[Pkg-samba-maint] Bug#782628: samba: bsd virtual printers doesnt works on clients win2k or winxp
Piviul
piviul at riminilug.it
Wed Apr 15 07:27:14 UTC 2015
Package: samba
Version: 2:4.1.17+dfsg-2
Severity: important
Dear Maintainer,
In debian jessie (samba 4.1.17) but the same seems to happens using wheezy and
samba 4.1.17 from backports, if you set a bsd virtual printer (printing = bsd)
like this one
[testbsd]
comment = Test BSD printing
path = /tmp
guest ok = Yes
printable = Yes
print ok = Yes
printing = bsd
print command = /usr/local/bin/bsdprinting.sh %s %H "%J" %p %m %S
'default'
I expect that the script /usr/local/bin/bsdprinting.sh will be invoked every
time a client print on this virtual printer. In effect win7 clients doesn't
have any problem but winxp and win2k clients can't print (there is no call to
the file /usr/local/bin/bsdprinting.sh).
I attach the log level 10 of the client (log.vbox-winxp) and of the daemon
(log.smbd) when the client vbox-winxp (having windows xp) try to print to the
bsd virtual printer.
If you need more infos about this bug please doesn't esitate to contact me
Piviul
-- System Information:
Debian Release: 8.0
APT prefers testing-updates
APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages samba depends on:
ii adduser 3.113+nmu3
ii dpkg 1.17.24
ii libasn1-8-heimdal 1.6~rc2+dfsg-9
ii libbsd0 0.7.0-2
ii libc6 2.19-17
ii libcomerr2 1.42.12-1.1
ii libhdb9-heimdal [heimdal-hdb-api-8] 1.6~rc2+dfsg-9
ii libkdc2-heimdal 1.6~rc2+dfsg-9
ii libkrb5-26-heimdal 1.6~rc2+dfsg-9
ii libldb1 2:1.1.17-2
ii libpam-modules 1.1.8-3.1
ii libpam-runtime 1.1.8-3.1
ii libpopt0 1.16-10
ii libpython2.7 2.7.9-2
ii libroken18-heimdal 1.6~rc2+dfsg-9
ii libtalloc2 2.1.1-2
ii libtdb1 1.3.1-1
ii libtevent0 0.9.21-1
ii lsb-base 4.1+Debian13+nmu1
ii multiarch-support 2.19-17
ii procps 2:3.3.9-9
ii python 2.7.9-1
ii python-dnspython 1.12.0-1
ii python-ntdb 1.0-5
ii python-samba 2:4.1.17+dfsg-2
pn python2.7:any <none>
ii samba-common 2:4.1.17+dfsg-2
ii samba-common-bin 2:4.1.17+dfsg-2
ii samba-dsdb-modules 2:4.1.17+dfsg-2
ii samba-libs 2:4.1.17+dfsg-2
ii tdb-tools 1.3.1-1
ii update-inetd 4.43
Versions of packages samba recommends:
ii attr 1:2.4.47-2
ii logrotate 3.8.7-1+b1
ii samba-vfs-modules 2:4.1.17+dfsg-2
Versions of packages samba suggests:
pn bind9 <none>
pn bind9utils <none>
pn ctdb <none>
pn ldb-tools <none>
ii ntp 1:4.2.6.p5+dfsg-7
pn smbldap-tools <none>
ii winbind 2:4.1.17+dfsg-2
-- no debconf information
-------------- next part --------------
[2015/04/15 08:58:44.174617, 6, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed)
lp_file_list_changed()
file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Apr 15 08:52:33 2015
[2015/04/15 08:58:44.174681, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/reply.c:667(reply_special)
init msg_type=0x81 msg_flags=0x0
[2015/04/15 08:58:44.234030, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive)
got smb length of 133
[2015/04/15 08:58:44.234180, 6, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1800(process_smb)
got message type 0x0 of len 0x85
[2015/04/15 08:58:44.234220, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1802(process_smb)
Transaction 0 of length 137 (0 toread)
[2015/04/15 08:58:44.234259, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg)
[2015/04/15 08:58:44.234281, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg)
size=133
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51283
smb_tid=0
smb_pid=65279
smb_uid=0
smb_mid=0
smt_wct=0
smb_bcc=98
[2015/04/15 08:58:44.234433, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data)
[0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG
[0010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1
[0020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for
[0030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a.
[0040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM
[0050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1
[0060] 32 00 2.
[2015/04/15 08:58:44.234662, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1405(switch_message)
switch message SMBnegprot (pid 4127) conn 0x0
[2015/04/15 08:58:44.234718, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:44.234754, 5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:58:44.234792, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.234860, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2015/04/15 08:58:44.235579, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2015/04/15 08:58:44.235642, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot)
Requested protocol [LANMAN1.0]
[2015/04/15 08:58:44.235678, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot)
Requested protocol [Windows for Workgroups 3.1a]
[2015/04/15 08:58:44.235711, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot)
Requested protocol [LM1.2X002]
[2015/04/15 08:58:44.235744, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot)
Requested protocol [LANMAN2.1]
[2015/04/15 08:58:44.235778, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot)
Requested protocol [NT LM 0.12]
[2015/04/15 08:58:44.235818, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1286(set_remote_arch)
set_remote_arch: Client arch is 'Win2K'
[2015/04/15 08:58:44.235882, 6, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed)
lp_file_list_changed()
file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Apr 15 08:52:33 2015
[2015/04/15 08:58:44.235970, 5, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
check lock order 2 for /var/run/samba/serverid.tdb
[2015/04/15 08:58:44.236005, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:<none> 2:/var/run/samba/serverid.tdb 3:<none>
[2015/04/15 08:58:44.236041, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Locking key 1F10000000000000FFFF
[2015/04/15 08:58:44.236085, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
Allocated locked data 0x0x7fbe441bf580
[2015/04/15 08:58:44.236136, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Unlocking key 1F10000000000000FFFF
[2015/04/15 08:58:44.236175, 5, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
release lock order 2 for /var/run/samba/serverid.tdb
[2015/04/15 08:58:44.236209, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:<none> 2:<none> 3:<none>
[2015/04/15 08:58:44.236262, 6, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed)
lp_file_list_changed()
file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Apr 15 08:52:33 2015
[2015/04/15 08:58:44.236417, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
Registering messaging pointer for type 1536 - private_data=0x7fbe441bfa10
[2015/04/15 08:58:44.236517, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:450(make_auth_context_subsystem)
Making default auth method list for server role = 'domain member'
[2015/04/15 08:58:44.236575, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
Attempting to register auth backend sam
[2015/04/15 08:58:44.236615, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
Successfully added auth method 'sam'
[2015/04/15 08:58:44.236648, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
Attempting to register auth backend sam_ignoredomain
[2015/04/15 08:58:44.236685, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
Successfully added auth method 'sam_ignoredomain'
[2015/04/15 08:58:44.236720, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
Attempting to register auth backend unix
[2015/04/15 08:58:44.236753, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
Successfully added auth method 'unix'
[2015/04/15 08:58:44.236786, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
Attempting to register auth backend winbind
[2015/04/15 08:58:44.236816, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
Successfully added auth method 'winbind'
[2015/04/15 08:58:44.236848, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
Attempting to register auth backend wbc
[2015/04/15 08:58:44.236878, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
Successfully added auth method 'wbc'
[2015/04/15 08:58:44.236909, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
Attempting to register auth backend trustdomain
[2015/04/15 08:58:44.236942, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
Successfully added auth method 'trustdomain'
[2015/04/15 08:58:44.236974, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
Attempting to register auth backend ntdomain
[2015/04/15 08:58:44.237015, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
Successfully added auth method 'ntdomain'
[2015/04/15 08:58:44.237050, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
Attempting to register auth backend guest
[2015/04/15 08:58:44.237084, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
Successfully added auth method 'guest'
[2015/04/15 08:58:44.237116, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module)
load_auth_module: Attempting to find an auth method to match guest
[2015/04/15 08:58:44.237154, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module)
load_auth_module: auth method guest has a valid init
[2015/04/15 08:58:44.237193, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module)
load_auth_module: Attempting to find an auth method to match sam
[2015/04/15 08:58:44.237228, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module)
load_auth_module: auth method sam has a valid init
[2015/04/15 08:58:44.237260, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module)
load_auth_module: Attempting to find an auth method to match winbind:ntdomain
[2015/04/15 08:58:44.237294, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module)
load_auth_module: Attempting to find an auth method to match ntdomain
[2015/04/15 08:58:44.237325, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module)
load_auth_module: auth method ntdomain has a valid init
[2015/04/15 08:58:44.237357, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module)
load_auth_module: auth method winbind has a valid init
[2015/04/15 08:58:44.269236, 3, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register)
GENSEC backend 'gssapi_spnego' registered
[2015/04/15 08:58:44.269319, 3, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register)
GENSEC backend 'gssapi_krb5' registered
[2015/04/15 08:58:44.269352, 3, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register)
GENSEC backend 'gssapi_krb5_sasl' registered
[2015/04/15 08:58:44.269382, 3, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register)
GENSEC backend 'schannel' registered
[2015/04/15 08:58:44.269410, 3, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register)
GENSEC backend 'spnego' registered
[2015/04/15 08:58:44.269440, 3, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register)
GENSEC backend 'ntlmssp' registered
[2015/04/15 08:58:44.269472, 3, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register)
GENSEC backend 'krb5' registered
[2015/04/15 08:58:44.269502, 3, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register)
GENSEC backend 'fake_gssapi_krb5' registered
[2015/04/15 08:58:44.269674, 5, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:649(gensec_start_mech)
Starting GENSEC mechanism spnego
[2015/04/15 08:58:44.269754, 5, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:649(gensec_start_mech)
Starting GENSEC submechanism ntlmssp
[2015/04/15 08:58:44.269894, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:385(reply_nt1)
using SPNEGO
[2015/04/15 08:58:44.269920, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:672(reply_negprot)
Selected protocol NT LM 0.12
[2015/04/15 08:58:44.269938, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:679(reply_negprot)
negprot index=5
[2015/04/15 08:58:44.269971, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg)
[2015/04/15 08:58:44.269983, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg)
size=159
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51283
smb_tid=0
smb_pid=65279
smb_uid=0
smb_mid=0
smt_wct=17
smb_vwv[ 0]= 5 (0x5)
smb_vwv[ 1]=12803 (0x3203)
smb_vwv[ 2]= 256 (0x100)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 65 (0x41)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 256 (0x100)
smb_vwv[ 7]= 7936 (0x1F00)
smb_vwv[ 8]= 16 (0x10)
smb_vwv[ 9]=64768 (0xFD00)
smb_vwv[10]=33011 (0x80F3)
smb_vwv[11]=53120 (0xCF80)
smb_vwv[12]=58815 (0xE5BF)
smb_vwv[13]=18844 (0x499C)
smb_vwv[14]=53367 (0xD077)
smb_vwv[15]=34817 (0x8801)
smb_vwv[16]= 255 (0xFF)
smb_bcc=90
[2015/04/15 08:58:44.270184, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data)
[0000] 70 73 61 6C 61 2D 6C 78 32 00 00 00 00 00 00 00 psala-lx 2.......
[0010] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<..
[0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 2A 0...+... ..7....*
[0030] 30 28 A0 26 1B 24 6E 6F 74 5F 64 65 66 69 6E 65 0(.&.$no t_define
[0040] 64 5F 69 6E 5F 52 46 43 34 31 37 38 40 70 6C 65 d_in_RFC 4178 at ple
[0050] 61 73 65 5F 69 67 6E 6F 72 65 ase_igno re
[2015/04/15 08:58:44.270748, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive)
got smb length of 236
[2015/04/15 08:58:44.270807, 6, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1800(process_smb)
got message type 0x0 of len 0xec
[2015/04/15 08:58:44.270845, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1802(process_smb)
Transaction 1 of length 240 (0 toread)
[2015/04/15 08:58:44.270882, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg)
[2015/04/15 08:58:44.270897, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg)
size=236
smb_com=0x73
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=0
smb_pid=65279
smb_uid=0
smb_mid=64
smt_wct=12
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 236 (0xEC)
smb_vwv[ 2]=16644 (0x4104)
smb_vwv[ 3]= 50 (0x32)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 74 (0x4A)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 212 (0xD4)
smb_vwv[11]=40960 (0xA000)
smb_bcc=177
[2015/04/15 08:58:44.271063, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data)
[0000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<..
[0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7....*
[0020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 07 82 .(NTLMSS P.......
[0030] 08 A2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
[0040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n
[0050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0
[0060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c
[0070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 33 .e. .P.a .c.k. .3
[0080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i
[0090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0
[00A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1....
[00B0] 00 .
[2015/04/15 08:58:44.271251, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1405(switch_message)
switch message SMBsesssetupX (pid 4127) conn 0x0
[2015/04/15 08:58:44.271272, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:44.271291, 5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:58:44.271316, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.271350, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2015/04/15 08:58:44.271376, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:604(reply_sesssetup_and_X)
wct=12 flg2=0xc807
[2015/04/15 08:58:44.271402, 2, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:545(setup_new_vc_session)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2015/04/15 08:58:44.271425, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:138(reply_sesssetup_and_X_spnego)
Doing spnego session setup
[2015/04/15 08:58:44.271454, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:179(reply_sesssetup_and_X_spnego)
NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
[2015/04/15 08:58:44.271478, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1286(set_remote_arch)
set_remote_arch: Client arch is 'WinXP'
[2015/04/15 08:58:44.271507, 5, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb
[2015/04/15 08:58:44.271527, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2:<none> 3:<none>
[2015/04/15 08:58:44.271548, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Locking key 13DB52A4
[2015/04/15 08:58:44.271578, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
Allocated locked data 0x0x7fbe441bd260
[2015/04/15 08:58:44.271766, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:853(smbXsrv_session_global_store)
[2015/04/15 08:58:44.271786, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:855(smbXsrv_session_global_store)
smbXsrv_session_global_store: key '13DB52A4' stored
[2015/04/15 08:58:44.271808, 1, pid=4127, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
&global_blob: struct smbXsrv_session_globalB
version : SMBXSRV_VERSION_0 (0)
seqnum : 0x00000001 (1)
info : union smbXsrv_session_globalU(case 0)
info0 : *
info0: struct smbXsrv_session_global0
db_rec : *
session_global_id : 0x13db52a4 (333140644)
session_wire_id : 0x000000000000b4b9 (46265)
creation_time : mer apr 15 08:58:44 2015 CEST
expiration_time : gio gen 1 01:00:00 1970 CET
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0000 (0)
signing_required : 0x00 (0)
encryption_required : 0x00 (0)
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x000000000000101f (4127)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0xfdea2051dbfd5741 (-150272101608237247)
local_address : 'ipv4:192.168.70.10:139'
remote_address : 'ipv4:192.168.70.150:1049'
remote_name : 'vbox-winxp'
auth_session_info_seqnum : 0x00000000 (0)
[2015/04/15 08:58:44.272143, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Unlocking key 13DB52A4
[2015/04/15 08:58:44.272165, 5, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb
[2015/04/15 08:58:44.272184, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:<none> 2:<none> 3:<none>
[2015/04/15 08:58:44.272203, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1215(smbXsrv_session_create)
[2015/04/15 08:58:44.272213, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1223(smbXsrv_session_create)
smbXsrv_session_create: global_id (0x13db52a4) stored
[2015/04/15 08:58:44.272231, 1, pid=4127, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
&session_blob: struct smbXsrv_sessionB
version : SMBXSRV_VERSION_0 (0)
reserved : 0x00000000 (0)
info : union smbXsrv_sessionU(case 0)
info0 : *
info0: struct smbXsrv_session
table : *
db_rec : NULL
connection : *
local_id : 0x0000b4b9 (46265)
global : *
global: struct smbXsrv_session_global0
db_rec : NULL
session_global_id : 0x13db52a4 (333140644)
session_wire_id : 0x000000000000b4b9 (46265)
creation_time : mer apr 15 08:58:44 2015 CEST
expiration_time : gio gen 1 01:00:00 1970 CET
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0000 (0)
signing_required : 0x00 (0)
encryption_required : 0x00 (0)
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x000000000000101f (4127)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0xfdea2051dbfd5741 (-150272101608237247)
local_address : 'ipv4:192.168.70.10:139'
remote_address : 'ipv4:192.168.70.150:1049'
remote_name : 'vbox-winxp'
auth_session_info_seqnum : 0x00000000 (0)
status : NT_STATUS_MORE_PROCESSING_REQUIRED
idle_time : mer apr 15 08:58:44 2015 CEST
nonce_high : 0x0000000000000000 (0)
nonce_low : 0x0000000000000000 (0)
gensec : NULL
compat : NULL
tcon_table : NULL
[2015/04/15 08:58:44.272690, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:450(make_auth_context_subsystem)
Making default auth method list for server role = 'domain member'
[2015/04/15 08:58:44.272716, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module)
load_auth_module: Attempting to find an auth method to match guest
[2015/04/15 08:58:44.272742, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module)
load_auth_module: auth method guest has a valid init
[2015/04/15 08:58:44.272761, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module)
load_auth_module: Attempting to find an auth method to match sam
[2015/04/15 08:58:44.272779, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module)
load_auth_module: auth method sam has a valid init
[2015/04/15 08:58:44.272797, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module)
load_auth_module: Attempting to find an auth method to match winbind:ntdomain
[2015/04/15 08:58:44.272817, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module)
load_auth_module: Attempting to find an auth method to match ntdomain
[2015/04/15 08:58:44.272836, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module)
load_auth_module: auth method ntdomain has a valid init
[2015/04/15 08:58:44.272853, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module)
load_auth_module: auth method winbind has a valid init
[2015/04/15 08:58:44.272898, 5, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:649(gensec_start_mech)
Starting GENSEC mechanism spnego
[2015/04/15 08:58:44.272925, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.272956, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:58:44.272985, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.273010, 5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:58:44.273029, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.273118, 5, pid=4127, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:649(gensec_start_mech)
Starting GENSEC submechanism ntlmssp
[2015/04/15 08:58:44.273161, 3, pid=4127, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0xa2088207
NTLMSSP_NEGOTIATE_UNICODE
NTLMSSP_NEGOTIATE_OEM
NTLMSSP_REQUEST_TARGET
NTLMSSP_NEGOTIATE_NTLM
NTLMSSP_NEGOTIATE_ALWAYS_SIGN
NTLMSSP_NEGOTIATE_NTLM2
NTLMSSP_NEGOTIATE_VERSION
NTLMSSP_NEGOTIATE_128
NTLMSSP_NEGOTIATE_56
[2015/04/15 08:58:44.273301, 1, pid=4127, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
negotiate: struct NEGOTIATE_MESSAGE
Signature : 'NTLMSSP'
MessageType : NtLmNegotiate (1)
NegotiateFlags : 0xa2088207 (2718466567)
1: NTLMSSP_NEGOTIATE_UNICODE
1: NTLMSSP_NEGOTIATE_OEM
1: NTLMSSP_REQUEST_TARGET
0: NTLMSSP_NEGOTIATE_SIGN
0: NTLMSSP_NEGOTIATE_SEAL
0: NTLMSSP_NEGOTIATE_DATAGRAM
0: NTLMSSP_NEGOTIATE_LM_KEY
0: NTLMSSP_NEGOTIATE_NETWARE
1: NTLMSSP_NEGOTIATE_NTLM
0: NTLMSSP_NEGOTIATE_NT_ONLY
0: NTLMSSP_ANONYMOUS
0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
0: NTLMSSP_TARGET_TYPE_DOMAIN
0: NTLMSSP_TARGET_TYPE_SERVER
0: NTLMSSP_TARGET_TYPE_SHARE
1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
0: NTLMSSP_NEGOTIATE_IDENTIFY
0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
0: NTLMSSP_NEGOTIATE_TARGET_INFO
1: NTLMSSP_NEGOTIATE_VERSION
1: NTLMSSP_NEGOTIATE_128
0: NTLMSSP_NEGOTIATE_KEY_EXCH
1: NTLMSSP_NEGOTIATE_56
DomainNameLen : 0x0000 (0)
DomainNameMaxLen : 0x0000 (0)
DomainName : NULL
WorkstationLen : 0x0000 (0)
WorkstationMaxLen : 0x0000 (0)
Workstation : NULL
Version: struct ntlmssp_VERSION
ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_5 (5)
ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1)
ProductBuild : 0x0a28 (2600)
Reserved: ARRAY(3)
[0] : 0x00 (0)
[1] : 0x00 (0)
[2] : 0x00 (0)
NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15)
[2015/04/15 08:58:44.273770, 1, pid=4127, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
challenge: struct CHALLENGE_MESSAGE
Signature : 'NTLMSSP'
MessageType : NtLmChallenge (0x2)
TargetNameLen : 0x0014 (20)
TargetNameMaxLen : 0x0014 (20)
TargetName : *
TargetName : 'DOMINIOCSA'
NegotiateFlags : 0xa2898205 (2726920709)
1: NTLMSSP_NEGOTIATE_UNICODE
0: NTLMSSP_NEGOTIATE_OEM
1: NTLMSSP_REQUEST_TARGET
0: NTLMSSP_NEGOTIATE_SIGN
0: NTLMSSP_NEGOTIATE_SEAL
0: NTLMSSP_NEGOTIATE_DATAGRAM
0: NTLMSSP_NEGOTIATE_LM_KEY
0: NTLMSSP_NEGOTIATE_NETWARE
1: NTLMSSP_NEGOTIATE_NTLM
0: NTLMSSP_NEGOTIATE_NT_ONLY
0: NTLMSSP_ANONYMOUS
0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
1: NTLMSSP_TARGET_TYPE_DOMAIN
0: NTLMSSP_TARGET_TYPE_SERVER
0: NTLMSSP_TARGET_TYPE_SHARE
1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
0: NTLMSSP_NEGOTIATE_IDENTIFY
0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
1: NTLMSSP_NEGOTIATE_TARGET_INFO
1: NTLMSSP_NEGOTIATE_VERSION
1: NTLMSSP_NEGOTIATE_128
0: NTLMSSP_NEGOTIATE_KEY_EXCH
1: NTLMSSP_NEGOTIATE_56
ServerChallenge : 2cc567903fef9041
Reserved : 0000000000000000
TargetInfoLen : 0x008a (138)
TargetNameInfoMaxLen : 0x008a (138)
TargetInfo : *
TargetInfo: struct AV_PAIR_LIST
count : 0x00000005 (5)
pair: ARRAY(5)
pair: struct AV_PAIR
AvId : MsvAvNbDomainName (0x2)
AvLen : 0x0014 (20)
Value : union ntlmssp_AvValue(case 0x2)
AvNbDomainName : 'DOMINIOCSA'
pair: struct AV_PAIR
AvId : MsvAvNbComputerName (0x1)
AvLen : 0x0012 (18)
Value : union ntlmssp_AvValue(case 0x1)
AvNbComputerName : 'PSALA-LX2'
pair: struct AV_PAIR
AvId : MsvAvDnsDomainName (0x4)
AvLen : 0x001e (30)
Value : union ntlmssp_AvValue(case 0x4)
AvDnsDomainName : 'csaricerche.com'
pair: struct AV_PAIR
AvId : MsvAvDnsComputerName (0x3)
AvLen : 0x0032 (50)
Value : union ntlmssp_AvValue(case 0x3)
AvDnsComputerName : 'psala-lx2.csaricerche.com'
pair: struct AV_PAIR
AvId : MsvAvEOL (0x0)
AvLen : 0x0000 (0)
Value : union ntlmssp_AvValue(case 0x0)
Version: struct ntlmssp_VERSION
ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (0x6)
ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (0x1)
ProductBuild : 0x0000 (0)
Reserved : 000000
NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (0xF)
[2015/04/15 08:58:44.274397, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:44.274440, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg)
[2015/04/15 08:58:44.274453, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg)
size=360
smb_com=0x73
smb_rcls=22
smb_reh=0
smb_err=49152
smb_flg=136
smb_flg2=51207
smb_tid=0
smb_pid=65279
smb_uid=46265
smb_mid=64
smt_wct=4
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 0 (0x0)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 245 (0xF5)
smb_bcc=317
[2015/04/15 08:58:44.274569, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data)
[0000] A1 81 F2 30 81 EF A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+
[0010] 06 01 04 01 82 37 02 02 0A A2 81 D9 04 81 D6 4E .....7.. .......N
[0020] 54 4C 4D 53 53 50 00 02 00 00 00 14 00 14 00 38 TLMSSP.. .......8
[0030] 00 00 00 05 82 89 A2 2C C5 67 90 3F EF 90 41 00 ......., .g.?..A.
[0040] 00 00 00 00 00 00 00 8A 00 8A 00 4C 00 00 00 06 ........ ...L....
[0050] 01 00 00 00 00 00 0F 44 00 4F 00 4D 00 49 00 4E .......D .O.M.I.N
[0060] 00 49 00 4F 00 43 00 53 00 41 00 02 00 14 00 44 .I.O.C.S .A.....D
[0070] 00 4F 00 4D 00 49 00 4E 00 49 00 4F 00 43 00 53 .O.M.I.N .I.O.C.S
[0080] 00 41 00 01 00 12 00 50 00 53 00 41 00 4C 00 41 .A.....P .S.A.L.A
[0090] 00 2D 00 4C 00 58 00 32 00 04 00 1E 00 63 00 73 .-.L.X.2 .....c.s
[00A0] 00 61 00 72 00 69 00 63 00 65 00 72 00 63 00 68 .a.r.i.c .e.r.c.h
[00B0] 00 65 00 2E 00 63 00 6F 00 6D 00 03 00 32 00 70 .e...c.o .m...2.p
[00C0] 00 73 00 61 00 6C 00 61 00 2D 00 6C 00 78 00 32 .s.a.l.a .-.l.x.2
[00D0] 00 2E 00 63 00 73 00 61 00 72 00 69 00 63 00 65 ...c.s.a .r.i.c.e
[00E0] 00 72 00 63 00 68 00 65 00 2E 00 63 00 6F 00 6D .r.c.h.e ...c.o.m
[00F0] 00 00 00 00 00 55 00 6E 00 69 00 78 00 00 00 53 .....U.n .i.x...S
[0100] 00 61 00 6D 00 62 00 61 00 20 00 34 00 2E 00 31 .a.m.b.a . .4...1
[0110] 00 2E 00 31 00 37 00 2D 00 44 00 65 00 62 00 69 ...1.7.- .D.e.b.i
[0120] 00 61 00 6E 00 00 00 44 00 4F 00 4D 00 49 00 4E .a.n...D .O.M.I.N
[0130] 00 49 00 4F 00 43 00 53 00 41 00 00 00 .I.O.C.S .A...
[2015/04/15 08:58:44.283748, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive)
got smb length of 344
[2015/04/15 08:58:44.283852, 6, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1800(process_smb)
got message type 0x0 of len 0x158
[2015/04/15 08:58:44.283892, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1802(process_smb)
Transaction 2 of length 348 (0 toread)
[2015/04/15 08:58:44.283911, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg)
[2015/04/15 08:58:44.283922, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg)
size=344
smb_com=0x73
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=0
smb_pid=65279
smb_uid=46265
smb_mid=128
smt_wct=12
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 344 (0x158)
smb_vwv[ 2]=16644 (0x4104)
smb_vwv[ 3]= 50 (0x32)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 182 (0xB6)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 212 (0xD4)
smb_vwv[11]=40960 (0xA000)
smb_bcc=285
[2015/04/15 08:58:44.284091, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data)
[0000] A1 81 B3 30 81 B0 A2 81 AD 04 81 AA 4E 54 4C 4D ...0.... ....NTLM
[0010] 53 53 50 00 03 00 00 00 18 00 18 00 7A 00 00 00 SSP..... ....z...
[0020] 18 00 18 00 92 00 00 00 14 00 14 00 48 00 00 00 ........ ....H...
[0030] 0A 00 0A 00 5C 00 00 00 14 00 14 00 66 00 00 00 ....\... ....f...
[0040] 00 00 00 00 AA 00 00 00 05 82 88 A2 05 01 28 0A ........ ......(.
[0050] 00 00 00 0F 44 00 4F 00 4D 00 49 00 4E 00 49 00 ....D.O. M.I.N.I.
[0060] 4F 00 43 00 53 00 41 00 61 00 64 00 6D 00 69 00 O.C.S.A. a.d.m.i.
[0070] 6E 00 56 00 42 00 4F 00 58 00 2D 00 57 00 49 00 n.V.B.O. X.-.W.I.
[0080] 4E 00 58 00 50 00 AF F6 45 39 50 D2 2F EF 00 00 N.X.P... E9P./...
[0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 98 10 ........ ........
[00A0] CC 3B F6 96 E2 4B 86 EC DF D4 48 0A A6 E7 63 CC .;...K.. ..H...c.
[00B0] 47 5B 82 DC 44 33 00 57 00 69 00 6E 00 64 00 6F G[..D3.W .i.n.d.o
[00C0] 00 77 00 73 00 20 00 32 00 30 00 30 00 32 00 20 .w.s. .2 .0.0.2.
[00D0] 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 20 .S.e.r.v .i.c.e.
[00E0] 00 50 00 61 00 63 00 6B 00 20 00 33 00 20 00 32 .P.a.c.k . .3. .2
[00F0] 00 36 00 30 00 30 00 00 00 57 00 69 00 6E 00 64 .6.0.0.. .W.i.n.d
[0100] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 32 .o.w.s. .2.0.0.2
[0110] 00 20 00 35 00 2E 00 31 00 00 00 00 00 . .5...1 .....
[2015/04/15 08:58:44.284374, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1405(switch_message)
switch message SMBsesssetupX (pid 4127) conn 0x0
[2015/04/15 08:58:44.284415, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:44.284436, 5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:58:44.284455, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.284489, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2015/04/15 08:58:44.284510, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:604(reply_sesssetup_and_X)
wct=12 flg2=0xc807
[2015/04/15 08:58:44.284529, 2, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:545(setup_new_vc_session)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2015/04/15 08:58:44.284547, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:138(reply_sesssetup_and_X_spnego)
Doing spnego session setup
[2015/04/15 08:58:44.284586, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:179(reply_sesssetup_and_X_spnego)
NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
[2015/04/15 08:58:44.284613, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.284639, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:58:44.284657, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.284674, 5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:58:44.284691, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.284771, 1, pid=4127, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
authenticate: struct AUTHENTICATE_MESSAGE
Signature : 'NTLMSSP'
MessageType : NtLmAuthenticate (3)
LmChallengeResponseLen : 0x0018 (24)
LmChallengeResponseMaxLen: 0x0018 (24)
LmChallengeResponse : *
LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24)
v1: struct LM_RESPONSE
Response : aff6453950d22fef00000000000000000000000000000000
NtChallengeResponseLen : 0x0018 (24)
NtChallengeResponseMaxLen: 0x0018 (24)
NtChallengeResponse : *
NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24)
v1: struct NTLM_RESPONSE
Response : 9810cc3bf696e24b86ecdfd4480aa6e763cc475b82dc4433
DomainNameLen : 0x0014 (20)
DomainNameMaxLen : 0x0014 (20)
DomainName : *
DomainName : 'DOMINIOCSA'
UserNameLen : 0x000a (10)
UserNameMaxLen : 0x000a (10)
UserName : *
UserName : 'admin'
WorkstationLen : 0x0014 (20)
WorkstationMaxLen : 0x0014 (20)
Workstation : *
Workstation : 'VBOX-WINXP'
EncryptedRandomSessionKeyLen: 0x0000 (0)
EncryptedRandomSessionKeyMaxLen: 0x0000 (0)
EncryptedRandomSessionKey: *
EncryptedRandomSessionKey: DATA_BLOB length=0
NegotiateFlags : 0xa2888205 (2726855173)
1: NTLMSSP_NEGOTIATE_UNICODE
0: NTLMSSP_NEGOTIATE_OEM
1: NTLMSSP_REQUEST_TARGET
0: NTLMSSP_NEGOTIATE_SIGN
0: NTLMSSP_NEGOTIATE_SEAL
0: NTLMSSP_NEGOTIATE_DATAGRAM
0: NTLMSSP_NEGOTIATE_LM_KEY
0: NTLMSSP_NEGOTIATE_NETWARE
1: NTLMSSP_NEGOTIATE_NTLM
0: NTLMSSP_NEGOTIATE_NT_ONLY
0: NTLMSSP_ANONYMOUS
0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
0: NTLMSSP_TARGET_TYPE_DOMAIN
0: NTLMSSP_TARGET_TYPE_SERVER
0: NTLMSSP_TARGET_TYPE_SHARE
1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
0: NTLMSSP_NEGOTIATE_IDENTIFY
0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
1: NTLMSSP_NEGOTIATE_TARGET_INFO
1: NTLMSSP_NEGOTIATE_VERSION
1: NTLMSSP_NEGOTIATE_128
0: NTLMSSP_NEGOTIATE_KEY_EXCH
1: NTLMSSP_NEGOTIATE_56
Version: struct ntlmssp_VERSION
ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_5 (5)
ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1)
ProductBuild : 0x0a28 (2600)
Reserved: ARRAY(3)
[0] : 0x00 (0)
[1] : 0x00 (0)
[2] : 0x00 (0)
NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15)
[2015/04/15 08:58:44.285361, 3, pid=4127, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
Got user=[admin] domain=[DOMINIOCSA] workstation=[VBOX-WINXP] len1=24 len2=24
[2015/04/15 08:58:44.285400, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:83(auth3_set_challenge)
auth_context challenge set by NTLMSSP callback (NTLM2)
[2015/04/15 08:58:44.285421, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:84(auth3_set_challenge)
challenge is:
[2015/04/15 08:58:44.285440, 5, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data)
[0000] 12 11 CD 8A BF 83 43 92 ......C.
[2015/04/15 08:58:44.285478, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4839(lp_load_ex)
lp_load_ex: refreshing parameters
[2015/04/15 08:58:44.285498, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1488(free_param_opts)
Freeing parametrics:
[2015/04/15 08:58:44.285544, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:750(init_globals)
Initialising global parameters
[2015/04/15 08:58:44.285614, 3, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/params.c:550(pm_process)
params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
[2015/04/15 08:58:44.285643, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3565(do_section)
Processing section "[global]"
doing parameter workgroup = DOMINIOCSA
doing parameter server string = %h server (Samba, Ubuntu)
doing parameter dns proxy = no
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 1000
doing parameter syslog = 0
doing parameter panic action = /usr/share/samba/panic-action %d
doing parameter log level = 10 all:10
[2015/04/15 08:58:44.285757, 5, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/debug.c:334(debug_dump_status)
INFO: Current debug levels:
all: 10
tdb: 10
printdrivers: 10
lanman: 10
smb: 10
rpc_parse: 10
rpc_srv: 10
rpc_cli: 10
passdb: 10
sam: 10
auth: 10
winbind: 10
vfs: 10
idmap: 10
quota: 10
acls: 10
locking: 10
msdfs: 10
dmapi: 10
registry: 10
scavenger: 10
dns: 10
ldb: 10
doing parameter security = domain
doing parameter encrypt passwords = true
doing parameter passdb backend = tdbsam
doing parameter obey pam restrictions = yes
doing parameter unix password sync = yes
doing parameter passwd program = /usr/bin/passwd %u
doing parameter passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
doing parameter pam password change = yes
doing parameter map to guest = bad user
doing parameter idmap config DOMINIOCSA : backend = rid
doing parameter idmap config DOMINIOCSA : range = 10000-99999
doing parameter idmap config * : backend = tdb
doing parameter idmap config * : range = 100000-200000
doing parameter allow trusted domains = No
doing parameter winbind enum users = yes
doing parameter winbind enum groups = yes
doing parameter template shell = /bin/bash
doing parameter winbind offline logon = true
doing parameter usershare allow guests = yes
[2015/04/15 08:58:44.286199, 2, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3582(do_section)
Processing section "[printers]"
doing parameter comment = All Printers
doing parameter browseable = no
doing parameter path = /var/spool/samba
doing parameter printable = yes
doing parameter guest ok = no
doing parameter read only = yes
doing parameter create mask = 0700
[2015/04/15 08:58:44.286322, 2, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3582(do_section)
Processing section "[print$]"
doing parameter comment = Printer Drivers
doing parameter path = /var/lib/samba/printers
doing parameter browseable = yes
doing parameter read only = no
doing parameter guest ok = no
doing parameter writeable = yes
[2015/04/15 08:58:44.286418, 2, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3582(do_section)
Processing section "[testbsd]"
doing parameter comment = Test BSD printing
doing parameter printing = bsd
doing parameter path = /tmp
doing parameter guest ok = Yes
doing parameter printable = Yes
doing parameter print ok = Yes
doing parameter print command = /usr/local/bin/bsdprinting.sh %s %H "%J" %p %m %S 'default'
[2015/04/15 08:58:44.286526, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4878(lp_load_ex)
pm_process() returned Yes
[2015/04/15 08:58:44.286552, 7, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:5168(lp_servicenumber)
lp_servicenumber: couldn't find homes
[2015/04/15 08:58:44.286575, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1774(lp_add_ipc)
adding IPC service
[2015/04/15 08:58:44.286611, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:115(make_user_info_map)
Mapping user [DOMINIOCSA]\[admin] from workstation [VBOX-WINXP]
[2015/04/15 08:58:44.287462, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:61(make_user_info)
attempting to make a user_info for admin (admin)
[2015/04/15 08:58:44.287505, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:72(make_user_info)
making strings for admin's user_info struct
[2015/04/15 08:58:44.287570, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:92(make_user_info)
making blobs for admin's user_info struct
[2015/04/15 08:58:44.287600, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:128(make_user_info)
made a user_info for admin (admin)
[2015/04/15 08:58:44.287620, 3, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:177(auth_check_ntlm_password)
check_ntlm_password: Checking password for unmapped user [DOMINIOCSA]\[admin]@[VBOX-WINXP] with the new password interface
[2015/04/15 08:58:44.287640, 3, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:180(auth_check_ntlm_password)
check_ntlm_password: mapped user is: [DOMINIOCSA]\[admin]@[VBOX-WINXP]
[2015/04/15 08:58:44.287658, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:189(auth_check_ntlm_password)
check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2)
[2015/04/15 08:58:44.287675, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:191(auth_check_ntlm_password)
challenge is:
[2015/04/15 08:58:44.287692, 5, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data)
[0000] 12 11 CD 8A BF 83 43 92 ......C.
[2015/04/15 08:58:44.287721, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_builtin.c:44(check_guest_security)
Check auth for: [admin]
[2015/04/15 08:58:44.287740, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:217(auth_check_ntlm_password)
check_ntlm_password: guest had nothing to say
[2015/04/15 08:58:44.287758, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:75(auth_samstrict_auth)
Check auth for: [admin]
[2015/04/15 08:58:44.287777, 8, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1200(is_myname)
is_myname("DOMINIOCSA") returns 0
[2015/04/15 08:58:44.287796, 6, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:88(auth_samstrict_auth)
check_samstrict_security: DOMINIOCSA is not one of my local names (ROLE_DOMAIN_MEMBER)
[2015/04/15 08:58:44.287814, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:217(auth_check_ntlm_password)
check_ntlm_password: sam had nothing to say
[2015/04/15 08:58:44.287839, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_winbind.c:50(check_winbind_security)
Check auth for: [admin]
[2015/04/15 08:58:44.287858, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2015/04/15 08:58:44.287877, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2015/04/15 08:58:44.287895, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2015/04/15 08:58:44.287912, 5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:58:44.287929, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.347175, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.347276, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
Finding user DOMINIOCSA\admin
[2015/04/15 08:58:44.347304, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
Trying _Get_Pwnam(), username as lowercase is dominiocsa\admin
[2015/04/15 08:58:44.430338, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
Get_Pwnam_internals did find user [DOMINIOCSA\admin]!
[2015/04/15 08:58:44.430427, 3, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:226(auth_check_ntlm_password)
check_ntlm_password: winbind authentication for user [admin] succeeded
[2015/04/15 08:58:44.430471, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2015/04/15 08:58:44.430494, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2015/04/15 08:58:44.430513, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2015/04/15 08:58:44.430531, 5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:58:44.430549, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.430588, 4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:483(smb_pam_start)
smb_pam_start: PAM: Init user: DOMINIOCSA\admin
[2015/04/15 08:58:44.491270, 4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:492(smb_pam_start)
smb_pam_start: PAM: setting rhost to: 192.168.70.150
[2015/04/15 08:58:44.491313, 4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:501(smb_pam_start)
smb_pam_start: PAM: setting tty
[2015/04/15 08:58:44.491337, 4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:509(smb_pam_start)
smb_pam_start: PAM: Init passed for user: DOMINIOCSA\admin
[2015/04/15 08:58:44.491355, 4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:567(smb_pam_account)
smb_pam_account: PAM: Account Management for User: DOMINIOCSA\admin
[2015/04/15 08:58:44.497881, 4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:586(smb_pam_account)
smb_pam_account: PAM: Account OK for User: DOMINIOCSA\admin
[2015/04/15 08:58:44.498273, 4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:465(smb_pam_end)
smb_pam_end: PAM: PAM_END OK.
[2015/04/15 08:58:44.498310, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.498338, 5, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:265(auth_check_ntlm_password)
check_ntlm_password: PAM Account for user [DOMINIOCSA\admin] succeeded
[2015/04/15 08:58:44.498356, 2, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:278(auth_check_ntlm_password)
check_ntlm_password: authentication for user [admin] -> [admin] -> [DOMINIOCSA\admin] succeeded
[2015/04/15 08:58:44.498378, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:168(auth3_check_password)
Got NT session key of length 16
[2015/04/15 08:58:44.498397, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:175(auth3_check_password)
Got LM session key of length 0
[2015/04/15 08:58:44.498429, 10, pid=4127, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:494(ntlmssp_server_postauth)
ntlmssp_server_auth: Created NTLM2 session key.
[2015/04/15 08:58:44.498453, 3, pid=4127, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
NTLMSSP Sign/Seal - Initialising with flags:
[2015/04/15 08:58:44.498472, 3, pid=4127, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0xa2088205
NTLMSSP_NEGOTIATE_UNICODE
NTLMSSP_REQUEST_TARGET
NTLMSSP_NEGOTIATE_NTLM
NTLMSSP_NEGOTIATE_ALWAYS_SIGN
NTLMSSP_NEGOTIATE_NTLM2
NTLMSSP_NEGOTIATE_VERSION
NTLMSSP_NEGOTIATE_128
NTLMSSP_NEGOTIATE_56
[2015/04/15 08:58:44.498567, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:44.498727, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:224(create_local_nt_token_from_info3)
Create local NT token for admin
[2015/04/15 08:58:44.498811, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-1202]: value=[11202:B]
[2015/04/15 08:58:44.498849, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-1202]: id=[11202], endptr=[:B]
[2015/04/15 08:58:44.498879, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1388(sid_to_uid)
sid S-1-5-21-2943704632-3037471470-1787688681-1202 -> uid 11202
[2015/04/15 08:58:44.500024, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist)
sys_getgrouplist: user [DOMINIOCSA\admin]
[2015/04/15 08:58:44.500138, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1220(gid_to_sid)
gid 11203 -> sid S-1-5-21-2943704632-3037471470-1787688681-1203
[2015/04/15 08:58:44.500183, 10, pid=4127, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:296(gencache_set_data_blob)
Adding cache entry with key=[IDMAP/GID2SID/27] and timeout=[gio gen 1 01:00:00 1970 CET] (-1429081124 seconds in the past)
[2015/04/15 08:58:44.501306, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1212(gid_to_sid)
gid_to_sid: winbind failed to find a sid for gid 27
[2015/04/15 08:58:44.501354, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.501392, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:58:44.501428, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.501457, 5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:58:44.501481, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.501551, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/groupdb/mapping_tdb.c:272(find_map)
failed to unpack map
[2015/04/15 08:58:44.501578, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/groupdb/mapping_tdb.c:272(find_map)
failed to unpack map
[2015/04/15 08:58:44.501602, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:44.501623, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1075(legacy_gid_to_sid)
LEGACY: gid 27 -> sid S-1-22-2-27
[2015/04/15 08:58:44.501660, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-32-544]: value=[25000:G]
[2015/04/15 08:58:44.501681, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-32-544]: id=[25000], endptr=[:G]
[2015/04/15 08:58:44.501699, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1442(sid_to_gid)
sid S-1-5-32-544 -> gid 25000
[2015/04/15 08:58:44.501724, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-32-545]: value=[25003:G]
[2015/04/15 08:58:44.501742, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-32-545]: id=[25003], endptr=[:G]
[2015/04/15 08:58:44.501760, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1442(sid_to_gid)
sid S-1-5-32-545 -> gid 25003
[2015/04/15 08:58:44.501779, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.501797, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:58:44.501814, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.501831, 5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:58:44.501848, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.501967, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:44.502001, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-1202]
[2015/04/15 08:58:44.502026, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-1203]
[2015/04/15 08:58:44.502050, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-513]
[2015/04/15 08:58:44.502073, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids)
get_privileges_for_sids: sid = S-1-5-21-2943704632-3037471470-1787688681-512
Privilege set: 0x20
[2015/04/15 08:58:44.502102, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-11157]
[2015/04/15 08:58:44.502125, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-1005]
[2015/04/15 08:58:44.502154, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-11693]
[2015/04/15 08:58:44.502177, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-11543]
[2015/04/15 08:58:44.502200, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-11729]
[2015/04/15 08:58:44.502223, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-11551]
[2015/04/15 08:58:44.502245, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-11569]
[2015/04/15 08:58:44.502268, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-11163]
[2015/04/15 08:58:44.502290, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-22-2-27]
[2015/04/15 08:58:44.502312, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids)
get_privileges_for_sids: sid = S-1-1-0
Privilege set: 0x0
[2015/04/15 08:58:44.502340, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-2]
[2015/04/15 08:58:44.502362, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-11]
[2015/04/15 08:58:44.502383, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-32-545]
[2015/04/15 08:58:44.502405, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids)
get_privileges_for_sids: sid = S-1-5-32-544
Privilege set: 0x1ffffff0
[2015/04/15 08:58:44.502439, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-1202]: value=[11202:B]
[2015/04/15 08:58:44.502460, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-1202]: id=[11202], endptr=[:B]
[2015/04/15 08:58:44.502484, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-1203]: value=[11203:B]
[2015/04/15 08:58:44.502504, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-1203]: id=[11203], endptr=[:B]
[2015/04/15 08:58:44.502528, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-513]: value=[10513:B]
[2015/04/15 08:58:44.502547, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-513]: id=[10513], endptr=[:B]
[2015/04/15 08:58:44.502570, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-512]: value=[10512:B]
[2015/04/15 08:58:44.502594, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-512]: id=[10512], endptr=[:B]
[2015/04/15 08:58:44.502619, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11157]: value=[21157:B]
[2015/04/15 08:58:44.502638, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11157]: id=[21157], endptr=[:B]
[2015/04/15 08:58:44.502662, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-1005]: value=[11005:B]
[2015/04/15 08:58:44.502681, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-1005]: id=[11005], endptr=[:B]
[2015/04/15 08:58:44.502705, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11693]: value=[21693:B]
[2015/04/15 08:58:44.502724, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11693]: id=[21693], endptr=[:B]
[2015/04/15 08:58:44.502748, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11543]: value=[21543:B]
[2015/04/15 08:58:44.502766, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11543]: id=[21543], endptr=[:B]
[2015/04/15 08:58:44.502790, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11729]: value=[21729:B]
[2015/04/15 08:58:44.502809, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11729]: id=[21729], endptr=[:B]
[2015/04/15 08:58:44.502833, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11551]: value=[21551:B]
[2015/04/15 08:58:44.502852, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11551]: id=[21551], endptr=[:B]
[2015/04/15 08:58:44.502877, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11569]: value=[21569:B]
[2015/04/15 08:58:44.502895, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11569]: id=[21569], endptr=[:B]
[2015/04/15 08:58:44.502919, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11163]: value=[21163:B]
[2015/04/15 08:58:44.502938, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-11163]: id=[21163], endptr=[:B]
[2015/04/15 08:58:44.502965, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-1-0]: value=[-1:N]
[2015/04/15 08:58:44.502985, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-1-0]: id=[4294967295], endptr=[:N]
[2015/04/15 08:58:44.503006, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-2]: value=[-1:N]
[2015/04/15 08:58:44.503025, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-2]: id=[4294967295], endptr=[:N]
[2015/04/15 08:58:44.503051, 10, pid=4127, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:296(gencache_set_data_blob)
Adding cache entry with key=[IDMAP/SID2XID/S-1-5-11] and timeout=[gio gen 1 01:00:00 1970 CET] (-1429081124 seconds in the past)
[2015/04/15 08:58:44.503088, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-32-545]: value=[25003:G]
[2015/04/15 08:58:44.503108, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-32-545]: id=[25003], endptr=[:G]
[2015/04/15 08:58:44.503131, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-32-544]: value=[25000:G]
[2015/04/15 08:58:44.503149, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-32-544]: id=[25000], endptr=[:G]
[2015/04/15 08:58:44.508900, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.508948, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:58:44.508985, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.509021, 5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:58:44.509047, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.509083, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:44.509102, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
LEGACY: mapping failed for sid S-1-1-0
[2015/04/15 08:58:44.509121, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.509139, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:58:44.509156, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:44.509173, 5, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:58:44.509190, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:44.509223, 4, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:44.509244, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
LEGACY: mapping failed for sid S-1-1-0
[2015/04/15 08:58:44.509265, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token)
Could not convert SID S-1-1-0 to gid, ignoring it
[2015/04/15 08:58:44.509285, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token)
Could not convert SID S-1-5-2 to gid, ignoring it
[2015/04/15 08:58:44.509303, 10, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token)
Could not convert SID S-1-5-11 to gid, ignoring it
[2015/04/15 08:58:44.509327, 10, pid=4127, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug)
Security token SIDs (33):
SID[ 0]: S-1-5-21-2943704632-3037471470-1787688681-1202
SID[ 1]: S-1-5-21-2943704632-3037471470-1787688681-1203
SID[ 2]: S-1-5-21-2943704632-3037471470-1787688681-513
SID[ 3]: S-1-5-21-2943704632-3037471470-1787688681-512
SID[ 4]: S-1-5-21-2943704632-3037471470-1787688681-11157
SID[ 5]: S-1-5-21-2943704632-3037471470-1787688681-1005
SID[ 6]: S-1-5-21-2943704632-3037471470-1787688681-11693
SID[ 7]: S-1-5-21-2943704632-3037471470-1787688681-11543
SID[ 8]: S-1-5-21-2943704632-3037471470-1787688681-11729
SID[ 9]: S-1-5-21-2943704632-3037471470-1787688681-11551
SID[ 10]: S-1-5-21-2943704632-3037471470-1787688681-11569
SID[ 11]: S-1-5-21-2943704632-3037471470-1787688681-11163
SID[ 12]: S-1-22-2-27
SID[ 13]: S-1-1-0
SID[ 14]: S-1-5-2
SID[ 15]: S-1-5-11
SID[ 16]: S-1-5-32-545
SID[ 17]: S-1-5-32-544
SID[ 18]: S-1-22-1-11202
SID[ 19]: S-1-22-2-11202
SID[ 20]: S-1-22-2-11203
SID[ 21]: S-1-22-2-10513
SID[ 22]: S-1-22-2-10512
SID[ 23]: S-1-22-2-21157
SID[ 24]: S-1-22-2-11005
SID[ 25]: S-1-22-2-21693
SID[ 26]: S-1-22-2-21543
SID[ 27]: S-1-22-2-21729
SID[ 28]: S-1-22-2-21551
SID[ 29]: S-1-22-2-21569
SID[ 30]: S-1-22-2-21163
SID[ 31]: S-1-22-2-25003
SID[ 32]: S-1-22-2-25000
Privileges (0x 1FFFFFF0):
Privilege[ 0]: SeMachineAccountPrivilege
Privilege[ 1]: SeTakeOwnershipPrivilege
Privilege[ 2]: SeBackupPrivilege
Privilege[ 3]: SeRestorePrivilege
Privilege[ 4]: SeRemoteShutdownPrivilege
Privilege[ 5]: SePrintOperatorPrivilege
Privilege[ 6]: SeAddUsersPrivilege
Privilege[ 7]: SeDiskOperatorPrivilege
Privilege[ 8]: SeSecurityPrivilege
Privilege[ 9]: SeSystemtimePrivilege
Privilege[ 10]: SeShutdownPrivilege
Privilege[ 11]: SeDebugPrivilege
Privilege[ 12]: SeSystemEnvironmentPrivilege
Privilege[ 13]: SeSystemProfilePrivilege
Privilege[ 14]: SeProfileSingleProcessPrivilege
Privilege[ 15]: SeIncreaseBasePriorityPrivilege
Privilege[ 16]: SeLoadDriverPrivilege
Privilege[ 17]: SeCreatePagefilePrivilege
Privilege[ 18]: SeIncreaseQuotaPrivilege
Privilege[ 19]: SeChangeNotifyPrivilege
Privilege[ 20]: SeUndockPrivilege
Privilege[ 21]: SeManageVolumePrivilege
Privilege[ 22]: SeImpersonatePrivilege
Privilege[ 23]: SeCreateGlobalPrivilege
Privilege[ 24]: SeEnableDelegationPrivilege
Rights (0x 0):
[2015/04/15 08:58:44.509765, 10, pid=4127, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 11202
Primary group is 11203 and contains 15 supplementary groups
Group[ 0]: 11202
Group[ 1]: 11203
Group[ 2]: 10513
Group[ 3]: 10512
Group[ 4]: 21157
Group[ 5]: 11005
Group[ 6]: 21693
Group[ 7]: 21543
Group[ 8]: 21729
Group[ 9]: 21551
Group[ 10]: 21569
Group[ 11]: 21163
Group[ 12]: 27
Group[ 13]: 25003
Group[ 14]: 25000
[2015/04/15 08:58:44.509919, 7, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:5168(lp_servicenumber)
lp_servicenumber: couldn't find DOMINIOCSA\admin
[2015/04/15 08:58:44.509949, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
Finding user DOMINIOCSA\admin
[2015/04/15 08:58:44.509968, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
Trying _Get_Pwnam(), username as lowercase is dominiocsa\admin
[2015/04/15 08:58:44.509989, 5, pid=4127, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
Get_Pwnam_internals did find user [DOMINIOCSA\admin]!
[2015/04/15 08:58:44.510006, 3, pid=4127, effective(0, 0), real(0, 0)] ../source3/smbd/password.c:144(register_homes_share)
Adding homes service for user 'DOMINIOCSA\admin' using home directory: '/home/DOMINIOCSA/admin'
[2015/04/15 08:58:44.510034, 7, pid=4127, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:5168(lp_servicenumber)
lp_servicenumber: couldn't find homes
[2015/04/15 08:58:44.510079, 4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:483(smb_pam_start)
smb_pam_start: PAM: Init user: DOMINIOCSA\admin
[2015/04/15 08:58:44.512880, 4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:492(smb_pam_start)
smb_pam_start: PAM: setting rhost to: vbox-winxp
[2015/04/15 08:58:44.512915, 4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:501(smb_pam_start)
smb_pam_start: PAM: setting tty
[2015/04/15 08:58:44.512933, 4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:509(smb_pam_start)
smb_pam_start: PAM: Init passed for user: DOMINIOCSA\admin
[2015/04/15 08:58:44.512951, 4, pid=4127, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:646(smb_internal_pam_session)
smb_internal_pam_session: PAM: tty set to: smb/333140644
[2015/04/15 08:58:51.939396, 0] ../source3/rpc_server/srv_pipe.c:1395(api_rpcTNP)
api_rpcTNP: \spoolss: SPOOLSS_GETJOB failed.
-------------- next part --------------
[2015/04/15 08:57:25, 0] ../source3/smbd/server.c:1189(main)
smbd version 4.1.17-Debian started.
Copyright Andrew Tridgell and the Samba Team 1992-2013
[2015/04/15 08:57:25, 5, pid=3841, effective(0, 0), real(0, 0)] ../lib/util/debug.c:334(debug_dump_status)
INFO: Current debug levels:
all: 10
tdb: 10
printdrivers: 10
lanman: 10
smb: 10
rpc_parse: 10
rpc_srv: 10
rpc_cli: 10
passdb: 10
sam: 10
auth: 10
winbind: 10
vfs: 10
idmap: 10
quota: 10
acls: 10
locking: 10
msdfs: 10
dmapi: 10
registry: 10
scavenger: 10
dns: 10
ldb: 10
doing parameter security = domain
doing parameter encrypt passwords = true
doing parameter passdb backend = tdbsam
doing parameter obey pam restrictions = yes
doing parameter unix password sync = yes
doing parameter passwd program = /usr/bin/passwd %u
doing parameter passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
doing parameter pam password change = yes
doing parameter map to guest = bad user
doing parameter idmap config DOMINIOCSA : backend = rid
doing parameter idmap config DOMINIOCSA : range = 10000-99999
doing parameter idmap config * : backend = tdb
doing parameter idmap config * : range = 100000-200000
doing parameter allow trusted domains = No
doing parameter winbind enum users = yes
doing parameter winbind enum groups = yes
doing parameter template shell = /bin/bash
doing parameter winbind offline logon = true
doing parameter usershare allow guests = yes
[2015/04/15 08:57:25, 4, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4878(lp_load_ex)
pm_process() returned Yes
[2015/04/15 08:57:25, 7, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:5168(lp_servicenumber)
lp_servicenumber: couldn't find homes
[2015/04/15 08:57:25, 5, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
Registering messaging pointer for type 2 - private_data=(nil)
[2015/04/15 08:57:25, 5, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
Registering messaging pointer for type 9 - private_data=(nil)
[2015/04/15 08:57:25, 2, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/tallocmsg.c:124(register_msg_pool_usage)
Registered MSG_REQ_POOL_USAGE
[2015/04/15 08:57:25, 5, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
Registering messaging pointer for type 11 - private_data=(nil)
[2015/04/15 08:57:25, 5, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
Registering messaging pointer for type 12 - private_data=(nil)
[2015/04/15 08:57:25, 2, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/dmallocmsg.c:78(register_dmalloc_msgs)
Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
[2015/04/15 08:57:25, 5, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
Registering messaging pointer for type 1 - private_data=(nil)
[2015/04/15 08:57:25, 5, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
Registering messaging pointer for type 5 - private_data=(nil)
[2015/04/15 08:57:25.199224, 3, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4839(lp_load_ex)
lp_load_ex: refreshing parameters
[2015/04/15 08:57:25.199247, 5, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1488(free_param_opts)
Freeing parametrics:
[2015/04/15 08:57:25.199277, 3, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:750(init_globals)
Initialising global parameters
[2015/04/15 08:57:25.199300, 2, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:543(max_open_files)
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
[2015/04/15 08:57:25.199343, 3, pid=3841, effective(0, 0), real(0, 0)] ../lib/util/params.c:550(pm_process)
params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
[2015/04/15 08:57:25.199375, 3, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3565(do_section)
Processing section "[global]"
doing parameter workgroup = DOMINIOCSA
doing parameter server string = %h server (Samba, Ubuntu)
doing parameter dns proxy = no
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 1000
doing parameter syslog = 0
doing parameter panic action = /usr/share/samba/panic-action %d
doing parameter log level = 10 all:10
[2015/04/15 08:57:25.199483, 5, pid=3841, effective(0, 0), real(0, 0)] ../lib/util/debug.c:334(debug_dump_status)
INFO: Current debug levels:
all: 10
tdb: 10
printdrivers: 10
lanman: 10
smb: 10
rpc_parse: 10
rpc_srv: 10
rpc_cli: 10
passdb: 10
sam: 10
auth: 10
winbind: 10
vfs: 10
idmap: 10
quota: 10
acls: 10
locking: 10
msdfs: 10
dmapi: 10
registry: 10
scavenger: 10
dns: 10
ldb: 10
doing parameter security = domain
doing parameter encrypt passwords = true
doing parameter passdb backend = tdbsam
doing parameter obey pam restrictions = yes
doing parameter unix password sync = yes
doing parameter passwd program = /usr/bin/passwd %u
doing parameter passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
doing parameter pam password change = yes
doing parameter map to guest = bad user
doing parameter idmap config DOMINIOCSA : backend = rid
doing parameter idmap config DOMINIOCSA : range = 10000-99999
doing parameter idmap config * : backend = tdb
doing parameter idmap config * : range = 100000-200000
doing parameter allow trusted domains = No
doing parameter winbind enum users = yes
doing parameter winbind enum groups = yes
doing parameter template shell = /bin/bash
doing parameter winbind offline logon = true
doing parameter usershare allow guests = yes
[2015/04/15 08:57:25.199890, 2, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3582(do_section)
Processing section "[printers]"
[2015/04/15 08:57:25.199927, 8, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1620(add_a_service)
add_a_service: Creating snum = 0 for printers
[2015/04/15 08:57:25.199947, 10, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1661(hash_a_service)
hash_a_service: creating servicehash
[2015/04/15 08:57:25.199969, 10, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1670(hash_a_service)
hash_a_service: hashing index 0 for service name printers
doing parameter comment = All Printers
doing parameter browseable = no
doing parameter path = /var/spool/samba
doing parameter printable = yes
doing parameter guest ok = no
doing parameter read only = yes
doing parameter create mask = 0700
[2015/04/15 08:57:25.200100, 2, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3582(do_section)
Processing section "[print$]"
[2015/04/15 08:57:25.200142, 8, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1620(add_a_service)
add_a_service: Creating snum = 1 for print$
[2015/04/15 08:57:25.200163, 10, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1670(hash_a_service)
hash_a_service: hashing index 1 for service name print$
doing parameter comment = Printer Drivers
doing parameter path = /var/lib/samba/printers
doing parameter browseable = yes
doing parameter read only = no
doing parameter guest ok = no
doing parameter writeable = yes
[2015/04/15 08:57:25.200245, 2, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3582(do_section)
Processing section "[testbsd]"
[2015/04/15 08:57:25.200277, 8, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1620(add_a_service)
add_a_service: Creating snum = 2 for testbsd
[2015/04/15 08:57:25.200297, 10, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1670(hash_a_service)
hash_a_service: hashing index 2 for service name testbsd
doing parameter comment = Test BSD printing
doing parameter printing = bsd
doing parameter path = /tmp
doing parameter guest ok = Yes
doing parameter printable = Yes
doing parameter print ok = Yes
doing parameter print command = /usr/local/bin/bsdprinting.sh %s %H "%J" %p %m %S 'default'
[2015/04/15 08:57:25.200411, 4, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4878(lp_load_ex)
pm_process() returned Yes
[2015/04/15 08:57:25.200441, 7, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:5168(lp_servicenumber)
lp_servicenumber: couldn't find homes
[2015/04/15 08:57:25.200474, 8, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1620(add_a_service)
add_a_service: Creating snum = 3 for IPC$
[2015/04/15 08:57:25.200494, 10, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1670(hash_a_service)
hash_a_service: hashing index 3 for service name IPC$
[2015/04/15 08:57:25.200517, 3, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1774(lp_add_ipc)
adding IPC service
[2015/04/15 08:57:25.200549, 6, pid=3841, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed)
lp_file_list_changed()
file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Apr 15 08:52:33 2015
[2015/04/15 08:57:25.200730, 2, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:341(add_interface)
added interface eth0 ip=192.168.70.10 bcast=192.168.70.255 netmask=255.255.255.0
[2015/04/15 08:57:25.200789, 3, pid=3841, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1248(main)
loaded services
[2015/04/15 08:57:25.200820, 5, pid=3841, effective(0, 0), real(0, 0)] ../source3/lib/util_names.c:152(init_names)
Netbios name list:-
my_netbios_names[0]="PSALA-LX2"
[2015/04/15 08:57:25.201011, 3, pid=3841, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1280(main)
Becoming a daemon.
[2015/04/15 08:57:25.201854, 8, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util.c:391(fcntl_lock)
fcntl_lock 10 6 0 1 1
[2015/04/15 08:57:25.201935, 8, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util.c:426(fcntl_lock)
fcntl_lock: Lock call successful
[2015/04/15 08:57:25.202279, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb)
Attempting to register passdb backend smbpasswd
[2015/04/15 08:57:25.218183, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb)
Successfully added passdb backend 'smbpasswd'
[2015/04/15 08:57:25.218215, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb)
Attempting to register passdb backend tdbsam
[2015/04/15 08:57:25.218243, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb)
Successfully added passdb backend 'tdbsam'
[2015/04/15 08:57:25.218273, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb)
Attempting to register passdb backend wbc_sam
[2015/04/15 08:57:25.218302, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb)
Successfully added passdb backend 'wbc_sam'
[2015/04/15 08:57:25.218331, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb)
Attempting to register passdb backend samba_dsdb
[2015/04/15 08:57:25.218367, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb)
Successfully added passdb backend 'samba_dsdb'
[2015/04/15 08:57:25.218397, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb)
Attempting to register passdb backend samba4
[2015/04/15 08:57:25.218428, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb)
Successfully added passdb backend 'samba4'
[2015/04/15 08:57:25.218475, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb)
Attempting to register passdb backend ldapsam
[2015/04/15 08:57:25.218506, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb)
Successfully added passdb backend 'ldapsam'
[2015/04/15 08:57:25.218536, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb)
Attempting to register passdb backend NDS_ldapsam
[2015/04/15 08:57:25.218565, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb)
Successfully added passdb backend 'NDS_ldapsam'
[2015/04/15 08:57:25.218592, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb)
Attempting to register passdb backend IPA_ldapsam
[2015/04/15 08:57:25.218620, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb)
Successfully added passdb backend 'IPA_ldapsam'
[2015/04/15 08:57:25.218661, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:153(make_pdb_method_name)
Attempting to find a passdb backend to match tdbsam (tdbsam)
[2015/04/15 08:57:25.218695, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:174(make_pdb_method_name)
Found pdb backend tdbsam
[2015/04/15 08:57:25.218749, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:185(make_pdb_method_name)
pdb backend tdbsam has a valid init
[2015/04/15 08:57:25.219018, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
check lock order 1 for /var/run/samba/smbXsrv_version_global.tdb
[2015/04/15 08:57:25.219062, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:/var/run/samba/smbXsrv_version_global.tdb 2:<none> 3:<none>
[2015/04/15 08:57:25.219104, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Locking key 736D62587372765F7665
[2015/04/15 08:57:25.219153, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
Allocated locked data 0x0x7fbe441afb20
[2015/04/15 08:57:25.219363, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Unlocking key 736D62587372765F7665
[2015/04/15 08:57:25.219407, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
release lock order 1 for /var/run/samba/smbXsrv_version_global.tdb
[2015/04/15 08:57:25.219430, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:<none> 2:<none> 3:<none>
[2015/04/15 08:57:25.219451, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:245(smbXsrv_version_global_init)
smbXsrv_version_global_init
[2015/04/15 08:57:25.219469, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:246(smbXsrv_version_global_init)
[2015/04/15 08:57:25.219484, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
&global_blob: struct smbXsrv_version_globalB
version : SMBXSRV_VERSION_0 (0)
seqnum : 0x00000001 (1)
info : union smbXsrv_version_globalU(case 0)
info0 : *
info0: struct smbXsrv_version_global0
db_rec : NULL
num_nodes : 0x00000001 (1)
nodes: ARRAY(1)
nodes: struct smbXsrv_version_node0
server_id: struct server_id
pid : 0x0000000000000f02 (3842)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
min_version : SMBXSRV_VERSION_0 (0)
max_version : SMBXSRV_VERSION_0 (0)
current_version : SMBXSRV_VERSION_0 (0)
[2015/04/15 08:57:25.230305, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
Registering messaging pointer for type 784 - private_data=0x7fbe441afd20
[2015/04/15 08:57:25.230363, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
Registering messaging pointer for type 788 - private_data=0x7fbe441b1d80
[2015/04/15 08:57:25.230407, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
Registering messaging pointer for type 789 - private_data=0x7fbe441b2910
[2015/04/15 08:57:25.230490, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:759(regdb_init)
regdb_init: registry db openend. refcount reset (1)
[2015/04/15 08:57:25.230529, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:70(reghook_cache_init)
reghook_cache_init: new tree with default ops 0x7fbe42add6c0 for key []
[2015/04/15 08:57:25.230629, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports]
[2015/04/15 08:57:25.230676, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[0]: name[Samba Printer Port] len[2]
[2015/04/15 08:57:25.230704, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:57:25.230731, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[0]: name[DefaultSpoolDirectory] len[70]
[2015/04/15 08:57:25.230752, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2015/04/15 08:57:25.230777, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[0]: name[DisplayName] len[20]
[2015/04/15 08:57:25.230799, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[1]: name[ErrorControl] len[4]
[2015/04/15 08:57:25.230820, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2015/04/15 08:57:25.230845, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[0]: name[DisplayName] len[20]
[2015/04/15 08:57:25.230865, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[1]: name[ErrorControl] len[4]
[2015/04/15 08:57:25.230892, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
reghook_cache_add: Adding ops 0x7fbe430011c0 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers]
[2015/04/15 08:57:25.230919, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
pathtree_add: Enter
[2015/04/15 08:57:25.230946, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] to tree
[2015/04/15 08:57:25.230967, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
pathtree_add: Exit
[2015/04/15 08:57:25.230986, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
reghook_cache_add: Adding ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:57:25.231005, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
pathtree_add: Enter
[2015/04/15 08:57:25.231026, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] to tree
[2015/04/15 08:57:25.231045, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
pathtree_add: Exit
[2015/04/15 08:57:25.231063, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
reghook_cache_add: Adding ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports]
[2015/04/15 08:57:25.231081, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
pathtree_add: Enter
[2015/04/15 08:57:25.231100, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] to tree
[2015/04/15 08:57:25.231118, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
pathtree_add: Exit
[2015/04/15 08:57:25.231136, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
reghook_cache_add: Adding ops 0x7fbe43001240 for key [\HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares]
[2015/04/15 08:57:25.231154, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
pathtree_add: Enter
[2015/04/15 08:57:25.231173, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] to tree
[2015/04/15 08:57:25.231192, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
pathtree_add: Exit
[2015/04/15 08:57:25.231210, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
reghook_cache_add: Adding ops 0x7fbe41b087c0 for key [\HKLM\SOFTWARE\Samba\smbconf]
[2015/04/15 08:57:25.231228, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
pathtree_add: Enter
[2015/04/15 08:57:25.231246, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
pathtree_add: Successfully added node [HKLM\SOFTWARE\Samba\smbconf] to tree
[2015/04/15 08:57:25.231264, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
pathtree_add: Exit
[2015/04/15 08:57:25.231282, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
reghook_cache_add: Adding ops 0x7fbe430012c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
[2015/04/15 08:57:25.231300, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
pathtree_add: Enter
[2015/04/15 08:57:25.231319, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] to tree
[2015/04/15 08:57:25.231342, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
pathtree_add: Exit
[2015/04/15 08:57:25.231361, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
reghook_cache_add: Adding ops 0x7fbe43001340 for key [\HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions]
[2015/04/15 08:57:25.231379, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
pathtree_add: Enter
[2015/04/15 08:57:25.231398, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] to tree
[2015/04/15 08:57:25.231416, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
pathtree_add: Exit
[2015/04/15 08:57:25.231434, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
reghook_cache_add: Adding ops 0x7fbe430013c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
[2015/04/15 08:57:25.231452, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
pathtree_add: Enter
[2015/04/15 08:57:25.231471, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] to tree
[2015/04/15 08:57:25.231489, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
pathtree_add: Exit
[2015/04/15 08:57:25.231510, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
reghook_cache_add: Adding ops 0x7fbe43001440 for key [\HKPT]
[2015/04/15 08:57:25.231528, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
pathtree_add: Enter
[2015/04/15 08:57:25.231546, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
pathtree_add: Successfully added node [HKPT] to tree
[2015/04/15 08:57:25.231564, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
pathtree_add: Exit
[2015/04/15 08:57:25.231583, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
reghook_cache_add: Adding ops 0x7fbe430014c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:57:25.231601, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
pathtree_add: Enter
[2015/04/15 08:57:25.231619, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] to tree
[2015/04/15 08:57:25.231636, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
pathtree_add: Exit
[2015/04/15 08:57:25.231654, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
reghook_cache_add: Adding ops 0x7fbe43001540 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib]
[2015/04/15 08:57:25.231672, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
pathtree_add: Enter
[2015/04/15 08:57:25.231691, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] to tree
[2015/04/15 08:57:25.231709, 8, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
pathtree_add: Exit
[2015/04/15 08:57:25.231728, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (1->0)
[2015/04/15 08:57:25.231903, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
Finding user nobody
[2015/04/15 08:57:25.231936, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
Trying _Get_Pwnam(), username as lowercase is nobody
[2015/04/15 08:57:25.232365, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
Get_Pwnam_internals did find user [nobody]!
[2015/04/15 08:57:25.232422, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
Finding user PSALA-LX2\nobody
[2015/04/15 08:57:25.232444, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
Trying _Get_Pwnam(), username as lowercase is psala-lx2\nobody
[2015/04/15 08:57:25.240307, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:128(Get_Pwnam_internals)
Trying _Get_Pwnam(), username as given is PSALA-LX2\nobody
[2015/04/15 08:57:25.244587, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:141(Get_Pwnam_internals)
Trying _Get_Pwnam(), username as uppercase is PSALA-LX2\NOBODY
[2015/04/15 08:57:25.249624, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:153(Get_Pwnam_internals)
Checking combinations of 0 uppercase letters in psala-lx2\nobody
[2015/04/15 08:57:25.249714, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
Get_Pwnam_internals didn't find user [PSALA-LX2\nobody]!
[2015/04/15 08:57:25.249761, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
Finding user nobody
[2015/04/15 08:57:25.249780, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
Trying _Get_Pwnam(), username as lowercase is nobody
[2015/04/15 08:57:25.249805, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
Get_Pwnam_internals did find user [nobody]!
[2015/04/15 08:57:25.250120, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:224(create_local_nt_token_from_info3)
Create local NT token for nobody
[2015/04/15 08:57:25.250211, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
Finding user nobody
[2015/04/15 08:57:25.250257, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
Trying _Get_Pwnam(), username as lowercase is nobody
[2015/04/15 08:57:25.250279, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
Get_Pwnam_internals did find user [nobody]!
[2015/04/15 08:57:25.250317, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist)
sys_getgrouplist: user [nobody]
[2015/04/15 08:57:25.250442, 5, pid=3842, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:67(gencache_init)
Opening cache file at /var/cache/samba/gencache.tdb
[2015/04/15 08:57:25.250631, 5, pid=3842, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:110(gencache_init)
Opening cache file at /var/run/samba/gencache_notrans.tdb
[2015/04/15 08:57:25.250698, 10, pid=3842, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:296(gencache_set_data_blob)
Adding cache entry with key=[IDMAP/GID2SID/65534] and timeout=[gio gen 1 01:00:00 1970 CET] (-1429081045 seconds in the past)
[2015/04/15 08:57:25.259682, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1220(gid_to_sid)
gid 65534 -> sid S-1-5-21-2943704632-3037471470-1787688681-55534
[2015/04/15 08:57:25.259839, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-32-544]: value=[25000:G]
[2015/04/15 08:57:25.259891, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-32-544]: id=[25000], endptr=[:G]
[2015/04/15 08:57:25.259935, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1442(sid_to_gid)
sid S-1-5-32-544 -> gid 25000
[2015/04/15 08:57:25.260005, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-32-545]: value=[25003:G]
[2015/04/15 08:57:25.260066, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-32-545]: id=[25003], endptr=[:G]
[2015/04/15 08:57:25.260110, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1442(sid_to_gid)
sid S-1-5-32-545 -> gid 25003
[2015/04/15 08:57:25.260179, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.260223, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.260251, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.260306, 5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:57:25.260353, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.260634, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.260771, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-204140918-800915079-1589553425-501]
[2015/04/15 08:57:25.260837, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-204140918-800915079-1589553425-514]
[2015/04/15 08:57:25.260894, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-2943704632-3037471470-1787688681-55534]
[2015/04/15 08:57:25.260949, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids)
get_privileges_for_sids: sid = S-1-1-0
Privilege set: 0x0
[2015/04/15 08:57:25.261014, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-2]
[2015/04/15 08:57:25.261065, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-32-546]
[2015/04/15 08:57:25.261145, 10, pid=3842, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:296(gencache_set_data_blob)
Adding cache entry with key=[IDMAP/SID2XID/S-1-5-21-204140918-800915079-1589553425-501] and timeout=[gio gen 1 01:00:00 1970 CET] (-1429081045 seconds in the past)
[2015/04/15 08:57:25.261251, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-55534]: value=[65534:B]
[2015/04/15 08:57:25.261302, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
Parsing value for key [IDMAP/SID2XID/S-1-5-21-2943704632-3037471470-1787688681-55534]: id=[65534], endptr=[:B]
[2015/04/15 08:57:25.261366, 10, pid=3842, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:296(gencache_set_data_blob)
Adding cache entry with key=[IDMAP/SID2XID/S-1-1-0] and timeout=[gio gen 1 01:00:00 1970 CET] (-1429081045 seconds in the past)
[2015/04/15 08:57:25.261452, 10, pid=3842, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:296(gencache_set_data_blob)
Adding cache entry with key=[IDMAP/SID2XID/S-1-5-2] and timeout=[gio gen 1 01:00:00 1970 CET] (-1429081045 seconds in the past)
[2015/04/15 08:57:25.479613, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.479668, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.479688, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.479706, 5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:57:25.479724, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.479775, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1712(lookup_global_sam_rid)
lookup_global_sam_rid: looking up RID 514.
[2015/04/15 08:57:25.479803, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2015/04/15 08:57:25.479824, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2015/04/15 08:57:25.479841, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2015/04/15 08:57:25.479858, 5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:57:25.479875, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.479944, 4, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:552(tdbsam_open)
tdbsam_open: successfully opened /var/lib/samba/private/passdb.tdb
[2015/04/15 08:57:25.479971, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:646(tdbsam_getsampwrid)
pdb_getsampwrid (TDB): error looking up RID 514 by key RID_00000202.
[2015/04/15 08:57:25.480007, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480030, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1788(lookup_global_sam_rid)
Can't find a unix id for an unmapped group
[2015/04/15 08:57:25.480047, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1498(pdb_default_sid_to_id)
SID S-1-5-21-204140918-800915079-1589553425-514 is or domain, but is unmapped
[2015/04/15 08:57:25.480070, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480088, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
LEGACY: mapping failed for sid S-1-5-21-204140918-800915079-1589553425-514
[2015/04/15 08:57:25.480108, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480125, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480143, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480160, 5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:57:25.480177, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.480210, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1712(lookup_global_sam_rid)
lookup_global_sam_rid: looking up RID 514.
[2015/04/15 08:57:25.480230, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2015/04/15 08:57:25.480248, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480265, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2015/04/15 08:57:25.480282, 5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:57:25.480299, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.480329, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:646(tdbsam_getsampwrid)
pdb_getsampwrid (TDB): error looking up RID 514 by key RID_00000202.
[2015/04/15 08:57:25.480357, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480377, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1788(lookup_global_sam_rid)
Can't find a unix id for an unmapped group
[2015/04/15 08:57:25.480394, 5, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1498(pdb_default_sid_to_id)
SID S-1-5-21-204140918-800915079-1589553425-514 is or domain, but is unmapped
[2015/04/15 08:57:25.480416, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480434, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
LEGACY: mapping failed for sid S-1-5-21-204140918-800915079-1589553425-514
[2015/04/15 08:57:25.480453, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480470, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480487, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480504, 5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:57:25.480521, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.480560, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480593, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
LEGACY: mapping failed for sid S-1-1-0
[2015/04/15 08:57:25.480613, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480630, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480647, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480664, 5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:57:25.480685, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.480714, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480734, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
LEGACY: mapping failed for sid S-1-1-0
[2015/04/15 08:57:25.480753, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480770, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480787, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480804, 5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:57:25.480821, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.480848, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480867, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
LEGACY: mapping failed for sid S-1-5-2
[2015/04/15 08:57:25.480885, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480903, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.480920, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.480937, 5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:57:25.480953, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.480981, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.481000, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
LEGACY: mapping failed for sid S-1-5-2
[2015/04/15 08:57:25.481018, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.481035, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.481053, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.481069, 5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:57:25.481086, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.481120, 10, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1526(pdb_default_sid_to_id)
Could not find map for sid S-1-5-32-546
[2015/04/15 08:57:25.481144, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.481168, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
LEGACY: mapping failed for sid S-1-5-32-546
[2015/04/15 08:57:25.481187, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.481204, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.481221, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.481239, 5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:57:25.481255, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.481287, 10, pid=3842, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1526(pdb_default_sid_to_id)
Could not find map for sid S-1-5-32-546
[2015/04/15 08:57:25.481311, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.481329, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid)
LEGACY: mapping failed for sid S-1-5-32-546
[2015/04/15 08:57:25.481349, 10, pid=3842, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token)
Could not convert SID S-1-5-21-204140918-800915079-1589553425-514 to gid, ignoring it
[2015/04/15 08:57:25.481373, 10, pid=3842, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token)
Could not convert SID S-1-1-0 to gid, ignoring it
[2015/04/15 08:57:25.481392, 10, pid=3842, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token)
Could not convert SID S-1-5-2 to gid, ignoring it
[2015/04/15 08:57:25.481410, 10, pid=3842, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token)
Could not convert SID S-1-5-32-546 to gid, ignoring it
[2015/04/15 08:57:25.481437, 10, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug)
Security token SIDs (8):
SID[ 0]: S-1-5-21-204140918-800915079-1589553425-501
SID[ 1]: S-1-5-21-204140918-800915079-1589553425-514
SID[ 2]: S-1-5-21-2943704632-3037471470-1787688681-55534
SID[ 3]: S-1-1-0
SID[ 4]: S-1-5-2
SID[ 5]: S-1-5-32-546
SID[ 6]: S-1-22-1-65534
SID[ 7]: S-1-22-2-65534
Privileges (0x 0):
Rights (0x 0):
[2015/04/15 08:57:25.481537, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 65534
Primary group is 65534 and contains 1 supplementary groups
Group[ 0]: 65534
[2015/04/15 08:57:25.481795, 3, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/rpc_server/svcctl/srv_svcctl_reg.c:565(svcctl_init_winreg)
Initialise the svcctl registry keys if needed.
[2015/04/15 08:57:25.481827, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.481846, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.481864, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.481881, 5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:57:25.481898, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.481961, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.481985, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open)
regdb_open: registry db opened. refcount reset (1)
[2015/04/15 08:57:25.482067, 4, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p)
Create pipe requested \winreg
[2015/04/15 08:57:25.482100, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles)
init_pipe_handle_list: created handle list for pipe \winreg
[2015/04/15 08:57:25.482120, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles)
init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg
[2015/04/15 08:57:25.482276, 4, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p)
Created internal pipe \winreg
[2015/04/15 08:57:25.482357, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenHKLM: struct winreg_OpenHKLM
in: struct winreg_OpenHKLM
system_name : NULL
access_mask : 0x02000000 (33554432)
0: KEY_QUERY_VALUE
0: KEY_SET_VALUE
0: KEY_CREATE_SUB_KEY
0: KEY_ENUMERATE_SUB_KEYS
0: KEY_NOTIFY
0: KEY_CREATE_LINK
0: KEY_WOW64_64KEY
0: KEY_WOW64_32KEY
[2015/04/15 08:57:25.482483, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [HKLM]
[2015/04/15 08:57:25.482505, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (1->2)
[2015/04/15 08:57:25.482529, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM]
[2015/04/15 08:57:25.482549, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM]
[2015/04/15 08:57:25.482568, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.482586, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM]
[2015/04/15 08:57:25.482650, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.482697, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenHKLM: struct winreg_OpenHKLM
out: struct winreg_OpenHKLM
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000001-0000-0000-2e55-d50b020f0000
result : WERR_OK
[2015/04/15 08:57:25.482882, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenKey: struct winreg_OpenKey
in: struct winreg_OpenKey
parent_handle : *
parent_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000001-0000-0000-2e55-d50b020f0000
keyname: struct winreg_String
name_len : 0x0044 (68)
name_size : 0x0044 (68)
name : *
name : 'SYSTEM\CurrentControlSet\Services'
options : 0x00000000 (0)
0: REG_OPTION_VOLATILE
0: REG_OPTION_CREATE_LINK
0: REG_OPTION_BACKUP_RESTORE
0: REG_OPTION_OPEN_LINK
access_mask : 0x02000000 (33554432)
0: KEY_QUERY_VALUE
0: KEY_SET_VALUE
0: KEY_CREATE_SUB_KEY
0: KEY_ENUMERATE_SUB_KEYS
0: KEY_NOTIFY
0: KEY_CREATE_LINK
0: KEY_WOW64_64KEY
0: KEY_WOW64_32KEY
[2015/04/15 08:57:25.483401, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.483449, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.483468, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (2->3)
[2015/04/15 08:57:25.483487, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.483504, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.483522, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.483539, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.483566, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.483587, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.483607, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.483624, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.483642, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.483659, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.483685, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.483706, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.483729, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.483747, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.483766, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.483783, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.483820, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.483841, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.483860, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
Opened policy hnd[2] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.483899, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenKey: struct winreg_OpenKey
out: struct winreg_OpenKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000002-0000-0000-2e55-d50b020f0000
result : WERR_OK
[2015/04/15 08:57:25.483991, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_QueryInfoKey: struct winreg_QueryInfoKey
in: struct winreg_QueryInfoKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000002-0000-0000-2e55-d50b020f0000
classname : *
classname: struct winreg_String
name_len : 0x0000 (0)
name_size : 0x0000 (0)
name : NULL
[2015/04/15 08:57:25.484097, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.484141, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.484160, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.484184, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2074(regdb_get_secdesc)
regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.484222, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_QueryInfoKey: struct winreg_QueryInfoKey
out: struct winreg_QueryInfoKey
classname : *
classname: struct winreg_String
name_len : 0x0000 (0)
name_size : 0x0000 (0)
name : NULL
num_subkeys : *
num_subkeys : 0x00000007 (7)
max_subkeylen : *
max_subkeylen : 0x0000001c (28)
max_classlen : *
max_classlen : 0x00000000 (0)
num_values : *
num_values : 0x00000000 (0)
max_valnamelen : *
max_valnamelen : 0x00000002 (2)
max_valbufsize : *
max_valbufsize : 0x00000000 (0)
secdescsize : *
secdescsize : 0x00000078 (120)
last_changed_time : *
last_changed_time : NTTIME(0)
result : WERR_OK
[2015/04/15 08:57:25.484457, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_EnumKey: struct winreg_EnumKey
in: struct winreg_EnumKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000002-0000-0000-2e55-d50b020f0000
enum_index : 0x00000000 (0)
name : *
name: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x001e (30)
name : *
name : ''
keyclass : *
keyclass: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x0002 (2)
name : *
name : ''
last_changed_time : *
last_changed_time : NTTIME(0)
[2015/04/15 08:57:25.484647, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.484688, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
_winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.484708, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_EnumKey: struct winreg_EnumKey
out: struct winreg_EnumKey
name : *
name: struct winreg_StringBuf
length : 0x001a (26)
size : 0x001e (30)
name : *
name : 'LanmanServer'
keyclass : *
keyclass: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x0002 (2)
name : *
name : ''
last_changed_time : *
last_changed_time : NTTIME(0)
result : WERR_OK
[2015/04/15 08:57:25.484867, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_EnumKey: struct winreg_EnumKey
in: struct winreg_EnumKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000002-0000-0000-2e55-d50b020f0000
enum_index : 0x00000001 (1)
name : *
name: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x001e (30)
name : *
name : ''
keyclass : *
keyclass: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x0002 (2)
name : *
name : ''
last_changed_time : *
last_changed_time : NTTIME(0)
[2015/04/15 08:57:25.485051, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.485091, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
_winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.485110, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_EnumKey: struct winreg_EnumKey
out: struct winreg_EnumKey
name : *
name: struct winreg_StringBuf
length : 0x0012 (18)
size : 0x001e (30)
name : *
name : 'Eventlog'
keyclass : *
keyclass: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x0002 (2)
name : *
name : ''
last_changed_time : *
last_changed_time : NTTIME(0)
result : WERR_OK
[2015/04/15 08:57:25.485265, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_EnumKey: struct winreg_EnumKey
in: struct winreg_EnumKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000002-0000-0000-2e55-d50b020f0000
enum_index : 0x00000002 (2)
name : *
name: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x001e (30)
name : *
name : ''
keyclass : *
keyclass: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x0002 (2)
name : *
name : ''
last_changed_time : *
last_changed_time : NTTIME(0)
[2015/04/15 08:57:25.485441, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.485480, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
_winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.485504, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_EnumKey: struct winreg_EnumKey
out: struct winreg_EnumKey
name : *
name: struct winreg_StringBuf
length : 0x000c (12)
size : 0x001e (30)
name : *
name : 'Tcpip'
keyclass : *
keyclass: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x0002 (2)
name : *
name : ''
last_changed_time : *
last_changed_time : NTTIME(0)
result : WERR_OK
[2015/04/15 08:57:25.485658, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_EnumKey: struct winreg_EnumKey
in: struct winreg_EnumKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000002-0000-0000-2e55-d50b020f0000
enum_index : 0x00000003 (3)
name : *
name: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x001e (30)
name : *
name : ''
keyclass : *
keyclass: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x0002 (2)
name : *
name : ''
last_changed_time : *
last_changed_time : NTTIME(0)
[2015/04/15 08:57:25.485835, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.485874, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
_winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.485893, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_EnumKey: struct winreg_EnumKey
out: struct winreg_EnumKey
name : *
name: struct winreg_StringBuf
length : 0x0012 (18)
size : 0x001e (30)
name : *
name : 'Netlogon'
keyclass : *
keyclass: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x0002 (2)
name : *
name : ''
last_changed_time : *
last_changed_time : NTTIME(0)
result : WERR_OK
[2015/04/15 08:57:25.486046, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_EnumKey: struct winreg_EnumKey
in: struct winreg_EnumKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000002-0000-0000-2e55-d50b020f0000
enum_index : 0x00000004 (4)
name : *
name: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x001e (30)
name : *
name : ''
keyclass : *
keyclass: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x0002 (2)
name : *
name : ''
last_changed_time : *
last_changed_time : NTTIME(0)
[2015/04/15 08:57:25.486228, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.486268, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
_winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.486286, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_EnumKey: struct winreg_EnumKey
out: struct winreg_EnumKey
name : *
name: struct winreg_StringBuf
length : 0x0010 (16)
size : 0x001e (30)
name : *
name : 'Spooler'
keyclass : *
keyclass: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x0002 (2)
name : *
name : ''
last_changed_time : *
last_changed_time : NTTIME(0)
result : WERR_OK
[2015/04/15 08:57:25.486440, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_EnumKey: struct winreg_EnumKey
in: struct winreg_EnumKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000002-0000-0000-2e55-d50b020f0000
enum_index : 0x00000005 (5)
name : *
name: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x001e (30)
name : *
name : ''
keyclass : *
keyclass: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x0002 (2)
name : *
name : ''
last_changed_time : *
last_changed_time : NTTIME(0)
[2015/04/15 08:57:25.486615, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.486660, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
_winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.486679, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_EnumKey: struct winreg_EnumKey
out: struct winreg_EnumKey
name : *
name: struct winreg_StringBuf
length : 0x001e (30)
size : 0x001e (30)
name : *
name : 'RemoteRegistry'
keyclass : *
keyclass: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x0002 (2)
name : *
name : ''
last_changed_time : *
last_changed_time : NTTIME(0)
result : WERR_OK
[2015/04/15 08:57:25.486832, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_EnumKey: struct winreg_EnumKey
in: struct winreg_EnumKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000002-0000-0000-2e55-d50b020f0000
enum_index : 0x00000006 (6)
name : *
name: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x001e (30)
name : *
name : ''
keyclass : *
keyclass: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x0002 (2)
name : *
name : ''
last_changed_time : *
last_changed_time : NTTIME(0)
[2015/04/15 08:57:25.487009, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.487048, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
_winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.487066, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_EnumKey: struct winreg_EnumKey
out: struct winreg_EnumKey
name : *
name: struct winreg_StringBuf
length : 0x000a (10)
size : 0x001e (30)
name : *
name : 'WINS'
keyclass : *
keyclass: struct winreg_StringBuf
length : 0x0000 (0)
size : 0x0002 (2)
name : *
name : ''
last_changed_time : *
last_changed_time : NTTIME(0)
result : WERR_OK
[2015/04/15 08:57:25.487246, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CreateKey: struct winreg_CreateKey
in: struct winreg_CreateKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000001-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0054 (84)
name_size : 0x0054 (84)
name : *
name : 'SYSTEM\CurrentControlSet\Services\Spooler'
keyclass: struct winreg_String
name_len : 0x0002 (2)
name_size : 0x0002 (2)
name : *
name : ''
options : 0x00000000 (0)
0: REG_OPTION_VOLATILE
0: REG_OPTION_CREATE_LINK
0: REG_OPTION_BACKUP_RESTORE
0: REG_OPTION_OPEN_LINK
access_mask : 0x02000000 (33554432)
0: KEY_QUERY_VALUE
0: KEY_SET_VALUE
0: KEY_CREATE_SUB_KEY
0: KEY_ENUMERATE_SUB_KEYS
0: KEY_NOTIFY
0: KEY_CREATE_LINK
0: KEY_WOW64_64KEY
0: KEY_WOW64_32KEY
secdesc : NULL
action_taken : *
action_taken : REG_ACTION_NONE (0)
[2015/04/15 08:57:25.487521, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.487561, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
_winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler'
[2015/04/15 08:57:25.487589, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.487613, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.487632, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.487651, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.487670, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.487687, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.487705, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.487722, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.487752, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.487780, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.487799, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.487817, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.487834, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.487852, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.487869, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.487897, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.487919, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.487937, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.487955, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.487974, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.487991, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.488009, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.488026, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.488061, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.488082, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Spooler]
[2015/04/15 08:57:25.488100, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.488118, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2015/04/15 08:57:25.488136, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2015/04/15 08:57:25.488155, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.488172, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2015/04/15 08:57:25.488203, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.488226, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
Opened policy hnd[3] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.488264, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CreateKey: struct winreg_CreateKey
out: struct winreg_CreateKey
new_handle : *
new_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000003-0000-0000-2e55-d50b020f0000
action_taken : *
action_taken : REG_OPENED_EXISTING_KEY (2)
result : WERR_OK
[2015/04/15 08:57:25.488489, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000003-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x000c (12)
name_size : 0x000c (12)
name : *
name : 'Start'
type : REG_DWORD (4)
data : *
data: ARRAY(4)
[0] : 0x02 (2)
[1] : 0x00 (0)
[2] : 0x00 (0)
[3] : 0x00 (0)
size : 0x00000004 (4)
[2015/04/15 08:57:25.488717, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.488765, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Start]
[2015/04/15 08:57:25.488790, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.488812, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.488833, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2015/04/15 08:57:25.488862, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[0]: name[Start] len[4]
[2015/04/15 08:57:25.488886, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[1]: name[Type] len[4]
[2015/04/15 08:57:25.488908, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[2]: name[ErrorControl] len[4]
[2015/04/15 08:57:25.488936, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[3]: name[ObjectName] len[24]
[2015/04/15 08:57:25.488958, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[4]: name[DisplayName] len[28]
[2015/04/15 08:57:25.488979, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[5]: name[ImagePath] len[88]
[2015/04/15 08:57:25.489001, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[6]: name[Description] len[106]
[2015/04/15 08:57:25.489024, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.489087, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000003-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x000a (10)
name_size : 0x000a (10)
name : *
name : 'Type'
type : REG_DWORD (4)
data : *
data: ARRAY(4)
[0] : 0x10 (16)
[1] : 0x00 (0)
[2] : 0x00 (0)
[3] : 0x00 (0)
size : 0x00000004 (4)
[2015/04/15 08:57:25.489275, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.489320, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Type]
[2015/04/15 08:57:25.489342, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.489365, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.489419, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000003-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x001a (26)
name_size : 0x001a (26)
name : *
name : 'ErrorControl'
type : REG_DWORD (4)
data : *
data: ARRAY(4)
[0] : 0x01 (1)
[1] : 0x00 (0)
[2] : 0x00 (0)
[3] : 0x00 (0)
size : 0x00000004 (4)
[2015/04/15 08:57:25.489616, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.489662, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ErrorControl]
[2015/04/15 08:57:25.489683, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.489705, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.489778, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000003-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0016 (22)
name_size : 0x0016 (22)
name : *
name : 'ObjectName'
type : REG_SZ (1)
data : *
data: ARRAY(24)
[0] : 0x4c (76)
[1] : 0x00 (0)
[2] : 0x6f (111)
[3] : 0x00 (0)
[4] : 0x63 (99)
[5] : 0x00 (0)
[6] : 0x61 (97)
[7] : 0x00 (0)
[8] : 0x6c (108)
[9] : 0x00 (0)
[10] : 0x53 (83)
[11] : 0x00 (0)
[12] : 0x79 (121)
[13] : 0x00 (0)
[14] : 0x73 (115)
[15] : 0x00 (0)
[16] : 0x74 (116)
[17] : 0x00 (0)
[18] : 0x65 (101)
[19] : 0x00 (0)
[20] : 0x6d (109)
[21] : 0x00 (0)
[22] : 0x00 (0)
[23] : 0x00 (0)
size : 0x00000018 (24)
[2015/04/15 08:57:25.490149, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.490195, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ObjectName]
[2015/04/15 08:57:25.490223, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.490245, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.490306, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000003-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0018 (24)
name_size : 0x0018 (24)
name : *
name : 'DisplayName'
type : REG_SZ (1)
data : *
data: ARRAY(28)
[0] : 0x50 (80)
[1] : 0x00 (0)
[2] : 0x72 (114)
[3] : 0x00 (0)
[4] : 0x69 (105)
[5] : 0x00 (0)
[6] : 0x6e (110)
[7] : 0x00 (0)
[8] : 0x74 (116)
[9] : 0x00 (0)
[10] : 0x20 (32)
[11] : 0x00 (0)
[12] : 0x53 (83)
[13] : 0x00 (0)
[14] : 0x70 (112)
[15] : 0x00 (0)
[16] : 0x6f (111)
[17] : 0x00 (0)
[18] : 0x6f (111)
[19] : 0x00 (0)
[20] : 0x6c (108)
[21] : 0x00 (0)
[22] : 0x65 (101)
[23] : 0x00 (0)
[24] : 0x72 (114)
[25] : 0x00 (0)
[26] : 0x00 (0)
[27] : 0x00 (0)
size : 0x0000001c (28)
[2015/04/15 08:57:25.490713, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.490758, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:DisplayName]
[2015/04/15 08:57:25.490780, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.490801, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.490862, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000003-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0014 (20)
name_size : 0x0014 (20)
name : *
name : 'ImagePath'
type : REG_SZ (1)
data : *
data: ARRAY(88)
[0] : 0x2f (47)
[1] : 0x00 (0)
[2] : 0x75 (117)
[3] : 0x00 (0)
[4] : 0x73 (115)
[5] : 0x00 (0)
[6] : 0x72 (114)
[7] : 0x00 (0)
[8] : 0x2f (47)
[9] : 0x00 (0)
[10] : 0x6c (108)
[11] : 0x00 (0)
[12] : 0x69 (105)
[13] : 0x00 (0)
[14] : 0x62 (98)
[15] : 0x00 (0)
[16] : 0x2f (47)
[17] : 0x00 (0)
[18] : 0x78 (120)
[19] : 0x00 (0)
[20] : 0x38 (56)
[21] : 0x00 (0)
[22] : 0x36 (54)
[23] : 0x00 (0)
[24] : 0x5f (95)
[25] : 0x00 (0)
[26] : 0x36 (54)
[27] : 0x00 (0)
[28] : 0x34 (52)
[29] : 0x00 (0)
[30] : 0x2d (45)
[31] : 0x00 (0)
[32] : 0x6c (108)
[33] : 0x00 (0)
[34] : 0x69 (105)
[35] : 0x00 (0)
[36] : 0x6e (110)
[37] : 0x00 (0)
[38] : 0x75 (117)
[39] : 0x00 (0)
[40] : 0x78 (120)
[41] : 0x00 (0)
[42] : 0x2d (45)
[43] : 0x00 (0)
[44] : 0x67 (103)
[45] : 0x00 (0)
[46] : 0x6e (110)
[47] : 0x00 (0)
[48] : 0x75 (117)
[49] : 0x00 (0)
[50] : 0x2f (47)
[51] : 0x00 (0)
[52] : 0x73 (115)
[53] : 0x00 (0)
[54] : 0x61 (97)
[55] : 0x00 (0)
[56] : 0x6d (109)
[57] : 0x00 (0)
[58] : 0x62 (98)
[59] : 0x00 (0)
[60] : 0x61 (97)
[61] : 0x00 (0)
[62] : 0x2f (47)
[63] : 0x00 (0)
[64] : 0x73 (115)
[65] : 0x00 (0)
[66] : 0x76 (118)
[67] : 0x00 (0)
[68] : 0x63 (99)
[69] : 0x00 (0)
[70] : 0x63 (99)
[71] : 0x00 (0)
[72] : 0x74 (116)
[73] : 0x00 (0)
[74] : 0x6c (108)
[75] : 0x00 (0)
[76] : 0x2f (47)
[77] : 0x00 (0)
[78] : 0x73 (115)
[79] : 0x00 (0)
[80] : 0x6d (109)
[81] : 0x00 (0)
[82] : 0x62 (98)
[83] : 0x00 (0)
[84] : 0x64 (100)
[85] : 0x00 (0)
[86] : 0x00 (0)
[87] : 0x00 (0)
size : 0x00000058 (88)
[2015/04/15 08:57:25.491818, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.491864, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ImagePath]
[2015/04/15 08:57:25.491886, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.491909, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.491964, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000003-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0018 (24)
name_size : 0x0018 (24)
name : *
name : 'Description'
type : REG_SZ (1)
data : *
data: ARRAY(106)
[0] : 0x49 (73)
[1] : 0x00 (0)
[2] : 0x6e (110)
[3] : 0x00 (0)
[4] : 0x74 (116)
[5] : 0x00 (0)
[6] : 0x65 (101)
[7] : 0x00 (0)
[8] : 0x72 (114)
[9] : 0x00 (0)
[10] : 0x6e (110)
[11] : 0x00 (0)
[12] : 0x61 (97)
[13] : 0x00 (0)
[14] : 0x6c (108)
[15] : 0x00 (0)
[16] : 0x20 (32)
[17] : 0x00 (0)
[18] : 0x73 (115)
[19] : 0x00 (0)
[20] : 0x65 (101)
[21] : 0x00 (0)
[22] : 0x72 (114)
[23] : 0x00 (0)
[24] : 0x76 (118)
[25] : 0x00 (0)
[26] : 0x69 (105)
[27] : 0x00 (0)
[28] : 0x63 (99)
[29] : 0x00 (0)
[30] : 0x65 (101)
[31] : 0x00 (0)
[32] : 0x20 (32)
[33] : 0x00 (0)
[34] : 0x66 (102)
[35] : 0x00 (0)
[36] : 0x6f (111)
[37] : 0x00 (0)
[38] : 0x72 (114)
[39] : 0x00 (0)
[40] : 0x20 (32)
[41] : 0x00 (0)
[42] : 0x73 (115)
[43] : 0x00 (0)
[44] : 0x70 (112)
[45] : 0x00 (0)
[46] : 0x6f (111)
[47] : 0x00 (0)
[48] : 0x6f (111)
[49] : 0x00 (0)
[50] : 0x6c (108)
[51] : 0x00 (0)
[52] : 0x69 (105)
[53] : 0x00 (0)
[54] : 0x6e (110)
[55] : 0x00 (0)
[56] : 0x67 (103)
[57] : 0x00 (0)
[58] : 0x20 (32)
[59] : 0x00 (0)
[60] : 0x66 (102)
[61] : 0x00 (0)
[62] : 0x69 (105)
[63] : 0x00 (0)
[64] : 0x6c (108)
[65] : 0x00 (0)
[66] : 0x65 (101)
[67] : 0x00 (0)
[68] : 0x73 (115)
[69] : 0x00 (0)
[70] : 0x20 (32)
[71] : 0x00 (0)
[72] : 0x74 (116)
[73] : 0x00 (0)
[74] : 0x6f (111)
[75] : 0x00 (0)
[76] : 0x20 (32)
[77] : 0x00 (0)
[78] : 0x70 (112)
[79] : 0x00 (0)
[80] : 0x72 (114)
[81] : 0x00 (0)
[82] : 0x69 (105)
[83] : 0x00 (0)
[84] : 0x6e (110)
[85] : 0x00 (0)
[86] : 0x74 (116)
[87] : 0x00 (0)
[88] : 0x20 (32)
[89] : 0x00 (0)
[90] : 0x64 (100)
[91] : 0x00 (0)
[92] : 0x65 (101)
[93] : 0x00 (0)
[94] : 0x76 (118)
[95] : 0x00 (0)
[96] : 0x69 (105)
[97] : 0x00 (0)
[98] : 0x63 (99)
[99] : 0x00 (0)
[100] : 0x65 (101)
[101] : 0x00 (0)
[102] : 0x73 (115)
[103] : 0x00 (0)
[104] : 0x00 (0)
[105] : 0x00 (0)
size : 0x0000006a (106)
[2015/04/15 08:57:25.493104, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.493151, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Description]
[2015/04/15 08:57:25.493173, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.493195, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.493266, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
in: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000003-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.493341, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.493387, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.493431, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
Closed policy
[2015/04/15 08:57:25.493459, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.493480, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
out: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000000-0000-0000-0000-000000000000
result : WERR_OK
[2015/04/15 08:57:25.493573, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CreateKey: struct winreg_CreateKey
in: struct winreg_CreateKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000001-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0066 (102)
name_size : 0x0066 (102)
name : *
name : 'SYSTEM\CurrentControlSet\Services\Spooler\Security'
keyclass: struct winreg_String
name_len : 0x0002 (2)
name_size : 0x0002 (2)
name : *
name : ''
options : 0x00000000 (0)
0: REG_OPTION_VOLATILE
0: REG_OPTION_CREATE_LINK
0: REG_OPTION_BACKUP_RESTORE
0: REG_OPTION_OPEN_LINK
access_mask : 0x02000000 (33554432)
0: KEY_QUERY_VALUE
0: KEY_SET_VALUE
0: KEY_CREATE_SUB_KEY
0: KEY_ENUMERATE_SUB_KEYS
0: KEY_NOTIFY
0: KEY_CREATE_LINK
0: KEY_WOW64_64KEY
0: KEY_WOW64_32KEY
secdesc : NULL
action_taken : *
action_taken : REG_OPENED_EXISTING_KEY (2)
[2015/04/15 08:57:25.493878, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.493923, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
_winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler\Security'
[2015/04/15 08:57:25.493946, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.493967, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.493988, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.494009, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.494030, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.494056, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.494077, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.494096, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.494128, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.494151, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.494172, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.494193, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.494213, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.494233, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.494253, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.494284, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.494308, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.494329, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.494350, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.494371, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.494391, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.494412, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.494431, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.494471, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.494496, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.494517, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Spooler]
[2015/04/15 08:57:25.494542, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.494565, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2015/04/15 08:57:25.494585, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2015/04/15 08:57:25.494606, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.494626, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2015/04/15 08:57:25.494657, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.494680, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Security]
[2015/04/15 08:57:25.494701, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.494722, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
[2015/04/15 08:57:25.494742, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
[2015/04/15 08:57:25.494763, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.494783, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
[2015/04/15 08:57:25.494809, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.494832, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
Opened policy hnd[3] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.494876, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CreateKey: struct winreg_CreateKey
out: struct winreg_CreateKey
new_handle : *
new_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000004-0000-0000-2e55-d50b020f0000
action_taken : *
action_taken : REG_OPENED_EXISTING_KEY (2)
result : WERR_OK
[2015/04/15 08:57:25.495029, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000004-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0012 (18)
name_size : 0x0012 (18)
name : *
name : 'Security'
type : REG_BINARY (3)
data : *
data: ARRAY(120)
[0] : 0x01 (1)
[1] : 0x00 (0)
[2] : 0x04 (4)
[3] : 0x80 (128)
[4] : 0x00 (0)
[5] : 0x00 (0)
[6] : 0x00 (0)
[7] : 0x00 (0)
[8] : 0x00 (0)
[9] : 0x00 (0)
[10] : 0x00 (0)
[11] : 0x00 (0)
[12] : 0x00 (0)
[13] : 0x00 (0)
[14] : 0x00 (0)
[15] : 0x00 (0)
[16] : 0x14 (20)
[17] : 0x00 (0)
[18] : 0x00 (0)
[19] : 0x00 (0)
[20] : 0x02 (2)
[21] : 0x00 (0)
[22] : 0x64 (100)
[23] : 0x00 (0)
[24] : 0x04 (4)
[25] : 0x00 (0)
[26] : 0x00 (0)
[27] : 0x00 (0)
[28] : 0x00 (0)
[29] : 0x00 (0)
[30] : 0x14 (20)
[31] : 0x00 (0)
[32] : 0x8d (141)
[33] : 0x01 (1)
[34] : 0x02 (2)
[35] : 0x00 (0)
[36] : 0x01 (1)
[37] : 0x01 (1)
[38] : 0x00 (0)
[39] : 0x00 (0)
[40] : 0x00 (0)
[41] : 0x00 (0)
[42] : 0x00 (0)
[43] : 0x01 (1)
[44] : 0x00 (0)
[45] : 0x00 (0)
[46] : 0x00 (0)
[47] : 0x00 (0)
[48] : 0x00 (0)
[49] : 0x00 (0)
[50] : 0x18 (24)
[51] : 0x00 (0)
[52] : 0xfd (253)
[53] : 0x01 (1)
[54] : 0x02 (2)
[55] : 0x00 (0)
[56] : 0x01 (1)
[57] : 0x02 (2)
[58] : 0x00 (0)
[59] : 0x00 (0)
[60] : 0x00 (0)
[61] : 0x00 (0)
[62] : 0x00 (0)
[63] : 0x05 (5)
[64] : 0x20 (32)
[65] : 0x00 (0)
[66] : 0x00 (0)
[67] : 0x00 (0)
[68] : 0x23 (35)
[69] : 0x02 (2)
[70] : 0x00 (0)
[71] : 0x00 (0)
[72] : 0x00 (0)
[73] : 0x00 (0)
[74] : 0x18 (24)
[75] : 0x00 (0)
[76] : 0xff (255)
[77] : 0x01 (1)
[78] : 0x0f (15)
[79] : 0x00 (0)
[80] : 0x01 (1)
[81] : 0x02 (2)
[82] : 0x00 (0)
[83] : 0x00 (0)
[84] : 0x00 (0)
[85] : 0x00 (0)
[86] : 0x00 (0)
[87] : 0x05 (5)
[88] : 0x20 (32)
[89] : 0x00 (0)
[90] : 0x00 (0)
[91] : 0x00 (0)
[92] : 0x25 (37)
[93] : 0x02 (2)
[94] : 0x00 (0)
[95] : 0x00 (0)
[96] : 0x00 (0)
[97] : 0x00 (0)
[98] : 0x18 (24)
[99] : 0x00 (0)
[100] : 0xff (255)
[101] : 0x01 (1)
[102] : 0x0f (15)
[103] : 0x00 (0)
[104] : 0x01 (1)
[105] : 0x02 (2)
[106] : 0x00 (0)
[107] : 0x00 (0)
[108] : 0x00 (0)
[109] : 0x00 (0)
[110] : 0x00 (0)
[111] : 0x05 (5)
[112] : 0x20 (32)
[113] : 0x00 (0)
[114] : 0x00 (0)
[115] : 0x00 (0)
[116] : 0x20 (32)
[117] : 0x02 (2)
[118] : 0x00 (0)
[119] : 0x00 (0)
size : 0x00000078 (120)
[2015/04/15 08:57:25.496281, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.496328, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security:Security]
[2015/04/15 08:57:25.496350, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.496372, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.496398, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
[2015/04/15 08:57:25.496426, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[0]: name[Security] len[120]
[2015/04/15 08:57:25.496450, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.496501, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
in: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000004-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.496581, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.496627, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.496670, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
Closed policy
[2015/04/15 08:57:25.496691, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.496712, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
out: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000000-0000-0000-0000-000000000000
result : WERR_OK
[2015/04/15 08:57:25.496805, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CreateKey: struct winreg_CreateKey
in: struct winreg_CreateKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000001-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0056 (86)
name_size : 0x0056 (86)
name : *
name : 'SYSTEM\CurrentControlSet\Services\NETLOGON'
keyclass: struct winreg_String
name_len : 0x0002 (2)
name_size : 0x0002 (2)
name : *
name : ''
options : 0x00000000 (0)
0: REG_OPTION_VOLATILE
0: REG_OPTION_CREATE_LINK
0: REG_OPTION_BACKUP_RESTORE
0: REG_OPTION_OPEN_LINK
access_mask : 0x02000000 (33554432)
0: KEY_QUERY_VALUE
0: KEY_SET_VALUE
0: KEY_CREATE_SUB_KEY
0: KEY_ENUMERATE_SUB_KEYS
0: KEY_NOTIFY
0: KEY_CREATE_LINK
0: KEY_WOW64_64KEY
0: KEY_WOW64_32KEY
secdesc : NULL
action_taken : *
action_taken : REG_ACTION_NONE (0)
[2015/04/15 08:57:25.497115, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.497161, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
_winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON'
[2015/04/15 08:57:25.497184, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.497205, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.497226, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.497247, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.497269, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.497288, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.497309, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.497328, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.497359, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.497383, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.497404, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.497425, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.497445, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.497465, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.497485, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.497517, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.497547, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.497568, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.497588, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.497609, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.497629, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.497650, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.497670, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.497712, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.497736, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [NETLOGON]
[2015/04/15 08:57:25.497756, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.497778, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2015/04/15 08:57:25.497797, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2015/04/15 08:57:25.497819, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.497838, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2015/04/15 08:57:25.497873, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.497897, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
Opened policy hnd[3] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.497941, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CreateKey: struct winreg_CreateKey
out: struct winreg_CreateKey
new_handle : *
new_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000005-0000-0000-2e55-d50b020f0000
action_taken : *
action_taken : REG_OPENED_EXISTING_KEY (2)
result : WERR_OK
[2015/04/15 08:57:25.498052, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000005-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x000c (12)
name_size : 0x000c (12)
name : *
name : 'Start'
type : REG_DWORD (4)
data : *
data: ARRAY(4)
[0] : 0x02 (2)
[1] : 0x00 (0)
[2] : 0x00 (0)
[3] : 0x00 (0)
size : 0x00000004 (4)
[2015/04/15 08:57:25.498245, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.498291, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Start]
[2015/04/15 08:57:25.498313, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.498334, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.498355, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2015/04/15 08:57:25.498382, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[0]: name[Start] len[4]
[2015/04/15 08:57:25.498406, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[1]: name[Type] len[4]
[2015/04/15 08:57:25.498428, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[2]: name[ErrorControl] len[4]
[2015/04/15 08:57:25.498449, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[3]: name[ObjectName] len[24]
[2015/04/15 08:57:25.498470, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[4]: name[DisplayName] len[20]
[2015/04/15 08:57:25.498492, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[5]: name[ImagePath] len[88]
[2015/04/15 08:57:25.498514, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[6]: name[Description] len[164]
[2015/04/15 08:57:25.498536, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.498591, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000005-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x000a (10)
name_size : 0x000a (10)
name : *
name : 'Type'
type : REG_DWORD (4)
data : *
data: ARRAY(4)
[0] : 0x10 (16)
[1] : 0x00 (0)
[2] : 0x00 (0)
[3] : 0x00 (0)
size : 0x00000004 (4)
[2015/04/15 08:57:25.498784, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.498830, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Type]
[2015/04/15 08:57:25.498852, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.498874, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.498928, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000005-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x001a (26)
name_size : 0x001a (26)
name : *
name : 'ErrorControl'
type : REG_DWORD (4)
data : *
data: ARRAY(4)
[0] : 0x01 (1)
[1] : 0x00 (0)
[2] : 0x00 (0)
[3] : 0x00 (0)
size : 0x00000004 (4)
[2015/04/15 08:57:25.499114, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.499160, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ErrorControl]
[2015/04/15 08:57:25.499181, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.499204, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.499264, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000005-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0016 (22)
name_size : 0x0016 (22)
name : *
name : 'ObjectName'
type : REG_SZ (1)
data : *
data: ARRAY(24)
[0] : 0x4c (76)
[1] : 0x00 (0)
[2] : 0x6f (111)
[3] : 0x00 (0)
[4] : 0x63 (99)
[5] : 0x00 (0)
[6] : 0x61 (97)
[7] : 0x00 (0)
[8] : 0x6c (108)
[9] : 0x00 (0)
[10] : 0x53 (83)
[11] : 0x00 (0)
[12] : 0x79 (121)
[13] : 0x00 (0)
[14] : 0x73 (115)
[15] : 0x00 (0)
[16] : 0x74 (116)
[17] : 0x00 (0)
[18] : 0x65 (101)
[19] : 0x00 (0)
[20] : 0x6d (109)
[21] : 0x00 (0)
[22] : 0x00 (0)
[23] : 0x00 (0)
size : 0x00000018 (24)
[2015/04/15 08:57:25.499634, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.499679, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ObjectName]
[2015/04/15 08:57:25.499701, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.499723, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.499780, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000005-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0018 (24)
name_size : 0x0018 (24)
name : *
name : 'DisplayName'
type : REG_SZ (1)
data : *
data: ARRAY(20)
[0] : 0x4e (78)
[1] : 0x00 (0)
[2] : 0x65 (101)
[3] : 0x00 (0)
[4] : 0x74 (116)
[5] : 0x00 (0)
[6] : 0x20 (32)
[7] : 0x00 (0)
[8] : 0x4c (76)
[9] : 0x00 (0)
[10] : 0x6f (111)
[11] : 0x00 (0)
[12] : 0x67 (103)
[13] : 0x00 (0)
[14] : 0x6f (111)
[15] : 0x00 (0)
[16] : 0x6e (110)
[17] : 0x00 (0)
[18] : 0x00 (0)
[19] : 0x00 (0)
size : 0x00000014 (20)
[2015/04/15 08:57:25.500117, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.500163, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:DisplayName]
[2015/04/15 08:57:25.500185, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.500207, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.500262, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000005-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0014 (20)
name_size : 0x0014 (20)
name : *
name : 'ImagePath'
type : REG_SZ (1)
data : *
data: ARRAY(88)
[0] : 0x2f (47)
[1] : 0x00 (0)
[2] : 0x75 (117)
[3] : 0x00 (0)
[4] : 0x73 (115)
[5] : 0x00 (0)
[6] : 0x72 (114)
[7] : 0x00 (0)
[8] : 0x2f (47)
[9] : 0x00 (0)
[10] : 0x6c (108)
[11] : 0x00 (0)
[12] : 0x69 (105)
[13] : 0x00 (0)
[14] : 0x62 (98)
[15] : 0x00 (0)
[16] : 0x2f (47)
[17] : 0x00 (0)
[18] : 0x78 (120)
[19] : 0x00 (0)
[20] : 0x38 (56)
[21] : 0x00 (0)
[22] : 0x36 (54)
[23] : 0x00 (0)
[24] : 0x5f (95)
[25] : 0x00 (0)
[26] : 0x36 (54)
[27] : 0x00 (0)
[28] : 0x34 (52)
[29] : 0x00 (0)
[30] : 0x2d (45)
[31] : 0x00 (0)
[32] : 0x6c (108)
[33] : 0x00 (0)
[34] : 0x69 (105)
[35] : 0x00 (0)
[36] : 0x6e (110)
[37] : 0x00 (0)
[38] : 0x75 (117)
[39] : 0x00 (0)
[40] : 0x78 (120)
[41] : 0x00 (0)
[42] : 0x2d (45)
[43] : 0x00 (0)
[44] : 0x67 (103)
[45] : 0x00 (0)
[46] : 0x6e (110)
[47] : 0x00 (0)
[48] : 0x75 (117)
[49] : 0x00 (0)
[50] : 0x2f (47)
[51] : 0x00 (0)
[52] : 0x73 (115)
[53] : 0x00 (0)
[54] : 0x61 (97)
[55] : 0x00 (0)
[56] : 0x6d (109)
[57] : 0x00 (0)
[58] : 0x62 (98)
[59] : 0x00 (0)
[60] : 0x61 (97)
[61] : 0x00 (0)
[62] : 0x2f (47)
[63] : 0x00 (0)
[64] : 0x73 (115)
[65] : 0x00 (0)
[66] : 0x76 (118)
[67] : 0x00 (0)
[68] : 0x63 (99)
[69] : 0x00 (0)
[70] : 0x63 (99)
[71] : 0x00 (0)
[72] : 0x74 (116)
[73] : 0x00 (0)
[74] : 0x6c (108)
[75] : 0x00 (0)
[76] : 0x2f (47)
[77] : 0x00 (0)
[78] : 0x73 (115)
[79] : 0x00 (0)
[80] : 0x6d (109)
[81] : 0x00 (0)
[82] : 0x62 (98)
[83] : 0x00 (0)
[84] : 0x64 (100)
[85] : 0x00 (0)
[86] : 0x00 (0)
[87] : 0x00 (0)
size : 0x00000058 (88)
[2015/04/15 08:57:25.501173, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.501213, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ImagePath]
[2015/04/15 08:57:25.501232, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.501252, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.501302, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000005-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0018 (24)
name_size : 0x0018 (24)
name : *
name : 'Description'
type : REG_SZ (1)
data : *
data: ARRAY(164)
[0] : 0x46 (70)
[1] : 0x00 (0)
[2] : 0x69 (105)
[3] : 0x00 (0)
[4] : 0x6c (108)
[5] : 0x00 (0)
[6] : 0x65 (101)
[7] : 0x00 (0)
[8] : 0x20 (32)
[9] : 0x00 (0)
[10] : 0x73 (115)
[11] : 0x00 (0)
[12] : 0x65 (101)
[13] : 0x00 (0)
[14] : 0x72 (114)
[15] : 0x00 (0)
[16] : 0x76 (118)
[17] : 0x00 (0)
[18] : 0x69 (105)
[19] : 0x00 (0)
[20] : 0x63 (99)
[21] : 0x00 (0)
[22] : 0x65 (101)
[23] : 0x00 (0)
[24] : 0x20 (32)
[25] : 0x00 (0)
[26] : 0x70 (112)
[27] : 0x00 (0)
[28] : 0x72 (114)
[29] : 0x00 (0)
[30] : 0x6f (111)
[31] : 0x00 (0)
[32] : 0x76 (118)
[33] : 0x00 (0)
[34] : 0x69 (105)
[35] : 0x00 (0)
[36] : 0x64 (100)
[37] : 0x00 (0)
[38] : 0x69 (105)
[39] : 0x00 (0)
[40] : 0x6e (110)
[41] : 0x00 (0)
[42] : 0x67 (103)
[43] : 0x00 (0)
[44] : 0x20 (32)
[45] : 0x00 (0)
[46] : 0x61 (97)
[47] : 0x00 (0)
[48] : 0x63 (99)
[49] : 0x00 (0)
[50] : 0x63 (99)
[51] : 0x00 (0)
[52] : 0x65 (101)
[53] : 0x00 (0)
[54] : 0x73 (115)
[55] : 0x00 (0)
[56] : 0x73 (115)
[57] : 0x00 (0)
[58] : 0x20 (32)
[59] : 0x00 (0)
[60] : 0x74 (116)
[61] : 0x00 (0)
[62] : 0x6f (111)
[63] : 0x00 (0)
[64] : 0x20 (32)
[65] : 0x00 (0)
[66] : 0x70 (112)
[67] : 0x00 (0)
[68] : 0x6f (111)
[69] : 0x00 (0)
[70] : 0x6c (108)
[71] : 0x00 (0)
[72] : 0x69 (105)
[73] : 0x00 (0)
[74] : 0x63 (99)
[75] : 0x00 (0)
[76] : 0x79 (121)
[77] : 0x00 (0)
[78] : 0x20 (32)
[79] : 0x00 (0)
[80] : 0x61 (97)
[81] : 0x00 (0)
[82] : 0x6e (110)
[83] : 0x00 (0)
[84] : 0x64 (100)
[85] : 0x00 (0)
[86] : 0x20 (32)
[87] : 0x00 (0)
[88] : 0x70 (112)
[89] : 0x00 (0)
[90] : 0x72 (114)
[91] : 0x00 (0)
[92] : 0x6f (111)
[93] : 0x00 (0)
[94] : 0x66 (102)
[95] : 0x00 (0)
[96] : 0x69 (105)
[97] : 0x00 (0)
[98] : 0x6c (108)
[99] : 0x00 (0)
[100] : 0x65 (101)
[101] : 0x00 (0)
[102] : 0x20 (32)
[103] : 0x00 (0)
[104] : 0x64 (100)
[105] : 0x00 (0)
[106] : 0x61 (97)
[107] : 0x00 (0)
[108] : 0x74 (116)
[109] : 0x00 (0)
[110] : 0x61 (97)
[111] : 0x00 (0)
[112] : 0x20 (32)
[113] : 0x00 (0)
[114] : 0x28 (40)
[115] : 0x00 (0)
[116] : 0x6e (110)
[117] : 0x00 (0)
[118] : 0x6f (111)
[119] : 0x00 (0)
[120] : 0x74 (116)
[121] : 0x00 (0)
[122] : 0x72 (114)
[123] : 0x00 (0)
[124] : 0x65 (101)
[125] : 0x00 (0)
[126] : 0x6d (109)
[127] : 0x00 (0)
[128] : 0x6f (111)
[129] : 0x00 (0)
[130] : 0x74 (116)
[131] : 0x00 (0)
[132] : 0x65 (101)
[133] : 0x00 (0)
[134] : 0x6c (108)
[135] : 0x00 (0)
[136] : 0x79 (121)
[137] : 0x00 (0)
[138] : 0x20 (32)
[139] : 0x00 (0)
[140] : 0x6d (109)
[141] : 0x00 (0)
[142] : 0x61 (97)
[143] : 0x00 (0)
[144] : 0x6e (110)
[145] : 0x00 (0)
[146] : 0x61 (97)
[147] : 0x00 (0)
[148] : 0x67 (103)
[149] : 0x00 (0)
[150] : 0x65 (101)
[151] : 0x00 (0)
[152] : 0x61 (97)
[153] : 0x00 (0)
[154] : 0x62 (98)
[155] : 0x00 (0)
[156] : 0x6c (108)
[157] : 0x00 (0)
[158] : 0x65 (101)
[159] : 0x00 (0)
[160] : 0x29 (41)
[161] : 0x00 (0)
[162] : 0x00 (0)
[163] : 0x00 (0)
size : 0x000000a4 (164)
[2015/04/15 08:57:25.502732, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.502772, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Description]
[2015/04/15 08:57:25.502795, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.502825, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.502872, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
in: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000005-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.502936, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.502975, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.503013, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
Closed policy
[2015/04/15 08:57:25.503032, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.503050, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
out: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000000-0000-0000-0000-000000000000
result : WERR_OK
[2015/04/15 08:57:25.503130, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CreateKey: struct winreg_CreateKey
in: struct winreg_CreateKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000001-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0068 (104)
name_size : 0x0068 (104)
name : *
name : 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security'
keyclass: struct winreg_String
name_len : 0x0002 (2)
name_size : 0x0002 (2)
name : *
name : ''
options : 0x00000000 (0)
0: REG_OPTION_VOLATILE
0: REG_OPTION_CREATE_LINK
0: REG_OPTION_BACKUP_RESTORE
0: REG_OPTION_OPEN_LINK
access_mask : 0x02000000 (33554432)
0: KEY_QUERY_VALUE
0: KEY_SET_VALUE
0: KEY_CREATE_SUB_KEY
0: KEY_ENUMERATE_SUB_KEYS
0: KEY_NOTIFY
0: KEY_CREATE_LINK
0: KEY_WOW64_64KEY
0: KEY_WOW64_32KEY
secdesc : NULL
action_taken : *
action_taken : REG_OPENED_EXISTING_KEY (2)
[2015/04/15 08:57:25.503400, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.503440, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
_winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security'
[2015/04/15 08:57:25.503460, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.503479, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.503497, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.503515, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.503534, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.503551, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.503569, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.503586, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.503613, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.503634, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.503652, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.503670, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.503688, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.503705, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.503722, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.503749, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.503771, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.503789, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.503812, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.503831, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.503848, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.503866, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.503883, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.503919, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.503941, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.503960, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [NETLOGON]
[2015/04/15 08:57:25.503977, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.503996, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2015/04/15 08:57:25.504014, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2015/04/15 08:57:25.504032, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.504049, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2015/04/15 08:57:25.504077, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.504098, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Security]
[2015/04/15 08:57:25.504116, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.504134, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
[2015/04/15 08:57:25.504151, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
[2015/04/15 08:57:25.504170, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.504187, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
[2015/04/15 08:57:25.504210, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.504235, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
Opened policy hnd[3] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.504274, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CreateKey: struct winreg_CreateKey
out: struct winreg_CreateKey
new_handle : *
new_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000006-0000-0000-2e55-d50b020f0000
action_taken : *
action_taken : REG_OPENED_EXISTING_KEY (2)
result : WERR_OK
[2015/04/15 08:57:25.504486, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000006-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0012 (18)
name_size : 0x0012 (18)
name : *
name : 'Security'
type : REG_BINARY (3)
data : *
data: ARRAY(120)
[0] : 0x01 (1)
[1] : 0x00 (0)
[2] : 0x04 (4)
[3] : 0x80 (128)
[4] : 0x00 (0)
[5] : 0x00 (0)
[6] : 0x00 (0)
[7] : 0x00 (0)
[8] : 0x00 (0)
[9] : 0x00 (0)
[10] : 0x00 (0)
[11] : 0x00 (0)
[12] : 0x00 (0)
[13] : 0x00 (0)
[14] : 0x00 (0)
[15] : 0x00 (0)
[16] : 0x14 (20)
[17] : 0x00 (0)
[18] : 0x00 (0)
[19] : 0x00 (0)
[20] : 0x02 (2)
[21] : 0x00 (0)
[22] : 0x64 (100)
[23] : 0x00 (0)
[24] : 0x04 (4)
[25] : 0x00 (0)
[26] : 0x00 (0)
[27] : 0x00 (0)
[28] : 0x00 (0)
[29] : 0x00 (0)
[30] : 0x14 (20)
[31] : 0x00 (0)
[32] : 0x8d (141)
[33] : 0x01 (1)
[34] : 0x02 (2)
[35] : 0x00 (0)
[36] : 0x01 (1)
[37] : 0x01 (1)
[38] : 0x00 (0)
[39] : 0x00 (0)
[40] : 0x00 (0)
[41] : 0x00 (0)
[42] : 0x00 (0)
[43] : 0x01 (1)
[44] : 0x00 (0)
[45] : 0x00 (0)
[46] : 0x00 (0)
[47] : 0x00 (0)
[48] : 0x00 (0)
[49] : 0x00 (0)
[50] : 0x18 (24)
[51] : 0x00 (0)
[52] : 0xfd (253)
[53] : 0x01 (1)
[54] : 0x02 (2)
[55] : 0x00 (0)
[56] : 0x01 (1)
[57] : 0x02 (2)
[58] : 0x00 (0)
[59] : 0x00 (0)
[60] : 0x00 (0)
[61] : 0x00 (0)
[62] : 0x00 (0)
[63] : 0x05 (5)
[64] : 0x20 (32)
[65] : 0x00 (0)
[66] : 0x00 (0)
[67] : 0x00 (0)
[68] : 0x23 (35)
[69] : 0x02 (2)
[70] : 0x00 (0)
[71] : 0x00 (0)
[72] : 0x00 (0)
[73] : 0x00 (0)
[74] : 0x18 (24)
[75] : 0x00 (0)
[76] : 0xff (255)
[77] : 0x01 (1)
[78] : 0x0f (15)
[79] : 0x00 (0)
[80] : 0x01 (1)
[81] : 0x02 (2)
[82] : 0x00 (0)
[83] : 0x00 (0)
[84] : 0x00 (0)
[85] : 0x00 (0)
[86] : 0x00 (0)
[87] : 0x05 (5)
[88] : 0x20 (32)
[89] : 0x00 (0)
[90] : 0x00 (0)
[91] : 0x00 (0)
[92] : 0x25 (37)
[93] : 0x02 (2)
[94] : 0x00 (0)
[95] : 0x00 (0)
[96] : 0x00 (0)
[97] : 0x00 (0)
[98] : 0x18 (24)
[99] : 0x00 (0)
[100] : 0xff (255)
[101] : 0x01 (1)
[102] : 0x0f (15)
[103] : 0x00 (0)
[104] : 0x01 (1)
[105] : 0x02 (2)
[106] : 0x00 (0)
[107] : 0x00 (0)
[108] : 0x00 (0)
[109] : 0x00 (0)
[110] : 0x00 (0)
[111] : 0x05 (5)
[112] : 0x20 (32)
[113] : 0x00 (0)
[114] : 0x00 (0)
[115] : 0x00 (0)
[116] : 0x20 (32)
[117] : 0x02 (2)
[118] : 0x00 (0)
[119] : 0x00 (0)
size : 0x00000078 (120)
[2015/04/15 08:57:25.505572, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.505613, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security:Security]
[2015/04/15 08:57:25.505632, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.505651, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.505669, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
[2015/04/15 08:57:25.505693, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[0]: name[Security] len[120]
[2015/04/15 08:57:25.505714, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.505760, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
in: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000006-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.505822, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.505861, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.505898, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
Closed policy
[2015/04/15 08:57:25.505916, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.505934, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
out: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000000-0000-0000-0000-000000000000
result : WERR_OK
[2015/04/15 08:57:25.506019, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CreateKey: struct winreg_CreateKey
in: struct winreg_CreateKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000001-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0062 (98)
name_size : 0x0062 (98)
name : *
name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry'
keyclass: struct winreg_String
name_len : 0x0002 (2)
name_size : 0x0002 (2)
name : *
name : ''
options : 0x00000000 (0)
0: REG_OPTION_VOLATILE
0: REG_OPTION_CREATE_LINK
0: REG_OPTION_BACKUP_RESTORE
0: REG_OPTION_OPEN_LINK
access_mask : 0x02000000 (33554432)
0: KEY_QUERY_VALUE
0: KEY_SET_VALUE
0: KEY_CREATE_SUB_KEY
0: KEY_ENUMERATE_SUB_KEYS
0: KEY_NOTIFY
0: KEY_CREATE_LINK
0: KEY_WOW64_64KEY
0: KEY_WOW64_32KEY
secdesc : NULL
action_taken : *
action_taken : REG_ACTION_NONE (0)
[2015/04/15 08:57:25.506285, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.506325, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
_winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry'
[2015/04/15 08:57:25.506344, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.506363, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.506381, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.506399, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.506418, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.506436, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.506453, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.506470, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.506502, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.506523, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.506542, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.506560, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.506577, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.506595, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.506612, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.506639, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.506660, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.506679, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.506697, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.506715, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.506732, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.506750, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.506767, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.506801, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.506823, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [RemoteRegistry]
[2015/04/15 08:57:25.506841, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.506860, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2015/04/15 08:57:25.506877, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2015/04/15 08:57:25.506896, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.506920, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2015/04/15 08:57:25.506947, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.506968, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
Opened policy hnd[3] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.507006, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CreateKey: struct winreg_CreateKey
out: struct winreg_CreateKey
new_handle : *
new_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000007-0000-0000-2e55-d50b020f0000
action_taken : *
action_taken : REG_OPENED_EXISTING_KEY (2)
result : WERR_OK
[2015/04/15 08:57:25.507103, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000007-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x000c (12)
name_size : 0x000c (12)
name : *
name : 'Start'
type : REG_DWORD (4)
data : *
data: ARRAY(4)
[0] : 0x02 (2)
[1] : 0x00 (0)
[2] : 0x00 (0)
[3] : 0x00 (0)
size : 0x00000004 (4)
[2015/04/15 08:57:25.507268, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.507307, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Start]
[2015/04/15 08:57:25.507327, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.507345, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.507363, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2015/04/15 08:57:25.507387, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[0]: name[Start] len[4]
[2015/04/15 08:57:25.507412, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[1]: name[Type] len[4]
[2015/04/15 08:57:25.507433, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[2]: name[ErrorControl] len[4]
[2015/04/15 08:57:25.507452, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[3]: name[ObjectName] len[24]
[2015/04/15 08:57:25.507471, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[4]: name[DisplayName] len[48]
[2015/04/15 08:57:25.507490, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[5]: name[ImagePath] len[88]
[2015/04/15 08:57:25.507509, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[6]: name[Description] len[126]
[2015/04/15 08:57:25.507528, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.507577, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000007-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x000a (10)
name_size : 0x000a (10)
name : *
name : 'Type'
type : REG_DWORD (4)
data : *
data: ARRAY(4)
[0] : 0x10 (16)
[1] : 0x00 (0)
[2] : 0x00 (0)
[3] : 0x00 (0)
size : 0x00000004 (4)
[2015/04/15 08:57:25.507740, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.507779, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Type]
[2015/04/15 08:57:25.507798, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.507817, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.507863, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000007-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x001a (26)
name_size : 0x001a (26)
name : *
name : 'ErrorControl'
type : REG_DWORD (4)
data : *
data: ARRAY(4)
[0] : 0x01 (1)
[1] : 0x00 (0)
[2] : 0x00 (0)
[3] : 0x00 (0)
size : 0x00000004 (4)
[2015/04/15 08:57:25.508029, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.508069, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ErrorControl]
[2015/04/15 08:57:25.508088, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.508108, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.508156, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000007-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0016 (22)
name_size : 0x0016 (22)
name : *
name : 'ObjectName'
type : REG_SZ (1)
data : *
data: ARRAY(24)
[0] : 0x4c (76)
[1] : 0x00 (0)
[2] : 0x6f (111)
[3] : 0x00 (0)
[4] : 0x63 (99)
[5] : 0x00 (0)
[6] : 0x61 (97)
[7] : 0x00 (0)
[8] : 0x6c (108)
[9] : 0x00 (0)
[10] : 0x53 (83)
[11] : 0x00 (0)
[12] : 0x79 (121)
[13] : 0x00 (0)
[14] : 0x73 (115)
[15] : 0x00 (0)
[16] : 0x74 (116)
[17] : 0x00 (0)
[18] : 0x65 (101)
[19] : 0x00 (0)
[20] : 0x6d (109)
[21] : 0x00 (0)
[22] : 0x00 (0)
[23] : 0x00 (0)
size : 0x00000018 (24)
[2015/04/15 08:57:25.508475, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.508519, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ObjectName]
[2015/04/15 08:57:25.508539, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.508558, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.508617, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000007-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0018 (24)
name_size : 0x0018 (24)
name : *
name : 'DisplayName'
type : REG_SZ (1)
data : *
data: ARRAY(48)
[0] : 0x52 (82)
[1] : 0x00 (0)
[2] : 0x65 (101)
[3] : 0x00 (0)
[4] : 0x6d (109)
[5] : 0x00 (0)
[6] : 0x6f (111)
[7] : 0x00 (0)
[8] : 0x74 (116)
[9] : 0x00 (0)
[10] : 0x65 (101)
[11] : 0x00 (0)
[12] : 0x20 (32)
[13] : 0x00 (0)
[14] : 0x52 (82)
[15] : 0x00 (0)
[16] : 0x65 (101)
[17] : 0x00 (0)
[18] : 0x67 (103)
[19] : 0x00 (0)
[20] : 0x69 (105)
[21] : 0x00 (0)
[22] : 0x73 (115)
[23] : 0x00 (0)
[24] : 0x74 (116)
[25] : 0x00 (0)
[26] : 0x72 (114)
[27] : 0x00 (0)
[28] : 0x79 (121)
[29] : 0x00 (0)
[30] : 0x20 (32)
[31] : 0x00 (0)
[32] : 0x53 (83)
[33] : 0x00 (0)
[34] : 0x65 (101)
[35] : 0x00 (0)
[36] : 0x72 (114)
[37] : 0x00 (0)
[38] : 0x76 (118)
[39] : 0x00 (0)
[40] : 0x69 (105)
[41] : 0x00 (0)
[42] : 0x63 (99)
[43] : 0x00 (0)
[44] : 0x65 (101)
[45] : 0x00 (0)
[46] : 0x00 (0)
[47] : 0x00 (0)
size : 0x00000030 (48)
[2015/04/15 08:57:25.509130, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.509169, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:DisplayName]
[2015/04/15 08:57:25.509189, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.509208, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.509257, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000007-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0014 (20)
name_size : 0x0014 (20)
name : *
name : 'ImagePath'
type : REG_SZ (1)
data : *
data: ARRAY(88)
[0] : 0x2f (47)
[1] : 0x00 (0)
[2] : 0x75 (117)
[3] : 0x00 (0)
[4] : 0x73 (115)
[5] : 0x00 (0)
[6] : 0x72 (114)
[7] : 0x00 (0)
[8] : 0x2f (47)
[9] : 0x00 (0)
[10] : 0x6c (108)
[11] : 0x00 (0)
[12] : 0x69 (105)
[13] : 0x00 (0)
[14] : 0x62 (98)
[15] : 0x00 (0)
[16] : 0x2f (47)
[17] : 0x00 (0)
[18] : 0x78 (120)
[19] : 0x00 (0)
[20] : 0x38 (56)
[21] : 0x00 (0)
[22] : 0x36 (54)
[23] : 0x00 (0)
[24] : 0x5f (95)
[25] : 0x00 (0)
[26] : 0x36 (54)
[27] : 0x00 (0)
[28] : 0x34 (52)
[29] : 0x00 (0)
[30] : 0x2d (45)
[31] : 0x00 (0)
[32] : 0x6c (108)
[33] : 0x00 (0)
[34] : 0x69 (105)
[35] : 0x00 (0)
[36] : 0x6e (110)
[37] : 0x00 (0)
[38] : 0x75 (117)
[39] : 0x00 (0)
[40] : 0x78 (120)
[41] : 0x00 (0)
[42] : 0x2d (45)
[43] : 0x00 (0)
[44] : 0x67 (103)
[45] : 0x00 (0)
[46] : 0x6e (110)
[47] : 0x00 (0)
[48] : 0x75 (117)
[49] : 0x00 (0)
[50] : 0x2f (47)
[51] : 0x00 (0)
[52] : 0x73 (115)
[53] : 0x00 (0)
[54] : 0x61 (97)
[55] : 0x00 (0)
[56] : 0x6d (109)
[57] : 0x00 (0)
[58] : 0x62 (98)
[59] : 0x00 (0)
[60] : 0x61 (97)
[61] : 0x00 (0)
[62] : 0x2f (47)
[63] : 0x00 (0)
[64] : 0x73 (115)
[65] : 0x00 (0)
[66] : 0x76 (118)
[67] : 0x00 (0)
[68] : 0x63 (99)
[69] : 0x00 (0)
[70] : 0x63 (99)
[71] : 0x00 (0)
[72] : 0x74 (116)
[73] : 0x00 (0)
[74] : 0x6c (108)
[75] : 0x00 (0)
[76] : 0x2f (47)
[77] : 0x00 (0)
[78] : 0x73 (115)
[79] : 0x00 (0)
[80] : 0x6d (109)
[81] : 0x00 (0)
[82] : 0x62 (98)
[83] : 0x00 (0)
[84] : 0x64 (100)
[85] : 0x00 (0)
[86] : 0x00 (0)
[87] : 0x00 (0)
size : 0x00000058 (88)
[2015/04/15 08:57:25.510083, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.510123, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ImagePath]
[2015/04/15 08:57:25.510146, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.510167, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.510216, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000007-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0018 (24)
name_size : 0x0018 (24)
name : *
name : 'Description'
type : REG_SZ (1)
data : *
data: ARRAY(126)
[0] : 0x49 (73)
[1] : 0x00 (0)
[2] : 0x6e (110)
[3] : 0x00 (0)
[4] : 0x74 (116)
[5] : 0x00 (0)
[6] : 0x65 (101)
[7] : 0x00 (0)
[8] : 0x72 (114)
[9] : 0x00 (0)
[10] : 0x6e (110)
[11] : 0x00 (0)
[12] : 0x61 (97)
[13] : 0x00 (0)
[14] : 0x6c (108)
[15] : 0x00 (0)
[16] : 0x20 (32)
[17] : 0x00 (0)
[18] : 0x73 (115)
[19] : 0x00 (0)
[20] : 0x65 (101)
[21] : 0x00 (0)
[22] : 0x72 (114)
[23] : 0x00 (0)
[24] : 0x76 (118)
[25] : 0x00 (0)
[26] : 0x69 (105)
[27] : 0x00 (0)
[28] : 0x63 (99)
[29] : 0x00 (0)
[30] : 0x65 (101)
[31] : 0x00 (0)
[32] : 0x20 (32)
[33] : 0x00 (0)
[34] : 0x70 (112)
[35] : 0x00 (0)
[36] : 0x72 (114)
[37] : 0x00 (0)
[38] : 0x6f (111)
[39] : 0x00 (0)
[40] : 0x76 (118)
[41] : 0x00 (0)
[42] : 0x69 (105)
[43] : 0x00 (0)
[44] : 0x64 (100)
[45] : 0x00 (0)
[46] : 0x69 (105)
[47] : 0x00 (0)
[48] : 0x6e (110)
[49] : 0x00 (0)
[50] : 0x67 (103)
[51] : 0x00 (0)
[52] : 0x20 (32)
[53] : 0x00 (0)
[54] : 0x72 (114)
[55] : 0x00 (0)
[56] : 0x65 (101)
[57] : 0x00 (0)
[58] : 0x6d (109)
[59] : 0x00 (0)
[60] : 0x6f (111)
[61] : 0x00 (0)
[62] : 0x74 (116)
[63] : 0x00 (0)
[64] : 0x65 (101)
[65] : 0x00 (0)
[66] : 0x20 (32)
[67] : 0x00 (0)
[68] : 0x61 (97)
[69] : 0x00 (0)
[70] : 0x63 (99)
[71] : 0x00 (0)
[72] : 0x63 (99)
[73] : 0x00 (0)
[74] : 0x65 (101)
[75] : 0x00 (0)
[76] : 0x73 (115)
[77] : 0x00 (0)
[78] : 0x73 (115)
[79] : 0x00 (0)
[80] : 0x20 (32)
[81] : 0x00 (0)
[82] : 0x74 (116)
[83] : 0x00 (0)
[84] : 0x6f (111)
[85] : 0x00 (0)
[86] : 0x20 (32)
[87] : 0x00 (0)
[88] : 0x74 (116)
[89] : 0x00 (0)
[90] : 0x68 (104)
[91] : 0x00 (0)
[92] : 0x65 (101)
[93] : 0x00 (0)
[94] : 0x20 (32)
[95] : 0x00 (0)
[96] : 0x53 (83)
[97] : 0x00 (0)
[98] : 0x61 (97)
[99] : 0x00 (0)
[100] : 0x6d (109)
[101] : 0x00 (0)
[102] : 0x62 (98)
[103] : 0x00 (0)
[104] : 0x61 (97)
[105] : 0x00 (0)
[106] : 0x20 (32)
[107] : 0x00 (0)
[108] : 0x72 (114)
[109] : 0x00 (0)
[110] : 0x65 (101)
[111] : 0x00 (0)
[112] : 0x67 (103)
[113] : 0x00 (0)
[114] : 0x69 (105)
[115] : 0x00 (0)
[116] : 0x73 (115)
[117] : 0x00 (0)
[118] : 0x74 (116)
[119] : 0x00 (0)
[120] : 0x72 (114)
[121] : 0x00 (0)
[122] : 0x79 (121)
[123] : 0x00 (0)
[124] : 0x00 (0)
[125] : 0x00 (0)
size : 0x0000007e (126)
[2015/04/15 08:57:25.511343, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.511383, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Description]
[2015/04/15 08:57:25.511402, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.511422, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.511468, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
in: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000007-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.511530, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.511569, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.511607, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
Closed policy
[2015/04/15 08:57:25.511626, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.511644, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
out: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000000-0000-0000-0000-000000000000
result : WERR_OK
[2015/04/15 08:57:25.511724, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CreateKey: struct winreg_CreateKey
in: struct winreg_CreateKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000001-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0074 (116)
name_size : 0x0074 (116)
name : *
name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security'
keyclass: struct winreg_String
name_len : 0x0002 (2)
name_size : 0x0002 (2)
name : *
name : ''
options : 0x00000000 (0)
0: REG_OPTION_VOLATILE
0: REG_OPTION_CREATE_LINK
0: REG_OPTION_BACKUP_RESTORE
0: REG_OPTION_OPEN_LINK
access_mask : 0x02000000 (33554432)
0: KEY_QUERY_VALUE
0: KEY_SET_VALUE
0: KEY_CREATE_SUB_KEY
0: KEY_ENUMERATE_SUB_KEYS
0: KEY_NOTIFY
0: KEY_CREATE_LINK
0: KEY_WOW64_64KEY
0: KEY_WOW64_32KEY
secdesc : NULL
action_taken : *
action_taken : REG_OPENED_EXISTING_KEY (2)
[2015/04/15 08:57:25.511996, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.512036, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
_winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security'
[2015/04/15 08:57:25.512056, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.512075, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.512093, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.512112, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.512130, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.512148, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.512165, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.512182, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.512209, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.512230, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.512248, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.512266, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.512288, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.512307, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.512324, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.512351, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.512373, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.512391, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.512409, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.512428, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.512445, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.512463, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.512480, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.512516, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.512538, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.512556, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [RemoteRegistry]
[2015/04/15 08:57:25.512587, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.512607, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2015/04/15 08:57:25.512625, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2015/04/15 08:57:25.512643, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.512660, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2015/04/15 08:57:25.512687, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.512707, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Security]
[2015/04/15 08:57:25.512730, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.512749, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
[2015/04/15 08:57:25.512767, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
[2015/04/15 08:57:25.512785, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.512802, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
[2015/04/15 08:57:25.512826, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.512846, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
Opened policy hnd[3] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.512884, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CreateKey: struct winreg_CreateKey
out: struct winreg_CreateKey
new_handle : *
new_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000008-0000-0000-2e55-d50b020f0000
action_taken : *
action_taken : REG_OPENED_EXISTING_KEY (2)
result : WERR_OK
[2015/04/15 08:57:25.512985, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000008-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0012 (18)
name_size : 0x0012 (18)
name : *
name : 'Security'
type : REG_BINARY (3)
data : *
data: ARRAY(120)
[0] : 0x01 (1)
[1] : 0x00 (0)
[2] : 0x04 (4)
[3] : 0x80 (128)
[4] : 0x00 (0)
[5] : 0x00 (0)
[6] : 0x00 (0)
[7] : 0x00 (0)
[8] : 0x00 (0)
[9] : 0x00 (0)
[10] : 0x00 (0)
[11] : 0x00 (0)
[12] : 0x00 (0)
[13] : 0x00 (0)
[14] : 0x00 (0)
[15] : 0x00 (0)
[16] : 0x14 (20)
[17] : 0x00 (0)
[18] : 0x00 (0)
[19] : 0x00 (0)
[20] : 0x02 (2)
[21] : 0x00 (0)
[22] : 0x64 (100)
[23] : 0x00 (0)
[24] : 0x04 (4)
[25] : 0x00 (0)
[26] : 0x00 (0)
[27] : 0x00 (0)
[28] : 0x00 (0)
[29] : 0x00 (0)
[30] : 0x14 (20)
[31] : 0x00 (0)
[32] : 0x8d (141)
[33] : 0x01 (1)
[34] : 0x02 (2)
[35] : 0x00 (0)
[36] : 0x01 (1)
[37] : 0x01 (1)
[38] : 0x00 (0)
[39] : 0x00 (0)
[40] : 0x00 (0)
[41] : 0x00 (0)
[42] : 0x00 (0)
[43] : 0x01 (1)
[44] : 0x00 (0)
[45] : 0x00 (0)
[46] : 0x00 (0)
[47] : 0x00 (0)
[48] : 0x00 (0)
[49] : 0x00 (0)
[50] : 0x18 (24)
[51] : 0x00 (0)
[52] : 0xfd (253)
[53] : 0x01 (1)
[54] : 0x02 (2)
[55] : 0x00 (0)
[56] : 0x01 (1)
[57] : 0x02 (2)
[58] : 0x00 (0)
[59] : 0x00 (0)
[60] : 0x00 (0)
[61] : 0x00 (0)
[62] : 0x00 (0)
[63] : 0x05 (5)
[64] : 0x20 (32)
[65] : 0x00 (0)
[66] : 0x00 (0)
[67] : 0x00 (0)
[68] : 0x23 (35)
[69] : 0x02 (2)
[70] : 0x00 (0)
[71] : 0x00 (0)
[72] : 0x00 (0)
[73] : 0x00 (0)
[74] : 0x18 (24)
[75] : 0x00 (0)
[76] : 0xff (255)
[77] : 0x01 (1)
[78] : 0x0f (15)
[79] : 0x00 (0)
[80] : 0x01 (1)
[81] : 0x02 (2)
[82] : 0x00 (0)
[83] : 0x00 (0)
[84] : 0x00 (0)
[85] : 0x00 (0)
[86] : 0x00 (0)
[87] : 0x05 (5)
[88] : 0x20 (32)
[89] : 0x00 (0)
[90] : 0x00 (0)
[91] : 0x00 (0)
[92] : 0x25 (37)
[93] : 0x02 (2)
[94] : 0x00 (0)
[95] : 0x00 (0)
[96] : 0x00 (0)
[97] : 0x00 (0)
[98] : 0x18 (24)
[99] : 0x00 (0)
[100] : 0xff (255)
[101] : 0x01 (1)
[102] : 0x0f (15)
[103] : 0x00 (0)
[104] : 0x01 (1)
[105] : 0x02 (2)
[106] : 0x00 (0)
[107] : 0x00 (0)
[108] : 0x00 (0)
[109] : 0x00 (0)
[110] : 0x00 (0)
[111] : 0x05 (5)
[112] : 0x20 (32)
[113] : 0x00 (0)
[114] : 0x00 (0)
[115] : 0x00 (0)
[116] : 0x20 (32)
[117] : 0x02 (2)
[118] : 0x00 (0)
[119] : 0x00 (0)
size : 0x00000078 (120)
[2015/04/15 08:57:25.514055, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.514094, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security:Security]
[2015/04/15 08:57:25.514114, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.514132, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.514151, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
[2015/04/15 08:57:25.514175, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[0]: name[Security] len[120]
[2015/04/15 08:57:25.514196, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.514241, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
in: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000008-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.514308, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.514348, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.514386, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
Closed policy
[2015/04/15 08:57:25.514404, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.514421, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
out: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000000-0000-0000-0000-000000000000
result : WERR_OK
[2015/04/15 08:57:25.514502, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CreateKey: struct winreg_CreateKey
in: struct winreg_CreateKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000001-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x004e (78)
name_size : 0x004e (78)
name : *
name : 'SYSTEM\CurrentControlSet\Services\WINS'
keyclass: struct winreg_String
name_len : 0x0002 (2)
name_size : 0x0002 (2)
name : *
name : ''
options : 0x00000000 (0)
0: REG_OPTION_VOLATILE
0: REG_OPTION_CREATE_LINK
0: REG_OPTION_BACKUP_RESTORE
0: REG_OPTION_OPEN_LINK
access_mask : 0x02000000 (33554432)
0: KEY_QUERY_VALUE
0: KEY_SET_VALUE
0: KEY_CREATE_SUB_KEY
0: KEY_ENUMERATE_SUB_KEYS
0: KEY_NOTIFY
0: KEY_CREATE_LINK
0: KEY_WOW64_64KEY
0: KEY_WOW64_32KEY
secdesc : NULL
action_taken : *
action_taken : REG_ACTION_NONE (0)
[2015/04/15 08:57:25.514765, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.514805, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
_winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS'
[2015/04/15 08:57:25.514824, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.514848, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.514866, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.514884, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.514903, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.514920, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.514938, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.514955, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.514982, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.515002, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.515020, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.515038, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.515055, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.515073, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.515090, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.515116, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.515137, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.515156, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.515174, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.515192, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.515209, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.515227, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.515245, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.515285, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.515307, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [WINS]
[2015/04/15 08:57:25.515324, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.515343, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2015/04/15 08:57:25.515360, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2015/04/15 08:57:25.515379, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.515396, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2015/04/15 08:57:25.515422, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.515443, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
Opened policy hnd[3] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.515481, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CreateKey: struct winreg_CreateKey
out: struct winreg_CreateKey
new_handle : *
new_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000009-0000-0000-2e55-d50b020f0000
action_taken : *
action_taken : REG_OPENED_EXISTING_KEY (2)
result : WERR_OK
[2015/04/15 08:57:25.515578, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000009-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x000c (12)
name_size : 0x000c (12)
name : *
name : 'Start'
type : REG_DWORD (4)
data : *
data: ARRAY(4)
[0] : 0x02 (2)
[1] : 0x00 (0)
[2] : 0x00 (0)
[3] : 0x00 (0)
size : 0x00000004 (4)
[2015/04/15 08:57:25.515742, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.515782, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Start]
[2015/04/15 08:57:25.515806, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.515824, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.515842, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2015/04/15 08:57:25.515866, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[0]: name[Start] len[4]
[2015/04/15 08:57:25.515886, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[1]: name[Type] len[4]
[2015/04/15 08:57:25.515906, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[2]: name[ErrorControl] len[4]
[2015/04/15 08:57:25.515924, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[3]: name[ObjectName] len[24]
[2015/04/15 08:57:25.515943, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[4]: name[DisplayName] len[74]
[2015/04/15 08:57:25.515962, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[5]: name[ImagePath] len[88]
[2015/04/15 08:57:25.515981, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[6]: name[Description] len[178]
[2015/04/15 08:57:25.516000, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.516048, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000009-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x000a (10)
name_size : 0x000a (10)
name : *
name : 'Type'
type : REG_DWORD (4)
data : *
data: ARRAY(4)
[0] : 0x10 (16)
[1] : 0x00 (0)
[2] : 0x00 (0)
[3] : 0x00 (0)
size : 0x00000004 (4)
[2015/04/15 08:57:25.516210, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.516250, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Type]
[2015/04/15 08:57:25.516274, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.516293, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.516341, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000009-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x001a (26)
name_size : 0x001a (26)
name : *
name : 'ErrorControl'
type : REG_DWORD (4)
data : *
data: ARRAY(4)
[0] : 0x01 (1)
[1] : 0x00 (0)
[2] : 0x00 (0)
[3] : 0x00 (0)
size : 0x00000004 (4)
[2015/04/15 08:57:25.516502, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.516541, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ErrorControl]
[2015/04/15 08:57:25.516560, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.516586, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.516635, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000009-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0016 (22)
name_size : 0x0016 (22)
name : *
name : 'ObjectName'
type : REG_SZ (1)
data : *
data: ARRAY(24)
[0] : 0x4c (76)
[1] : 0x00 (0)
[2] : 0x6f (111)
[3] : 0x00 (0)
[4] : 0x63 (99)
[5] : 0x00 (0)
[6] : 0x61 (97)
[7] : 0x00 (0)
[8] : 0x6c (108)
[9] : 0x00 (0)
[10] : 0x53 (83)
[11] : 0x00 (0)
[12] : 0x79 (121)
[13] : 0x00 (0)
[14] : 0x73 (115)
[15] : 0x00 (0)
[16] : 0x74 (116)
[17] : 0x00 (0)
[18] : 0x65 (101)
[19] : 0x00 (0)
[20] : 0x6d (109)
[21] : 0x00 (0)
[22] : 0x00 (0)
[23] : 0x00 (0)
size : 0x00000018 (24)
[2015/04/15 08:57:25.516961, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.517001, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ObjectName]
[2015/04/15 08:57:25.517020, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.517039, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.517089, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000009-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0018 (24)
name_size : 0x0018 (24)
name : *
name : 'DisplayName'
type : REG_SZ (1)
data : *
data: ARRAY(74)
[0] : 0x57 (87)
[1] : 0x00 (0)
[2] : 0x69 (105)
[3] : 0x00 (0)
[4] : 0x6e (110)
[5] : 0x00 (0)
[6] : 0x64 (100)
[7] : 0x00 (0)
[8] : 0x6f (111)
[9] : 0x00 (0)
[10] : 0x77 (119)
[11] : 0x00 (0)
[12] : 0x73 (115)
[13] : 0x00 (0)
[14] : 0x20 (32)
[15] : 0x00 (0)
[16] : 0x49 (73)
[17] : 0x00 (0)
[18] : 0x6e (110)
[19] : 0x00 (0)
[20] : 0x74 (116)
[21] : 0x00 (0)
[22] : 0x65 (101)
[23] : 0x00 (0)
[24] : 0x72 (114)
[25] : 0x00 (0)
[26] : 0x6e (110)
[27] : 0x00 (0)
[28] : 0x65 (101)
[29] : 0x00 (0)
[30] : 0x74 (116)
[31] : 0x00 (0)
[32] : 0x20 (32)
[33] : 0x00 (0)
[34] : 0x4e (78)
[35] : 0x00 (0)
[36] : 0x61 (97)
[37] : 0x00 (0)
[38] : 0x6d (109)
[39] : 0x00 (0)
[40] : 0x65 (101)
[41] : 0x00 (0)
[42] : 0x20 (32)
[43] : 0x00 (0)
[44] : 0x53 (83)
[45] : 0x00 (0)
[46] : 0x65 (101)
[47] : 0x00 (0)
[48] : 0x72 (114)
[49] : 0x00 (0)
[50] : 0x76 (118)
[51] : 0x00 (0)
[52] : 0x69 (105)
[53] : 0x00 (0)
[54] : 0x63 (99)
[55] : 0x00 (0)
[56] : 0x65 (101)
[57] : 0x00 (0)
[58] : 0x20 (32)
[59] : 0x00 (0)
[60] : 0x28 (40)
[61] : 0x00 (0)
[62] : 0x57 (87)
[63] : 0x00 (0)
[64] : 0x49 (73)
[65] : 0x00 (0)
[66] : 0x4e (78)
[67] : 0x00 (0)
[68] : 0x53 (83)
[69] : 0x00 (0)
[70] : 0x29 (41)
[71] : 0x00 (0)
[72] : 0x00 (0)
[73] : 0x00 (0)
size : 0x0000004a (74)
[2015/04/15 08:57:25.517805, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.517845, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:DisplayName]
[2015/04/15 08:57:25.517864, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.517884, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.517938, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000009-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0014 (20)
name_size : 0x0014 (20)
name : *
name : 'ImagePath'
type : REG_SZ (1)
data : *
data: ARRAY(88)
[0] : 0x2f (47)
[1] : 0x00 (0)
[2] : 0x75 (117)
[3] : 0x00 (0)
[4] : 0x73 (115)
[5] : 0x00 (0)
[6] : 0x72 (114)
[7] : 0x00 (0)
[8] : 0x2f (47)
[9] : 0x00 (0)
[10] : 0x6c (108)
[11] : 0x00 (0)
[12] : 0x69 (105)
[13] : 0x00 (0)
[14] : 0x62 (98)
[15] : 0x00 (0)
[16] : 0x2f (47)
[17] : 0x00 (0)
[18] : 0x78 (120)
[19] : 0x00 (0)
[20] : 0x38 (56)
[21] : 0x00 (0)
[22] : 0x36 (54)
[23] : 0x00 (0)
[24] : 0x5f (95)
[25] : 0x00 (0)
[26] : 0x36 (54)
[27] : 0x00 (0)
[28] : 0x34 (52)
[29] : 0x00 (0)
[30] : 0x2d (45)
[31] : 0x00 (0)
[32] : 0x6c (108)
[33] : 0x00 (0)
[34] : 0x69 (105)
[35] : 0x00 (0)
[36] : 0x6e (110)
[37] : 0x00 (0)
[38] : 0x75 (117)
[39] : 0x00 (0)
[40] : 0x78 (120)
[41] : 0x00 (0)
[42] : 0x2d (45)
[43] : 0x00 (0)
[44] : 0x67 (103)
[45] : 0x00 (0)
[46] : 0x6e (110)
[47] : 0x00 (0)
[48] : 0x75 (117)
[49] : 0x00 (0)
[50] : 0x2f (47)
[51] : 0x00 (0)
[52] : 0x73 (115)
[53] : 0x00 (0)
[54] : 0x61 (97)
[55] : 0x00 (0)
[56] : 0x6d (109)
[57] : 0x00 (0)
[58] : 0x62 (98)
[59] : 0x00 (0)
[60] : 0x61 (97)
[61] : 0x00 (0)
[62] : 0x2f (47)
[63] : 0x00 (0)
[64] : 0x73 (115)
[65] : 0x00 (0)
[66] : 0x76 (118)
[67] : 0x00 (0)
[68] : 0x63 (99)
[69] : 0x00 (0)
[70] : 0x63 (99)
[71] : 0x00 (0)
[72] : 0x74 (116)
[73] : 0x00 (0)
[74] : 0x6c (108)
[75] : 0x00 (0)
[76] : 0x2f (47)
[77] : 0x00 (0)
[78] : 0x6e (110)
[79] : 0x00 (0)
[80] : 0x6d (109)
[81] : 0x00 (0)
[82] : 0x62 (98)
[83] : 0x00 (0)
[84] : 0x64 (100)
[85] : 0x00 (0)
[86] : 0x00 (0)
[87] : 0x00 (0)
size : 0x00000058 (88)
[2015/04/15 08:57:25.518769, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.518809, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ImagePath]
[2015/04/15 08:57:25.518828, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.518847, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.518896, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000009-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0018 (24)
name_size : 0x0018 (24)
name : *
name : 'Description'
type : REG_SZ (1)
data : *
data: ARRAY(178)
[0] : 0x49 (73)
[1] : 0x00 (0)
[2] : 0x6e (110)
[3] : 0x00 (0)
[4] : 0x74 (116)
[5] : 0x00 (0)
[6] : 0x65 (101)
[7] : 0x00 (0)
[8] : 0x72 (114)
[9] : 0x00 (0)
[10] : 0x6e (110)
[11] : 0x00 (0)
[12] : 0x61 (97)
[13] : 0x00 (0)
[14] : 0x6c (108)
[15] : 0x00 (0)
[16] : 0x20 (32)
[17] : 0x00 (0)
[18] : 0x73 (115)
[19] : 0x00 (0)
[20] : 0x65 (101)
[21] : 0x00 (0)
[22] : 0x72 (114)
[23] : 0x00 (0)
[24] : 0x76 (118)
[25] : 0x00 (0)
[26] : 0x69 (105)
[27] : 0x00 (0)
[28] : 0x63 (99)
[29] : 0x00 (0)
[30] : 0x65 (101)
[31] : 0x00 (0)
[32] : 0x20 (32)
[33] : 0x00 (0)
[34] : 0x70 (112)
[35] : 0x00 (0)
[36] : 0x72 (114)
[37] : 0x00 (0)
[38] : 0x6f (111)
[39] : 0x00 (0)
[40] : 0x76 (118)
[41] : 0x00 (0)
[42] : 0x69 (105)
[43] : 0x00 (0)
[44] : 0x64 (100)
[45] : 0x00 (0)
[46] : 0x69 (105)
[47] : 0x00 (0)
[48] : 0x6e (110)
[49] : 0x00 (0)
[50] : 0x67 (103)
[51] : 0x00 (0)
[52] : 0x20 (32)
[53] : 0x00 (0)
[54] : 0x61 (97)
[55] : 0x00 (0)
[56] : 0x20 (32)
[57] : 0x00 (0)
[58] : 0x4e (78)
[59] : 0x00 (0)
[60] : 0x65 (101)
[61] : 0x00 (0)
[62] : 0x74 (116)
[63] : 0x00 (0)
[64] : 0x42 (66)
[65] : 0x00 (0)
[66] : 0x49 (73)
[67] : 0x00 (0)
[68] : 0x4f (79)
[69] : 0x00 (0)
[70] : 0x53 (83)
[71] : 0x00 (0)
[72] : 0x20 (32)
[73] : 0x00 (0)
[74] : 0x70 (112)
[75] : 0x00 (0)
[76] : 0x6f (111)
[77] : 0x00 (0)
[78] : 0x69 (105)
[79] : 0x00 (0)
[80] : 0x6e (110)
[81] : 0x00 (0)
[82] : 0x74 (116)
[83] : 0x00 (0)
[84] : 0x2d (45)
[85] : 0x00 (0)
[86] : 0x74 (116)
[87] : 0x00 (0)
[88] : 0x6f (111)
[89] : 0x00 (0)
[90] : 0x2d (45)
[91] : 0x00 (0)
[92] : 0x70 (112)
[93] : 0x00 (0)
[94] : 0x6f (111)
[95] : 0x00 (0)
[96] : 0x69 (105)
[97] : 0x00 (0)
[98] : 0x6e (110)
[99] : 0x00 (0)
[100] : 0x74 (116)
[101] : 0x00 (0)
[102] : 0x20 (32)
[103] : 0x00 (0)
[104] : 0x6e (110)
[105] : 0x00 (0)
[106] : 0x61 (97)
[107] : 0x00 (0)
[108] : 0x6d (109)
[109] : 0x00 (0)
[110] : 0x65 (101)
[111] : 0x00 (0)
[112] : 0x20 (32)
[113] : 0x00 (0)
[114] : 0x73 (115)
[115] : 0x00 (0)
[116] : 0x65 (101)
[117] : 0x00 (0)
[118] : 0x72 (114)
[119] : 0x00 (0)
[120] : 0x76 (118)
[121] : 0x00 (0)
[122] : 0x65 (101)
[123] : 0x00 (0)
[124] : 0x72 (114)
[125] : 0x00 (0)
[126] : 0x28 (40)
[127] : 0x00 (0)
[128] : 0x6e (110)
[129] : 0x00 (0)
[130] : 0x6f (111)
[131] : 0x00 (0)
[132] : 0x74 (116)
[133] : 0x00 (0)
[134] : 0x20 (32)
[135] : 0x00 (0)
[136] : 0x72 (114)
[137] : 0x00 (0)
[138] : 0x65 (101)
[139] : 0x00 (0)
[140] : 0x6d (109)
[141] : 0x00 (0)
[142] : 0x6f (111)
[143] : 0x00 (0)
[144] : 0x74 (116)
[145] : 0x00 (0)
[146] : 0x65 (101)
[147] : 0x00 (0)
[148] : 0x6c (108)
[149] : 0x00 (0)
[150] : 0x79 (121)
[151] : 0x00 (0)
[152] : 0x20 (32)
[153] : 0x00 (0)
[154] : 0x6d (109)
[155] : 0x00 (0)
[156] : 0x61 (97)
[157] : 0x00 (0)
[158] : 0x6e (110)
[159] : 0x00 (0)
[160] : 0x61 (97)
[161] : 0x00 (0)
[162] : 0x67 (103)
[163] : 0x00 (0)
[164] : 0x65 (101)
[165] : 0x00 (0)
[166] : 0x61 (97)
[167] : 0x00 (0)
[168] : 0x62 (98)
[169] : 0x00 (0)
[170] : 0x6c (108)
[171] : 0x00 (0)
[172] : 0x65 (101)
[173] : 0x00 (0)
[174] : 0x29 (41)
[175] : 0x00 (0)
[176] : 0x00 (0)
[177] : 0x00 (0)
size : 0x000000b2 (178)
[2015/04/15 08:57:25.520534, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.520581, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Description]
[2015/04/15 08:57:25.520601, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.520621, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.520668, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
in: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000009-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.520732, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.520771, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.520814, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
Closed policy
[2015/04/15 08:57:25.520833, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.520851, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
out: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000000-0000-0000-0000-000000000000
result : WERR_OK
[2015/04/15 08:57:25.520931, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CreateKey: struct winreg_CreateKey
in: struct winreg_CreateKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000001-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0060 (96)
name_size : 0x0060 (96)
name : *
name : 'SYSTEM\CurrentControlSet\Services\WINS\Security'
keyclass: struct winreg_String
name_len : 0x0002 (2)
name_size : 0x0002 (2)
name : *
name : ''
options : 0x00000000 (0)
0: REG_OPTION_VOLATILE
0: REG_OPTION_CREATE_LINK
0: REG_OPTION_BACKUP_RESTORE
0: REG_OPTION_OPEN_LINK
access_mask : 0x02000000 (33554432)
0: KEY_QUERY_VALUE
0: KEY_SET_VALUE
0: KEY_CREATE_SUB_KEY
0: KEY_ENUMERATE_SUB_KEYS
0: KEY_NOTIFY
0: KEY_CREATE_LINK
0: KEY_WOW64_64KEY
0: KEY_WOW64_32KEY
secdesc : NULL
action_taken : *
action_taken : REG_OPENED_EXISTING_KEY (2)
[2015/04/15 08:57:25.521194, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.521233, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
_winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS\Security'
[2015/04/15 08:57:25.521253, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.521272, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.521290, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.521308, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.521333, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.521351, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.521369, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.521386, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.521413, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.521434, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.521452, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.521470, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.521487, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.521505, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.521522, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.521549, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.521570, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.521589, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.521607, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.521626, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.521643, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.521661, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.521678, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.521714, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.521736, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2
[2015/04/15 08:57:25.521754, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [WINS]
[2015/04/15 08:57:25.521777, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.521796, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2015/04/15 08:57:25.521813, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2015/04/15 08:57:25.521831, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.521848, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2015/04/15 08:57:25.521875, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.521896, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Security]
[2015/04/15 08:57:25.521913, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.521932, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
[2015/04/15 08:57:25.521949, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
[2015/04/15 08:57:25.521967, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.521984, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
[2015/04/15 08:57:25.522007, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.522027, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
Opened policy hnd[3] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.522066, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CreateKey: struct winreg_CreateKey
out: struct winreg_CreateKey
new_handle : *
new_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 0000000a-0000-0000-2e55-d50b020f0000
action_taken : *
action_taken : REG_OPENED_EXISTING_KEY (2)
result : WERR_OK
[2015/04/15 08:57:25.522167, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
in: struct winreg_SetValue
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 0000000a-0000-0000-2e55-d50b020f0000
name: struct winreg_String
name_len : 0x0012 (18)
name_size : 0x0012 (18)
name : *
name : 'Security'
type : REG_BINARY (3)
data : *
data: ARRAY(120)
[0] : 0x01 (1)
[1] : 0x00 (0)
[2] : 0x04 (4)
[3] : 0x80 (128)
[4] : 0x00 (0)
[5] : 0x00 (0)
[6] : 0x00 (0)
[7] : 0x00 (0)
[8] : 0x00 (0)
[9] : 0x00 (0)
[10] : 0x00 (0)
[11] : 0x00 (0)
[12] : 0x00 (0)
[13] : 0x00 (0)
[14] : 0x00 (0)
[15] : 0x00 (0)
[16] : 0x14 (20)
[17] : 0x00 (0)
[18] : 0x00 (0)
[19] : 0x00 (0)
[20] : 0x02 (2)
[21] : 0x00 (0)
[22] : 0x64 (100)
[23] : 0x00 (0)
[24] : 0x04 (4)
[25] : 0x00 (0)
[26] : 0x00 (0)
[27] : 0x00 (0)
[28] : 0x00 (0)
[29] : 0x00 (0)
[30] : 0x14 (20)
[31] : 0x00 (0)
[32] : 0x8d (141)
[33] : 0x01 (1)
[34] : 0x02 (2)
[35] : 0x00 (0)
[36] : 0x01 (1)
[37] : 0x01 (1)
[38] : 0x00 (0)
[39] : 0x00 (0)
[40] : 0x00 (0)
[41] : 0x00 (0)
[42] : 0x00 (0)
[43] : 0x01 (1)
[44] : 0x00 (0)
[45] : 0x00 (0)
[46] : 0x00 (0)
[47] : 0x00 (0)
[48] : 0x00 (0)
[49] : 0x00 (0)
[50] : 0x18 (24)
[51] : 0x00 (0)
[52] : 0xfd (253)
[53] : 0x01 (1)
[54] : 0x02 (2)
[55] : 0x00 (0)
[56] : 0x01 (1)
[57] : 0x02 (2)
[58] : 0x00 (0)
[59] : 0x00 (0)
[60] : 0x00 (0)
[61] : 0x00 (0)
[62] : 0x00 (0)
[63] : 0x05 (5)
[64] : 0x20 (32)
[65] : 0x00 (0)
[66] : 0x00 (0)
[67] : 0x00 (0)
[68] : 0x23 (35)
[69] : 0x02 (2)
[70] : 0x00 (0)
[71] : 0x00 (0)
[72] : 0x00 (0)
[73] : 0x00 (0)
[74] : 0x18 (24)
[75] : 0x00 (0)
[76] : 0xff (255)
[77] : 0x01 (1)
[78] : 0x0f (15)
[79] : 0x00 (0)
[80] : 0x01 (1)
[81] : 0x02 (2)
[82] : 0x00 (0)
[83] : 0x00 (0)
[84] : 0x00 (0)
[85] : 0x00 (0)
[86] : 0x00 (0)
[87] : 0x05 (5)
[88] : 0x20 (32)
[89] : 0x00 (0)
[90] : 0x00 (0)
[91] : 0x00 (0)
[92] : 0x25 (37)
[93] : 0x02 (2)
[94] : 0x00 (0)
[95] : 0x00 (0)
[96] : 0x00 (0)
[97] : 0x00 (0)
[98] : 0x18 (24)
[99] : 0x00 (0)
[100] : 0xff (255)
[101] : 0x01 (1)
[102] : 0x0f (15)
[103] : 0x00 (0)
[104] : 0x01 (1)
[105] : 0x02 (2)
[106] : 0x00 (0)
[107] : 0x00 (0)
[108] : 0x00 (0)
[109] : 0x00 (0)
[110] : 0x00 (0)
[111] : 0x05 (5)
[112] : 0x20 (32)
[113] : 0x00 (0)
[114] : 0x00 (0)
[115] : 0x00 (0)
[116] : 0x20 (32)
[117] : 0x02 (2)
[118] : 0x00 (0)
[119] : 0x00 (0)
size : 0x00000078 (120)
[2015/04/15 08:57:25.523237, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.523277, 8, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
_winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security:Security]
[2015/04/15 08:57:25.523297, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log)
tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1
[2015/04/15 08:57:25.523318, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.523338, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
[2015/04/15 08:57:25.523362, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[0]: name[Security] len[120]
[2015/04/15 08:57:25.523382, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_SetValue: struct winreg_SetValue
out: struct winreg_SetValue
result : WERR_OK
[2015/04/15 08:57:25.523428, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
in: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 0000000a-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.523491, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.523530, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.523568, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
Closed policy
[2015/04/15 08:57:25.523585, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.523603, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
out: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000000-0000-0000-0000-000000000000
result : WERR_OK
[2015/04/15 08:57:25.523678, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
in: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000002-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.523740, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.523779, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.523817, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
Closed policy
[2015/04/15 08:57:25.523840, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (3->2)
[2015/04/15 08:57:25.523859, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
out: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000000-0000-0000-0000-000000000000
result : WERR_OK
[2015/04/15 08:57:25.523936, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (2->1)
[2015/04/15 08:57:25.523965, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (1->0)
[2015/04/15 08:57:25.523992, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe)
Deleted handle list for RPC connection \winreg
[2015/04/15 08:57:25.524029, 3, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/rpc_server/eventlog/srv_eventlog_reg.c:59(eventlog_init_winreg)
Initialise the eventlog registry keys if needed.
[2015/04/15 08:57:25.524055, 4, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p)
Create pipe requested \winreg
[2015/04/15 08:57:25.524076, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles)
init_pipe_handle_list: created handle list for pipe \winreg
[2015/04/15 08:57:25.524094, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles)
init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg
[2015/04/15 08:57:25.524131, 4, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p)
Created internal pipe \winreg
[2015/04/15 08:57:25.524160, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenHKLM: struct winreg_OpenHKLM
in: struct winreg_OpenHKLM
system_name : NULL
access_mask : 0x02000000 (33554432)
0: KEY_QUERY_VALUE
0: KEY_SET_VALUE
0: KEY_CREATE_SUB_KEY
0: KEY_ENUMERATE_SUB_KEYS
0: KEY_NOTIFY
0: KEY_CREATE_LINK
0: KEY_WOW64_64KEY
0: KEY_WOW64_32KEY
[2015/04/15 08:57:25.524265, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [HKLM]
[2015/04/15 08:57:25.524285, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.524303, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.524321, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.524338, 5, pid=3842, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:57:25.524355, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.524414, 4, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.524438, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open)
regdb_open: registry db opened. refcount reset (1)
[2015/04/15 08:57:25.524457, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM]
[2015/04/15 08:57:25.524475, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM]
[2015/04/15 08:57:25.524492, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.524509, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM]
[2015/04/15 08:57:25.524541, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
Opened policy hnd[1] [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.524598, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenHKLM: struct winreg_OpenHKLM
out: struct winreg_OpenHKLM
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 0000000b-0000-0000-2e55-d50b020f0000
result : WERR_OK
[2015/04/15 08:57:25.524682, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenKey: struct winreg_OpenKey
in: struct winreg_OpenKey
parent_handle : *
parent_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 0000000b-0000-0000-2e55-d50b020f0000
keyname: struct winreg_String
name_len : 0x0056 (86)
name_size : 0x0056 (86)
name : *
name : 'SYSTEM\CurrentControlSet\Services\Eventlog'
options : 0x00000000 (0)
0: REG_OPTION_VOLATILE
0: REG_OPTION_CREATE_LINK
0: REG_OPTION_BACKUP_RESTORE
0: REG_OPTION_OPEN_LINK
access_mask : 0x02000000 (33554432)
0: KEY_QUERY_VALUE
0: KEY_SET_VALUE
0: KEY_CREATE_SUB_KEY
0: KEY_ENUMERATE_SUB_KEYS
0: KEY_NOTIFY
0: KEY_CREATE_LINK
0: KEY_WOW64_64KEY
0: KEY_WOW64_32KEY
[2015/04/15 08:57:25.524893, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.524934, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [SYSTEM]
[2015/04/15 08:57:25.524953, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (1->2)
[2015/04/15 08:57:25.524972, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2015/04/15 08:57:25.524995, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM]
[2015/04/15 08:57:25.525014, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.525031, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM]
[2015/04/15 08:57:25.525060, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [CurrentControlSet]
[2015/04/15 08:57:25.525081, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (2->3)
[2015/04/15 08:57:25.525100, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.525117, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.525135, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.525153, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet]
[2015/04/15 08:57:25.525182, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Services]
[2015/04/15 08:57:25.525203, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.525221, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.525239, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.525257, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.525274, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
[2015/04/15 08:57:25.525310, 7, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Eventlog]
[2015/04/15 08:57:25.525332, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.525350, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2015/04/15 08:57:25.525368, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2015/04/15 08:57:25.525386, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.525403, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2015/04/15 08:57:25.525434, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.525455, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.525474, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (3->2)
[2015/04/15 08:57:25.525493, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
Opened policy hnd[2] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.525531, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenKey: struct winreg_OpenKey
out: struct winreg_OpenKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 0000000c-0000-0000-2e55-d50b020f0000
result : WERR_OK
[2015/04/15 08:57:25.525611, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_QueryInfoKey: struct winreg_QueryInfoKey
in: struct winreg_QueryInfoKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 0000000c-0000-0000-2e55-d50b020f0000
classname : *
classname: struct winreg_String
name_len : 0x0000 (0)
name_size : 0x0000 (0)
name : NULL
[2015/04/15 08:57:25.525714, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.525755, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Eventlog' (ops 0x7fbe42add6c0)
[2015/04/15 08:57:25.525774, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal)
regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2015/04/15 08:57:25.525800, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[0]: name[DisplayName] len[20]
[2015/04/15 08:57:25.525821, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values)
regdb_unpack_values: value[1]: name[ErrorControl] len[4]
[2015/04/15 08:57:25.525842, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2074(regdb_get_secdesc)
regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2015/04/15 08:57:25.525869, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_QueryInfoKey: struct winreg_QueryInfoKey
out: struct winreg_QueryInfoKey
classname : *
classname: struct winreg_String
name_len : 0x0000 (0)
name_size : 0x0000 (0)
name : NULL
num_subkeys : *
num_subkeys : 0x00000000 (0)
max_subkeylen : *
max_subkeylen : 0x00000000 (0)
max_classlen : *
max_classlen : 0x00000000 (0)
num_values : *
num_values : 0x00000002 (2)
max_valnamelen : *
max_valnamelen : 0x0000001a (26)
max_valbufsize : *
max_valbufsize : 0x00000014 (20)
secdescsize : *
secdescsize : 0x00000078 (120)
last_changed_time : *
last_changed_time : NTTIME(0)
result : WERR_OK
[2015/04/15 08:57:25.526080, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
in: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 0000000c-0000-0000-2e55-d50b020f0000
[2015/04/15 08:57:25.526144, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.526184, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 02 0F 00 00 ....
[2015/04/15 08:57:25.526222, 6, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
Closed policy
[2015/04/15 08:57:25.526239, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (2->1)
[2015/04/15 08:57:25.526257, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
out: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000000-0000-0000-0000-000000000000
result : WERR_OK
[2015/04/15 08:57:25.526330, 10, pid=3842, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (1->0)
[2015/04/15 08:57:25.526358, 10, pid=3842, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe)
Deleted handle list for RPC connection \winreg
[2015/04/15 08:57:25.526391, 0, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/become_daemon.c:136(daemon_ready)
STATUS=daemon 'smbd' finished starting up and ready to serve connectionsRegistering messaging pointer for type 515 - private_data=(nil)
[2015/04/15 08:57:25.546111, 3, pid=3842, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:335(start_background_queue)
start_background_queue: Starting background LPQ thread
[2015/04/15 08:57:25.547198, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:499(open_socket_in)
bind succeeded on port 445
[2015/04/15 08:57:25.547254, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
Socket options:
[2015/04/15 08:57:25.547213, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:371(start_background_queue)
SO_KEEPALIVE = 1
SO_REUSEADDR = 1
start_background_queue: background LPQ thread started
SO_BROADCAST = 0
TCP_NODELAY = 0
TCP_KEEPCNT = 9
TCP_KEEPIDLE = 7200
TCP_KEEPINTVL = 75
IPTOS_LOWDELAY = 0
IPTOS_THROUGHPUT = 0
SO_REUSEPORT = 1
SO_SNDBUF = 16384
SO_RCVBUF = 87380
SO_SNDLOWAT = 1
SO_RCVLOWAT = 1
SO_SNDTIMEO = 0
SO_RCVTIMEO = 0
TCP_QUICKACK = 1
TCP_DEFER_ACCEPT = 0
[2015/04/15 08:57:25.547408, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
Socket options:
SO_KEEPALIVE = 1
SO_REUSEADDR = 1
SO_BROADCAST = 0
TCP_NODELAY = 1
TCP_KEEPCNT = 9
TCP_KEEPIDLE = 7200
TCP_KEEPINTVL = 75
IPTOS_LOWDELAY = 0
IPTOS_THROUGHPUT = 0
SO_REUSEPORT = 1
SO_SNDBUF = 16384
SO_RCVBUF = 87380
SO_SNDLOWAT = 1
SO_RCVLOWAT = 1
SO_SNDTIMEO = 0
SO_RCVTIMEO = 0
TCP_QUICKACK = 1
[2015/04/15 08:57:25.547524, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle)
TCP_DEFER_ACCEPT = 0
event_add_idle: idle_evt(print_queue_housekeeping) 0x7fbe441ba8c0
[2015/04/15 08:57:25.547564, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:499(open_socket_in)
bind succeeded on port 139
[2015/04/15 08:57:25.547588, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
Socket options:
SO_KEEPALIVE = 1
SO_REUSEADDR = 1
SO_BROADCAST = 0
[2015/04/15 08:57:25.547612, 5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
TCP_NODELAY = 0
check lock order 2 for /var/run/samba/serverid.tdb
TCP_KEEPCNT = 9
TCP_KEEPIDLE = 7200
[2015/04/15 08:57:25.547640, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
TCP_KEEPINTVL = 75
lock order: 1:<none> 2:/var/run/samba/serverid.tdb 3:<none>
IPTOS_LOWDELAY = 0
IPTOS_THROUGHPUT = 0
[2015/04/15 08:57:25.547663, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
SO_REUSEPORT = 1
Locking key 260F000000000000FFFF
SO_SNDBUF = 16384
SO_RCVBUF = 87380
SO_SNDLOWAT = 1
[2015/04/15 08:57:25.547689, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
SO_RCVLOWAT = 1
Allocated locked data 0x0x7fbe441baa10
SO_SNDTIMEO = 0
SO_RCVTIMEO = 0
TCP_QUICKACK = 1
TCP_DEFER_ACCEPT = 0
[2015/04/15 08:57:25.547719, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Unlocking key 260F000000000000FFFF
[2015/04/15 08:57:25.547731, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
Socket options:
[2015/04/15 08:57:25.547741, 5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
SO_KEEPALIVE = 1
release lock order 2 for /var/run/samba/serverid.tdb
SO_REUSEADDR = 1
SO_BROADCAST = 0
[2015/04/15 08:57:25.547760, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
TCP_NODELAY = 1
lock order: 1:<none> 2:<none> 3:<none>
TCP_KEEPCNT = 9
TCP_KEEPIDLE = 7200
TCP_KEEPINTVL = 75
IPTOS_LOWDELAY = 0
[2015/04/15 08:57:25.547791, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
IPTOS_THROUGHPUT = 0
Registering messaging pointer for type 33 - private_data=0x7fbe441aaed0
SO_REUSEPORT = 1
SO_SNDBUF = 16384
[2015/04/15 08:57:25.547813, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
SO_RCVBUF = 87380
Registering messaging pointer for type 517 - private_data=(nil)
SO_SNDLOWAT = 1
SO_RCVLOWAT = 1
[2015/04/15 08:57:25.547834, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:340(messaging_deregister)
SO_SNDTIMEO = 0
Deregistering messaging pointer for type 515 - private_data=(nil)
SO_RCVTIMEO = 0
TCP_QUICKACK = 1
[2015/04/15 08:57:25.547853, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
TCP_DEFER_ACCEPT = 0
Registering messaging pointer for type 515 - private_data=(nil)
[2015/04/15 08:57:25.547880, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:499(open_socket_in)
bind succeeded on port 445
[2015/04/15 08:57:25.547886, 3, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:140(pcap_cache_reload)
reloading printcap cache
[2015/04/15 08:57:25.547902, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
Socket options:
[2015/04/15 08:57:25.547914, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:449(cups_pcap_load_async)
SO_KEEPALIVE = 1
cups_pcap_load_async: asynchronously loading cups printers
SO_REUSEADDR = 1
SO_BROADCAST = 0
TCP_NODELAY = 0
TCP_KEEPCNT = 9
TCP_KEEPIDLE = 7200
TCP_KEEPINTVL = 75
IPTOS_LOWDELAY = 0
IPTOS_THROUGHPUT = 0
SO_REUSEPORT = 1
SO_SNDBUF = 16384
SO_RCVBUF = 87380
SO_SNDLOWAT = 1
SO_RCVLOWAT = 1
SO_SNDTIMEO = 0
SO_RCVTIMEO = 0
TCP_QUICKACK = 1
TCP_DEFER_ACCEPT = 0
[2015/04/15 08:57:25.548040, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
Socket options:
SO_KEEPALIVE = 1
SO_REUSEADDR = 1
SO_BROADCAST = 0
TCP_NODELAY = 1
TCP_KEEPCNT = 9
TCP_KEEPIDLE = 7200
TCP_KEEPINTVL = 75
IPTOS_LOWDELAY = 0
IPTOS_THROUGHPUT = 0
SO_REUSEPORT = 1
SO_SNDBUF = 16384
SO_RCVBUF = 87380
SO_SNDLOWAT = 1
SO_RCVLOWAT = 1
SO_SNDTIMEO = 0
SO_RCVTIMEO = 0
TCP_QUICKACK = 1
TCP_DEFER_ACCEPT = 0
[2015/04/15 08:57:25.548183, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:499(open_socket_in)
bind succeeded on port 139
[2015/04/15 08:57:25.548205, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
Socket options:
SO_KEEPALIVE = 1
SO_REUSEADDR = 1
SO_BROADCAST = 0
TCP_NODELAY = 0
TCP_KEEPCNT = 9
TCP_KEEPIDLE = 7200
TCP_KEEPINTVL = 75
IPTOS_LOWDELAY = 0
IPTOS_THROUGHPUT = 0
SO_REUSEPORT = 1
SO_SNDBUF = 16384
SO_RCVBUF = 87380
SO_SNDLOWAT = 1
SO_RCVLOWAT = 1
SO_SNDTIMEO = 0
SO_RCVTIMEO = 0
TCP_QUICKACK = 1
TCP_DEFER_ACCEPT = 0
[2015/04/15 08:57:25.548341, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
Socket options:
SO_KEEPALIVE = 1
SO_REUSEADDR = 1
SO_BROADCAST = 0
TCP_NODELAY = 1
TCP_KEEPCNT = 9
TCP_KEEPIDLE = 7200
TCP_KEEPINTVL = 75
IPTOS_LOWDELAY = 0
IPTOS_THROUGHPUT = 0
SO_REUSEPORT = 1
SO_SNDBUF = 16384
SO_RCVBUF = 87380
SO_SNDLOWAT = 1
SO_RCVLOWAT = 1
SO_SNDTIMEO = 0
SO_RCVTIMEO = 0
TCP_QUICKACK = 1
[2015/04/15 08:57:25.548458, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:466(cups_pcap_load_async)
TCP_DEFER_ACCEPT = 0
cups_pcap_load_async: child pid = 3879
[2015/04/15 08:57:25.548500, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:586(cups_cache_reload)
cups_cache_reload: async read on fd 9
[2015/04/15 08:57:25.548525, 3, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:185(pcap_cache_reload)
reload status: ok
[2015/04/15 08:57:25.548531, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
[2015/04/15 08:57:25.548550, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:426(start_background_queue)
check lock order 2 for /var/run/samba/serverid.tdb
start_background_queue: background LPQ thread waiting for messages
[2015/04/15 08:57:25.548595, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:<none> 2:/var/run/samba/serverid.tdb 3:<none>
[2015/04/15 08:57:25.548636, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Locking key 020F000000000000FFFF
[2015/04/15 08:57:25.548686, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
[2015/04/15 08:57:25.548662, 5, pid=3879, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:318(cups_cache_reload_async)
Allocated locked data 0x0x7fbe441bbe80
reloading cups printcap cache
[2015/04/15 08:57:25.548805, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Unlocking key 020F000000000000FFFF
[2015/04/15 08:57:25.548880, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
release lock order 2 for /var/run/samba/serverid.tdb
[2015/04/15 08:57:25.548943, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:<none> 2:<none> 3:<none>
[2015/04/15 08:57:25.549012, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
Registering messaging pointer for type 13 - private_data=(nil)
[2015/04/15 08:57:25.549075, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
Registering messaging pointer for type 33 - private_data=0x7fbe441aaed0
[2015/04/15 08:57:25.549137, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
Registering messaging pointer for type 783 - private_data=(nil)
[2015/04/15 08:57:25.549206, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
Registering messaging pointer for type 1 - private_data=(nil)
[2015/04/15 08:57:25.549273, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:308(messaging_register)
Overriding messaging pointer for type 1 - private_data=(nil)
[2015/04/15 08:57:25.549344, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
[2015/04/15 08:57:25.549363, 10, pid=3879, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:130(cups_connect)
Registering messaging pointer for type 785 - private_data=(nil)
connecting to cups server /var/run/cups/cups.sock:631
[2015/04/15 08:57:25.549417, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
Registering messaging pointer for type 770 - private_data=(nil)
[2015/04/15 08:57:25.549487, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
Registering messaging pointer for type 15 - private_data=(nil)
[2015/04/15 08:57:25.549556, 5, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register)
Registering messaging pointer for type 16 - private_data=(nil)
[2015/04/15 08:57:25.549669, 1, pid=3842, effective(0, 0), real(0, 0)] ../source3/printing/printer_list.c:226(printer_list_get_last_refresh)
Failed to fetch record!
[2015/04/15 08:57:25.549769, 2, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:929(smbd_parent_loop)
waiting for connections
[2015/04/15 08:57:25.552175, 10, pid=3879, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:171(send_pcap_blob)
successfully sent blob of len 110
[2015/04/15 08:57:25.552213, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:512(cups_async_callback)
cups_async_callback: callback received for printer data. fd = 9
[2015/04/15 08:57:25.552369, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:196(recv_pcap_blob)
successfully recvd blob of len 110
[2015/04/15 08:57:25.552474, 5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
check lock order 1 for /var/run/samba/printer_list.tdb
[2015/04/15 08:57:25.552503, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:/var/run/samba/printer_list.tdb 2:<none> 3:<none>
[2015/04/15 08:57:25.552527, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Locking key 5052494E5445524C4953
[2015/04/15 08:57:25.552553, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
Allocated locked data 0x0x7fbe441bbc20
[2015/04/15 08:57:25.552627, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Unlocking key 5052494E5445524C4953
[2015/04/15 08:57:25.552653, 5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
release lock order 1 for /var/run/samba/printer_list.tdb
[2015/04/15 08:57:25.552673, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:<none> 2:<none> 3:<none>
[2015/04/15 08:57:25.552706, 5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
check lock order 1 for /var/run/samba/printer_list.tdb
[2015/04/15 08:57:25.552729, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:/var/run/samba/printer_list.tdb 2:<none> 3:<none>
[2015/04/15 08:57:25.552750, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Locking key 5052494E5445524C4953
[2015/04/15 08:57:25.552773, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
Allocated locked data 0x0x7fbe441bdc80
[2015/04/15 08:57:25.552810, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Unlocking key 5052494E5445524C4953
[2015/04/15 08:57:25.552833, 5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
release lock order 1 for /var/run/samba/printer_list.tdb
[2015/04/15 08:57:25.552853, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:<none> 2:<none> 3:<none>
[2015/04/15 08:57:25.553040, 8, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:119(delete_and_reload_printers_full)
Adding default registry entry for printer [testbsd], if it doesn't exist.
[2015/04/15 08:57:25.553105, 4, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p)
Create pipe requested \winreg
[2015/04/15 08:57:25.553136, 10, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles)
init_pipe_handle_list: created handle list for pipe \winreg
[2015/04/15 08:57:25.553157, 10, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles)
init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg
[2015/04/15 08:57:25.553203, 4, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p)
Created internal pipe \winreg
[2015/04/15 08:57:25.553271, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenHKLM: struct winreg_OpenHKLM
in: struct winreg_OpenHKLM
system_name : NULL
access_mask : 0x02000000 (33554432)
0: KEY_QUERY_VALUE
0: KEY_SET_VALUE
0: KEY_CREATE_SUB_KEY
0: KEY_ENUMERATE_SUB_KEYS
0: KEY_NOTIFY
0: KEY_CREATE_LINK
0: KEY_WOW64_64KEY
0: KEY_WOW64_32KEY
[2015/04/15 08:57:25.553406, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [HKLM]
[2015/04/15 08:57:25.553436, 4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.553461, 4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:57:25.553484, 4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:57:25.553510, 5, pid=3878, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:57:25.553530, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:57:25.553617, 4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:57:25.553643, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open)
regdb_open: registry db opened. refcount reset (1)
[2015/04/15 08:57:25.553666, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM]
[2015/04/15 08:57:25.553686, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM]
[2015/04/15 08:57:25.553707, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.553726, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM]
[2015/04/15 08:57:25.553769, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
Opened policy hnd[1] [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:57:25.553818, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenHKLM: struct winreg_OpenHKLM
out: struct winreg_OpenHKLM
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 0000000d-0000-0000-2e55-d50b260f0000
result : WERR_OK
[2015/04/15 08:57:25.553937, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenKey: struct winreg_OpenKey
in: struct winreg_OpenKey
parent_handle : *
parent_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 0000000d-0000-0000-2e55-d50b260f0000
keyname: struct winreg_String
name_len : 0x0088 (136)
name_size : 0x0088 (136)
name : *
name : 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd'
options : 0x00000000 (0)
0: REG_OPTION_VOLATILE
0: REG_OPTION_CREATE_LINK
0: REG_OPTION_BACKUP_RESTORE
0: REG_OPTION_OPEN_LINK
access_mask : 0x02000000 (33554432)
0: KEY_QUERY_VALUE
0: KEY_SET_VALUE
0: KEY_CREATE_SUB_KEY
0: KEY_ENUMERATE_SUB_KEYS
0: KEY_NOTIFY
0: KEY_CREATE_LINK
0: KEY_WOW64_64KEY
0: KEY_WOW64_32KEY
[2015/04/15 08:57:25.554173, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:57:25.554223, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [SOFTWARE]
[2015/04/15 08:57:25.554245, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (1->2)
[2015/04/15 08:57:25.554266, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE]
[2015/04/15 08:57:25.554285, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE]
[2015/04/15 08:57:25.554306, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.554324, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE]
[2015/04/15 08:57:25.554361, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Microsoft]
[2015/04/15 08:57:25.554384, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (2->3)
[2015/04/15 08:57:25.554405, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft]
[2015/04/15 08:57:25.554424, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft]
[2015/04/15 08:57:25.554444, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.554462, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft]
[2015/04/15 08:57:25.554497, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Windows NT]
[2015/04/15 08:57:25.554521, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (3->4)
[2015/04/15 08:57:25.554541, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT]
[2015/04/15 08:57:25.554560, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT]
[2015/04/15 08:57:25.554580, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.554599, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT]
[2015/04/15 08:57:25.554629, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [CurrentVersion]
[2015/04/15 08:57:25.554651, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:57:25.554672, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:57:25.554691, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:57:25.554717, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.554737, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe430014c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:57:25.554777, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Print]
[2015/04/15 08:57:25.554801, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (5->6)
[2015/04/15 08:57:25.554821, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print]
[2015/04/15 08:57:25.554841, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print]
[2015/04/15 08:57:25.554862, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.554881, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe430014c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print]
[2015/04/15 08:57:25.554917, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Printers]
[2015/04/15 08:57:25.554940, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (6->7)
[2015/04/15 08:57:25.554961, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:57:25.554980, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:57:25.555002, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.555020, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:57:25.555054, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [testbsd]
[2015/04/15 08:57:25.555076, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (7->8)
[2015/04/15 08:57:25.555097, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd]
[2015/04/15 08:57:25.555116, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd]
[2015/04/15 08:57:25.555137, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:57:25.555156, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd]
[2015/04/15 08:57:25.555200, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (8->7)
[2015/04/15 08:57:25.555225, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (7->6)
[2015/04/15 08:57:25.555245, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (6->5)
[2015/04/15 08:57:25.555265, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:57:25.555285, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (4->3)
[2015/04/15 08:57:25.555305, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (3->2)
[2015/04/15 08:57:25.555326, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
Opened policy hnd[2] [0000] 00 00 00 00 0E 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:57:25.555369, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenKey: struct winreg_OpenKey
out: struct winreg_OpenKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 0000000e-0000-0000-2e55-d50b260f0000
result : WERR_OK
[2015/04/15 08:57:25.555454, 2, pid=3878, effective(0, 0), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:626(winreg_create_printer)
winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd already exists
[2015/04/15 08:57:25.555495, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
in: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 0000000e-0000-0000-2e55-d50b260f0000
[2015/04/15 08:57:25.555564, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 0E 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:57:25.555608, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 0E 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:57:25.555650, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
Closed policy
[2015/04/15 08:57:25.555670, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (2->1)
[2015/04/15 08:57:25.555690, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
out: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000000-0000-0000-0000-000000000000
result : WERR_OK
[2015/04/15 08:57:25.555780, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
in: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 0000000d-0000-0000-2e55-d50b260f0000
[2015/04/15 08:57:25.555850, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:57:25.555893, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 2E 55 D5 0B ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:57:25.555935, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
Closed policy
[2015/04/15 08:57:25.555954, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (1->0)
[2015/04/15 08:57:25.555982, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
out: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000000-0000-0000-0000-000000000000
result : WERR_OK
[2015/04/15 08:57:25.556066, 10, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe)
Deleted handle list for RPC connection \winreg
[2015/04/15 08:57:25.556131, 7, pid=3878, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:5168(lp_servicenumber)
lp_servicenumber: couldn't find RICOH_Aficio_MP_C3002
[2015/04/15 08:57:25.556188, 8, pid=3878, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1620(add_a_service)
add_a_service: Creating snum = 4 for RICOH_Aficio_MP_C3002
[2015/04/15 08:57:25.556212, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1670(hash_a_service)
hash_a_service: hashing index 4 for service name RICOH_Aficio_MP_C3002
[2015/04/15 08:57:25.556237, 3, pid=3878, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1811(lp_add_printer)
adding printer service RICOH_Aficio_MP_C3002
[2015/04/15 08:57:25.556270, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/server_reload.c:87(delete_and_reload_printers)
reloading printer services from pcap cache
[2015/04/15 08:57:25.556389, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:320(messaging_tdb_store)
messaging_tdb_store:
[2015/04/15 08:57:25.556419, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
array: struct messaging_array
num_messages : 0x00000001 (1)
messages: ARRAY(1)
messages: struct messaging_rec
msg_version : 0x00000002 (2)
msg_type : MSG_PRINTER_PCAP (519)
dest: struct server_id
pid : 0x0000000000000f02 (3842)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
src: struct server_id
pid : 0x0000000000000f26 (3878)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
buf : DATA_BLOB length=0
[2015/04/15 08:57:25.556654, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:320(messaging_tdb_store)
messaging_tdb_store:
[2015/04/15 08:57:25.556680, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
array: struct messaging_array
num_messages : 0x00000001 (1)
messages: ARRAY(1)
messages: struct messaging_rec
msg_version : 0x00000002 (2)
msg_type : MSG_PRINTER_PCAP (519)
[2015/04/15 08:57:25.556719, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:76(messaging_tdb_signal_handler)
dest: struct server_id
pid : 0x0000000000000f26 (3878)
messaging_tdb_signal_handler: sig[10] count[1] msgs[1]
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
[2015/04/15 08:57:25.556773, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:534(message_dispatch)
src: struct server_id
pid : 0x0000000000000f26 (3878)
message_dispatch: received_messages = 1
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
buf : DATA_BLOB length=0
[2015/04/15 08:57:25.556862, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:280(messaging_tdb_fetch)
[2015/04/15 08:57:25.556867, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:76(messaging_tdb_signal_handler)
messaging_tdb_fetch:
messaging_tdb_signal_handler: sig[10] count[1] msgs[1]
[2015/04/15 08:57:25.556891, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
[2015/04/15 08:57:25.556893, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:534(message_dispatch)
message_dispatch: received_messages = 1
result: struct messaging_array
num_messages : 0x00000001 (1)
messages: ARRAY(1)
messages: struct messaging_rec
[2015/04/15 08:57:25.556939, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:280(messaging_tdb_fetch)
msg_version : 0x00000002 (2)
messaging_tdb_fetch:
msg_type : MSG_PRINTER_PCAP (519)
[2015/04/15 08:57:25.556962, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
dest: struct server_id
result: struct messaging_array
pid : 0x0000000000000f02 (3842)
num_messages : 0x00000001 (1)
task_id : 0x00000000 (0)
messages: ARRAY(1)
vnn : 0xffffffff (4294967295)
messages: struct messaging_rec
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
msg_version : 0x00000002 (2)
src: struct server_id
msg_type : MSG_PRINTER_PCAP (519)
pid : 0x0000000000000f26 (3878)
dest: struct server_id
task_id : 0x00000000 (0)
pid : 0x0000000000000f26 (3878)
vnn : 0xffffffff (4294967295)
task_id : 0x00000000 (0)
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
vnn : 0xffffffff (4294967295)
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
buf : DATA_BLOB length=0
src: struct server_id
pid : 0x0000000000000f26 (3878)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
buf : DATA_BLOB length=0
[2015/04/15 08:57:25.557150, 6, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:275(bq_sig_chld_handler)
Bq child process 3879 terminated with 0
[2015/04/15 08:58:25.235404, 2, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:419(remove_child_pid)
Could not find child 4121 -- ignoring
[2015/04/15 08:58:25.603246, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/events.c:426(smbd_idle_event_handler)
smbd_idle_event_handler: idle_evt(print_queue_housekeeping) (nil) called
[2015/04/15 08:58:25.603382, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:163(print_queue_housekeeping)
print queue housekeeping
[2015/04/15 08:58:25.603432, 3, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:169(print_queue_housekeeping)
Printcap cache time expired.
[2015/04/15 08:58:25.603477, 3, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:140(pcap_cache_reload)
reloading printcap cache
[2015/04/15 08:58:25.603530, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:449(cups_pcap_load_async)
cups_pcap_load_async: asynchronously loading cups printers
[2015/04/15 08:58:25.604611, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:466(cups_pcap_load_async)
cups_pcap_load_async: child pid = 4122
[2015/04/15 08:58:25.604716, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:586(cups_cache_reload)
cups_cache_reload: async read on fd 9
[2015/04/15 08:58:25.604772, 3, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:185(pcap_cache_reload)
reload status: ok
[2015/04/15 08:58:25.604819, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/events.c:437(smbd_idle_event_handler)
smbd_idle_event_handler: idle_evt(print_queue_housekeeping) (nil) rescheduled
[2015/04/15 08:58:25.605017, 5, pid=4122, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:318(cups_cache_reload_async)
reloading cups printcap cache
[2015/04/15 08:58:25.605608, 10, pid=4122, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:130(cups_connect)
connecting to cups server /var/run/cups/cups.sock:631
[2015/04/15 08:58:25.608528, 10, pid=4122, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:171(send_pcap_blob)
successfully sent blob of len 110
[2015/04/15 08:58:25.608609, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:512(cups_async_callback)
cups_async_callback: callback received for printer data. fd = 9
[2015/04/15 08:58:25.608709, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:196(recv_pcap_blob)
successfully recvd blob of len 110
[2015/04/15 08:58:25.608818, 5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
check lock order 1 for /var/run/samba/printer_list.tdb
[2015/04/15 08:58:25.608874, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:/var/run/samba/printer_list.tdb 2:<none> 3:<none>
[2015/04/15 08:58:25.608946, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Locking key 5052494E5445524C4953
[2015/04/15 08:58:25.609011, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
Allocated locked data 0x0x7fbe441c12d0
[2015/04/15 08:58:25.609095, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Unlocking key 5052494E5445524C4953
[2015/04/15 08:58:25.609144, 5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
release lock order 1 for /var/run/samba/printer_list.tdb
[2015/04/15 08:58:25.609186, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:<none> 2:<none> 3:<none>
[2015/04/15 08:58:25.609243, 5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
check lock order 1 for /var/run/samba/printer_list.tdb
[2015/04/15 08:58:25.609287, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:/var/run/samba/printer_list.tdb 2:<none> 3:<none>
[2015/04/15 08:58:25.609335, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Locking key 5052494E5445524C4953
[2015/04/15 08:58:25.609382, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
Allocated locked data 0x0x7fbe441bbca0
[2015/04/15 08:58:25.609432, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Unlocking key 5052494E5445524C4953
[2015/04/15 08:58:25.609477, 5, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
release lock order 1 for /var/run/samba/printer_list.tdb
[2015/04/15 08:58:25.609518, 10, pid=3878, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:<none> 2:<none> 3:<none>
[2015/04/15 08:58:25.609801, 8, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:119(delete_and_reload_printers_full)
Adding default registry entry for printer [testbsd], if it doesn't exist.
[2015/04/15 08:58:25.609891, 4, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p)
Create pipe requested \winreg
[2015/04/15 08:58:25.609945, 10, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles)
init_pipe_handle_list: created handle list for pipe \winreg
[2015/04/15 08:58:25.609990, 10, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles)
init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg
[2015/04/15 08:58:25.610069, 4, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p)
Created internal pipe \winreg
[2015/04/15 08:58:25.610151, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenHKLM: struct winreg_OpenHKLM
in: struct winreg_OpenHKLM
system_name : NULL
access_mask : 0x02000000 (33554432)
0: KEY_QUERY_VALUE
0: KEY_SET_VALUE
0: KEY_CREATE_SUB_KEY
0: KEY_ENUMERATE_SUB_KEYS
0: KEY_NOTIFY
0: KEY_CREATE_LINK
0: KEY_WOW64_64KEY
0: KEY_WOW64_32KEY
[2015/04/15 08:58:25.610413, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [HKLM]
[2015/04/15 08:58:25.610464, 4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:58:25.610520, 4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:58:25.610566, 4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:25.610608, 5, pid=3878, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:58:25.610650, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:25.639721, 4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:25.639807, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open)
regdb_open: registry db opened. refcount reset (1)
[2015/04/15 08:58:25.639832, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM]
[2015/04/15 08:58:25.639851, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM]
[2015/04/15 08:58:25.639870, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:58:25.639887, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM]
[2015/04/15 08:58:25.639960, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
Opened policy hnd[1] [0000] 00 00 00 00 0F 00 00 00 00 00 00 00 2E 55 11 0C ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:58:25.640010, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenHKLM: struct winreg_OpenHKLM
out: struct winreg_OpenHKLM
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 0000000f-0000-0000-2e55-110c260f0000
result : WERR_OK
[2015/04/15 08:58:25.640120, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenKey: struct winreg_OpenKey
in: struct winreg_OpenKey
parent_handle : *
parent_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 0000000f-0000-0000-2e55-110c260f0000
keyname: struct winreg_String
name_len : 0x0088 (136)
name_size : 0x0088 (136)
name : *
name : 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd'
options : 0x00000000 (0)
0: REG_OPTION_VOLATILE
0: REG_OPTION_CREATE_LINK
0: REG_OPTION_BACKUP_RESTORE
0: REG_OPTION_OPEN_LINK
access_mask : 0x02000000 (33554432)
0: KEY_QUERY_VALUE
0: KEY_SET_VALUE
0: KEY_CREATE_SUB_KEY
0: KEY_ENUMERATE_SUB_KEYS
0: KEY_NOTIFY
0: KEY_CREATE_LINK
0: KEY_WOW64_64KEY
0: KEY_WOW64_32KEY
[2015/04/15 08:58:25.640334, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 0F 00 00 00 00 00 00 00 2E 55 11 0C ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:58:25.640383, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [SOFTWARE]
[2015/04/15 08:58:25.640403, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (1->2)
[2015/04/15 08:58:25.640422, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE]
[2015/04/15 08:58:25.640440, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE]
[2015/04/15 08:58:25.640458, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:58:25.640476, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE]
[2015/04/15 08:58:25.640510, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Microsoft]
[2015/04/15 08:58:25.640531, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (2->3)
[2015/04/15 08:58:25.640550, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft]
[2015/04/15 08:58:25.640578, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft]
[2015/04/15 08:58:25.640598, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:58:25.640615, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft]
[2015/04/15 08:58:25.640645, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Windows NT]
[2015/04/15 08:58:25.640666, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (3->4)
[2015/04/15 08:58:25.640685, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT]
[2015/04/15 08:58:25.640702, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT]
[2015/04/15 08:58:25.640720, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:58:25.640745, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT]
[2015/04/15 08:58:25.640793, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [CurrentVersion]
[2015/04/15 08:58:25.640820, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:58:25.640852, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:58:25.640892, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:58:25.640922, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:58:25.640951, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe430014c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:58:25.640998, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Print]
[2015/04/15 08:58:25.641021, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (5->6)
[2015/04/15 08:58:25.641042, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print]
[2015/04/15 08:58:25.641060, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print]
[2015/04/15 08:58:25.641080, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:58:25.641097, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe430014c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print]
[2015/04/15 08:58:25.645532, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Printers]
[2015/04/15 08:58:25.645620, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (6->7)
[2015/04/15 08:58:25.645651, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:58:25.645670, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:58:25.645691, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:58:25.645708, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:58:25.645740, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [testbsd]
[2015/04/15 08:58:25.645763, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (7->8)
[2015/04/15 08:58:25.645782, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd]
[2015/04/15 08:58:25.645799, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd]
[2015/04/15 08:58:25.645824, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:58:25.645843, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd]
[2015/04/15 08:58:25.645876, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (8->7)
[2015/04/15 08:58:25.645898, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (7->6)
[2015/04/15 08:58:25.645917, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (6->5)
[2015/04/15 08:58:25.645936, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:58:25.645954, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (4->3)
[2015/04/15 08:58:25.645971, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (3->2)
[2015/04/15 08:58:25.645991, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
Opened policy hnd[2] [0000] 00 00 00 00 10 00 00 00 00 00 00 00 2E 55 11 0C ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:58:25.646031, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenKey: struct winreg_OpenKey
out: struct winreg_OpenKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000010-0000-0000-2e55-110c260f0000
result : WERR_OK
[2015/04/15 08:58:25.646109, 2, pid=3878, effective(0, 0), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:626(winreg_create_printer)
winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\testbsd already exists
[2015/04/15 08:58:25.646139, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
in: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000010-0000-0000-2e55-110c260f0000
[2015/04/15 08:58:25.646201, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 10 00 00 00 00 00 00 00 2E 55 11 0C ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:58:25.646241, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 10 00 00 00 00 00 00 00 2E 55 11 0C ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:58:25.646278, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
Closed policy
[2015/04/15 08:58:25.646296, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (2->1)
[2015/04/15 08:58:25.646314, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
out: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000000-0000-0000-0000-000000000000
result : WERR_OK
[2015/04/15 08:58:25.646396, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
in: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 0000000f-0000-0000-2e55-110c260f0000
[2015/04/15 08:58:25.646459, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 0F 00 00 00 00 00 00 00 2E 55 11 0C ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:58:25.646499, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 0F 00 00 00 00 00 00 00 2E 55 11 0C ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:58:25.646536, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
Closed policy
[2015/04/15 08:58:25.646554, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (1->0)
[2015/04/15 08:58:25.646581, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
out: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000000-0000-0000-0000-000000000000
result : WERR_OK
[2015/04/15 08:58:25.646658, 10, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe)
Deleted handle list for RPC connection \winreg
[2015/04/15 08:58:25.646699, 8, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:119(delete_and_reload_printers_full)
Adding default registry entry for printer [RICOH_Aficio_MP_C3002], if it doesn't exist.
[2015/04/15 08:58:25.646728, 4, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p)
Create pipe requested \winreg
[2015/04/15 08:58:25.646749, 10, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles)
init_pipe_handle_list: created handle list for pipe \winreg
[2015/04/15 08:58:25.646768, 10, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles)
init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg
[2015/04/15 08:58:25.646810, 4, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p)
Created internal pipe \winreg
[2015/04/15 08:58:25.646839, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenHKLM: struct winreg_OpenHKLM
in: struct winreg_OpenHKLM
system_name : NULL
access_mask : 0x02000000 (33554432)
0: KEY_QUERY_VALUE
0: KEY_SET_VALUE
0: KEY_CREATE_SUB_KEY
0: KEY_ENUMERATE_SUB_KEYS
0: KEY_NOTIFY
0: KEY_CREATE_LINK
0: KEY_WOW64_64KEY
0: KEY_WOW64_32KEY
[2015/04/15 08:58:25.646951, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [HKLM]
[2015/04/15 08:58:25.646970, 4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2015/04/15 08:58:25.646989, 4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2015/04/15 08:58:25.647007, 4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2015/04/15 08:58:25.647024, 5, pid=3878, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:58:25.647042, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:25.647106, 4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:25.647130, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open)
regdb_open: registry db opened. refcount reset (1)
[2015/04/15 08:58:25.647150, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM]
[2015/04/15 08:58:25.647168, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM]
[2015/04/15 08:58:25.647186, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:58:25.647203, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM]
[2015/04/15 08:58:25.647235, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
Opened policy hnd[1] [0000] 00 00 00 00 11 00 00 00 00 00 00 00 2E 55 11 0C ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:58:25.647277, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenHKLM: struct winreg_OpenHKLM
out: struct winreg_OpenHKLM
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000011-0000-0000-2e55-110c260f0000
result : WERR_OK
[2015/04/15 08:58:25.647361, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenKey: struct winreg_OpenKey
in: struct winreg_OpenKey
parent_handle : *
parent_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000011-0000-0000-2e55-110c260f0000
keyname: struct winreg_String
name_len : 0x00a4 (164)
name_size : 0x00a4 (164)
name : *
name : 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\RICOH_Aficio_MP_C3002'
options : 0x00000000 (0)
0: REG_OPTION_VOLATILE
0: REG_OPTION_CREATE_LINK
0: REG_OPTION_BACKUP_RESTORE
0: REG_OPTION_OPEN_LINK
access_mask : 0x02000000 (33554432)
0: KEY_QUERY_VALUE
0: KEY_SET_VALUE
0: KEY_CREATE_SUB_KEY
0: KEY_ENUMERATE_SUB_KEYS
0: KEY_NOTIFY
0: KEY_CREATE_LINK
0: KEY_WOW64_64KEY
0: KEY_WOW64_32KEY
[2015/04/15 08:58:25.647577, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 11 00 00 00 00 00 00 00 2E 55 11 0C ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:58:25.647618, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [SOFTWARE]
[2015/04/15 08:58:25.647637, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (1->2)
[2015/04/15 08:58:25.647660, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE]
[2015/04/15 08:58:25.647679, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE]
[2015/04/15 08:58:25.647696, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:58:25.647713, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE]
[2015/04/15 08:58:25.647745, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Microsoft]
[2015/04/15 08:58:25.647767, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (2->3)
[2015/04/15 08:58:25.647785, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft]
[2015/04/15 08:58:25.647803, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft]
[2015/04/15 08:58:25.647821, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:58:25.647838, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft]
[2015/04/15 08:58:25.647866, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Windows NT]
[2015/04/15 08:58:25.647887, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (3->4)
[2015/04/15 08:58:25.647906, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT]
[2015/04/15 08:58:25.647923, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT]
[2015/04/15 08:58:25.647941, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:58:25.647958, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT]
[2015/04/15 08:58:25.647990, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [CurrentVersion]
[2015/04/15 08:58:25.648011, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (4->5)
[2015/04/15 08:58:25.648030, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:58:25.648047, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:58:25.648066, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:58:25.648083, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe430014c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2015/04/15 08:58:25.648116, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Print]
[2015/04/15 08:58:25.648137, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (5->6)
[2015/04/15 08:58:25.648156, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print]
[2015/04/15 08:58:25.648174, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print]
[2015/04/15 08:58:25.648193, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:58:25.648210, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe430014c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print]
[2015/04/15 08:58:25.648240, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [Printers]
[2015/04/15 08:58:25.648261, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (6->7)
[2015/04/15 08:58:25.648280, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:58:25.648298, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:58:25.648317, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:58:25.648334, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2015/04/15 08:58:25.648363, 7, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
regkey_open_onelevel: name = [RICOH_Aficio_MP_C3002]
[2015/04/15 08:58:25.648384, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open)
regdb_open: incrementing refcount (7->8)
[2015/04/15 08:58:25.648408, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\RICOH_Aficio_MP_C3002]
[2015/04/15 08:58:25.648427, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\RICOH_Aficio_MP_C3002]
[2015/04/15 08:58:25.648446, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
pathtree_find: Exit
[2015/04/15 08:58:25.648464, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
reghook_cache_find: found ops 0x7fbe42add6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\RICOH_Aficio_MP_C3002]
[2015/04/15 08:58:25.648497, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (8->7)
[2015/04/15 08:58:25.648528, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (7->6)
[2015/04/15 08:58:25.648575, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (6->5)
[2015/04/15 08:58:25.648605, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (5->4)
[2015/04/15 08:58:25.648630, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (4->3)
[2015/04/15 08:58:25.648660, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (3->2)
[2015/04/15 08:58:25.648692, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal)
Opened policy hnd[2] [0000] 00 00 00 00 12 00 00 00 00 00 00 00 2E 55 11 0C ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:58:25.648759, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_OpenKey: struct winreg_OpenKey
out: struct winreg_OpenKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000012-0000-0000-2e55-110c260f0000
result : WERR_OK
[2015/04/15 08:58:25.648880, 2, pid=3878, effective(0, 0), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:626(winreg_create_printer)
winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\RICOH_Aficio_MP_C3002 already exists
[2015/04/15 08:58:25.648924, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
in: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000012-0000-0000-2e55-110c260f0000
[2015/04/15 08:58:25.649026, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 12 00 00 00 00 00 00 00 2E 55 11 0C ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:58:25.649094, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 12 00 00 00 00 00 00 00 2E 55 11 0C ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:58:25.649169, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
Closed policy
[2015/04/15 08:58:25.649203, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (2->1)
[2015/04/15 08:58:25.649233, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
out: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000000-0000-0000-0000-000000000000
result : WERR_OK
[2015/04/15 08:58:25.649361, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
in: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000011-0000-0000-2e55-110c260f0000
[2015/04/15 08:58:25.649464, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 11 00 00 00 00 00 00 00 2E 55 11 0C ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:58:25.649520, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal)
Found policy hnd[0] [0000] 00 00 00 00 11 00 00 00 00 00 00 00 2E 55 11 0C ........ .....U..
[0010] 26 0F 00 00 &...
[2015/04/15 08:58:25.649560, 6, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd)
Closed policy
[2015/04/15 08:58:25.649579, 10, pid=3878, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close)
regdb_close: decrementing refcount (1->0)
[2015/04/15 08:58:25.649604, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug)
winreg_CloseKey: struct winreg_CloseKey
out: struct winreg_CloseKey
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid : 00000000-0000-0000-0000-000000000000
result : WERR_OK
[2015/04/15 08:58:25.649683, 10, pid=3878, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe)
Deleted handle list for RPC connection \winreg
[2015/04/15 08:58:25.649741, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/server_reload.c:87(delete_and_reload_printers)
reloading printer services from pcap cache
[2015/04/15 08:58:25.649816, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:320(messaging_tdb_store)
messaging_tdb_store:
[2015/04/15 08:58:25.649839, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
array: struct messaging_array
num_messages : 0x00000001 (1)
messages: ARRAY(1)
messages: struct messaging_rec
msg_version : 0x00000002 (2)
msg_type : MSG_PRINTER_PCAP (519)
dest: struct server_id
pid : 0x0000000000000f02 (3842)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
src: struct server_id
pid : 0x0000000000000f26 (3878)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
buf : DATA_BLOB length=0
[2015/04/15 08:58:25.650015, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:320(messaging_tdb_store)
messaging_tdb_store:
[2015/04/15 08:58:25.650037, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
array: struct messaging_array
num_messages : 0x00000001 (1)
messages: ARRAY(1)
messages: struct messaging_rec
[2015/04/15 08:58:25.650053, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:76(messaging_tdb_signal_handler)
msg_version : 0x00000002 (2)
msg_type : MSG_PRINTER_PCAP (519)
dest: struct server_id
messaging_tdb_signal_handler: sig[10] count[1] msgs[1]
pid : 0x0000000000000f26 (3878)
task_id : 0x00000000 (0)
[2015/04/15 08:58:25.650114, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:534(message_dispatch)
vnn : 0xffffffff (4294967295)
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
message_dispatch: received_messages = 1
src: struct server_id
pid : 0x0000000000000f26 (3878)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
[2015/04/15 08:58:25.650174, 10, pid=3842, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:280(messaging_tdb_fetch)
buf : DATA_BLOB length=0
messaging_tdb_fetch:
[2015/04/15 08:58:25.650200, 1, pid=3842, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
result: struct messaging_array
num_messages : 0x00000001 (1)
[2015/04/15 08:58:25.650217, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:76(messaging_tdb_signal_handler)
messages: ARRAY(1)
messaging_tdb_signal_handler: sig[10] count[1] msgs[1]
messages: struct messaging_rec
[2015/04/15 08:58:25.650240, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:534(message_dispatch)
msg_version : 0x00000002 (2)
message_dispatch: received_messages = 1
msg_type : MSG_PRINTER_PCAP (519)
dest: struct server_id
[2015/04/15 08:58:25.650264, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:280(messaging_tdb_fetch)
pid : 0x0000000000000f02 (3842)
messaging_tdb_fetch:
task_id : 0x00000000 (0)
[2015/04/15 08:58:25.650283, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
vnn : 0xffffffff (4294967295)
result: struct messaging_array
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
num_messages : 0x00000001 (1)
src: struct server_id
messages: ARRAY(1)
pid : 0x0000000000000f26 (3878)
messages: struct messaging_rec
task_id : 0x00000000 (0)
msg_version : 0x00000002 (2)
vnn : 0xffffffff (4294967295)
msg_type : MSG_PRINTER_PCAP (519)
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
dest: struct server_id
buf : DATA_BLOB length=0
pid : 0x0000000000000f26 (3878)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
src: struct server_id
pid : 0x0000000000000f26 (3878)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
buf : DATA_BLOB length=0
[2015/04/15 08:58:25.650446, 6, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:275(bq_sig_chld_handler)
Bq child process 4122 terminated with 0
[2015/04/15 08:58:44.150447, 5, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
check lock order 2 for /var/run/samba/serverid.tdb
[2015/04/15 08:58:44.150591, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:<none> 2:/var/run/samba/serverid.tdb 3:<none>
[2015/04/15 08:58:44.150632, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Locking key 1F10000000000000FFFF
[2015/04/15 08:58:44.150677, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
Allocated locked data 0x0x7fbe441b71f0
[2015/04/15 08:58:44.150726, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Unlocking key 1F10000000000000FFFF
[2015/04/15 08:58:44.150760, 5, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
release lock order 2 for /var/run/samba/serverid.tdb
[2015/04/15 08:58:44.150786, 10, pid=4127, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:<none> 2:<none> 3:<none>
[2015/04/15 08:58:44.150831, 5, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
Socket options:
SO_KEEPALIVE = 1
SO_REUSEADDR = 1
SO_BROADCAST = 0
TCP_NODELAY = 1
TCP_KEEPCNT = 9
TCP_KEEPIDLE = 7200
TCP_KEEPINTVL = 75
IPTOS_LOWDELAY = 0
IPTOS_THROUGHPUT = 0
SO_REUSEPORT = 1
SO_SNDBUF = 87040
SO_RCVBUF = 374400
SO_SNDLOWAT = 1
SO_RCVLOWAT = 1
SO_SNDTIMEO = 0
SO_RCVTIMEO = 0
TCP_QUICKACK = 1
TCP_DEFER_ACCEPT = 0
[2015/04/15 08:58:44.151054, 5, pid=4127, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options)
Socket options:
SO_KEEPALIVE = 1
SO_REUSEADDR = 1
SO_BROADCAST = 0
TCP_NODELAY = 1
TCP_KEEPCNT = 9
TCP_KEEPIDLE = 7200
TCP_KEEPINTVL = 75
IPTOS_LOWDELAY = 0
IPTOS_THROUGHPUT = 0
SO_REUSEPORT = 1
SO_SNDBUF = 87040
SO_RCVBUF = 374400
SO_SNDLOWAT = 1
SO_RCVLOWAT = 1
SO_SNDTIMEO = 0
SO_RCVTIMEO = 0
TCP_QUICKACK = 1
TCP_DEFER_ACCEPT = 0
[2015/04/15 08:58:44.575606, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:76(messaging_tdb_signal_handler)
messaging_tdb_signal_handler: sig[10] count[1] msgs[1]
[2015/04/15 08:58:44.575669, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:534(message_dispatch)
message_dispatch: received_messages = 1
[2015/04/15 08:58:44.575719, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:280(messaging_tdb_fetch)
messaging_tdb_fetch:
[2015/04/15 08:58:44.575757, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
result: struct messaging_array
num_messages : 0x00000001 (1)
messages: ARRAY(1)
messages: struct messaging_rec
msg_version : 0x00000002 (2)
msg_type : MSG_PRINTER_UPDATE (517)
dest: struct server_id
pid : 0x0000000000000f26 (3878)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0xfdea2051dbfd5741 (-150272101608237247)
src: struct server_id
pid : 0x000000000000101f (4127)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0xfdea2051dbfd5741 (-150272101608237247)
buf : DATA_BLOB length=48
[0000] 74 65 73 74 62 73 64 00 00 00 00 00 6C 70 71 20 testbsd. ....lpq
[0010] 2D 50 27 74 65 73 74 62 73 64 27 00 6C 70 72 6D -P'testb sd'.lprm
[0020] 20 2D 50 27 74 65 73 74 62 73 64 27 20 25 6A 00 -P'test bsd' %j.
[2015/04/15 08:58:44.576004, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:1569(print_queue_update_with_lock)
print_queue_update_with_lock: printer share = testbsd
[2015/04/15 08:58:44.576070, 4, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:1362(print_cache_expired)
print_cache_expired: cache expired for queue testbsd (last_qscan_time = 1429079663, time now = 1429081124, qcachetime = 30)
[2015/04/15 08:58:44.576192, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:1194(set_updating_pid)
set_updating_pid: updating lpq cache for print share testbsd
[2015/04/15 08:58:44.576235, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:1417(print_queue_update_internal)
print_queue_update_internal: printer = testbsd, type = 0, lpq command = [lpq -P'testbsd']
[2015/04/15 08:58:44.576410, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/smbrun.c:58(setup_out_fd)
setup_out_fd: Created tmp file /tmp/smb.E2Vbkd
lpq: destinazione sconosciuta "testbsd".
[2015/04/15 08:58:44.634504, 3, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/print_generic.c:90(print_run_command)
Running the command `lpq -P'testbsd'' gave 1
[2015/04/15 08:58:44.634695, 3, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:1436(print_queue_update_internal)
print_queue_update_internal: 0 jobs in queue for testbsd
[2015/04/15 08:58:44.634893, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:1038(traverse_fn_delete)
traverse_fn_delete: pjob 3 deleted due to !process_exists (2797)
[2015/04/15 08:58:44.634954, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:457(print_job_find)
print_job_find: looking up job 3 for share testbsd
[2015/04/15 08:58:44.635029, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:485(print_job_find)
print_job_find: returning system job -1 for jobid 3.
[2015/04/15 08:58:44.635105, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/notify.c:327(send_spoolss_notify2_msg)
send_spoolss_notify2_msg: appending message 0x01/0x0a for printer testbsd to notify_queue_head
[2015/04/15 08:58:44.635205, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:2127(remove_from_jobs_added)
remove_from_jobs_added: removed jobid 3
[2015/04/15 08:58:44.635258, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:158(rap_jobid_delete)
rap_jobid_delete: called.
[2015/04/15 08:58:44.635374, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:1512(print_queue_update_internal)
print_queue_update_internal: printer testbsd INFO/total_jobs = 0
[2015/04/15 08:58:44.635475, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/printing.c:1194(set_updating_pid)
set_updating_pid: not updating lpq cache for print share testbsd
[2015/04/15 08:58:45.636679, 4, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2015/04/15 08:58:45.636784, 5, pid=3878, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
Security token: (NULL)
[2015/04/15 08:58:45.636832, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2015/04/15 08:58:45.636905, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2015/04/15 08:58:45.636984, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/notify.c:180(print_notify_send_messages_to_printer)
print_notify_send_messages_to_printer: sending 1 print notify message to printer testbsd
[2015/04/15 08:58:45.637142, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:320(messaging_tdb_store)
messaging_tdb_store:
[2015/04/15 08:58:45.637195, 1, pid=3878, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug)
array: struct messaging_array
num_messages : 0x00000001 (1)
messages: ARRAY(1)
messages: struct messaging_rec
msg_version : 0x00000002 (2)
msg_type : MSG_PRINTER_NOTIFY2 (514)
dest: struct server_id
pid : 0x000000000000101f (4127)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
src: struct server_id
pid : 0x0000000000000f26 (3878)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x7fcf63b7e299f11a (9209689404427858202)
buf : DATA_BLOB length=52
[0000] 01 00 00 00 2C 00 00 00 74 65 73 74 62 73 64 00 ....,... testbsd.
[0010] 24 0C 2E 55 DE B0 09 00 01 00 00 00 0A 00 00 00 $..U.... ........
[0020] 03 00 00 00 00 00 00 00 00 00 00 00 04 01 00 00 ........ ........
[0030] 00 00 00 00 ....
[2015/04/15 08:58:55.274249, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order)
check lock order 2 for /var/run/samba/serverid.tdb
[2015/04/15 08:58:55.274361, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:<none> 2:/var/run/samba/serverid.tdb 3:<none>
[2015/04/15 08:58:55.274424, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Locking key 1F10000000000000FFFF
[2015/04/15 08:58:55.274494, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
Allocated locked data 0x0x7fbe441bb960
[2015/04/15 08:58:55.274621, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
Unlocking key 1F10000000000000FFFF
[2015/04/15 08:58:55.274703, 5, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
release lock order 2 for /var/run/samba/serverid.tdb
[2015/04/15 08:58:55.274759, 10, pid=3842, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
lock order: 1:<none> 2:<none> 3:<none>
[2015/04/15 08:59:25.267487, 2, pid=3842, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:419(remove_child_pid)
Could not find child 4141 -- ignoring
[2015/04/15 08:59:25.643824, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/events.c:426(smbd_idle_event_handler)
smbd_idle_event_handler: idle_evt(print_queue_housekeeping) (nil) called
[2015/04/15 08:59:25.643971, 5, pid=3878, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:163(print_queue_housekeeping)
print queue housekeeping
[2015/04/15 08:59:25.644019, 10, pid=3878, effective(0, 0), real(0, 0)] ../source3/lib/events.c:437(smbd_idle_event_handler)
smbd_idle_event_handler: idle_evt(print_queue_housekeeping) (nil) rescheduled
More information about the Pkg-samba-maint
mailing list