[2015/04/15 08:57:25.200245,  2, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3582(do_section)
  Processing section "[testbsd]"
[2015/04/15 08:57:25.200277,  8, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1620(add_a_service)
  add_a_service: Creating snum = 2 for testbsd
[2015/04/15 08:57:25.200297, 10, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1670(hash_a_service)
  hash_a_service: hashing index 2 for service name testbsd
  doing parameter comment = Test BSD printing
  doing parameter printing = bsd
  doing parameter path = /tmp
  doing parameter guest ok = Yes
  doing parameter printable = Yes
  doing parameter print ok = Yes
  doing parameter print command = /usr/local/bin/bsdprinting.sh %s %H "%J" %p %m %S 'default'
[2015/04/15 08:57:25.200411,  4, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4878(lp_load_ex)
  pm_process() returned Yes
[2015/04/15 08:57:25.200441,  7, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:5168(lp_servicenumber)
  lp_servicenumber: couldn't find homes
[2015/04/15 08:57:25.200474,  8, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1620(add_a_service)
  add_a_service: Creating snum = 3 for IPC$
[2015/04/15 08:57:25.200494, 10, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1670(hash_a_service)
  hash_a_service: hashing index 3 for service name IPC$
[2015/04/15 08:57:25.200517,  3, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1774(lp_add_ipc)
  adding IPC service
[2015/04/15 08:57:25.200549,  6, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed)
  lp_file_list_changed()
  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Wed Apr 15 08:52:33 2015
  
[2015/04/15 08:57:25.200730,  2, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:341(add_interface)
  added interface eth0 ip=192.168.70.10 bcast=192.168.70.255 netmask=255.255.255.0
[2015/04/15 08:57:25.200789,  3, pid=3841, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1248(main)
  loaded services
[2015/04/15 08:57:25.200820,  5, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/util_names.c:152(init_names)
  Netbios name list:-
  my_netbios_names[0]="PSALA-LX2"
[2015/04/15 08:57:25.201011,  3, pid=3841, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1280(main)
  Becoming a daemon.
[2015/04/15 08:57:25.201854,  8, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util.c:391(fcntl_lock)
  fcntl_lock 10 6 0 1 1
[2015/04/15 08:57:25.201935,  8, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util.c:426(fcntl_lock)
  fcntl_lock: Lock call successful
[2015/04/15 08:57:25.202279,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb)
  Attempting to register passdb backend smbpasswd
[2015/04/15 08:57:25.218183,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb)
  Successfully added passdb backend 'smbpasswd'
[2015/04/15 08:57:25.218215,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb)
  Attempting to register passdb backend tdbsam
[2015/04/15 08:57:25.218243,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb)
  Successfully added passdb backend 'tdbsam'
[2015/04/15 08:57:25.218273,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb)
  Attempting to register passdb backend wbc_sam
[2015/04/15 08:57:25.218302,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb)
  Successfully added passdb backend 'wbc_sam'
[2015/04/15 08:57:25.218331,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb)
  Attempting to register passdb backend samba_dsdb
[2015/04/15 08:57:25.218367,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb)
  Successfully added passdb backend 'samba_dsdb'
[2015/04/15 08:57:25.218397,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb)
  Attempting to register passdb backend samba4
[2015/04/15 08:57:25.218428,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb)
  Successfully added passdb backend 'samba4'
[2015/04/15 08:57:25.218475,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb)
  Attempting to register passdb backend ldapsam
[2015/04/15 08:57:25.218506,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb)
  Successfully added passdb backend 'ldapsam'
[2015/04/15 08:57:25.218536,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb)
  Attempting to register passdb backend NDS_ldapsam
[2015/04/15 08:57:25.218565,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb)
  Successfully added passdb backend 'NDS_ldapsam'
[2015/04/15 08:57:25.218592,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb)
  Attempting to register passdb backend IPA_ldapsam
[2015/04/15 08:57:25.218620,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb)
  Successfully added passdb backend 'IPA_ldapsam'
[2015/04/15 08:57:25.218661,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:153(make_pdb_method_name)
  Attempting to find a passdb backend to match tdbsam (tdbsam)
[2015/04/15 08:57:25.218695,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:174(make_pdb_method_name)
  Found pdb backend tdbsam
[2015/04/15 08:57:25.218749,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:185(make_pdb_method_name)
  pdb backend tdbsam has a valid init
[2015/04/15 08:57:25.219018,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
  check lock order 1 for /var/run/samba/smbXsrv_version_global.tdb
[2015/04/15 08:57:25.219062, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:/var/run/samba/smbXsrv_version_global.tdb 2:<none> 3:<none>
[2015/04/15 08:57:25.219104, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Locking key 736D62587372765F7665
[2015/04/15 08:57:25.219153, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
  Allocated locked data 0x0x7fbe441afb20
[2015/04/15 08:57:25.219363, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Unlocking key 736D62587372765F7665
[2015/04/15 08:57:25.219407,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
  release lock order 1 for /var/run/samba/smbXsrv_version_global.tdb
[2015/04/15 08:57:25.219430, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:<none> 2:<none> 3:<none>
[2015/04/15 08:57:25.219451, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:245(smbXsrv_version_global_init)
  smbXsrv_version_global_init
[2015/04/15 08:57:25.219469, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:246(smbXsrv_version_global_init)
[2015/04/15 08:57:25.219484,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
       &global_blob: struct smbXsrv_version_globalB
          version                  : SMBXSRV_VERSION_0 (0)
          seqnum                   : 0x00000001 (1)
          info                     : union smbXsrv_version_globalU(case 0)
          info0                    : *
              info0: struct smbXsrv_version_global0
                  db_rec                   : NULL
                  num_nodes                : 0x00000001 (1)
                  nodes: ARRAY(1)
                      nodes: struct smbXsrv_version_node0
                          server_id: struct server_id
                              pid                      : 0x0000000000000f02 (3842)
                              task_id                  : 0x00000000 (0)
                              vnn                      : 0xffffffff (4294967295)
                              unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
                          min_version              : SMBXSRV_VERSION_0 (0)
                          max_version              : SMBXSRV_VERSION_0 (0)
                          current_version          : SMBXSRV_VERSION_0 (0)
[2015/04/15 08:57:25.230305,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  Registering messaging pointer for type 784 - private_data=0x7fbe441afd20
[2015/04/15 08:57:25.230363,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  Registering messaging pointer for type 788 - private_data=0x7fbe441b1d80
[2015/04/15 08:57:25.230407,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  Registering messaging pointer for type 789 - private_data=0x7fbe441b2910
[2015/04/15 08:57:25.230490, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:759(regdb_init)
  regdb_init: registry db openend. refcount reset (1)
[2015/04/15 08:57:25.230529, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:70(reghook_cache_init)
  reghook_cache_init: new tree with default ops 0x7fbe42add6c0 for key []
[2015/04/15 08:57:25.230629, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports]
[2015/04/15 08:57:25.230676, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Samba Printer Port] len[2]
[2015/04/15 08:57:25.230704, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:57:25.230731, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[DefaultSpoolDirectory] len[70]
[2015/04/15 08:57:25.230752, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2015/04/15 08:57:25.230777, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[DisplayName] len[20]
[2015/04/15 08:57:25.230799, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[1]: name[ErrorControl] len[4]
[2015/04/15 08:57:25.230820, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2015/04/15 08:57:25.230845, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[DisplayName] len[20]
[2015/04/15 08:57:25.230865, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[1]: name[ErrorControl] len[4]
[2015/04/15 08:57:25.230892, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0x7fbe430011c0 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers]
[2015/04/15 08:57:25.230919,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2015/04/15 08:57:25.230946, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] to tree
[2015/04/15 08:57:25.230967,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2015/04/15 08:57:25.230986, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:57:25.231005,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2015/04/15 08:57:25.231026, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] to tree
[2015/04/15 08:57:25.231045,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2015/04/15 08:57:25.231063, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports]
[2015/04/15 08:57:25.231081,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2015/04/15 08:57:25.231100, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] to tree
[2015/04/15 08:57:25.231118,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2015/04/15 08:57:25.231136, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0x7fbe43001240 for key [\HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares]
[2015/04/15 08:57:25.231154,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2015/04/15 08:57:25.231173, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] to tree
[2015/04/15 08:57:25.231192,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2015/04/15 08:57:25.231210, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0x7fbe41b087c0 for key [\HKLM\SOFTWARE\Samba\smbconf]
[2015/04/15 08:57:25.231228,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2015/04/15 08:57:25.231246, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node [HKLM\SOFTWARE\Samba\smbconf] to tree
[2015/04/15 08:57:25.231264,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2015/04/15 08:57:25.231282, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0x7fbe430012c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
[2015/04/15 08:57:25.231300,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2015/04/15 08:57:25.231319, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] to tree
[2015/04/15 08:57:25.231342,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2015/04/15 08:57:25.231361, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0x7fbe43001340 for key [\HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions]
[2015/04/15 08:57:25.231379,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2015/04/15 08:57:25.231398, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] to tree
[2015/04/15 08:57:25.231416,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2015/04/15 08:57:25.231434, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0x7fbe430013c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
[2015/04/15 08:57:25.231452,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2015/04/15 08:57:25.231471, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] to tree
[2015/04/15 08:57:25.231489,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2015/04/15 08:57:25.231510, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0x7fbe43001440 for key [\HKPT]
[2015/04/15 08:57:25.231528,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2015/04/15 08:57:25.231546, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node [HKPT] to tree
[2015/04/15 08:57:25.231564,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2015/04/15 08:57:25.231583, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0x7fbe430014c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:57:25.231601,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2015/04/15 08:57:25.231619, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] to tree
[2015/04/15 08:57:25.231636,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2015/04/15 08:57:25.231654, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0x7fbe43001540 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib]
[2015/04/15 08:57:25.231672,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2015/04/15 08:57:25.231691, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] to tree
[2015/04/15 08:57:25.231709,  8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2015/04/15 08:57:25.231728, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (1->0)
[2015/04/15 08:57:25.231903,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
  Finding user nobody
[2015/04/15 08:57:25.231936,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is nobody
[2015/04/15 08:57:25.232365,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
  Get_Pwnam_internals did find user [nobody]!
[2015/04/15 08:57:25.232422,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
  Finding user PSALA-LX2\nobody
[2015/04/15 08:57:25.232444,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is psala-lx2\nobody
[2015/04/15 08:57:25.240307,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:128(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as given is PSALA-LX2\nobody
[2015/04/15 08:57:25.244587,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:141(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as uppercase is PSALA-LX2\NOBODY
[2015/04/15 08:57:25.249624,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:153(Get_Pwnam_internals)
  Checking combinations of 0 uppercase letters in psala-lx2\nobody
[2015/04/15 08:57:25.249714,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
  Get_Pwnam_internals didn't find user [PSALA-LX2\nobody]!
[2015/04/15 08:57:25.249761,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
  Finding user nobody
[2015/04/15 08:57:25.249780,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is nobody
[2015/04/15 08:57:25.249805,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
  Get_Pwnam_internals did find user [nobody]!
[2015/04/15 08:57:25.250120, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:224(create_local_nt_token_from_info3)
  Create local NT token for nobody
[2015/04/15 08:57:25.250211,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
  Finding user nobody
[2015/04/15 08:57:25.250257,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is nobody
[2015/04/15 08:57:25.250279,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
  Get_Pwnam_internals did find user [nobody]!
[2015/04/15 08:57:25.250317, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist)
  sys_getgrouplist: user [nobody]
[2015/04/15 08:57:25.250442,  5, pid=3842, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:67(gencache_init)
  Opening cache file at /var/cache/samba/gencache.tdb
[2015/04/15 08:57:25.250631,  5, pid=3842, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:110(gencache_init)
  Opening cache file at /var/run/samba/gencache_notrans.tdb
[2015/04/15 08:57:25.250698, 10, pid=3842, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:296(gencache_set_data_blob)
  Adding cache entry with key=[IDMAP/GID2SID/65534] and timeout=[gio gen  1 01:00:00 1970 CET] (-1429081045 seconds in the past)
[2015/04/15 08:57:25.259682, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1220(gid_to_sid)
  gid 65534 -> sid S-1-5-21-2943704632-3037471470-1787688681-55534
[2015/04/15 08:57:25.259839, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-32-544]: value=[25000:G]
[2015/04/15 08:57:25.259891, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-32-544]: id=[25000], endptr=[:G]
[2015/04/15 08:57:25.259935, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1442(sid_to_gid)
  sid S-1-5-32-544 -> gid 25000
[2015/04/15 08:57:25.260005, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-32-545]: value=[25003:G]
[2015/04/15 08:57:25.260066, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-32-545]: id=[25003], endptr=[:G]
[2015/04/15 08:57:25.260110, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1442(sid_to_gid)
  sid S-1-5-32-545 -> gid 25003
[2015/04/15 08:57:25.260179,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.260223,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.260251,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.260306,  5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:57:25.260353,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.260634,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.260771,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-21-204140918-800915079-1589553425-501]
[2015/04/15 08:57:25.260837,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-21-204140918-800915079-1589553425-514]
[2015/04/15 08:57:25.260894,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-55534]
[2015/04/15 08:57:25.260949,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids)
  get_privileges_for_sids: sid = S-1-1-0
  Privilege set: 0x0
[2015/04/15 08:57:25.261014,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-2]
[2015/04/15 08:57:25.261065,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-32-546]
[2015/04/15 08:57:25.261145, 10, pid=3842, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:296(gencache_set_data_blob)
  Adding cache entry with key=[IDMAP/SID2XID/S-1-5-21-204140918-800915079-1589553425-501] and timeout=[gio gen  1 01:00:00 1970 CET] (-1429081045 seconds in the past)
[2015/04/15 08:57:25.261251, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-55534]: value=[65534:B]
[2015/04/15 08:57:25.261302, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
  Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-55534]: id=[65534], endptr=[:B]
[2015/04/15 08:57:25.261366, 10, pid=3842, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:296(gencache_set_data_blob)
  Adding cache entry with key=[IDMAP/SID2XID/S-1-1-0] and timeout=[gio gen  1 01:00:00 1970 CET] (-1429081045 seconds in the past)
[2015/04/15 08:57:25.261452, 10, pid=3842, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:296(gencache_set_data_blob)
  Adding cache entry with key=[IDMAP/SID2XID/S-1-5-2] and timeout=[gio gen  1 01:00:00 1970 CET] (-1429081045 seconds in the past)
[2015/04/15 08:57:25.479613,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.479668,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.479688,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.479706,  5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:57:25.479724,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.479775,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1712(lookup_global_sam_rid)
  lookup_global_sam_rid: looking up RID 514.
[2015/04/15 08:57:25.479803,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2015/04/15 08:57:25.479824,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2015/04/15 08:57:25.479841,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2015/04/15 08:57:25.479858,  5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:57:25.479875,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.479944,  4, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:552(tdbsam_open)
  tdbsam_open: successfully opened /var/lib/samba/private/passdb.tdb
[2015/04/15 08:57:25.479971,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:646(tdbsam_getsampwrid)
  pdb_getsampwrid (TDB): error looking up RID 514 by key RID_00000202.
[2015/04/15 08:57:25.480007,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480030,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1788(lookup_global_sam_rid)
  Can't find a unix id for an unmapped group
[2015/04/15 08:57:25.480047,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1498(pdb_default_sid_to_id)
  SID S-1-5-21-204140918-800915079-1589553425-514 is or domain, but is unmapped
[2015/04/15 08:57:25.480070,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480088, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
  LEGACY: mapping failed for sid S-1-5-21-204140918-800915079-1589553425-514
[2015/04/15 08:57:25.480108,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480125,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480143,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480160,  5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:57:25.480177,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.480210,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1712(lookup_global_sam_rid)
  lookup_global_sam_rid: looking up RID 514.
[2015/04/15 08:57:25.480230,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2015/04/15 08:57:25.480248,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480265,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2015/04/15 08:57:25.480282,  5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:57:25.480299,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.480329,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:646(tdbsam_getsampwrid)
  pdb_getsampwrid (TDB): error looking up RID 514 by key RID_00000202.
[2015/04/15 08:57:25.480357,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480377,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1788(lookup_global_sam_rid)
  Can't find a unix id for an unmapped group
[2015/04/15 08:57:25.480394,  5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1498(pdb_default_sid_to_id)
  SID S-1-5-21-204140918-800915079-1589553425-514 is or domain, but is unmapped
[2015/04/15 08:57:25.480416,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480434, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
  LEGACY: mapping failed for sid S-1-5-21-204140918-800915079-1589553425-514
[2015/04/15 08:57:25.480453,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480470,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480487,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480504,  5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:57:25.480521,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.480560,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480593, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
  LEGACY: mapping failed for sid S-1-1-0
[2015/04/15 08:57:25.480613,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480630,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480647,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480664,  5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:57:25.480685,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.480714,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480734, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
  LEGACY: mapping failed for sid S-1-1-0
[2015/04/15 08:57:25.480753,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480770,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480787,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480804,  5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:57:25.480821,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.480848,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480867, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
  LEGACY: mapping failed for sid S-1-5-2
[2015/04/15 08:57:25.480885,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480903,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480920,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480937,  5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:57:25.480953,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.480981,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.481000, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
  LEGACY: mapping failed for sid S-1-5-2
[2015/04/15 08:57:25.481018,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.481035,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.481053,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.481069,  5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:57:25.481086,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.481120, 10, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1526(pdb_default_sid_to_id)
  Could not find map for sid S-1-5-32-546
[2015/04/15 08:57:25.481144,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.481168, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
  LEGACY: mapping failed for sid S-1-5-32-546
[2015/04/15 08:57:25.481187,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.481204,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.481221,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.481239,  5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:57:25.481255,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.481287, 10, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1526(pdb_default_sid_to_id)
  Could not find map for sid S-1-5-32-546
[2015/04/15 08:57:25.481311,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.481329, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
  LEGACY: mapping failed for sid S-1-5-32-546
[2015/04/15 08:57:25.481349, 10, pid=3842, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token)
  Could not convert SID S-1-5-21-204140918-800915079-1589553425-514 to gid, ignoring it
[2015/04/15 08:57:25.481373, 10, pid=3842, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token)
  Could not convert SID S-1-1-0 to gid, ignoring it
[2015/04/15 08:57:25.481392, 10, pid=3842, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token)
  Could not convert SID S-1-5-2 to gid, ignoring it
[2015/04/15 08:57:25.481410, 10, pid=3842, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token)
  Could not convert SID S-1-5-32-546 to gid, ignoring it
[2015/04/15 08:57:25.481437, 10, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug)
  Security token SIDs (8):
    SID[  0]: S-1-5-21-204140918-800915079-1589553425-501
    SID[  1]: S-1-5-21-204140918-800915079-1589553425-514
    SID[  2]: S-1-5-21-2943704632-3037471470-1787688681-55534
    SID[  3]: S-1-1-0
    SID[  4]: S-1-5-2
    SID[  5]: S-1-5-32-546
    SID[  6]: S-1-22-1-65534
    SID[  7]: S-1-22-2-65534
   Privileges (0x               0):
   Rights (0x               0):
[2015/04/15 08:57:25.481537, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 65534
  Primary group is 65534 and contains 1 supplementary groups
  Group[  0]: 65534
[2015/04/15 08:57:25.481795,  3, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/rpc_server/svcctl/srv_svcctl_reg.c:565(svcctl_init_winreg)
  Initialise the svcctl registry keys if needed.
[2015/04/15 08:57:25.481827,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.481846,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.481864,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.481881,  5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:57:25.481898,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.481961,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.481985, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open)
  regdb_open: registry db opened. refcount reset (1)
[2015/04/15 08:57:25.482067,  4, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p)
  Create pipe requested \winreg
[2015/04/15 08:57:25.482100, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles)
  init_pipe_handle_list: created handle list for pipe \winreg
[2015/04/15 08:57:25.482120, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles)
  init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg
[2015/04/15 08:57:25.482276,  4, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p)
  Created internal pipe \winreg
[2015/04/15 08:57:25.482357,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenHKLM: struct winreg_OpenHKLM
          in: struct winreg_OpenHKLM
              system_name              : NULL
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE          
                     0: KEY_SET_VALUE            
                     0: KEY_CREATE_SUB_KEY       
                     0: KEY_ENUMERATE_SUB_KEYS   
                     0: KEY_NOTIFY               
                     0: KEY_CREATE_LINK          
                     0: KEY_WOW64_64KEY          
                     0: KEY_WOW64_32KEY          
[2015/04/15 08:57:25.482483,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [HKLM]
[2015/04/15 08:57:25.482505, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (1->2)
[2015/04/15 08:57:25.482529, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM]
[2015/04/15 08:57:25.482549, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM]
[2015/04/15 08:57:25.482568, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.482586, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM]
[2015/04/15 08:57:25.482650,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
  Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.482697,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenHKLM: struct winreg_OpenHKLM
          out: struct winreg_OpenHKLM
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000001-0000-0000-2e55-d50b020f0000
              result                   : WERR_OK
[2015/04/15 08:57:25.482882,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenKey: struct winreg_OpenKey
          in: struct winreg_OpenKey
              parent_handle            : *
                  parent_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000001-0000-0000-2e55-d50b020f0000
              keyname: struct winreg_String
                  name_len                 : 0x0044 (68)
                  name_size                : 0x0044 (68)
                  name                     : *
                      name                     : 'SYSTEM\CurrentControlSet\Services'
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE      
                     0: REG_OPTION_CREATE_LINK   
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK     
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE          
                     0: KEY_SET_VALUE            
                     0: KEY_CREATE_SUB_KEY       
                     0: KEY_ENUMERATE_SUB_KEYS   
                     0: KEY_NOTIFY               
                     0: KEY_CREATE_LINK          
                     0: KEY_WOW64_64KEY          
                     0: KEY_WOW64_32KEY          
[2015/04/15 08:57:25.483401,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.483449,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.483468, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (2->3)
[2015/04/15 08:57:25.483487, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.483504, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.483522, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.483539, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.483566,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.483587, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.483607, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.483624, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.483642, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.483659, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.483685,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.483706, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.483729, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.483747, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.483766, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.483783, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.483820, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.483841, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.483860,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
  Opened policy hnd[2] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.483899,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenKey: struct winreg_OpenKey
          out: struct winreg_OpenKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000002-0000-0000-2e55-d50b020f0000
              result                   : WERR_OK
[2015/04/15 08:57:25.483991,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_QueryInfoKey: struct winreg_QueryInfoKey
          in: struct winreg_QueryInfoKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000002-0000-0000-2e55-d50b020f0000
              classname                : *
                  classname: struct winreg_String
                      name_len                 : 0x0000 (0)
                      name_size                : 0x0000 (0)
                      name                     : NULL
[2015/04/15 08:57:25.484097,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.484141, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.484160, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.484184, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2074(regdb_get_secdesc)
  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.484222,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_QueryInfoKey: struct winreg_QueryInfoKey
          out: struct winreg_QueryInfoKey
              classname                : *
                  classname: struct winreg_String
                      name_len                 : 0x0000 (0)
                      name_size                : 0x0000 (0)
                      name                     : NULL
              num_subkeys              : *
                  num_subkeys              : 0x00000007 (7)
              max_subkeylen            : *
                  max_subkeylen            : 0x0000001c (28)
              max_classlen             : *
                  max_classlen             : 0x00000000 (0)
              num_values               : *
                  num_values               : 0x00000000 (0)
              max_valnamelen           : *
                  max_valnamelen           : 0x00000002 (2)
              max_valbufsize           : *
                  max_valbufsize           : 0x00000000 (0)
              secdescsize              : *
                  secdescsize              : 0x00000078 (120)
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
              result                   : WERR_OK
[2015/04/15 08:57:25.484457,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          in: struct winreg_EnumKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000002-0000-0000-2e55-d50b020f0000
              enum_index               : 0x00000000 (0)
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : ''
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
[2015/04/15 08:57:25.484647,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.484688,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
  _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.484708,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          out: struct winreg_EnumKey
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x001a (26)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : 'LanmanServer'
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
              result                   : WERR_OK
[2015/04/15 08:57:25.484867,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          in: struct winreg_EnumKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000002-0000-0000-2e55-d50b020f0000
              enum_index               : 0x00000001 (1)
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : ''
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
[2015/04/15 08:57:25.485051,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.485091,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
  _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.485110,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          out: struct winreg_EnumKey
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0012 (18)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : 'Eventlog'
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
              result                   : WERR_OK
[2015/04/15 08:57:25.485265,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          in: struct winreg_EnumKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000002-0000-0000-2e55-d50b020f0000
              enum_index               : 0x00000002 (2)
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : ''
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
[2015/04/15 08:57:25.485441,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.485480,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
  _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.485504,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          out: struct winreg_EnumKey
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x000c (12)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : 'Tcpip'
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
              result                   : WERR_OK
[2015/04/15 08:57:25.485658,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          in: struct winreg_EnumKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000002-0000-0000-2e55-d50b020f0000
              enum_index               : 0x00000003 (3)
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : ''
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
[2015/04/15 08:57:25.485835,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.485874,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
  _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.485893,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          out: struct winreg_EnumKey
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0012 (18)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : 'Netlogon'
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
              result                   : WERR_OK
[2015/04/15 08:57:25.486046,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          in: struct winreg_EnumKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000002-0000-0000-2e55-d50b020f0000
              enum_index               : 0x00000004 (4)
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : ''
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
[2015/04/15 08:57:25.486228,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.486268,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
  _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.486286,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          out: struct winreg_EnumKey
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0010 (16)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : 'Spooler'
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
              result                   : WERR_OK
[2015/04/15 08:57:25.486440,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          in: struct winreg_EnumKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000002-0000-0000-2e55-d50b020f0000
              enum_index               : 0x00000005 (5)
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : ''
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
[2015/04/15 08:57:25.486615,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.486660,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
  _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.486679,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          out: struct winreg_EnumKey
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x001e (30)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : 'RemoteRegistry'
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
              result                   : WERR_OK
[2015/04/15 08:57:25.486832,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          in: struct winreg_EnumKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000002-0000-0000-2e55-d50b020f0000
              enum_index               : 0x00000006 (6)
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : ''
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
[2015/04/15 08:57:25.487009,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.487048,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
  _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.487066,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          out: struct winreg_EnumKey
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x000a (10)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : 'WINS'
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
              result                   : WERR_OK
[2015/04/15 08:57:25.487246,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          in: struct winreg_CreateKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000001-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0054 (84)
                  name_size                : 0x0054 (84)
                  name                     : *
                      name                     : 'SYSTEM\CurrentControlSet\Services\Spooler'
              keyclass: struct winreg_String
                  name_len                 : 0x0002 (2)
                  name_size                : 0x0002 (2)
                  name                     : *
                      name                     : ''
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE      
                     0: REG_OPTION_CREATE_LINK   
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK     
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE          
                     0: KEY_SET_VALUE            
                     0: KEY_CREATE_SUB_KEY       
                     0: KEY_ENUMERATE_SUB_KEYS   
                     0: KEY_NOTIFY               
                     0: KEY_CREATE_LINK          
                     0: KEY_WOW64_64KEY          
                     0: KEY_WOW64_32KEY          
              secdesc                  : NULL
              action_taken             : *
                  action_taken             : REG_ACTION_NONE (0)
[2015/04/15 08:57:25.487521,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.487561, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
  _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler'
[2015/04/15 08:57:25.487589,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.487613,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.487632,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.487651, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.487670, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.487687, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.487705, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.487722, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.487752,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.487780,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.487799, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.487817, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.487834, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.487852, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.487869, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.487897, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.487919,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.487937,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.487955, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.487974, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.487991, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.488009, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.488026, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.488061, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.488082,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Spooler]
[2015/04/15 08:57:25.488100, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.488118, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2015/04/15 08:57:25.488136, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2015/04/15 08:57:25.488155, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.488172, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2015/04/15 08:57:25.488203, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.488226,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
  Opened policy hnd[3] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.488264,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          out: struct winreg_CreateKey
              new_handle               : *
                  new_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000003-0000-0000-2e55-d50b020f0000
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
              result                   : WERR_OK
[2015/04/15 08:57:25.488489,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000003-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x000c (12)
                  name_size                : 0x000c (12)
                  name                     : *
                      name                     : 'Start'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x02 (2)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2015/04/15 08:57:25.488717,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.488765,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Start]
[2015/04/15 08:57:25.488790,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.488812, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.488833, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2015/04/15 08:57:25.488862, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Start] len[4]
[2015/04/15 08:57:25.488886, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[1]: name[Type] len[4]
[2015/04/15 08:57:25.488908, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[2]: name[ErrorControl] len[4]
[2015/04/15 08:57:25.488936, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[3]: name[ObjectName] len[24]
[2015/04/15 08:57:25.488958, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[4]: name[DisplayName] len[28]
[2015/04/15 08:57:25.488979, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[5]: name[ImagePath] len[88]
[2015/04/15 08:57:25.489001, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[6]: name[Description] len[106]
[2015/04/15 08:57:25.489024,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.489087,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000003-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x000a (10)
                  name_size                : 0x000a (10)
                  name                     : *
                      name                     : 'Type'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x10 (16)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2015/04/15 08:57:25.489275,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.489320,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Type]
[2015/04/15 08:57:25.489342,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.489365,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.489419,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000003-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x001a (26)
                  name_size                : 0x001a (26)
                  name                     : *
                      name                     : 'ErrorControl'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x01 (1)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2015/04/15 08:57:25.489616,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.489662,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ErrorControl]
[2015/04/15 08:57:25.489683,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.489705,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.489778,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000003-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0016 (22)
                  name_size                : 0x0016 (22)
                  name                     : *
                      name                     : 'ObjectName'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(24)
                      [0]                      : 0x4c (76)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x6f (111)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x63 (99)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x61 (97)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x6c (108)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x53 (83)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x79 (121)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x73 (115)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x74 (116)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x65 (101)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x6d (109)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x00 (0)
                      [23]                     : 0x00 (0)
              size                     : 0x00000018 (24)
[2015/04/15 08:57:25.490149,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.490195,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ObjectName]
[2015/04/15 08:57:25.490223,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.490245,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.490306,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000003-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0018 (24)
                  name_size                : 0x0018 (24)
                  name                     : *
                      name                     : 'DisplayName'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(28)
                      [0]                      : 0x50 (80)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x72 (114)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x69 (105)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x6e (110)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x74 (116)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x20 (32)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x53 (83)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x70 (112)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x6f (111)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x6f (111)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x6c (108)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x65 (101)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x72 (114)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x00 (0)
                      [27]                     : 0x00 (0)
              size                     : 0x0000001c (28)
[2015/04/15 08:57:25.490713,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.490758,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:DisplayName]
[2015/04/15 08:57:25.490780,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.490801,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.490862,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000003-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0014 (20)
                  name_size                : 0x0014 (20)
                  name                     : *
                      name                     : 'ImagePath'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(88)
                      [0]                      : 0x2f (47)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x75 (117)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x73 (115)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x72 (114)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x2f (47)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x6c (108)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x69 (105)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x62 (98)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x2f (47)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x78 (120)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x38 (56)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x36 (54)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x5f (95)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x36 (54)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x34 (52)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x2d (45)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x6c (108)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x69 (105)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x6e (110)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x75 (117)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x78 (120)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x2d (45)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x67 (103)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x6e (110)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x75 (117)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x2f (47)
                      [51]                     : 0x00 (0)
                      [52]                     : 0x73 (115)
                      [53]                     : 0x00 (0)
                      [54]                     : 0x61 (97)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x6d (109)
                      [57]                     : 0x00 (0)
                      [58]                     : 0x62 (98)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x61 (97)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x2f (47)
                      [63]                     : 0x00 (0)
                      [64]                     : 0x73 (115)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x76 (118)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x63 (99)
                      [69]                     : 0x00 (0)
                      [70]                     : 0x63 (99)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x74 (116)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x6c (108)
                      [75]                     : 0x00 (0)
                      [76]                     : 0x2f (47)
                      [77]                     : 0x00 (0)
                      [78]                     : 0x73 (115)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x6d (109)
                      [81]                     : 0x00 (0)
                      [82]                     : 0x62 (98)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x64 (100)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x00 (0)
                      [87]                     : 0x00 (0)
              size                     : 0x00000058 (88)
[2015/04/15 08:57:25.491818,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.491864,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ImagePath]
[2015/04/15 08:57:25.491886,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.491909,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.491964,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000003-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0018 (24)
                  name_size                : 0x0018 (24)
                  name                     : *
                      name                     : 'Description'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(106)
                      [0]                      : 0x49 (73)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x6e (110)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x74 (116)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x65 (101)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x72 (114)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x6e (110)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x61 (97)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x6c (108)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x20 (32)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x73 (115)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x65 (101)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x72 (114)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x76 (118)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x69 (105)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x63 (99)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x65 (101)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x20 (32)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x66 (102)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x6f (111)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x72 (114)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x20 (32)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x73 (115)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x70 (112)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x6f (111)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x6f (111)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x6c (108)
                      [51]                     : 0x00 (0)
                      [52]                     : 0x69 (105)
                      [53]                     : 0x00 (0)
                      [54]                     : 0x6e (110)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x67 (103)
                      [57]                     : 0x00 (0)
                      [58]                     : 0x20 (32)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x66 (102)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x69 (105)
                      [63]                     : 0x00 (0)
                      [64]                     : 0x6c (108)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x65 (101)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x73 (115)
                      [69]                     : 0x00 (0)
                      [70]                     : 0x20 (32)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x74 (116)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x6f (111)
                      [75]                     : 0x00 (0)
                      [76]                     : 0x20 (32)
                      [77]                     : 0x00 (0)
                      [78]                     : 0x70 (112)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x72 (114)
                      [81]                     : 0x00 (0)
                      [82]                     : 0x69 (105)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x6e (110)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x74 (116)
                      [87]                     : 0x00 (0)
                      [88]                     : 0x20 (32)
                      [89]                     : 0x00 (0)
                      [90]                     : 0x64 (100)
                      [91]                     : 0x00 (0)
                      [92]                     : 0x65 (101)
                      [93]                     : 0x00 (0)
                      [94]                     : 0x76 (118)
                      [95]                     : 0x00 (0)
                      [96]                     : 0x69 (105)
                      [97]                     : 0x00 (0)
                      [98]                     : 0x63 (99)
                      [99]                     : 0x00 (0)
                      [100]                    : 0x65 (101)
                      [101]                    : 0x00 (0)
                      [102]                    : 0x73 (115)
                      [103]                    : 0x00 (0)
                      [104]                    : 0x00 (0)
                      [105]                    : 0x00 (0)
              size                     : 0x0000006a (106)
[2015/04/15 08:57:25.493104,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.493151,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Description]
[2015/04/15 08:57:25.493173,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.493195,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.493266,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000003-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.493341,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.493387,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.493431,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
  Closed policy
[2015/04/15 08:57:25.493459, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.493480,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2015/04/15 08:57:25.493573,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          in: struct winreg_CreateKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000001-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0066 (102)
                  name_size                : 0x0066 (102)
                  name                     : *
                      name                     : 'SYSTEM\CurrentControlSet\Services\Spooler\Security'
              keyclass: struct winreg_String
                  name_len                 : 0x0002 (2)
                  name_size                : 0x0002 (2)
                  name                     : *
                      name                     : ''
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE      
                     0: REG_OPTION_CREATE_LINK   
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK     
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE          
                     0: KEY_SET_VALUE            
                     0: KEY_CREATE_SUB_KEY       
                     0: KEY_ENUMERATE_SUB_KEYS   
                     0: KEY_NOTIFY               
                     0: KEY_CREATE_LINK          
                     0: KEY_WOW64_64KEY          
                     0: KEY_WOW64_32KEY          
              secdesc                  : NULL
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
[2015/04/15 08:57:25.493878,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.493923, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
  _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler\Security'
[2015/04/15 08:57:25.493946,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.493967,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.493988,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.494009, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.494030, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.494056, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.494077, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.494096, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.494128,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.494151,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.494172, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.494193, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.494213, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.494233, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.494253, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.494284, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.494308,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.494329,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.494350, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.494371, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.494391, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.494412, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.494431, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.494471, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.494496,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.494517,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Spooler]
[2015/04/15 08:57:25.494542, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.494565, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2015/04/15 08:57:25.494585, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2015/04/15 08:57:25.494606, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.494626, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2015/04/15 08:57:25.494657, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.494680,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Security]
[2015/04/15 08:57:25.494701, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.494722, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
[2015/04/15 08:57:25.494742, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
[2015/04/15 08:57:25.494763, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.494783, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
[2015/04/15 08:57:25.494809, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.494832,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
  Opened policy hnd[3] [0000] 00 00 00 00 04 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.494876,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          out: struct winreg_CreateKey
              new_handle               : *
                  new_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000004-0000-0000-2e55-d50b020f0000
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
              result                   : WERR_OK
[2015/04/15 08:57:25.495029,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000004-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0012 (18)
                  name_size                : 0x0012 (18)
                  name                     : *
                      name                     : 'Security'
              type                     : REG_BINARY (3)
              data                     : *
                  data: ARRAY(120)
                      [0]                      : 0x01 (1)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x04 (4)
                      [3]                      : 0x80 (128)
                      [4]                      : 0x00 (0)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x00 (0)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x00 (0)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x00 (0)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x00 (0)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x00 (0)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x14 (20)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x00 (0)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x02 (2)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x64 (100)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x04 (4)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x00 (0)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x00 (0)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x14 (20)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x8d (141)
                      [33]                     : 0x01 (1)
                      [34]                     : 0x02 (2)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x01 (1)
                      [37]                     : 0x01 (1)
                      [38]                     : 0x00 (0)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x00 (0)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x00 (0)
                      [43]                     : 0x01 (1)
                      [44]                     : 0x00 (0)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x00 (0)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x00 (0)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x18 (24)
                      [51]                     : 0x00 (0)
                      [52]                     : 0xfd (253)
                      [53]                     : 0x01 (1)
                      [54]                     : 0x02 (2)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x01 (1)
                      [57]                     : 0x02 (2)
                      [58]                     : 0x00 (0)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x00 (0)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x00 (0)
                      [63]                     : 0x05 (5)
                      [64]                     : 0x20 (32)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x00 (0)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x23 (35)
                      [69]                     : 0x02 (2)
                      [70]                     : 0x00 (0)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x00 (0)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x18 (24)
                      [75]                     : 0x00 (0)
                      [76]                     : 0xff (255)
                      [77]                     : 0x01 (1)
                      [78]                     : 0x0f (15)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x01 (1)
                      [81]                     : 0x02 (2)
                      [82]                     : 0x00 (0)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x00 (0)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x00 (0)
                      [87]                     : 0x05 (5)
                      [88]                     : 0x20 (32)
                      [89]                     : 0x00 (0)
                      [90]                     : 0x00 (0)
                      [91]                     : 0x00 (0)
                      [92]                     : 0x25 (37)
                      [93]                     : 0x02 (2)
                      [94]                     : 0x00 (0)
                      [95]                     : 0x00 (0)
                      [96]                     : 0x00 (0)
                      [97]                     : 0x00 (0)
                      [98]                     : 0x18 (24)
                      [99]                     : 0x00 (0)
                      [100]                    : 0xff (255)
                      [101]                    : 0x01 (1)
                      [102]                    : 0x0f (15)
                      [103]                    : 0x00 (0)
                      [104]                    : 0x01 (1)
                      [105]                    : 0x02 (2)
                      [106]                    : 0x00 (0)
                      [107]                    : 0x00 (0)
                      [108]                    : 0x00 (0)
                      [109]                    : 0x00 (0)
                      [110]                    : 0x00 (0)
                      [111]                    : 0x05 (5)
                      [112]                    : 0x20 (32)
                      [113]                    : 0x00 (0)
                      [114]                    : 0x00 (0)
                      [115]                    : 0x00 (0)
                      [116]                    : 0x20 (32)
                      [117]                    : 0x02 (2)
                      [118]                    : 0x00 (0)
                      [119]                    : 0x00 (0)
              size                     : 0x00000078 (120)
[2015/04/15 08:57:25.496281,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.496328,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security:Security]
[2015/04/15 08:57:25.496350,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.496372, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.496398, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
[2015/04/15 08:57:25.496426, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Security] len[120]
[2015/04/15 08:57:25.496450,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.496501,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000004-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.496581,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.496627,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.496670,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
  Closed policy
[2015/04/15 08:57:25.496691, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.496712,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2015/04/15 08:57:25.496805,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          in: struct winreg_CreateKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000001-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0056 (86)
                  name_size                : 0x0056 (86)
                  name                     : *
                      name                     : 'SYSTEM\CurrentControlSet\Services\NETLOGON'
              keyclass: struct winreg_String
                  name_len                 : 0x0002 (2)
                  name_size                : 0x0002 (2)
                  name                     : *
                      name                     : ''
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE      
                     0: REG_OPTION_CREATE_LINK   
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK     
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE          
                     0: KEY_SET_VALUE            
                     0: KEY_CREATE_SUB_KEY       
                     0: KEY_ENUMERATE_SUB_KEYS   
                     0: KEY_NOTIFY               
                     0: KEY_CREATE_LINK          
                     0: KEY_WOW64_64KEY          
                     0: KEY_WOW64_32KEY          
              secdesc                  : NULL
              action_taken             : *
                  action_taken             : REG_ACTION_NONE (0)
[2015/04/15 08:57:25.497115,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.497161, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
  _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON'
[2015/04/15 08:57:25.497184,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.497205,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.497226,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.497247, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.497269, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.497288, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.497309, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.497328, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.497359,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.497383,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.497404, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.497425, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.497445, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.497465, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.497485, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.497517, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.497547,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.497568,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.497588, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.497609, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.497629, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.497650, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.497670, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.497712, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.497736,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [NETLOGON]
[2015/04/15 08:57:25.497756, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.497778, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2015/04/15 08:57:25.497797, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2015/04/15 08:57:25.497819, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.497838, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2015/04/15 08:57:25.497873, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.497897,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
  Opened policy hnd[3] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.497941,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          out: struct winreg_CreateKey
              new_handle               : *
                  new_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000005-0000-0000-2e55-d50b020f0000
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
              result                   : WERR_OK
[2015/04/15 08:57:25.498052,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000005-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x000c (12)
                  name_size                : 0x000c (12)
                  name                     : *
                      name                     : 'Start'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x02 (2)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2015/04/15 08:57:25.498245,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.498291,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Start]
[2015/04/15 08:57:25.498313,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.498334, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.498355, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2015/04/15 08:57:25.498382, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Start] len[4]
[2015/04/15 08:57:25.498406, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[1]: name[Type] len[4]
[2015/04/15 08:57:25.498428, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[2]: name[ErrorControl] len[4]
[2015/04/15 08:57:25.498449, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[3]: name[ObjectName] len[24]
[2015/04/15 08:57:25.498470, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[4]: name[DisplayName] len[20]
[2015/04/15 08:57:25.498492, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[5]: name[ImagePath] len[88]
[2015/04/15 08:57:25.498514, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[6]: name[Description] len[164]
[2015/04/15 08:57:25.498536,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.498591,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000005-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x000a (10)
                  name_size                : 0x000a (10)
                  name                     : *
                      name                     : 'Type'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x10 (16)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2015/04/15 08:57:25.498784,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.498830,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Type]
[2015/04/15 08:57:25.498852,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.498874,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.498928,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000005-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x001a (26)
                  name_size                : 0x001a (26)
                  name                     : *
                      name                     : 'ErrorControl'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x01 (1)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2015/04/15 08:57:25.499114,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.499160,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ErrorControl]
[2015/04/15 08:57:25.499181,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.499204,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.499264,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000005-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0016 (22)
                  name_size                : 0x0016 (22)
                  name                     : *
                      name                     : 'ObjectName'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(24)
                      [0]                      : 0x4c (76)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x6f (111)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x63 (99)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x61 (97)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x6c (108)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x53 (83)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x79 (121)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x73 (115)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x74 (116)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x65 (101)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x6d (109)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x00 (0)
                      [23]                     : 0x00 (0)
              size                     : 0x00000018 (24)
[2015/04/15 08:57:25.499634,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.499679,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ObjectName]
[2015/04/15 08:57:25.499701,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.499723,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.499780,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000005-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0018 (24)
                  name_size                : 0x0018 (24)
                  name                     : *
                      name                     : 'DisplayName'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(20)
                      [0]                      : 0x4e (78)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x65 (101)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x74 (116)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x20 (32)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x4c (76)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x6f (111)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x67 (103)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x6f (111)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x6e (110)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x00 (0)
                      [19]                     : 0x00 (0)
              size                     : 0x00000014 (20)
[2015/04/15 08:57:25.500117,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.500163,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:DisplayName]
[2015/04/15 08:57:25.500185,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.500207,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.500262,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000005-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0014 (20)
                  name_size                : 0x0014 (20)
                  name                     : *
                      name                     : 'ImagePath'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(88)
                      [0]                      : 0x2f (47)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x75 (117)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x73 (115)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x72 (114)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x2f (47)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x6c (108)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x69 (105)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x62 (98)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x2f (47)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x78 (120)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x38 (56)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x36 (54)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x5f (95)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x36 (54)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x34 (52)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x2d (45)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x6c (108)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x69 (105)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x6e (110)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x75 (117)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x78 (120)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x2d (45)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x67 (103)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x6e (110)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x75 (117)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x2f (47)
                      [51]                     : 0x00 (0)
                      [52]                     : 0x73 (115)
                      [53]                     : 0x00 (0)
                      [54]                     : 0x61 (97)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x6d (109)
                      [57]                     : 0x00 (0)
                      [58]                     : 0x62 (98)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x61 (97)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x2f (47)
                      [63]                     : 0x00 (0)
                      [64]                     : 0x73 (115)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x76 (118)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x63 (99)
                      [69]                     : 0x00 (0)
                      [70]                     : 0x63 (99)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x74 (116)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x6c (108)
                      [75]                     : 0x00 (0)
                      [76]                     : 0x2f (47)
                      [77]                     : 0x00 (0)
                      [78]                     : 0x73 (115)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x6d (109)
                      [81]                     : 0x00 (0)
                      [82]                     : 0x62 (98)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x64 (100)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x00 (0)
                      [87]                     : 0x00 (0)
              size                     : 0x00000058 (88)
[2015/04/15 08:57:25.501173,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.501213,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ImagePath]
[2015/04/15 08:57:25.501232,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.501252,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.501302,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000005-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0018 (24)
                  name_size                : 0x0018 (24)
                  name                     : *
                      name                     : 'Description'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(164)
                      [0]                      : 0x46 (70)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x69 (105)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x6c (108)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x65 (101)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x20 (32)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x73 (115)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x65 (101)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x72 (114)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x76 (118)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x69 (105)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x63 (99)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x65 (101)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x20 (32)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x70 (112)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x72 (114)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x6f (111)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x76 (118)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x69 (105)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x64 (100)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x69 (105)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x6e (110)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x67 (103)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x20 (32)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x61 (97)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x63 (99)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x63 (99)
                      [51]                     : 0x00 (0)
                      [52]                     : 0x65 (101)
                      [53]                     : 0x00 (0)
                      [54]                     : 0x73 (115)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x73 (115)
                      [57]                     : 0x00 (0)
                      [58]                     : 0x20 (32)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x74 (116)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x6f (111)
                      [63]                     : 0x00 (0)
                      [64]                     : 0x20 (32)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x70 (112)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x6f (111)
                      [69]                     : 0x00 (0)
                      [70]                     : 0x6c (108)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x69 (105)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x63 (99)
                      [75]                     : 0x00 (0)
                      [76]                     : 0x79 (121)
                      [77]                     : 0x00 (0)
                      [78]                     : 0x20 (32)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x61 (97)
                      [81]                     : 0x00 (0)
                      [82]                     : 0x6e (110)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x64 (100)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x20 (32)
                      [87]                     : 0x00 (0)
                      [88]                     : 0x70 (112)
                      [89]                     : 0x00 (0)
                      [90]                     : 0x72 (114)
                      [91]                     : 0x00 (0)
                      [92]                     : 0x6f (111)
                      [93]                     : 0x00 (0)
                      [94]                     : 0x66 (102)
                      [95]                     : 0x00 (0)
                      [96]                     : 0x69 (105)
                      [97]                     : 0x00 (0)
                      [98]                     : 0x6c (108)
                      [99]                     : 0x00 (0)
                      [100]                    : 0x65 (101)
                      [101]                    : 0x00 (0)
                      [102]                    : 0x20 (32)
                      [103]                    : 0x00 (0)
                      [104]                    : 0x64 (100)
                      [105]                    : 0x00 (0)
                      [106]                    : 0x61 (97)
                      [107]                    : 0x00 (0)
                      [108]                    : 0x74 (116)
                      [109]                    : 0x00 (0)
                      [110]                    : 0x61 (97)
                      [111]                    : 0x00 (0)
                      [112]                    : 0x20 (32)
                      [113]                    : 0x00 (0)
                      [114]                    : 0x28 (40)
                      [115]                    : 0x00 (0)
                      [116]                    : 0x6e (110)
                      [117]                    : 0x00 (0)
                      [118]                    : 0x6f (111)
                      [119]                    : 0x00 (0)
                      [120]                    : 0x74 (116)
                      [121]                    : 0x00 (0)
                      [122]                    : 0x72 (114)
                      [123]                    : 0x00 (0)
                      [124]                    : 0x65 (101)
                      [125]                    : 0x00 (0)
                      [126]                    : 0x6d (109)
                      [127]                    : 0x00 (0)
                      [128]                    : 0x6f (111)
                      [129]                    : 0x00 (0)
                      [130]                    : 0x74 (116)
                      [131]                    : 0x00 (0)
                      [132]                    : 0x65 (101)
                      [133]                    : 0x00 (0)
                      [134]                    : 0x6c (108)
                      [135]                    : 0x00 (0)
                      [136]                    : 0x79 (121)
                      [137]                    : 0x00 (0)
                      [138]                    : 0x20 (32)
                      [139]                    : 0x00 (0)
                      [140]                    : 0x6d (109)
                      [141]                    : 0x00 (0)
                      [142]                    : 0x61 (97)
                      [143]                    : 0x00 (0)
                      [144]                    : 0x6e (110)
                      [145]                    : 0x00 (0)
                      [146]                    : 0x61 (97)
                      [147]                    : 0x00 (0)
                      [148]                    : 0x67 (103)
                      [149]                    : 0x00 (0)
                      [150]                    : 0x65 (101)
                      [151]                    : 0x00 (0)
                      [152]                    : 0x61 (97)
                      [153]                    : 0x00 (0)
                      [154]                    : 0x62 (98)
                      [155]                    : 0x00 (0)
                      [156]                    : 0x6c (108)
                      [157]                    : 0x00 (0)
                      [158]                    : 0x65 (101)
                      [159]                    : 0x00 (0)
                      [160]                    : 0x29 (41)
                      [161]                    : 0x00 (0)
                      [162]                    : 0x00 (0)
                      [163]                    : 0x00 (0)
              size                     : 0x000000a4 (164)
[2015/04/15 08:57:25.502732,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.502772,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Description]
[2015/04/15 08:57:25.502795,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.502825,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.502872,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000005-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.502936,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.502975,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.503013,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
  Closed policy
[2015/04/15 08:57:25.503032, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.503050,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2015/04/15 08:57:25.503130,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          in: struct winreg_CreateKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000001-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0068 (104)
                  name_size                : 0x0068 (104)
                  name                     : *
                      name                     : 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security'
              keyclass: struct winreg_String
                  name_len                 : 0x0002 (2)
                  name_size                : 0x0002 (2)
                  name                     : *
                      name                     : ''
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE      
                     0: REG_OPTION_CREATE_LINK   
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK     
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE          
                     0: KEY_SET_VALUE            
                     0: KEY_CREATE_SUB_KEY       
                     0: KEY_ENUMERATE_SUB_KEYS   
                     0: KEY_NOTIFY               
                     0: KEY_CREATE_LINK          
                     0: KEY_WOW64_64KEY          
                     0: KEY_WOW64_32KEY          
              secdesc                  : NULL
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
[2015/04/15 08:57:25.503400,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.503440, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
  _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security'
[2015/04/15 08:57:25.503460,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.503479,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.503497,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.503515, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.503534, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.503551, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.503569, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.503586, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.503613,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.503634,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.503652, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.503670, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.503688, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.503705, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.503722, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.503749, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.503771,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.503789,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.503812, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.503831, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.503848, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.503866, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.503883, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.503919, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.503941,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.503960,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [NETLOGON]
[2015/04/15 08:57:25.503977, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.503996, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2015/04/15 08:57:25.504014, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2015/04/15 08:57:25.504032, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.504049, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2015/04/15 08:57:25.504077, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.504098,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Security]
[2015/04/15 08:57:25.504116, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.504134, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
[2015/04/15 08:57:25.504151, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
[2015/04/15 08:57:25.504170, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.504187, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
[2015/04/15 08:57:25.504210, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.504235,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
  Opened policy hnd[3] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.504274,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          out: struct winreg_CreateKey
              new_handle               : *
                  new_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000006-0000-0000-2e55-d50b020f0000
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
              result                   : WERR_OK
[2015/04/15 08:57:25.504486,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000006-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0012 (18)
                  name_size                : 0x0012 (18)
                  name                     : *
                      name                     : 'Security'
              type                     : REG_BINARY (3)
              data                     : *
                  data: ARRAY(120)
                      [0]                      : 0x01 (1)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x04 (4)
                      [3]                      : 0x80 (128)
                      [4]                      : 0x00 (0)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x00 (0)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x00 (0)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x00 (0)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x00 (0)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x00 (0)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x14 (20)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x00 (0)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x02 (2)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x64 (100)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x04 (4)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x00 (0)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x00 (0)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x14 (20)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x8d (141)
                      [33]                     : 0x01 (1)
                      [34]                     : 0x02 (2)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x01 (1)
                      [37]                     : 0x01 (1)
                      [38]                     : 0x00 (0)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x00 (0)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x00 (0)
                      [43]                     : 0x01 (1)
                      [44]                     : 0x00 (0)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x00 (0)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x00 (0)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x18 (24)
                      [51]                     : 0x00 (0)
                      [52]                     : 0xfd (253)
                      [53]                     : 0x01 (1)
                      [54]                     : 0x02 (2)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x01 (1)
                      [57]                     : 0x02 (2)
                      [58]                     : 0x00 (0)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x00 (0)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x00 (0)
                      [63]                     : 0x05 (5)
                      [64]                     : 0x20 (32)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x00 (0)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x23 (35)
                      [69]                     : 0x02 (2)
                      [70]                     : 0x00 (0)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x00 (0)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x18 (24)
                      [75]                     : 0x00 (0)
                      [76]                     : 0xff (255)
                      [77]                     : 0x01 (1)
                      [78]                     : 0x0f (15)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x01 (1)
                      [81]                     : 0x02 (2)
                      [82]                     : 0x00 (0)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x00 (0)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x00 (0)
                      [87]                     : 0x05 (5)
                      [88]                     : 0x20 (32)
                      [89]                     : 0x00 (0)
                      [90]                     : 0x00 (0)
                      [91]                     : 0x00 (0)
                      [92]                     : 0x25 (37)
                      [93]                     : 0x02 (2)
                      [94]                     : 0x00 (0)
                      [95]                     : 0x00 (0)
                      [96]                     : 0x00 (0)
                      [97]                     : 0x00 (0)
                      [98]                     : 0x18 (24)
                      [99]                     : 0x00 (0)
                      [100]                    : 0xff (255)
                      [101]                    : 0x01 (1)
                      [102]                    : 0x0f (15)
                      [103]                    : 0x00 (0)
                      [104]                    : 0x01 (1)
                      [105]                    : 0x02 (2)
                      [106]                    : 0x00 (0)
                      [107]                    : 0x00 (0)
                      [108]                    : 0x00 (0)
                      [109]                    : 0x00 (0)
                      [110]                    : 0x00 (0)
                      [111]                    : 0x05 (5)
                      [112]                    : 0x20 (32)
                      [113]                    : 0x00 (0)
                      [114]                    : 0x00 (0)
                      [115]                    : 0x00 (0)
                      [116]                    : 0x20 (32)
                      [117]                    : 0x02 (2)
                      [118]                    : 0x00 (0)
                      [119]                    : 0x00 (0)
              size                     : 0x00000078 (120)
[2015/04/15 08:57:25.505572,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.505613,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security:Security]
[2015/04/15 08:57:25.505632,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.505651, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.505669, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
[2015/04/15 08:57:25.505693, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Security] len[120]
[2015/04/15 08:57:25.505714,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.505760,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000006-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.505822,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.505861,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.505898,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
  Closed policy
[2015/04/15 08:57:25.505916, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.505934,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2015/04/15 08:57:25.506019,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          in: struct winreg_CreateKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000001-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0062 (98)
                  name_size                : 0x0062 (98)
                  name                     : *
                      name                     : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry'
              keyclass: struct winreg_String
                  name_len                 : 0x0002 (2)
                  name_size                : 0x0002 (2)
                  name                     : *
                      name                     : ''
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE      
                     0: REG_OPTION_CREATE_LINK   
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK     
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE          
                     0: KEY_SET_VALUE            
                     0: KEY_CREATE_SUB_KEY       
                     0: KEY_ENUMERATE_SUB_KEYS   
                     0: KEY_NOTIFY               
                     0: KEY_CREATE_LINK          
                     0: KEY_WOW64_64KEY          
                     0: KEY_WOW64_32KEY          
              secdesc                  : NULL
              action_taken             : *
                  action_taken             : REG_ACTION_NONE (0)
[2015/04/15 08:57:25.506285,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.506325, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
  _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry'
[2015/04/15 08:57:25.506344,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.506363,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.506381,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.506399, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.506418, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.506436, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.506453, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.506470, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.506502,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.506523,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.506542, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.506560, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.506577, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.506595, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.506612, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.506639, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.506660,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.506679,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.506697, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.506715, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.506732, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.506750, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.506767, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.506801, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.506823,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [RemoteRegistry]
[2015/04/15 08:57:25.506841, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.506860, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2015/04/15 08:57:25.506877, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2015/04/15 08:57:25.506896, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.506920, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2015/04/15 08:57:25.506947, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.506968,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
  Opened policy hnd[3] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.507006,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          out: struct winreg_CreateKey
              new_handle               : *
                  new_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000007-0000-0000-2e55-d50b020f0000
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
              result                   : WERR_OK
[2015/04/15 08:57:25.507103,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000007-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x000c (12)
                  name_size                : 0x000c (12)
                  name                     : *
                      name                     : 'Start'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x02 (2)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2015/04/15 08:57:25.507268,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.507307,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Start]
[2015/04/15 08:57:25.507327,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.507345, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.507363, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2015/04/15 08:57:25.507387, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Start] len[4]
[2015/04/15 08:57:25.507412, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[1]: name[Type] len[4]
[2015/04/15 08:57:25.507433, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[2]: name[ErrorControl] len[4]
[2015/04/15 08:57:25.507452, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[3]: name[ObjectName] len[24]
[2015/04/15 08:57:25.507471, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[4]: name[DisplayName] len[48]
[2015/04/15 08:57:25.507490, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[5]: name[ImagePath] len[88]
[2015/04/15 08:57:25.507509, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[6]: name[Description] len[126]
[2015/04/15 08:57:25.507528,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.507577,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000007-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x000a (10)
                  name_size                : 0x000a (10)
                  name                     : *
                      name                     : 'Type'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x10 (16)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2015/04/15 08:57:25.507740,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.507779,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Type]
[2015/04/15 08:57:25.507798,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.507817,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.507863,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000007-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x001a (26)
                  name_size                : 0x001a (26)
                  name                     : *
                      name                     : 'ErrorControl'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x01 (1)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2015/04/15 08:57:25.508029,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.508069,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ErrorControl]
[2015/04/15 08:57:25.508088,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.508108,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.508156,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000007-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0016 (22)
                  name_size                : 0x0016 (22)
                  name                     : *
                      name                     : 'ObjectName'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(24)
                      [0]                      : 0x4c (76)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x6f (111)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x63 (99)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x61 (97)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x6c (108)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x53 (83)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x79 (121)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x73 (115)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x74 (116)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x65 (101)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x6d (109)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x00 (0)
                      [23]                     : 0x00 (0)
              size                     : 0x00000018 (24)
[2015/04/15 08:57:25.508475,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.508519,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ObjectName]
[2015/04/15 08:57:25.508539,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.508558,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.508617,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000007-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0018 (24)
                  name_size                : 0x0018 (24)
                  name                     : *
                      name                     : 'DisplayName'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(48)
                      [0]                      : 0x52 (82)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x65 (101)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x6d (109)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x6f (111)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x74 (116)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x65 (101)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x20 (32)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x52 (82)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x65 (101)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x67 (103)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x69 (105)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x73 (115)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x74 (116)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x72 (114)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x79 (121)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x20 (32)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x53 (83)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x65 (101)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x72 (114)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x76 (118)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x69 (105)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x63 (99)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x65 (101)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x00 (0)
                      [47]                     : 0x00 (0)
              size                     : 0x00000030 (48)
[2015/04/15 08:57:25.509130,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.509169,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:DisplayName]
[2015/04/15 08:57:25.509189,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.509208,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.509257,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000007-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0014 (20)
                  name_size                : 0x0014 (20)
                  name                     : *
                      name                     : 'ImagePath'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(88)
                      [0]                      : 0x2f (47)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x75 (117)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x73 (115)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x72 (114)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x2f (47)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x6c (108)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x69 (105)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x62 (98)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x2f (47)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x78 (120)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x38 (56)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x36 (54)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x5f (95)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x36 (54)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x34 (52)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x2d (45)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x6c (108)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x69 (105)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x6e (110)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x75 (117)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x78 (120)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x2d (45)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x67 (103)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x6e (110)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x75 (117)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x2f (47)
                      [51]                     : 0x00 (0)
                      [52]                     : 0x73 (115)
                      [53]                     : 0x00 (0)
                      [54]                     : 0x61 (97)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x6d (109)
                      [57]                     : 0x00 (0)
                      [58]                     : 0x62 (98)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x61 (97)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x2f (47)
                      [63]                     : 0x00 (0)
                      [64]                     : 0x73 (115)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x76 (118)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x63 (99)
                      [69]                     : 0x00 (0)
                      [70]                     : 0x63 (99)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x74 (116)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x6c (108)
                      [75]                     : 0x00 (0)
                      [76]                     : 0x2f (47)
                      [77]                     : 0x00 (0)
                      [78]                     : 0x73 (115)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x6d (109)
                      [81]                     : 0x00 (0)
                      [82]                     : 0x62 (98)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x64 (100)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x00 (0)
                      [87]                     : 0x00 (0)
              size                     : 0x00000058 (88)
[2015/04/15 08:57:25.510083,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.510123,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ImagePath]
[2015/04/15 08:57:25.510146,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.510167,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.510216,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000007-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0018 (24)
                  name_size                : 0x0018 (24)
                  name                     : *
                      name                     : 'Description'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(126)
                      [0]                      : 0x49 (73)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x6e (110)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x74 (116)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x65 (101)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x72 (114)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x6e (110)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x61 (97)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x6c (108)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x20 (32)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x73 (115)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x65 (101)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x72 (114)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x76 (118)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x69 (105)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x63 (99)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x65 (101)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x20 (32)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x70 (112)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x72 (114)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x6f (111)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x76 (118)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x69 (105)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x64 (100)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x69 (105)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x6e (110)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x67 (103)
                      [51]                     : 0x00 (0)
                      [52]                     : 0x20 (32)
                      [53]                     : 0x00 (0)
                      [54]                     : 0x72 (114)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x65 (101)
                      [57]                     : 0x00 (0)
                      [58]                     : 0x6d (109)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x6f (111)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x74 (116)
                      [63]                     : 0x00 (0)
                      [64]                     : 0x65 (101)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x20 (32)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x61 (97)
                      [69]                     : 0x00 (0)
                      [70]                     : 0x63 (99)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x63 (99)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x65 (101)
                      [75]                     : 0x00 (0)
                      [76]                     : 0x73 (115)
                      [77]                     : 0x00 (0)
                      [78]                     : 0x73 (115)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x20 (32)
                      [81]                     : 0x00 (0)
                      [82]                     : 0x74 (116)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x6f (111)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x20 (32)
                      [87]                     : 0x00 (0)
                      [88]                     : 0x74 (116)
                      [89]                     : 0x00 (0)
                      [90]                     : 0x68 (104)
                      [91]                     : 0x00 (0)
                      [92]                     : 0x65 (101)
                      [93]                     : 0x00 (0)
                      [94]                     : 0x20 (32)
                      [95]                     : 0x00 (0)
                      [96]                     : 0x53 (83)
                      [97]                     : 0x00 (0)
                      [98]                     : 0x61 (97)
                      [99]                     : 0x00 (0)
                      [100]                    : 0x6d (109)
                      [101]                    : 0x00 (0)
                      [102]                    : 0x62 (98)
                      [103]                    : 0x00 (0)
                      [104]                    : 0x61 (97)
                      [105]                    : 0x00 (0)
                      [106]                    : 0x20 (32)
                      [107]                    : 0x00 (0)
                      [108]                    : 0x72 (114)
                      [109]                    : 0x00 (0)
                      [110]                    : 0x65 (101)
                      [111]                    : 0x00 (0)
                      [112]                    : 0x67 (103)
                      [113]                    : 0x00 (0)
                      [114]                    : 0x69 (105)
                      [115]                    : 0x00 (0)
                      [116]                    : 0x73 (115)
                      [117]                    : 0x00 (0)
                      [118]                    : 0x74 (116)
                      [119]                    : 0x00 (0)
                      [120]                    : 0x72 (114)
                      [121]                    : 0x00 (0)
                      [122]                    : 0x79 (121)
                      [123]                    : 0x00 (0)
                      [124]                    : 0x00 (0)
                      [125]                    : 0x00 (0)
              size                     : 0x0000007e (126)
[2015/04/15 08:57:25.511343,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.511383,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Description]
[2015/04/15 08:57:25.511402,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.511422,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.511468,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000007-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.511530,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.511569,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.511607,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
  Closed policy
[2015/04/15 08:57:25.511626, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.511644,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2015/04/15 08:57:25.511724,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          in: struct winreg_CreateKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000001-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0074 (116)
                  name_size                : 0x0074 (116)
                  name                     : *
                      name                     : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security'
              keyclass: struct winreg_String
                  name_len                 : 0x0002 (2)
                  name_size                : 0x0002 (2)
                  name                     : *
                      name                     : ''
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE      
                     0: REG_OPTION_CREATE_LINK   
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK     
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE          
                     0: KEY_SET_VALUE            
                     0: KEY_CREATE_SUB_KEY       
                     0: KEY_ENUMERATE_SUB_KEYS   
                     0: KEY_NOTIFY               
                     0: KEY_CREATE_LINK          
                     0: KEY_WOW64_64KEY          
                     0: KEY_WOW64_32KEY          
              secdesc                  : NULL
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
[2015/04/15 08:57:25.511996,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.512036, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
  _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security'
[2015/04/15 08:57:25.512056,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.512075,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.512093,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.512112, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.512130, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.512148, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.512165, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.512182, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.512209,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.512230,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.512248, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.512266, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.512288, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.512307, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.512324, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.512351, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.512373,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.512391,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.512409, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.512428, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.512445, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.512463, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.512480, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.512516, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.512538,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.512556,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [RemoteRegistry]
[2015/04/15 08:57:25.512587, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.512607, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2015/04/15 08:57:25.512625, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2015/04/15 08:57:25.512643, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.512660, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2015/04/15 08:57:25.512687, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.512707,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Security]
[2015/04/15 08:57:25.512730, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.512749, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
[2015/04/15 08:57:25.512767, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
[2015/04/15 08:57:25.512785, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.512802, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
[2015/04/15 08:57:25.512826, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.512846,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
  Opened policy hnd[3] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.512884,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          out: struct winreg_CreateKey
              new_handle               : *
                  new_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000008-0000-0000-2e55-d50b020f0000
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
              result                   : WERR_OK
[2015/04/15 08:57:25.512985,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000008-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0012 (18)
                  name_size                : 0x0012 (18)
                  name                     : *
                      name                     : 'Security'
              type                     : REG_BINARY (3)
              data                     : *
                  data: ARRAY(120)
                      [0]                      : 0x01 (1)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x04 (4)
                      [3]                      : 0x80 (128)
                      [4]                      : 0x00 (0)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x00 (0)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x00 (0)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x00 (0)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x00 (0)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x00 (0)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x14 (20)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x00 (0)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x02 (2)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x64 (100)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x04 (4)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x00 (0)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x00 (0)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x14 (20)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x8d (141)
                      [33]                     : 0x01 (1)
                      [34]                     : 0x02 (2)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x01 (1)
                      [37]                     : 0x01 (1)
                      [38]                     : 0x00 (0)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x00 (0)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x00 (0)
                      [43]                     : 0x01 (1)
                      [44]                     : 0x00 (0)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x00 (0)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x00 (0)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x18 (24)
                      [51]                     : 0x00 (0)
                      [52]                     : 0xfd (253)
                      [53]                     : 0x01 (1)
                      [54]                     : 0x02 (2)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x01 (1)
                      [57]                     : 0x02 (2)
                      [58]                     : 0x00 (0)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x00 (0)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x00 (0)
                      [63]                     : 0x05 (5)
                      [64]                     : 0x20 (32)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x00 (0)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x23 (35)
                      [69]                     : 0x02 (2)
                      [70]                     : 0x00 (0)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x00 (0)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x18 (24)
                      [75]                     : 0x00 (0)
                      [76]                     : 0xff (255)
                      [77]                     : 0x01 (1)
                      [78]                     : 0x0f (15)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x01 (1)
                      [81]                     : 0x02 (2)
                      [82]                     : 0x00 (0)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x00 (0)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x00 (0)
                      [87]                     : 0x05 (5)
                      [88]                     : 0x20 (32)
                      [89]                     : 0x00 (0)
                      [90]                     : 0x00 (0)
                      [91]                     : 0x00 (0)
                      [92]                     : 0x25 (37)
                      [93]                     : 0x02 (2)
                      [94]                     : 0x00 (0)
                      [95]                     : 0x00 (0)
                      [96]                     : 0x00 (0)
                      [97]                     : 0x00 (0)
                      [98]                     : 0x18 (24)
                      [99]                     : 0x00 (0)
                      [100]                    : 0xff (255)
                      [101]                    : 0x01 (1)
                      [102]                    : 0x0f (15)
                      [103]                    : 0x00 (0)
                      [104]                    : 0x01 (1)
                      [105]                    : 0x02 (2)
                      [106]                    : 0x00 (0)
                      [107]                    : 0x00 (0)
                      [108]                    : 0x00 (0)
                      [109]                    : 0x00 (0)
                      [110]                    : 0x00 (0)
                      [111]                    : 0x05 (5)
                      [112]                    : 0x20 (32)
                      [113]                    : 0x00 (0)
                      [114]                    : 0x00 (0)
                      [115]                    : 0x00 (0)
                      [116]                    : 0x20 (32)
                      [117]                    : 0x02 (2)
                      [118]                    : 0x00 (0)
                      [119]                    : 0x00 (0)
              size                     : 0x00000078 (120)
[2015/04/15 08:57:25.514055,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.514094,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security:Security]
[2015/04/15 08:57:25.514114,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.514132, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.514151, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
[2015/04/15 08:57:25.514175, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Security] len[120]
[2015/04/15 08:57:25.514196,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.514241,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000008-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.514308,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.514348,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.514386,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
  Closed policy
[2015/04/15 08:57:25.514404, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.514421,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2015/04/15 08:57:25.514502,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          in: struct winreg_CreateKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000001-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x004e (78)
                  name_size                : 0x004e (78)
                  name                     : *
                      name                     : 'SYSTEM\CurrentControlSet\Services\WINS'
              keyclass: struct winreg_String
                  name_len                 : 0x0002 (2)
                  name_size                : 0x0002 (2)
                  name                     : *
                      name                     : ''
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE      
                     0: REG_OPTION_CREATE_LINK   
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK     
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE          
                     0: KEY_SET_VALUE            
                     0: KEY_CREATE_SUB_KEY       
                     0: KEY_ENUMERATE_SUB_KEYS   
                     0: KEY_NOTIFY               
                     0: KEY_CREATE_LINK          
                     0: KEY_WOW64_64KEY          
                     0: KEY_WOW64_32KEY          
              secdesc                  : NULL
              action_taken             : *
                  action_taken             : REG_ACTION_NONE (0)
[2015/04/15 08:57:25.514765,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.514805, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
  _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS'
[2015/04/15 08:57:25.514824,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.514848,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.514866,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.514884, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.514903, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.514920, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.514938, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.514955, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.514982,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.515002,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.515020, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.515038, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.515055, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.515073, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.515090, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.515116, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.515137,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.515156,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.515174, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.515192, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.515209, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.515227, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.515245, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.515285, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.515307,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [WINS]
[2015/04/15 08:57:25.515324, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.515343, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2015/04/15 08:57:25.515360, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2015/04/15 08:57:25.515379, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.515396, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2015/04/15 08:57:25.515422, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.515443,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
  Opened policy hnd[3] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.515481,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          out: struct winreg_CreateKey
              new_handle               : *
                  new_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000009-0000-0000-2e55-d50b020f0000
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
              result                   : WERR_OK
[2015/04/15 08:57:25.515578,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000009-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x000c (12)
                  name_size                : 0x000c (12)
                  name                     : *
                      name                     : 'Start'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x02 (2)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2015/04/15 08:57:25.515742,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.515782,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Start]
[2015/04/15 08:57:25.515806,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.515824, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.515842, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2015/04/15 08:57:25.515866, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Start] len[4]
[2015/04/15 08:57:25.515886, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[1]: name[Type] len[4]
[2015/04/15 08:57:25.515906, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[2]: name[ErrorControl] len[4]
[2015/04/15 08:57:25.515924, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[3]: name[ObjectName] len[24]
[2015/04/15 08:57:25.515943, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[4]: name[DisplayName] len[74]
[2015/04/15 08:57:25.515962, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[5]: name[ImagePath] len[88]
[2015/04/15 08:57:25.515981, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[6]: name[Description] len[178]
[2015/04/15 08:57:25.516000,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.516048,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000009-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x000a (10)
                  name_size                : 0x000a (10)
                  name                     : *
                      name                     : 'Type'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x10 (16)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2015/04/15 08:57:25.516210,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.516250,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Type]
[2015/04/15 08:57:25.516274,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.516293,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.516341,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000009-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x001a (26)
                  name_size                : 0x001a (26)
                  name                     : *
                      name                     : 'ErrorControl'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x01 (1)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2015/04/15 08:57:25.516502,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.516541,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ErrorControl]
[2015/04/15 08:57:25.516560,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.516586,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.516635,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000009-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0016 (22)
                  name_size                : 0x0016 (22)
                  name                     : *
                      name                     : 'ObjectName'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(24)
                      [0]                      : 0x4c (76)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x6f (111)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x63 (99)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x61 (97)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x6c (108)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x53 (83)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x79 (121)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x73 (115)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x74 (116)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x65 (101)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x6d (109)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x00 (0)
                      [23]                     : 0x00 (0)
              size                     : 0x00000018 (24)
[2015/04/15 08:57:25.516961,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.517001,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ObjectName]
[2015/04/15 08:57:25.517020,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.517039,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.517089,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000009-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0018 (24)
                  name_size                : 0x0018 (24)
                  name                     : *
                      name                     : 'DisplayName'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(74)
                      [0]                      : 0x57 (87)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x69 (105)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x6e (110)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x64 (100)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x6f (111)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x77 (119)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x73 (115)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x20 (32)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x49 (73)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x6e (110)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x74 (116)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x65 (101)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x72 (114)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x6e (110)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x65 (101)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x74 (116)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x20 (32)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x4e (78)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x61 (97)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x6d (109)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x65 (101)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x20 (32)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x53 (83)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x65 (101)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x72 (114)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x76 (118)
                      [51]                     : 0x00 (0)
                      [52]                     : 0x69 (105)
                      [53]                     : 0x00 (0)
                      [54]                     : 0x63 (99)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x65 (101)
                      [57]                     : 0x00 (0)
                      [58]                     : 0x20 (32)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x28 (40)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x57 (87)
                      [63]                     : 0x00 (0)
                      [64]                     : 0x49 (73)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x4e (78)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x53 (83)
                      [69]                     : 0x00 (0)
                      [70]                     : 0x29 (41)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x00 (0)
                      [73]                     : 0x00 (0)
              size                     : 0x0000004a (74)
[2015/04/15 08:57:25.517805,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.517845,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:DisplayName]
[2015/04/15 08:57:25.517864,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.517884,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.517938,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000009-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0014 (20)
                  name_size                : 0x0014 (20)
                  name                     : *
                      name                     : 'ImagePath'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(88)
                      [0]                      : 0x2f (47)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x75 (117)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x73 (115)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x72 (114)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x2f (47)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x6c (108)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x69 (105)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x62 (98)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x2f (47)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x78 (120)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x38 (56)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x36 (54)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x5f (95)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x36 (54)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x34 (52)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x2d (45)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x6c (108)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x69 (105)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x6e (110)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x75 (117)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x78 (120)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x2d (45)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x67 (103)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x6e (110)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x75 (117)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x2f (47)
                      [51]                     : 0x00 (0)
                      [52]                     : 0x73 (115)
                      [53]                     : 0x00 (0)
                      [54]                     : 0x61 (97)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x6d (109)
                      [57]                     : 0x00 (0)
                      [58]                     : 0x62 (98)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x61 (97)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x2f (47)
                      [63]                     : 0x00 (0)
                      [64]                     : 0x73 (115)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x76 (118)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x63 (99)
                      [69]                     : 0x00 (0)
                      [70]                     : 0x63 (99)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x74 (116)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x6c (108)
                      [75]                     : 0x00 (0)
                      [76]                     : 0x2f (47)
                      [77]                     : 0x00 (0)
                      [78]                     : 0x6e (110)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x6d (109)
                      [81]                     : 0x00 (0)
                      [82]                     : 0x62 (98)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x64 (100)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x00 (0)
                      [87]                     : 0x00 (0)
              size                     : 0x00000058 (88)
[2015/04/15 08:57:25.518769,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.518809,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ImagePath]
[2015/04/15 08:57:25.518828,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.518847,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.518896,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000009-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0018 (24)
                  name_size                : 0x0018 (24)
                  name                     : *
                      name                     : 'Description'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(178)
                      [0]                      : 0x49 (73)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x6e (110)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x74 (116)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x65 (101)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x72 (114)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x6e (110)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x61 (97)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x6c (108)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x20 (32)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x73 (115)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x65 (101)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x72 (114)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x76 (118)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x69 (105)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x63 (99)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x65 (101)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x20 (32)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x70 (112)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x72 (114)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x6f (111)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x76 (118)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x69 (105)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x64 (100)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x69 (105)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x6e (110)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x67 (103)
                      [51]                     : 0x00 (0)
                      [52]                     : 0x20 (32)
                      [53]                     : 0x00 (0)
                      [54]                     : 0x61 (97)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x20 (32)
                      [57]                     : 0x00 (0)
                      [58]                     : 0x4e (78)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x65 (101)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x74 (116)
                      [63]                     : 0x00 (0)
                      [64]                     : 0x42 (66)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x49 (73)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x4f (79)
                      [69]                     : 0x00 (0)
                      [70]                     : 0x53 (83)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x20 (32)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x70 (112)
                      [75]                     : 0x00 (0)
                      [76]                     : 0x6f (111)
                      [77]                     : 0x00 (0)
                      [78]                     : 0x69 (105)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x6e (110)
                      [81]                     : 0x00 (0)
                      [82]                     : 0x74 (116)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x2d (45)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x74 (116)
                      [87]                     : 0x00 (0)
                      [88]                     : 0x6f (111)
                      [89]                     : 0x00 (0)
                      [90]                     : 0x2d (45)
                      [91]                     : 0x00 (0)
                      [92]                     : 0x70 (112)
                      [93]                     : 0x00 (0)
                      [94]                     : 0x6f (111)
                      [95]                     : 0x00 (0)
                      [96]                     : 0x69 (105)
                      [97]                     : 0x00 (0)
                      [98]                     : 0x6e (110)
                      [99]                     : 0x00 (0)
                      [100]                    : 0x74 (116)
                      [101]                    : 0x00 (0)
                      [102]                    : 0x20 (32)
                      [103]                    : 0x00 (0)
                      [104]                    : 0x6e (110)
                      [105]                    : 0x00 (0)
                      [106]                    : 0x61 (97)
                      [107]                    : 0x00 (0)
                      [108]                    : 0x6d (109)
                      [109]                    : 0x00 (0)
                      [110]                    : 0x65 (101)
                      [111]                    : 0x00 (0)
                      [112]                    : 0x20 (32)
                      [113]                    : 0x00 (0)
                      [114]                    : 0x73 (115)
                      [115]                    : 0x00 (0)
                      [116]                    : 0x65 (101)
                      [117]                    : 0x00 (0)
                      [118]                    : 0x72 (114)
                      [119]                    : 0x00 (0)
                      [120]                    : 0x76 (118)
                      [121]                    : 0x00 (0)
                      [122]                    : 0x65 (101)
                      [123]                    : 0x00 (0)
                      [124]                    : 0x72 (114)
                      [125]                    : 0x00 (0)
                      [126]                    : 0x28 (40)
                      [127]                    : 0x00 (0)
                      [128]                    : 0x6e (110)
                      [129]                    : 0x00 (0)
                      [130]                    : 0x6f (111)
                      [131]                    : 0x00 (0)
                      [132]                    : 0x74 (116)
                      [133]                    : 0x00 (0)
                      [134]                    : 0x20 (32)
                      [135]                    : 0x00 (0)
                      [136]                    : 0x72 (114)
                      [137]                    : 0x00 (0)
                      [138]                    : 0x65 (101)
                      [139]                    : 0x00 (0)
                      [140]                    : 0x6d (109)
                      [141]                    : 0x00 (0)
                      [142]                    : 0x6f (111)
                      [143]                    : 0x00 (0)
                      [144]                    : 0x74 (116)
                      [145]                    : 0x00 (0)
                      [146]                    : 0x65 (101)
                      [147]                    : 0x00 (0)
                      [148]                    : 0x6c (108)
                      [149]                    : 0x00 (0)
                      [150]                    : 0x79 (121)
                      [151]                    : 0x00 (0)
                      [152]                    : 0x20 (32)
                      [153]                    : 0x00 (0)
                      [154]                    : 0x6d (109)
                      [155]                    : 0x00 (0)
                      [156]                    : 0x61 (97)
                      [157]                    : 0x00 (0)
                      [158]                    : 0x6e (110)
                      [159]                    : 0x00 (0)
                      [160]                    : 0x61 (97)
                      [161]                    : 0x00 (0)
                      [162]                    : 0x67 (103)
                      [163]                    : 0x00 (0)
                      [164]                    : 0x65 (101)
                      [165]                    : 0x00 (0)
                      [166]                    : 0x61 (97)
                      [167]                    : 0x00 (0)
                      [168]                    : 0x62 (98)
                      [169]                    : 0x00 (0)
                      [170]                    : 0x6c (108)
                      [171]                    : 0x00 (0)
                      [172]                    : 0x65 (101)
                      [173]                    : 0x00 (0)
                      [174]                    : 0x29 (41)
                      [175]                    : 0x00 (0)
                      [176]                    : 0x00 (0)
                      [177]                    : 0x00 (0)
              size                     : 0x000000b2 (178)
[2015/04/15 08:57:25.520534,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.520581,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Description]
[2015/04/15 08:57:25.520601,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.520621,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.520668,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000009-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.520732,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.520771,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.520814,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
  Closed policy
[2015/04/15 08:57:25.520833, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.520851,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2015/04/15 08:57:25.520931,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          in: struct winreg_CreateKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000001-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0060 (96)
                  name_size                : 0x0060 (96)
                  name                     : *
                      name                     : 'SYSTEM\CurrentControlSet\Services\WINS\Security'
              keyclass: struct winreg_String
                  name_len                 : 0x0002 (2)
                  name_size                : 0x0002 (2)
                  name                     : *
                      name                     : ''
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE      
                     0: REG_OPTION_CREATE_LINK   
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK     
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE          
                     0: KEY_SET_VALUE            
                     0: KEY_CREATE_SUB_KEY       
                     0: KEY_ENUMERATE_SUB_KEYS   
                     0: KEY_NOTIFY               
                     0: KEY_CREATE_LINK          
                     0: KEY_WOW64_64KEY          
                     0: KEY_WOW64_32KEY          
              secdesc                  : NULL
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
[2015/04/15 08:57:25.521194,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.521233, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
  _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS\Security'
[2015/04/15 08:57:25.521253,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.521272,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.521290,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.521308, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.521333, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.521351, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.521369, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.521386, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.521413,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.521434,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.521452, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.521470, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.521487, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.521505, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.521522, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.521549, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.521570,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.521589,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.521607, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.521626, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.521643, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.521661, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.521678, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.521714, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.521736,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.521754,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [WINS]
[2015/04/15 08:57:25.521777, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.521796, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2015/04/15 08:57:25.521813, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2015/04/15 08:57:25.521831, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.521848, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2015/04/15 08:57:25.521875, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.521896,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Security]
[2015/04/15 08:57:25.521913, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.521932, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
[2015/04/15 08:57:25.521949, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
[2015/04/15 08:57:25.521967, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.521984, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
[2015/04/15 08:57:25.522007, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.522027,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
  Opened policy hnd[3] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.522066,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          out: struct winreg_CreateKey
              new_handle               : *
                  new_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 0000000a-0000-0000-2e55-d50b020f0000
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
              result                   : WERR_OK
[2015/04/15 08:57:25.522167,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 0000000a-0000-0000-2e55-d50b020f0000
              name: struct winreg_String
                  name_len                 : 0x0012 (18)
                  name_size                : 0x0012 (18)
                  name                     : *
                      name                     : 'Security'
              type                     : REG_BINARY (3)
              data                     : *
                  data: ARRAY(120)
                      [0]                      : 0x01 (1)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x04 (4)
                      [3]                      : 0x80 (128)
                      [4]                      : 0x00 (0)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x00 (0)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x00 (0)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x00 (0)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x00 (0)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x00 (0)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x14 (20)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x00 (0)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x02 (2)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x64 (100)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x04 (4)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x00 (0)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x00 (0)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x14 (20)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x8d (141)
                      [33]                     : 0x01 (1)
                      [34]                     : 0x02 (2)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x01 (1)
                      [37]                     : 0x01 (1)
                      [38]                     : 0x00 (0)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x00 (0)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x00 (0)
                      [43]                     : 0x01 (1)
                      [44]                     : 0x00 (0)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x00 (0)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x00 (0)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x18 (24)
                      [51]                     : 0x00 (0)
                      [52]                     : 0xfd (253)
                      [53]                     : 0x01 (1)
                      [54]                     : 0x02 (2)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x01 (1)
                      [57]                     : 0x02 (2)
                      [58]                     : 0x00 (0)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x00 (0)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x00 (0)
                      [63]                     : 0x05 (5)
                      [64]                     : 0x20 (32)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x00 (0)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x23 (35)
                      [69]                     : 0x02 (2)
                      [70]                     : 0x00 (0)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x00 (0)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x18 (24)
                      [75]                     : 0x00 (0)
                      [76]                     : 0xff (255)
                      [77]                     : 0x01 (1)
                      [78]                     : 0x0f (15)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x01 (1)
                      [81]                     : 0x02 (2)
                      [82]                     : 0x00 (0)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x00 (0)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x00 (0)
                      [87]                     : 0x05 (5)
                      [88]                     : 0x20 (32)
                      [89]                     : 0x00 (0)
                      [90]                     : 0x00 (0)
                      [91]                     : 0x00 (0)
                      [92]                     : 0x25 (37)
                      [93]                     : 0x02 (2)
                      [94]                     : 0x00 (0)
                      [95]                     : 0x00 (0)
                      [96]                     : 0x00 (0)
                      [97]                     : 0x00 (0)
                      [98]                     : 0x18 (24)
                      [99]                     : 0x00 (0)
                      [100]                    : 0xff (255)
                      [101]                    : 0x01 (1)
                      [102]                    : 0x0f (15)
                      [103]                    : 0x00 (0)
                      [104]                    : 0x01 (1)
                      [105]                    : 0x02 (2)
                      [106]                    : 0x00 (0)
                      [107]                    : 0x00 (0)
                      [108]                    : 0x00 (0)
                      [109]                    : 0x00 (0)
                      [110]                    : 0x00 (0)
                      [111]                    : 0x05 (5)
                      [112]                    : 0x20 (32)
                      [113]                    : 0x00 (0)
                      [114]                    : 0x00 (0)
                      [115]                    : 0x00 (0)
                      [116]                    : 0x20 (32)
                      [117]                    : 0x02 (2)
                      [118]                    : 0x00 (0)
                      [119]                    : 0x00 (0)
              size                     : 0x00000078 (120)
[2015/04/15 08:57:25.523237,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.523277,  8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security:Security]
[2015/04/15 08:57:25.523297,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.523318, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.523338, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
[2015/04/15 08:57:25.523362, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Security] len[120]
[2015/04/15 08:57:25.523382,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2015/04/15 08:57:25.523428,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 0000000a-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.523491,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.523530,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.523568,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
  Closed policy
[2015/04/15 08:57:25.523585, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.523603,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2015/04/15 08:57:25.523678,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000002-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.523740,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.523779,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.523817,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
  Closed policy
[2015/04/15 08:57:25.523840, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (3->2)
[2015/04/15 08:57:25.523859,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2015/04/15 08:57:25.523936, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (2->1)
[2015/04/15 08:57:25.523965, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (1->0)
[2015/04/15 08:57:25.523992, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe)
  Deleted handle list for RPC connection \winreg
[2015/04/15 08:57:25.524029,  3, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/rpc_server/eventlog/srv_eventlog_reg.c:59(eventlog_init_winreg)
  Initialise the eventlog registry keys if needed.
[2015/04/15 08:57:25.524055,  4, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p)
  Create pipe requested \winreg
[2015/04/15 08:57:25.524076, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles)
  init_pipe_handle_list: created handle list for pipe \winreg
[2015/04/15 08:57:25.524094, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles)
  init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg
[2015/04/15 08:57:25.524131,  4, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p)
  Created internal pipe \winreg
[2015/04/15 08:57:25.524160,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenHKLM: struct winreg_OpenHKLM
          in: struct winreg_OpenHKLM
              system_name              : NULL
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE          
                     0: KEY_SET_VALUE            
                     0: KEY_CREATE_SUB_KEY       
                     0: KEY_ENUMERATE_SUB_KEYS   
                     0: KEY_NOTIFY               
                     0: KEY_CREATE_LINK          
                     0: KEY_WOW64_64KEY          
                     0: KEY_WOW64_32KEY          
[2015/04/15 08:57:25.524265,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [HKLM]
[2015/04/15 08:57:25.524285,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.524303,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.524321,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.524338,  5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:57:25.524355,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.524414,  4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.524438, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open)
  regdb_open: registry db opened. refcount reset (1)
[2015/04/15 08:57:25.524457, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM]
[2015/04/15 08:57:25.524475, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM]
[2015/04/15 08:57:25.524492, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.524509, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM]
[2015/04/15 08:57:25.524541,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
  Opened policy hnd[1] [0000] 00 00 00 00 0B 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.524598,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenHKLM: struct winreg_OpenHKLM
          out: struct winreg_OpenHKLM
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 0000000b-0000-0000-2e55-d50b020f0000
              result                   : WERR_OK
[2015/04/15 08:57:25.524682,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenKey: struct winreg_OpenKey
          in: struct winreg_OpenKey
              parent_handle            : *
                  parent_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 0000000b-0000-0000-2e55-d50b020f0000
              keyname: struct winreg_String
                  name_len                 : 0x0056 (86)
                  name_size                : 0x0056 (86)
                  name                     : *
                      name                     : 'SYSTEM\CurrentControlSet\Services\Eventlog'
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE      
                     0: REG_OPTION_CREATE_LINK   
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK     
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE          
                     0: KEY_SET_VALUE            
                     0: KEY_CREATE_SUB_KEY       
                     0: KEY_ENUMERATE_SUB_KEYS   
                     0: KEY_NOTIFY               
                     0: KEY_CREATE_LINK          
                     0: KEY_WOW64_64KEY          
                     0: KEY_WOW64_32KEY          
[2015/04/15 08:57:25.524893,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0B 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.524934,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.524953, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (1->2)
[2015/04/15 08:57:25.524972, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.524995, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.525014, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.525031, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.525060,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.525081, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (2->3)
[2015/04/15 08:57:25.525100, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.525117, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.525135, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.525153, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.525182,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.525203, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.525221, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.525239, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.525257, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.525274, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.525310,  7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Eventlog]
[2015/04/15 08:57:25.525332, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.525350, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2015/04/15 08:57:25.525368, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2015/04/15 08:57:25.525386, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.525403, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2015/04/15 08:57:25.525434, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.525455, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.525474, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (3->2)
[2015/04/15 08:57:25.525493,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
  Opened policy hnd[2] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.525531,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenKey: struct winreg_OpenKey
          out: struct winreg_OpenKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 0000000c-0000-0000-2e55-d50b020f0000
              result                   : WERR_OK
[2015/04/15 08:57:25.525611,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_QueryInfoKey: struct winreg_QueryInfoKey
          in: struct winreg_QueryInfoKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 0000000c-0000-0000-2e55-d50b020f0000
              classname                : *
                  classname: struct winreg_String
                      name_len                 : 0x0000 (0)
                      name_size                : 0x0000 (0)
                      name                     : NULL
[2015/04/15 08:57:25.525714,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.525755, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Eventlog' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.525774, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2015/04/15 08:57:25.525800, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[DisplayName] len[20]
[2015/04/15 08:57:25.525821, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
  regdb_unpack_values: value[1]: name[ErrorControl] len[4]
[2015/04/15 08:57:25.525842, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2074(regdb_get_secdesc)
  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2015/04/15 08:57:25.525869,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_QueryInfoKey: struct winreg_QueryInfoKey
          out: struct winreg_QueryInfoKey
              classname                : *
                  classname: struct winreg_String
                      name_len                 : 0x0000 (0)
                      name_size                : 0x0000 (0)
                      name                     : NULL
              num_subkeys              : *
                  num_subkeys              : 0x00000000 (0)
              max_subkeylen            : *
                  max_subkeylen            : 0x00000000 (0)
              max_classlen             : *
                  max_classlen             : 0x00000000 (0)
              num_values               : *
                  num_values               : 0x00000002 (2)
              max_valnamelen           : *
                  max_valnamelen           : 0x0000001a (26)
              max_valbufsize           : *
                  max_valbufsize           : 0x00000014 (20)
              secdescsize              : *
                  secdescsize              : 0x00000078 (120)
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
              result                   : WERR_OK
[2015/04/15 08:57:25.526080,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 0000000c-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.526144,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.526184,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 02 0F 00 00                                       .... 
[2015/04/15 08:57:25.526222,  6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
  Closed policy
[2015/04/15 08:57:25.526239, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (2->1)
[2015/04/15 08:57:25.526257,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2015/04/15 08:57:25.526330, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (1->0)
[2015/04/15 08:57:25.526358, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe)
  Deleted handle list for RPC connection \winreg
[2015/04/15 08:57:25.526391,  0, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/become_daemon.c:136(daemon_ready)
  STATUS=daemon 'smbd' finished starting up and ready to serve connectionsRegistering messaging pointer for type 515 - private_data=(nil)
[2015/04/15 08:57:25.546111,  3, pid=3842, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:335(start_background_queue)
  start_background_queue: Starting background LPQ thread
[2015/04/15 08:57:25.547198, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:499(open_socket_in)
  bind succeeded on port 445
[2015/04/15 08:57:25.547254,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
  Socket options:
[2015/04/15 08:57:25.547213,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:371(start_background_queue)
  	SO_KEEPALIVE = 1
  	SO_REUSEADDR = 1
  start_background_queue: background LPQ thread started
  	SO_BROADCAST = 0
  	TCP_NODELAY = 0
  	TCP_KEEPCNT = 9
  	TCP_KEEPIDLE = 7200
  	TCP_KEEPINTVL = 75
  	IPTOS_LOWDELAY = 0
  	IPTOS_THROUGHPUT = 0
  	SO_REUSEPORT = 1
  	SO_SNDBUF = 16384
  	SO_RCVBUF = 87380
  	SO_SNDLOWAT = 1
  	SO_RCVLOWAT = 1
  	SO_SNDTIMEO = 0
  	SO_RCVTIMEO = 0
  	TCP_QUICKACK = 1
  	TCP_DEFER_ACCEPT = 0
[2015/04/15 08:57:25.547408,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
  Socket options:
  	SO_KEEPALIVE = 1
  	SO_REUSEADDR = 1
  	SO_BROADCAST = 0
  	TCP_NODELAY = 1
  	TCP_KEEPCNT = 9
  	TCP_KEEPIDLE = 7200
  	TCP_KEEPINTVL = 75
  	IPTOS_LOWDELAY = 0
  	IPTOS_THROUGHPUT = 0
  	SO_REUSEPORT = 1
  	SO_SNDBUF = 16384
  	SO_RCVBUF = 87380
  	SO_SNDLOWAT = 1
  	SO_RCVLOWAT = 1
  	SO_SNDTIMEO = 0
  	SO_RCVTIMEO = 0
  	TCP_QUICKACK = 1
[2015/04/15 08:57:25.547524, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle)
  	TCP_DEFER_ACCEPT = 0
  event_add_idle: idle_evt(print_queue_housekeeping) 0x7fbe441ba8c0
[2015/04/15 08:57:25.547564, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:499(open_socket_in)
  bind succeeded on port 139
[2015/04/15 08:57:25.547588,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
  Socket options:
  	SO_KEEPALIVE = 1
  	SO_REUSEADDR = 1
  	SO_BROADCAST = 0
[2015/04/15 08:57:25.547612,  5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
  	TCP_NODELAY = 0
  check lock order 2 for /var/run/samba/serverid.tdb
  	TCP_KEEPCNT = 9
  	TCP_KEEPIDLE = 7200
[2015/04/15 08:57:25.547640, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  	TCP_KEEPINTVL = 75
  lock order:  1:<none> 2:/var/run/samba/serverid.tdb 3:<none>
  	IPTOS_LOWDELAY = 0
  	IPTOS_THROUGHPUT = 0
[2015/04/15 08:57:25.547663, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  	SO_REUSEPORT = 1
  Locking key 260F000000000000FFFF
  	SO_SNDBUF = 16384
  	SO_RCVBUF = 87380
  	SO_SNDLOWAT = 1
[2015/04/15 08:57:25.547689, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
  	SO_RCVLOWAT = 1
  Allocated locked data 0x0x7fbe441baa10
  	SO_SNDTIMEO = 0
  	SO_RCVTIMEO = 0
  	TCP_QUICKACK = 1
  	TCP_DEFER_ACCEPT = 0
[2015/04/15 08:57:25.547719, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Unlocking key 260F000000000000FFFF
[2015/04/15 08:57:25.547731,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
  Socket options:
[2015/04/15 08:57:25.547741,  5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
  	SO_KEEPALIVE = 1
  release lock order 2 for /var/run/samba/serverid.tdb
  	SO_REUSEADDR = 1
  	SO_BROADCAST = 0
[2015/04/15 08:57:25.547760, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  	TCP_NODELAY = 1
  lock order:  1:<none> 2:<none> 3:<none>
  	TCP_KEEPCNT = 9
  	TCP_KEEPIDLE = 7200
  	TCP_KEEPINTVL = 75
  	IPTOS_LOWDELAY = 0
[2015/04/15 08:57:25.547791,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  	IPTOS_THROUGHPUT = 0
  Registering messaging pointer for type 33 - private_data=0x7fbe441aaed0
  	SO_REUSEPORT = 1
  	SO_SNDBUF = 16384
[2015/04/15 08:57:25.547813,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  	SO_RCVBUF = 87380
  Registering messaging pointer for type 517 - private_data=(nil)
  	SO_SNDLOWAT = 1
  	SO_RCVLOWAT = 1
[2015/04/15 08:57:25.547834,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:340(messaging_deregister)
  	SO_SNDTIMEO = 0
  Deregistering messaging pointer for type 515 - private_data=(nil)
  	SO_RCVTIMEO = 0
  	TCP_QUICKACK = 1
[2015/04/15 08:57:25.547853,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  	TCP_DEFER_ACCEPT = 0
  Registering messaging pointer for type 515 - private_data=(nil)
[2015/04/15 08:57:25.547880, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:499(open_socket_in)
  bind succeeded on port 445
[2015/04/15 08:57:25.547886,  3, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:140(pcap_cache_reload)
  reloading printcap cache
[2015/04/15 08:57:25.547902,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
  Socket options:
[2015/04/15 08:57:25.547914,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:449(cups_pcap_load_async)
  	SO_KEEPALIVE = 1
  cups_pcap_load_async: asynchronously loading cups printers
  	SO_REUSEADDR = 1
  	SO_BROADCAST = 0
  	TCP_NODELAY = 0
  	TCP_KEEPCNT = 9
  	TCP_KEEPIDLE = 7200
  	TCP_KEEPINTVL = 75
  	IPTOS_LOWDELAY = 0
  	IPTOS_THROUGHPUT = 0
  	SO_REUSEPORT = 1
  	SO_SNDBUF = 16384
  	SO_RCVBUF = 87380
  	SO_SNDLOWAT = 1
  	SO_RCVLOWAT = 1
  	SO_SNDTIMEO = 0
  	SO_RCVTIMEO = 0
  	TCP_QUICKACK = 1
  	TCP_DEFER_ACCEPT = 0
[2015/04/15 08:57:25.548040,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
  Socket options:
  	SO_KEEPALIVE = 1
  	SO_REUSEADDR = 1
  	SO_BROADCAST = 0
  	TCP_NODELAY = 1
  	TCP_KEEPCNT = 9
  	TCP_KEEPIDLE = 7200
  	TCP_KEEPINTVL = 75
  	IPTOS_LOWDELAY = 0
  	IPTOS_THROUGHPUT = 0
  	SO_REUSEPORT = 1
  	SO_SNDBUF = 16384
  	SO_RCVBUF = 87380
  	SO_SNDLOWAT = 1
  	SO_RCVLOWAT = 1
  	SO_SNDTIMEO = 0
  	SO_RCVTIMEO = 0
  	TCP_QUICKACK = 1
  	TCP_DEFER_ACCEPT = 0
[2015/04/15 08:57:25.548183, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:499(open_socket_in)
  bind succeeded on port 139
[2015/04/15 08:57:25.548205,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
  Socket options:
  	SO_KEEPALIVE = 1
  	SO_REUSEADDR = 1
  	SO_BROADCAST = 0
  	TCP_NODELAY = 0
  	TCP_KEEPCNT = 9
  	TCP_KEEPIDLE = 7200
  	TCP_KEEPINTVL = 75
  	IPTOS_LOWDELAY = 0
  	IPTOS_THROUGHPUT = 0
  	SO_REUSEPORT = 1
  	SO_SNDBUF = 16384
  	SO_RCVBUF = 87380
  	SO_SNDLOWAT = 1
  	SO_RCVLOWAT = 1
  	SO_SNDTIMEO = 0
  	SO_RCVTIMEO = 0
  	TCP_QUICKACK = 1
  	TCP_DEFER_ACCEPT = 0
[2015/04/15 08:57:25.548341,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
  Socket options:
  	SO_KEEPALIVE = 1
  	SO_REUSEADDR = 1
  	SO_BROADCAST = 0
  	TCP_NODELAY = 1
  	TCP_KEEPCNT = 9
  	TCP_KEEPIDLE = 7200
  	TCP_KEEPINTVL = 75
  	IPTOS_LOWDELAY = 0
  	IPTOS_THROUGHPUT = 0
  	SO_REUSEPORT = 1
  	SO_SNDBUF = 16384
  	SO_RCVBUF = 87380
  	SO_SNDLOWAT = 1
  	SO_RCVLOWAT = 1
  	SO_SNDTIMEO = 0
  	SO_RCVTIMEO = 0
  	TCP_QUICKACK = 1
[2015/04/15 08:57:25.548458, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:466(cups_pcap_load_async)
  	TCP_DEFER_ACCEPT = 0
  cups_pcap_load_async: child pid = 3879
[2015/04/15 08:57:25.548500, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:586(cups_cache_reload)
  cups_cache_reload: async read on fd 9
[2015/04/15 08:57:25.548525,  3, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:185(pcap_cache_reload)
  reload status: ok
[2015/04/15 08:57:25.548531,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
[2015/04/15 08:57:25.548550,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:426(start_background_queue)
  check lock order 2 for /var/run/samba/serverid.tdb
  start_background_queue: background LPQ thread waiting for messages
[2015/04/15 08:57:25.548595, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:<none> 2:/var/run/samba/serverid.tdb 3:<none>
[2015/04/15 08:57:25.548636, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Locking key 020F000000000000FFFF
[2015/04/15 08:57:25.548686, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
[2015/04/15 08:57:25.548662,  5, pid=3879, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:318(cups_cache_reload_async)
  Allocated locked data 0x0x7fbe441bbe80
  reloading cups printcap cache
[2015/04/15 08:57:25.548805, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Unlocking key 020F000000000000FFFF
[2015/04/15 08:57:25.548880,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
  release lock order 2 for /var/run/samba/serverid.tdb
[2015/04/15 08:57:25.548943, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:<none> 2:<none> 3:<none>
[2015/04/15 08:57:25.549012,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  Registering messaging pointer for type 13 - private_data=(nil)
[2015/04/15 08:57:25.549075,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  Registering messaging pointer for type 33 - private_data=0x7fbe441aaed0
[2015/04/15 08:57:25.549137,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  Registering messaging pointer for type 783 - private_data=(nil)
[2015/04/15 08:57:25.549206,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  Registering messaging pointer for type 1 - private_data=(nil)
[2015/04/15 08:57:25.549273,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:308(messaging_register)
  Overriding messaging pointer for type 1 - private_data=(nil)
[2015/04/15 08:57:25.549344,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
[2015/04/15 08:57:25.549363, 10, pid=3879, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:130(cups_connect)
  Registering messaging pointer for type 785 - private_data=(nil)
  connecting to cups server /var/run/cups/cups.sock:631
[2015/04/15 08:57:25.549417,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  Registering messaging pointer for type 770 - private_data=(nil)
[2015/04/15 08:57:25.549487,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  Registering messaging pointer for type 15 - private_data=(nil)
[2015/04/15 08:57:25.549556,  5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
  Registering messaging pointer for type 16 - private_data=(nil)
[2015/04/15 08:57:25.549669,  1, pid=3842, effective(0, 0), real(0, 0)] ../source3/printing/printer_list.c:226(printer_list_get_last_refresh)
  Failed to fetch record!
[2015/04/15 08:57:25.549769,  2, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:929(smbd_parent_loop)
  waiting for connections
[2015/04/15 08:57:25.552175, 10, pid=3879, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:171(send_pcap_blob)
  successfully sent blob of len 110
[2015/04/15 08:57:25.552213,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:512(cups_async_callback)
  cups_async_callback: callback received for printer data. fd = 9
[2015/04/15 08:57:25.552369, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:196(recv_pcap_blob)
  successfully recvd blob of len 110
[2015/04/15 08:57:25.552474,  5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
  check lock order 1 for /var/run/samba/printer_list.tdb
[2015/04/15 08:57:25.552503, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:/var/run/samba/printer_list.tdb 2:<none> 3:<none>
[2015/04/15 08:57:25.552527, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Locking key 5052494E5445524C4953
[2015/04/15 08:57:25.552553, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
  Allocated locked data 0x0x7fbe441bbc20
[2015/04/15 08:57:25.552627, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Unlocking key 5052494E5445524C4953
[2015/04/15 08:57:25.552653,  5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
  release lock order 1 for /var/run/samba/printer_list.tdb
[2015/04/15 08:57:25.552673, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:<none> 2:<none> 3:<none>
[2015/04/15 08:57:25.552706,  5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
  check lock order 1 for /var/run/samba/printer_list.tdb
[2015/04/15 08:57:25.552729, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:/var/run/samba/printer_list.tdb 2:<none> 3:<none>
[2015/04/15 08:57:25.552750, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Locking key 5052494E5445524C4953
[2015/04/15 08:57:25.552773, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
  Allocated locked data 0x0x7fbe441bdc80
[2015/04/15 08:57:25.552810, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Unlocking key 5052494E5445524C4953
[2015/04/15 08:57:25.552833,  5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
  release lock order 1 for /var/run/samba/printer_list.tdb
[2015/04/15 08:57:25.552853, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:<none> 2:<none> 3:<none>
[2015/04/15 08:57:25.553040,  8, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:119(delete_and_reload_printers_full)
  Adding default registry entry for printer [testbsd], if it doesn't exist.
[2015/04/15 08:57:25.553105,  4, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p)
  Create pipe requested \winreg
[2015/04/15 08:57:25.553136, 10, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles)
  init_pipe_handle_list: created handle list for pipe \winreg
[2015/04/15 08:57:25.553157, 10, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles)
  init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg
[2015/04/15 08:57:25.553203,  4, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p)
  Created internal pipe \winreg
[2015/04/15 08:57:25.553271,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenHKLM: struct winreg_OpenHKLM
          in: struct winreg_OpenHKLM
              system_name              : NULL
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE          
                     0: KEY_SET_VALUE            
                     0: KEY_CREATE_SUB_KEY       
                     0: KEY_ENUMERATE_SUB_KEYS   
                     0: KEY_NOTIFY               
                     0: KEY_CREATE_LINK          
                     0: KEY_WOW64_64KEY          
                     0: KEY_WOW64_32KEY          
[2015/04/15 08:57:25.553406,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [HKLM]
[2015/04/15 08:57:25.553436,  4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.553461,  4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.553484,  4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.553510,  5, pid=3878, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:57:25.553530,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.553617,  4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.553643, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open)
  regdb_open: registry db opened. refcount reset (1)
[2015/04/15 08:57:25.553666, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM]
[2015/04/15 08:57:25.553686, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM]
[2015/04/15 08:57:25.553707, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.553726, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM]
[2015/04/15 08:57:25.553769,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
  Opened policy hnd[1] [0000] 00 00 00 00 0D 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:57:25.553818,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenHKLM: struct winreg_OpenHKLM
          out: struct winreg_OpenHKLM
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 0000000d-0000-0000-2e55-d50b260f0000
              result                   : WERR_OK
[2015/04/15 08:57:25.553937,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenKey: struct winreg_OpenKey
          in: struct winreg_OpenKey
              parent_handle            : *
                  parent_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 0000000d-0000-0000-2e55-d50b260f0000
              keyname: struct winreg_String
                  name_len                 : 0x0088 (136)
                  name_size                : 0x0088 (136)
                  name                     : *
                      name                     : 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd'
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE      
                     0: REG_OPTION_CREATE_LINK   
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK     
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE          
                     0: KEY_SET_VALUE            
                     0: KEY_CREATE_SUB_KEY       
                     0: KEY_ENUMERATE_SUB_KEYS   
                     0: KEY_NOTIFY               
                     0: KEY_CREATE_LINK          
                     0: KEY_WOW64_64KEY          
                     0: KEY_WOW64_32KEY          
[2015/04/15 08:57:25.554173,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0D 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:57:25.554223,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [SOFTWARE]
[2015/04/15 08:57:25.554245, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (1->2)
[2015/04/15 08:57:25.554266, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE]
[2015/04/15 08:57:25.554285, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE]
[2015/04/15 08:57:25.554306, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.554324, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE]
[2015/04/15 08:57:25.554361,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Microsoft]
[2015/04/15 08:57:25.554384, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (2->3)
[2015/04/15 08:57:25.554405, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft]
[2015/04/15 08:57:25.554424, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft]
[2015/04/15 08:57:25.554444, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.554462, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft]
[2015/04/15 08:57:25.554497,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Windows NT]
[2015/04/15 08:57:25.554521, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.554541, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT]
[2015/04/15 08:57:25.554560, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT]
[2015/04/15 08:57:25.554580, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.554599, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT]
[2015/04/15 08:57:25.554629,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentVersion]
[2015/04/15 08:57:25.554651, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.554672, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:57:25.554691, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:57:25.554717, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.554737, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe430014c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:57:25.554777,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Print]
[2015/04/15 08:57:25.554801, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (5->6)
[2015/04/15 08:57:25.554821, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print]
[2015/04/15 08:57:25.554841, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print]
[2015/04/15 08:57:25.554862, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.554881, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe430014c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print]
[2015/04/15 08:57:25.554917,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Printers]
[2015/04/15 08:57:25.554940, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (6->7)
[2015/04/15 08:57:25.554961, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:57:25.554980, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:57:25.555002, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.555020, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:57:25.555054,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [testbsd]
[2015/04/15 08:57:25.555076, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (7->8)
[2015/04/15 08:57:25.555097, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd]
[2015/04/15 08:57:25.555116, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd]
[2015/04/15 08:57:25.555137, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:57:25.555156, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd]
[2015/04/15 08:57:25.555200, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (8->7)
[2015/04/15 08:57:25.555225, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (7->6)
[2015/04/15 08:57:25.555245, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (6->5)
[2015/04/15 08:57:25.555265, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.555285, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.555305, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (3->2)
[2015/04/15 08:57:25.555326,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
  Opened policy hnd[2] [0000] 00 00 00 00 0E 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:57:25.555369,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenKey: struct winreg_OpenKey
          out: struct winreg_OpenKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 0000000e-0000-0000-2e55-d50b260f0000
              result                   : WERR_OK
[2015/04/15 08:57:25.555454,  2, pid=3878, effective(0, 0), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:626(winreg_create_printer)
  winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd already exists
[2015/04/15 08:57:25.555495,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 0000000e-0000-0000-2e55-d50b260f0000
[2015/04/15 08:57:25.555564,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0E 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:57:25.555608,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0E 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:57:25.555650,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
  Closed policy
[2015/04/15 08:57:25.555670, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (2->1)
[2015/04/15 08:57:25.555690,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2015/04/15 08:57:25.555780,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 0000000d-0000-0000-2e55-d50b260f0000
[2015/04/15 08:57:25.555850,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0D 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:57:25.555893,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0D 00 00 00   00 00 00 00 2E 55 D5 0B   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:57:25.555935,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
  Closed policy
[2015/04/15 08:57:25.555954, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (1->0)
[2015/04/15 08:57:25.555982,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2015/04/15 08:57:25.556066, 10, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe)
  Deleted handle list for RPC connection \winreg
[2015/04/15 08:57:25.556131,  7, pid=3878, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:5168(lp_servicenumber)
  lp_servicenumber: couldn't find RICOH_Aficio_MP_C3002
[2015/04/15 08:57:25.556188,  8, pid=3878, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1620(add_a_service)
  add_a_service: Creating snum = 4 for RICOH_Aficio_MP_C3002
[2015/04/15 08:57:25.556212, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1670(hash_a_service)
  hash_a_service: hashing index 4 for service name RICOH_Aficio_MP_C3002
[2015/04/15 08:57:25.556237,  3, pid=3878, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1811(lp_add_printer)
  adding printer service RICOH_Aficio_MP_C3002
[2015/04/15 08:57:25.556270, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/server_reload.c:87(delete_and_reload_printers)
  reloading printer services from pcap cache
[2015/04/15 08:57:25.556389, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:320(messaging_tdb_store)
  messaging_tdb_store:
[2015/04/15 08:57:25.556419,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
       array: struct messaging_array
          num_messages             : 0x00000001 (1)
          messages: ARRAY(1)
              messages: struct messaging_rec
                  msg_version              : 0x00000002 (2)
                  msg_type                 : MSG_PRINTER_PCAP (519)
                  dest: struct server_id
                      pid                      : 0x0000000000000f02 (3842)
                      task_id                  : 0x00000000 (0)
                      vnn                      : 0xffffffff (4294967295)
                      unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
                  src: struct server_id
                      pid                      : 0x0000000000000f26 (3878)
                      task_id                  : 0x00000000 (0)
                      vnn                      : 0xffffffff (4294967295)
                      unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
                  buf                      : DATA_BLOB length=0
[2015/04/15 08:57:25.556654, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:320(messaging_tdb_store)
  messaging_tdb_store:
[2015/04/15 08:57:25.556680,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
       array: struct messaging_array
          num_messages             : 0x00000001 (1)
          messages: ARRAY(1)
              messages: struct messaging_rec
                  msg_version              : 0x00000002 (2)
                  msg_type                 : MSG_PRINTER_PCAP (519)
[2015/04/15 08:57:25.556719, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:76(messaging_tdb_signal_handler)
                  dest: struct server_id
                      pid                      : 0x0000000000000f26 (3878)
  messaging_tdb_signal_handler: sig[10] count[1] msgs[1]
                      task_id                  : 0x00000000 (0)
                      vnn                      : 0xffffffff (4294967295)
                      unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
[2015/04/15 08:57:25.556773, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:534(message_dispatch)
                  src: struct server_id
                      pid                      : 0x0000000000000f26 (3878)
  message_dispatch: received_messages = 1
                      task_id                  : 0x00000000 (0)
                      vnn                      : 0xffffffff (4294967295)
                      unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
                  buf                      : DATA_BLOB length=0
[2015/04/15 08:57:25.556862, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:280(messaging_tdb_fetch)
[2015/04/15 08:57:25.556867, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:76(messaging_tdb_signal_handler)
  messaging_tdb_fetch:
  messaging_tdb_signal_handler: sig[10] count[1] msgs[1]
[2015/04/15 08:57:25.556891,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
[2015/04/15 08:57:25.556893, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:534(message_dispatch)
  message_dispatch: received_messages = 1
       result: struct messaging_array
          num_messages             : 0x00000001 (1)
          messages: ARRAY(1)
              messages: struct messaging_rec
[2015/04/15 08:57:25.556939, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:280(messaging_tdb_fetch)
                  msg_version              : 0x00000002 (2)
  messaging_tdb_fetch:
                  msg_type                 : MSG_PRINTER_PCAP (519)
[2015/04/15 08:57:25.556962,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
                  dest: struct server_id
       result: struct messaging_array
                      pid                      : 0x0000000000000f02 (3842)
          num_messages             : 0x00000001 (1)
                      task_id                  : 0x00000000 (0)
          messages: ARRAY(1)
                      vnn                      : 0xffffffff (4294967295)
              messages: struct messaging_rec
                      unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
                  msg_version              : 0x00000002 (2)
                  src: struct server_id
                  msg_type                 : MSG_PRINTER_PCAP (519)
                      pid                      : 0x0000000000000f26 (3878)
                  dest: struct server_id
                      task_id                  : 0x00000000 (0)
                      pid                      : 0x0000000000000f26 (3878)
                      vnn                      : 0xffffffff (4294967295)
                      task_id                  : 0x00000000 (0)
                      unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
                      vnn                      : 0xffffffff (4294967295)
                      unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
                  buf                      : DATA_BLOB length=0
                  src: struct server_id
                      pid                      : 0x0000000000000f26 (3878)
                      task_id                  : 0x00000000 (0)
                      vnn                      : 0xffffffff (4294967295)
                      unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
                  buf                      : DATA_BLOB length=0
[2015/04/15 08:57:25.557150,  6, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:275(bq_sig_chld_handler)
  Bq child process 3879 terminated with 0
[2015/04/15 08:58:25.235404,  2, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:419(remove_child_pid)
  Could not find child 4121 -- ignoring
[2015/04/15 08:58:25.603246, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/events.c:426(smbd_idle_event_handler)
  smbd_idle_event_handler: idle_evt(print_queue_housekeeping) (nil) called
[2015/04/15 08:58:25.603382,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:163(print_queue_housekeeping)
  print queue housekeeping
[2015/04/15 08:58:25.603432,  3, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:169(print_queue_housekeeping)
  Printcap cache time expired.
[2015/04/15 08:58:25.603477,  3, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:140(pcap_cache_reload)
  reloading printcap cache
[2015/04/15 08:58:25.603530,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:449(cups_pcap_load_async)
  cups_pcap_load_async: asynchronously loading cups printers
[2015/04/15 08:58:25.604611, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:466(cups_pcap_load_async)
  cups_pcap_load_async: child pid = 4122
[2015/04/15 08:58:25.604716, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:586(cups_cache_reload)
  cups_cache_reload: async read on fd 9
[2015/04/15 08:58:25.604772,  3, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:185(pcap_cache_reload)
  reload status: ok
[2015/04/15 08:58:25.604819, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/events.c:437(smbd_idle_event_handler)
  smbd_idle_event_handler: idle_evt(print_queue_housekeeping) (nil) rescheduled
[2015/04/15 08:58:25.605017,  5, pid=4122, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:318(cups_cache_reload_async)
  reloading cups printcap cache
[2015/04/15 08:58:25.605608, 10, pid=4122, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:130(cups_connect)
  connecting to cups server /var/run/cups/cups.sock:631
[2015/04/15 08:58:25.608528, 10, pid=4122, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:171(send_pcap_blob)
  successfully sent blob of len 110
[2015/04/15 08:58:25.608609,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:512(cups_async_callback)
  cups_async_callback: callback received for printer data. fd = 9
[2015/04/15 08:58:25.608709, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:196(recv_pcap_blob)
  successfully recvd blob of len 110
[2015/04/15 08:58:25.608818,  5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
  check lock order 1 for /var/run/samba/printer_list.tdb
[2015/04/15 08:58:25.608874, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:/var/run/samba/printer_list.tdb 2:<none> 3:<none>
[2015/04/15 08:58:25.608946, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Locking key 5052494E5445524C4953
[2015/04/15 08:58:25.609011, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
  Allocated locked data 0x0x7fbe441c12d0
[2015/04/15 08:58:25.609095, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Unlocking key 5052494E5445524C4953
[2015/04/15 08:58:25.609144,  5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
  release lock order 1 for /var/run/samba/printer_list.tdb
[2015/04/15 08:58:25.609186, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:<none> 2:<none> 3:<none>
[2015/04/15 08:58:25.609243,  5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
  check lock order 1 for /var/run/samba/printer_list.tdb
[2015/04/15 08:58:25.609287, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:/var/run/samba/printer_list.tdb 2:<none> 3:<none>
[2015/04/15 08:58:25.609335, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Locking key 5052494E5445524C4953
[2015/04/15 08:58:25.609382, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
  Allocated locked data 0x0x7fbe441bbca0
[2015/04/15 08:58:25.609432, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Unlocking key 5052494E5445524C4953
[2015/04/15 08:58:25.609477,  5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
  release lock order 1 for /var/run/samba/printer_list.tdb
[2015/04/15 08:58:25.609518, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:<none> 2:<none> 3:<none>
[2015/04/15 08:58:25.609801,  8, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:119(delete_and_reload_printers_full)
  Adding default registry entry for printer [testbsd], if it doesn't exist.
[2015/04/15 08:58:25.609891,  4, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p)
  Create pipe requested \winreg
[2015/04/15 08:58:25.609945, 10, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles)
  init_pipe_handle_list: created handle list for pipe \winreg
[2015/04/15 08:58:25.609990, 10, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles)
  init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg
[2015/04/15 08:58:25.610069,  4, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p)
  Created internal pipe \winreg
[2015/04/15 08:58:25.610151,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenHKLM: struct winreg_OpenHKLM
          in: struct winreg_OpenHKLM
              system_name              : NULL
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE          
                     0: KEY_SET_VALUE            
                     0: KEY_CREATE_SUB_KEY       
                     0: KEY_ENUMERATE_SUB_KEYS   
                     0: KEY_NOTIFY               
                     0: KEY_CREATE_LINK          
                     0: KEY_WOW64_64KEY          
                     0: KEY_WOW64_32KEY          
[2015/04/15 08:58:25.610413,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [HKLM]
[2015/04/15 08:58:25.610464,  4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:58:25.610520,  4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:58:25.610566,  4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:25.610608,  5, pid=3878, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:58:25.610650,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:25.639721,  4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:25.639807, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open)
  regdb_open: registry db opened. refcount reset (1)
[2015/04/15 08:58:25.639832, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM]
[2015/04/15 08:58:25.639851, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM]
[2015/04/15 08:58:25.639870, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:58:25.639887, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM]
[2015/04/15 08:58:25.639960,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
  Opened policy hnd[1] [0000] 00 00 00 00 0F 00 00 00   00 00 00 00 2E 55 11 0C   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:58:25.640010,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenHKLM: struct winreg_OpenHKLM
          out: struct winreg_OpenHKLM
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 0000000f-0000-0000-2e55-110c260f0000
              result                   : WERR_OK
[2015/04/15 08:58:25.640120,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenKey: struct winreg_OpenKey
          in: struct winreg_OpenKey
              parent_handle            : *
                  parent_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 0000000f-0000-0000-2e55-110c260f0000
              keyname: struct winreg_String
                  name_len                 : 0x0088 (136)
                  name_size                : 0x0088 (136)
                  name                     : *
                      name                     : 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd'
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE      
                     0: REG_OPTION_CREATE_LINK   
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK     
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE          
                     0: KEY_SET_VALUE            
                     0: KEY_CREATE_SUB_KEY       
                     0: KEY_ENUMERATE_SUB_KEYS   
                     0: KEY_NOTIFY               
                     0: KEY_CREATE_LINK          
                     0: KEY_WOW64_64KEY          
                     0: KEY_WOW64_32KEY          
[2015/04/15 08:58:25.640334,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0F 00 00 00   00 00 00 00 2E 55 11 0C   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:58:25.640383,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [SOFTWARE]
[2015/04/15 08:58:25.640403, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (1->2)
[2015/04/15 08:58:25.640422, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE]
[2015/04/15 08:58:25.640440, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE]
[2015/04/15 08:58:25.640458, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:58:25.640476, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE]
[2015/04/15 08:58:25.640510,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Microsoft]
[2015/04/15 08:58:25.640531, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (2->3)
[2015/04/15 08:58:25.640550, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft]
[2015/04/15 08:58:25.640578, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft]
[2015/04/15 08:58:25.640598, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:58:25.640615, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft]
[2015/04/15 08:58:25.640645,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Windows NT]
[2015/04/15 08:58:25.640666, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2015/04/15 08:58:25.640685, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT]
[2015/04/15 08:58:25.640702, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT]
[2015/04/15 08:58:25.640720, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:58:25.640745, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT]
[2015/04/15 08:58:25.640793,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentVersion]
[2015/04/15 08:58:25.640820, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:58:25.640852, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:58:25.640892, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:58:25.640922, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:58:25.640951, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe430014c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:58:25.640998,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Print]
[2015/04/15 08:58:25.641021, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (5->6)
[2015/04/15 08:58:25.641042, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print]
[2015/04/15 08:58:25.641060, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print]
[2015/04/15 08:58:25.641080, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:58:25.641097, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe430014c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print]
[2015/04/15 08:58:25.645532,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Printers]
[2015/04/15 08:58:25.645620, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (6->7)
[2015/04/15 08:58:25.645651, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:58:25.645670, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:58:25.645691, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:58:25.645708, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:58:25.645740,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [testbsd]
[2015/04/15 08:58:25.645763, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (7->8)
[2015/04/15 08:58:25.645782, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd]
[2015/04/15 08:58:25.645799, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd]
[2015/04/15 08:58:25.645824, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:58:25.645843, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd]
[2015/04/15 08:58:25.645876, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (8->7)
[2015/04/15 08:58:25.645898, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (7->6)
[2015/04/15 08:58:25.645917, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (6->5)
[2015/04/15 08:58:25.645936, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:58:25.645954, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2015/04/15 08:58:25.645971, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (3->2)
[2015/04/15 08:58:25.645991,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
  Opened policy hnd[2] [0000] 00 00 00 00 10 00 00 00   00 00 00 00 2E 55 11 0C   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:58:25.646031,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenKey: struct winreg_OpenKey
          out: struct winreg_OpenKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000010-0000-0000-2e55-110c260f0000
              result                   : WERR_OK
[2015/04/15 08:58:25.646109,  2, pid=3878, effective(0, 0), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:626(winreg_create_printer)
  winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd already exists
[2015/04/15 08:58:25.646139,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000010-0000-0000-2e55-110c260f0000
[2015/04/15 08:58:25.646201,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 10 00 00 00   00 00 00 00 2E 55 11 0C   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:58:25.646241,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 10 00 00 00   00 00 00 00 2E 55 11 0C   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:58:25.646278,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
  Closed policy
[2015/04/15 08:58:25.646296, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (2->1)
[2015/04/15 08:58:25.646314,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2015/04/15 08:58:25.646396,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 0000000f-0000-0000-2e55-110c260f0000
[2015/04/15 08:58:25.646459,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0F 00 00 00   00 00 00 00 2E 55 11 0C   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:58:25.646499,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0F 00 00 00   00 00 00 00 2E 55 11 0C   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:58:25.646536,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
  Closed policy
[2015/04/15 08:58:25.646554, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (1->0)
[2015/04/15 08:58:25.646581,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2015/04/15 08:58:25.646658, 10, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe)
  Deleted handle list for RPC connection \winreg
[2015/04/15 08:58:25.646699,  8, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:119(delete_and_reload_printers_full)
  Adding default registry entry for printer [RICOH_Aficio_MP_C3002], if it doesn't exist.
[2015/04/15 08:58:25.646728,  4, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p)
  Create pipe requested \winreg
[2015/04/15 08:58:25.646749, 10, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles)
  init_pipe_handle_list: created handle list for pipe \winreg
[2015/04/15 08:58:25.646768, 10, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles)
  init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg
[2015/04/15 08:58:25.646810,  4, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p)
  Created internal pipe \winreg
[2015/04/15 08:58:25.646839,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenHKLM: struct winreg_OpenHKLM
          in: struct winreg_OpenHKLM
              system_name              : NULL
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE          
                     0: KEY_SET_VALUE            
                     0: KEY_CREATE_SUB_KEY       
                     0: KEY_ENUMERATE_SUB_KEYS   
                     0: KEY_NOTIFY               
                     0: KEY_CREATE_LINK          
                     0: KEY_WOW64_64KEY          
                     0: KEY_WOW64_32KEY          
[2015/04/15 08:58:25.646951,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [HKLM]
[2015/04/15 08:58:25.646970,  4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:58:25.646989,  4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:58:25.647007,  4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:25.647024,  5, pid=3878, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:58:25.647042,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:25.647106,  4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:25.647130, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open)
  regdb_open: registry db opened. refcount reset (1)
[2015/04/15 08:58:25.647150, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM]
[2015/04/15 08:58:25.647168, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM]
[2015/04/15 08:58:25.647186, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:58:25.647203, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM]
[2015/04/15 08:58:25.647235,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
  Opened policy hnd[1] [0000] 00 00 00 00 11 00 00 00   00 00 00 00 2E 55 11 0C   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:58:25.647277,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenHKLM: struct winreg_OpenHKLM
          out: struct winreg_OpenHKLM
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000011-0000-0000-2e55-110c260f0000
              result                   : WERR_OK
[2015/04/15 08:58:25.647361,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenKey: struct winreg_OpenKey
          in: struct winreg_OpenKey
              parent_handle            : *
                  parent_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000011-0000-0000-2e55-110c260f0000
              keyname: struct winreg_String
                  name_len                 : 0x00a4 (164)
                  name_size                : 0x00a4 (164)
                  name                     : *
                      name                     : 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\RICOH_Aficio_MP_C3002'
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE      
                     0: REG_OPTION_CREATE_LINK   
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK     
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE          
                     0: KEY_SET_VALUE            
                     0: KEY_CREATE_SUB_KEY       
                     0: KEY_ENUMERATE_SUB_KEYS   
                     0: KEY_NOTIFY               
                     0: KEY_CREATE_LINK          
                     0: KEY_WOW64_64KEY          
                     0: KEY_WOW64_32KEY          
[2015/04/15 08:58:25.647577,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 11 00 00 00   00 00 00 00 2E 55 11 0C   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:58:25.647618,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [SOFTWARE]
[2015/04/15 08:58:25.647637, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (1->2)
[2015/04/15 08:58:25.647660, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE]
[2015/04/15 08:58:25.647679, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE]
[2015/04/15 08:58:25.647696, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:58:25.647713, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE]
[2015/04/15 08:58:25.647745,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Microsoft]
[2015/04/15 08:58:25.647767, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (2->3)
[2015/04/15 08:58:25.647785, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft]
[2015/04/15 08:58:25.647803, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft]
[2015/04/15 08:58:25.647821, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:58:25.647838, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft]
[2015/04/15 08:58:25.647866,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Windows NT]
[2015/04/15 08:58:25.647887, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2015/04/15 08:58:25.647906, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT]
[2015/04/15 08:58:25.647923, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT]
[2015/04/15 08:58:25.647941, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:58:25.647958, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT]
[2015/04/15 08:58:25.647990,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentVersion]
[2015/04/15 08:58:25.648011, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2015/04/15 08:58:25.648030, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:58:25.648047, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:58:25.648066, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:58:25.648083, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe430014c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:58:25.648116,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Print]
[2015/04/15 08:58:25.648137, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (5->6)
[2015/04/15 08:58:25.648156, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print]
[2015/04/15 08:58:25.648174, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print]
[2015/04/15 08:58:25.648193, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:58:25.648210, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe430014c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print]
[2015/04/15 08:58:25.648240,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [Printers]
[2015/04/15 08:58:25.648261, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (6->7)
[2015/04/15 08:58:25.648280, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:58:25.648298, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:58:25.648317, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:58:25.648334, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:58:25.648363,  7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
  regkey_open_onelevel: name = [RICOH_Aficio_MP_C3002]
[2015/04/15 08:58:25.648384, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
  regdb_open: incrementing refcount (7->8)
[2015/04/15 08:58:25.648408, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\RICOH_Aficio_MP_C3002]
[2015/04/15 08:58:25.648427, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\RICOH_Aficio_MP_C3002]
[2015/04/15 08:58:25.648446, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2015/04/15 08:58:25.648464, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
  reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\RICOH_Aficio_MP_C3002]
[2015/04/15 08:58:25.648497, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (8->7)
[2015/04/15 08:58:25.648528, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (7->6)
[2015/04/15 08:58:25.648575, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (6->5)
[2015/04/15 08:58:25.648605, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2015/04/15 08:58:25.648630, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2015/04/15 08:58:25.648660, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (3->2)
[2015/04/15 08:58:25.648692,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
  Opened policy hnd[2] [0000] 00 00 00 00 12 00 00 00   00 00 00 00 2E 55 11 0C   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:58:25.648759,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_OpenKey: struct winreg_OpenKey
          out: struct winreg_OpenKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000012-0000-0000-2e55-110c260f0000
              result                   : WERR_OK
[2015/04/15 08:58:25.648880,  2, pid=3878, effective(0, 0), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:626(winreg_create_printer)
  winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\RICOH_Aficio_MP_C3002 already exists
[2015/04/15 08:58:25.648924,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000012-0000-0000-2e55-110c260f0000
[2015/04/15 08:58:25.649026,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 12 00 00 00   00 00 00 00 2E 55 11 0C   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:58:25.649094,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 12 00 00 00   00 00 00 00 2E 55 11 0C   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:58:25.649169,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
  Closed policy
[2015/04/15 08:58:25.649203, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (2->1)
[2015/04/15 08:58:25.649233,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2015/04/15 08:58:25.649361,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000011-0000-0000-2e55-110c260f0000
[2015/04/15 08:58:25.649464,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 11 00 00 00   00 00 00 00 2E 55 11 0C   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:58:25.649520,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 11 00 00 00   00 00 00 00 2E 55 11 0C   ........ .....U..
  [0010] 26 0F 00 00                                       &... 
[2015/04/15 08:58:25.649560,  6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
  Closed policy
[2015/04/15 08:58:25.649579, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
  regdb_close: decrementing refcount (1->0)
[2015/04/15 08:58:25.649604,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     : 00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2015/04/15 08:58:25.649683, 10, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe)
  Deleted handle list for RPC connection \winreg
[2015/04/15 08:58:25.649741, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/server_reload.c:87(delete_and_reload_printers)
  reloading printer services from pcap cache
[2015/04/15 08:58:25.649816, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:320(messaging_tdb_store)
  messaging_tdb_store:
[2015/04/15 08:58:25.649839,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
       array: struct messaging_array
          num_messages             : 0x00000001 (1)
          messages: ARRAY(1)
              messages: struct messaging_rec
                  msg_version              : 0x00000002 (2)
                  msg_type                 : MSG_PRINTER_PCAP (519)
                  dest: struct server_id
                      pid                      : 0x0000000000000f02 (3842)
                      task_id                  : 0x00000000 (0)
                      vnn                      : 0xffffffff (4294967295)
                      unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
                  src: struct server_id
                      pid                      : 0x0000000000000f26 (3878)
                      task_id                  : 0x00000000 (0)
                      vnn                      : 0xffffffff (4294967295)
                      unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
                  buf                      : DATA_BLOB length=0
[2015/04/15 08:58:25.650015, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:320(messaging_tdb_store)
  messaging_tdb_store:
[2015/04/15 08:58:25.650037,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
       array: struct messaging_array
          num_messages             : 0x00000001 (1)
          messages: ARRAY(1)
              messages: struct messaging_rec
[2015/04/15 08:58:25.650053, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:76(messaging_tdb_signal_handler)
                  msg_version              : 0x00000002 (2)
                  msg_type                 : MSG_PRINTER_PCAP (519)
                  dest: struct server_id
  messaging_tdb_signal_handler: sig[10] count[1] msgs[1]
                      pid                      : 0x0000000000000f26 (3878)
                      task_id                  : 0x00000000 (0)
[2015/04/15 08:58:25.650114, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:534(message_dispatch)
                      vnn                      : 0xffffffff (4294967295)
                      unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
  message_dispatch: received_messages = 1
                  src: struct server_id
                      pid                      : 0x0000000000000f26 (3878)
                      task_id                  : 0x00000000 (0)
                      vnn                      : 0xffffffff (4294967295)
                      unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
[2015/04/15 08:58:25.650174, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:280(messaging_tdb_fetch)
                  buf                      : DATA_BLOB length=0
  messaging_tdb_fetch:
[2015/04/15 08:58:25.650200,  1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
       result: struct messaging_array
          num_messages             : 0x00000001 (1)
[2015/04/15 08:58:25.650217, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:76(messaging_tdb_signal_handler)
          messages: ARRAY(1)
  messaging_tdb_signal_handler: sig[10] count[1] msgs[1]
              messages: struct messaging_rec
[2015/04/15 08:58:25.650240, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:534(message_dispatch)
                  msg_version              : 0x00000002 (2)
  message_dispatch: received_messages = 1
                  msg_type                 : MSG_PRINTER_PCAP (519)
                  dest: struct server_id
[2015/04/15 08:58:25.650264, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:280(messaging_tdb_fetch)
                      pid                      : 0x0000000000000f02 (3842)
  messaging_tdb_fetch:
                      task_id                  : 0x00000000 (0)
[2015/04/15 08:58:25.650283,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
                      vnn                      : 0xffffffff (4294967295)
       result: struct messaging_array
                      unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
          num_messages             : 0x00000001 (1)
                  src: struct server_id
          messages: ARRAY(1)
                      pid                      : 0x0000000000000f26 (3878)
              messages: struct messaging_rec
                      task_id                  : 0x00000000 (0)
                  msg_version              : 0x00000002 (2)
                      vnn                      : 0xffffffff (4294967295)
                  msg_type                 : MSG_PRINTER_PCAP (519)
                      unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
                  dest: struct server_id
                  buf                      : DATA_BLOB length=0
                      pid                      : 0x0000000000000f26 (3878)
                      task_id                  : 0x00000000 (0)
                      vnn                      : 0xffffffff (4294967295)
                      unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
                  src: struct server_id
                      pid                      : 0x0000000000000f26 (3878)
                      task_id                  : 0x00000000 (0)
                      vnn                      : 0xffffffff (4294967295)
                      unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
                  buf                      : DATA_BLOB length=0
[2015/04/15 08:58:25.650446,  6, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:275(bq_sig_chld_handler)
  Bq child process 4122 terminated with 0
[2015/04/15 08:58:44.150447,  5, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
  check lock order 2 for /var/run/samba/serverid.tdb
[2015/04/15 08:58:44.150591, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:<none> 2:/var/run/samba/serverid.tdb 3:<none>
[2015/04/15 08:58:44.150632, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Locking key 1F10000000000000FFFF
[2015/04/15 08:58:44.150677, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
  Allocated locked data 0x0x7fbe441b71f0
[2015/04/15 08:58:44.150726, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Unlocking key 1F10000000000000FFFF
[2015/04/15 08:58:44.150760,  5, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
  release lock order 2 for /var/run/samba/serverid.tdb
[2015/04/15 08:58:44.150786, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:<none> 2:<none> 3:<none>
[2015/04/15 08:58:44.150831,  5, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
  Socket options:
  	SO_KEEPALIVE = 1
  	SO_REUSEADDR = 1
  	SO_BROADCAST = 0
  	TCP_NODELAY = 1
  	TCP_KEEPCNT = 9
  	TCP_KEEPIDLE = 7200
  	TCP_KEEPINTVL = 75
  	IPTOS_LOWDELAY = 0
  	IPTOS_THROUGHPUT = 0
  	SO_REUSEPORT = 1
  	SO_SNDBUF = 87040
  	SO_RCVBUF = 374400
  	SO_SNDLOWAT = 1
  	SO_RCVLOWAT = 1
  	SO_SNDTIMEO = 0
  	SO_RCVTIMEO = 0
  	TCP_QUICKACK = 1
  	TCP_DEFER_ACCEPT = 0
[2015/04/15 08:58:44.151054,  5, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
  Socket options:
  	SO_KEEPALIVE = 1
  	SO_REUSEADDR = 1
  	SO_BROADCAST = 0
  	TCP_NODELAY = 1
  	TCP_KEEPCNT = 9
  	TCP_KEEPIDLE = 7200
  	TCP_KEEPINTVL = 75
  	IPTOS_LOWDELAY = 0
  	IPTOS_THROUGHPUT = 0
  	SO_REUSEPORT = 1
  	SO_SNDBUF = 87040
  	SO_RCVBUF = 374400
  	SO_SNDLOWAT = 1
  	SO_RCVLOWAT = 1
  	SO_SNDTIMEO = 0
  	SO_RCVTIMEO = 0
  	TCP_QUICKACK = 1
  	TCP_DEFER_ACCEPT = 0
[2015/04/15 08:58:44.575606, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:76(messaging_tdb_signal_handler)
  messaging_tdb_signal_handler: sig[10] count[1] msgs[1]
[2015/04/15 08:58:44.575669, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:534(message_dispatch)
  message_dispatch: received_messages = 1
[2015/04/15 08:58:44.575719, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:280(messaging_tdb_fetch)
  messaging_tdb_fetch:
[2015/04/15 08:58:44.575757,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
       result: struct messaging_array
          num_messages             : 0x00000001 (1)
          messages: ARRAY(1)
              messages: struct messaging_rec
                  msg_version              : 0x00000002 (2)
                  msg_type                 : MSG_PRINTER_UPDATE (517)
                  dest: struct server_id
                      pid                      : 0x0000000000000f26 (3878)
                      task_id                  : 0x00000000 (0)
                      vnn                      : 0xffffffff (4294967295)
                      unique_id                : 0xfdea2051dbfd5741 (-150272101608237247)
                  src: struct server_id
                      pid                      : 0x000000000000101f (4127)
                      task_id                  : 0x00000000 (0)
                      vnn                      : 0xffffffff (4294967295)
                      unique_id                : 0xfdea2051dbfd5741 (-150272101608237247)
                  buf                      : DATA_BLOB length=48
  [0000] 74 65 73 74 62 73 64 00   00 00 00 00 6C 70 71 20   testbsd. ....lpq 
  [0010] 2D 50 27 74 65 73 74 62   73 64 27 00 6C 70 72 6D   -P'testb sd'.lprm
  [0020] 20 2D 50 27 74 65 73 74   62 73 64 27 20 25 6A 00    -P'test bsd' %j.
[2015/04/15 08:58:44.576004,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:1569(print_queue_update_with_lock)
  print_queue_update_with_lock: printer share = testbsd
[2015/04/15 08:58:44.576070,  4, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:1362(print_cache_expired)
  print_cache_expired: cache expired for queue testbsd (last_qscan_time = 1429079663, time now = 1429081124, qcachetime = 30)
[2015/04/15 08:58:44.576192,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:1194(set_updating_pid)
  set_updating_pid:  updating lpq cache for print share testbsd
[2015/04/15 08:58:44.576235,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:1417(print_queue_update_internal)
  print_queue_update_internal: printer = testbsd, type = 0, lpq command = [lpq -P'testbsd']
[2015/04/15 08:58:44.576410, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/smbrun.c:58(setup_out_fd)
  setup_out_fd: Created tmp file /tmp/smb.E2Vbkd
lpq: destinazione sconosciuta "testbsd".
[2015/04/15 08:58:44.634504,  3, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_generic.c:90(print_run_command)
  Running the command `lpq -P'testbsd'' gave 1
[2015/04/15 08:58:44.634695,  3, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:1436(print_queue_update_internal)
  print_queue_update_internal: 0 jobs in queue for testbsd
[2015/04/15 08:58:44.634893, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:1038(traverse_fn_delete)
  traverse_fn_delete: pjob 3 deleted due to !process_exists (2797)
[2015/04/15 08:58:44.634954, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:457(print_job_find)
  print_job_find: looking up job 3 for share testbsd
[2015/04/15 08:58:44.635029, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:485(print_job_find)
  print_job_find: returning system job -1 for jobid 3.
[2015/04/15 08:58:44.635105,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/notify.c:327(send_spoolss_notify2_msg)
  send_spoolss_notify2_msg: appending message 0x01/0x0a for printer testbsd to notify_queue_head
[2015/04/15 08:58:44.635205, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:2127(remove_from_jobs_added)
  remove_from_jobs_added: removed jobid 3
[2015/04/15 08:58:44.635258, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:158(rap_jobid_delete)
  rap_jobid_delete: called.
[2015/04/15 08:58:44.635374, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:1512(print_queue_update_internal)
  print_queue_update_internal: printer testbsd INFO/total_jobs = 0
[2015/04/15 08:58:44.635475,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:1194(set_updating_pid)
  set_updating_pid: not  updating lpq cache for print share testbsd
[2015/04/15 08:58:45.636679,  4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:45.636784,  5, pid=3878, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2015/04/15 08:58:45.636832,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:45.636905,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2015/04/15 08:58:45.636984,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/notify.c:180(print_notify_send_messages_to_printer)
  print_notify_send_messages_to_printer: sending 1 print notify message to printer testbsd
[2015/04/15 08:58:45.637142, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:320(messaging_tdb_store)
  messaging_tdb_store:
[2015/04/15 08:58:45.637195,  1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
       array: struct messaging_array
          num_messages             : 0x00000001 (1)
          messages: ARRAY(1)
              messages: struct messaging_rec
                  msg_version              : 0x00000002 (2)
                  msg_type                 : MSG_PRINTER_NOTIFY2 (514)
                  dest: struct server_id
                      pid                      : 0x000000000000101f (4127)
                      task_id                  : 0x00000000 (0)
                      vnn                      : 0xffffffff (4294967295)
                      unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
                  src: struct server_id
                      pid                      : 0x0000000000000f26 (3878)
                      task_id                  : 0x00000000 (0)
                      vnn                      : 0xffffffff (4294967295)
                      unique_id                : 0x7fcf63b7e299f11a (9209689404427858202)
                  buf                      : DATA_BLOB length=52
  [0000] 01 00 00 00 2C 00 00 00   74 65 73 74 62 73 64 00   ....,... testbsd.
  [0010] 24 0C 2E 55 DE B0 09 00   01 00 00 00 0A 00 00 00   $..U.... ........
  [0020] 03 00 00 00 00 00 00 00   00 00 00 00 04 01 00 00   ........ ........
  [0030] 00 00 00 00                                       .... 
[2015/04/15 08:58:55.274249,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
  check lock order 2 for /var/run/samba/serverid.tdb
[2015/04/15 08:58:55.274361, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:<none> 2:/var/run/samba/serverid.tdb 3:<none>
[2015/04/15 08:58:55.274424, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Locking key 1F10000000000000FFFF
[2015/04/15 08:58:55.274494, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
  Allocated locked data 0x0x7fbe441bb960
[2015/04/15 08:58:55.274621, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
  Unlocking key 1F10000000000000FFFF
[2015/04/15 08:58:55.274703,  5, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
  release lock order 2 for /var/run/samba/serverid.tdb
[2015/04/15 08:58:55.274759, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order:  1:<none> 2:<none> 3:<none>
[2015/04/15 08:59:25.267487,  2, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:419(remove_child_pid)
  Could not find child 4141 -- ignoring
[2015/04/15 08:59:25.643824, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/events.c:426(smbd_idle_event_handler)
  smbd_idle_event_handler: idle_evt(print_queue_housekeeping) (nil) called
[2015/04/15 08:59:25.643971,  5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:163(print_queue_housekeeping)
  print queue housekeeping
[2015/04/15 08:59:25.644019, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/events.c:437(smbd_idle_event_handler)
  smbd_idle_event_handler: idle_evt(print_queue_housekeeping) (nil) rescheduled


More information about the Pkg-samba-maint mailing list