From: Shu Hung (Koala) on
Hello all,

My Samba server has undergone a series of migration.
And recently, I found that the newer accounts fails to login to older
computers in the network.
All PCs in my network runs Window XP. And I'm running Samba 3.4.7 here as
PDC.

When I login with a new account called "guest2", the computer says the
password of my login is incorrect.
What is my problem? What should I check?

Koala Yeung

P.S. Here is the error log of my domain logon:

[2010/05/08 17:56:36, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:56:45, 3] smbd/process.c:1459(process_smb)
> Transaction 26 of length 45 (0 toread)
> [2010/05/08 17:56:45, 3] smbd/process.c:1273(switch_message)
> switch message SMBclose (pid 3536) conn 0xb91e3530
> [2010/05/08 17:56:45, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:56:45, 3] smbd/reply.c:4488(reply_close)
> close fd=-1 fnum=18585 (numopen=1)
> [2010/05/08 17:56:56, 3] smbd/process.c:1459(process_smb)
> Transaction 27 of length 43 (0 toread)
> [2010/05/08 17:56:56, 3] smbd/process.c:1273(switch_message)
> switch message SMBulogoffX (pid 3536) conn 0x0
> [2010/05/08 17:56:56, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:56:56, 3] smbd/reply.c:1948(reply_ulogoffX)
> ulogoffX vuid=100
> [2010/05/08 17:56:56, 3] smbd/process.c:1459(process_smb)
> Transaction 28 of length 39 (0 toread)
> [2010/05/08 17:56:56, 3] smbd/process.c:1273(switch_message)
> switch message SMBtdis (pid 3536) conn 0xb91e3530
> [2010/05/08 17:56:56, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:56:56, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:56:56, 3] smbd/service.c:1240(close_cnum)
> client1 (::ffff:192.168.0.123) closed connection to service IPC$
> [2010/05/08 17:56:56, 3] smbd/connection.c:31(yield_connection)
> Yielding connection to IPC$
> [2010/05/08 17:56:56, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:56:56, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:56:56, 3] smbd/connection.c:31(yield_connection)
> Yielding connection to
> [2010/05/08 17:56:56, 3] smbd/server.c:845(exit_server_common)
> Server exit (failed to receive smb request)
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 0 of length 137 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBnegprot (pid 3539) conn 0x0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/negprot.c:567(reply_negprot)
> Requested protocol [PC NETWORK PROGRAM 1.0]
> [2010/05/08 17:57:06, 3] smbd/negprot.c:567(reply_negprot)
> Requested protocol [LANMAN1.0]
> [2010/05/08 17:57:06, 3] smbd/negprot.c:567(reply_negprot)
> Requested protocol [Windows for Workgroups 3.1a]
> [2010/05/08 17:57:06, 3] smbd/negprot.c:567(reply_negprot)
> Requested protocol [LM1.2X002]
> [2010/05/08 17:57:06, 3] smbd/negprot.c:567(reply_negprot)
> Requested protocol [LANMAN2.1]
> [2010/05/08 17:57:06, 3] smbd/negprot.c:567(reply_negprot)
> Requested protocol [NT LM 0.12]
> [2010/05/08 17:57:06, 3] smbd/negprot.c:387(reply_nt1)
> using SPNEGO
> [2010/05/08 17:57:06, 3] smbd/negprot.c:672(reply_negprot)
> Selected protocol NT LM 0.12
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 1 of length 240 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBsesssetupX (pid 3539) conn 0x0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
> wct=12 flg2=0xc803
> [2010/05/08 17:57:06, 2] smbd/sesssetup.c:1360(setup_new_vc_session)
> setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all
> old resources.
> [2010/05/08 17:57:06, 3]
> smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
> Doing spnego session setup
> [2010/05/08 17:57:06, 3]
> smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
> NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002
> 5.1] PrimaryDomain=[]
> [2010/05/08 17:57:06, 3] smbd/sesssetup.c:786(reply_spnego_negotiate)
> reply_spnego_negotiate: Got secblob of size 40
> [2010/05/08 17:57:06, 3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags)
> Got NTLMSSP neg_flags=0xa2088207
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 2 of length 266 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBsesssetupX (pid 3539) conn 0x0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
> wct=12 flg2=0xc803
> [2010/05/08 17:57:06, 2] smbd/sesssetup.c:1360(setup_new_vc_session)
> setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all
> old resources.
> [2010/05/08 17:57:06, 3]
> smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
> Doing spnego session setup
> [2010/05/08 17:57:06, 3]
> smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
> NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002
> 5.1] PrimaryDomain=[]
> [2010/05/08 17:57:06, 3] libsmb/ntlmssp.c:745(ntlmssp_server_auth)
> Got user=[] domain=[] workstation=[CLIENT1] len1=1 len2=0
> [2010/05/08 17:57:06, 3] auth/auth.c:222(check_ntlm_password)
> check_ntlm_password: Checking password for unmapped user []\[]@[CLIENT1]
> with the new password interface
> [2010/05/08 17:57:06, 3] auth/auth.c:225(check_ntlm_password)
> check_ntlm_password: mapped user is: [OFFICE_DOMAIN]\[]@[CLIENT1]
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] auth/auth.c:271(check_ntlm_password)
> check_ntlm_password: guest authentication for user [] succeeded
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] groupdb/mapping.c:786(pdb_create_builtin_alias)
> pdb_create_builtin_alias: Could not get a gid out of winbind
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 2] auth/token_util.c:450(create_local_nt_token)
> WARNING: Failed to create BUILTIN\Administrators group! Can Winbind
> allocate gids?
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] groupdb/mapping.c:786(pdb_create_builtin_alias)
> pdb_create_builtin_alias: Could not get a gid out of winbind
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 2] auth/token_util.c:474(create_local_nt_token)
> WARNING: Failed to create BUILTIN\Users group! Can Winbind allocate gids?
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] lib/privileges.c:63(get_privileges)
> get_privileges: No privileges assigned to SID
> [S-1-5-21-3428137395-2921487481-2471230916-501]
> [2010/05/08 17:57:06, 3] lib/privileges.c:63(get_privileges)
> get_privileges: No privileges assigned to SID [S-1-5-2]
> [2010/05/08 17:57:06, 3] lib/privileges.c:63(get_privileges)
> get_privileges: No privileges assigned to SID [S-1-5-32-546]
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] libsmb/ntlmssp_sign.c:342(ntlmssp_sign_init)
> NTLMSSP Sign/Seal - Initialising with flags:
> [2010/05/08 17:57:06, 3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags)
> Got NTLMSSP neg_flags=0xa2088205
> [2010/05/08 17:57:06, 3] smbd/password.c:269(register_existing_vuid)
> register_existing_vuid: User name: nobody Real name: Nobody
> [2010/05/08 17:57:06, 3] smbd/password.c:279(register_existing_vuid)
> register_existing_vuid: UNIX uid 99 is UNIX user nobody, and will be vuid
> 100
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 3 of length 76 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBtconX (pid 3539) conn 0x0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/service.c:807(make_connection_snum)
> Connect path is '/tmp' for service [IPC$]
> [2010/05/08 17:57:06, 3] smbd/vfs.c:95(vfs_init_default)
> Initialising default vfs hooks
> [2010/05/08 17:57:06, 3] smbd/vfs.c:129(vfs_init_custom)
> Initialising custom vfs hooks from [/[Default VFS]/]
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/service.c:1063(make_connection_snum)
> client1 (::ffff:192.168.0.123) connect to service IPC$ initially as user
> nobody (uid=99, gid=99) (pid 3539)
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/reply.c:759(reply_tcon_and_X)
> tconX service=IPC$
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 4 of length 108 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBntcreateX (pid 3539) conn 0xb91e3530
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 5 of length 76 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBtrans2 (pid 3539) conn 0xb91e3530
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 6 of length 76 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBtrans2 (pid 3539) conn 0xb91e3530
> [2010/05/08 17:57:06, 3] smbd/error.c:60(error_packet_set)
> error packet at smbd/trans2.c(3804) cmd=50 (SMBtrans2)
> NT_STATUS_INVALID_LEVEL
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 7 of length 45 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBclose (pid 3539) conn 0xb91e3530
> [2010/05/08 17:57:06, 3] smbd/reply.c:4488(reply_close)
> close fd=-1 fnum=18593 (numopen=1)
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 8 of length 108 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBntcreateX (pid 3539) conn 0xb91e3530
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 9 of length 186 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBwriteX (pid 3539) conn 0xb91e3530
> [2010/05/08 17:57:06, 3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req)
> api_pipe_bind_req: \PIPE\netlogon -> \PIPE\netlogon
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3]
> passdb/secrets.c:1335(secrets_restore_schannel_session_info)
> secrets_restore_schannel_session_info: restored schannel info key
> SECRETS/SCHANNEL/CLIENT1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] rpc_server/srv_pipe.c:960(check_bind_req)
> check_bind_req for \NETLOGON
> [2010/05/08 17:57:06, 3] smbd/pipes.c:325(pipe_write_andx_done)
> writeX-IPC nwritten=118
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 10 of length 63 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBreadX (pid 3539) conn 0xb91e3530
> [2010/05/08 17:57:06, 3] smbd/pipes.c:435(pipe_read_andx_done)
> readX-IPC min=1024 max=1024 nread=92
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 11 of length 420 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBwriteX (pid 3539) conn 0xb91e3530
> [2010/05/08 17:57:06, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
> free_pipe_context: destroying talloc pool of size 74
> [2010/05/08 17:57:06, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP)
> api_rpcTNP: rpc command: NETR_LOGONSAMLOGON
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3]
> passdb/secrets.c:1335(secrets_restore_schannel_session_info)
> secrets_restore_schannel_session_info: restored schannel info key
> SECRETS/SCHANNEL/CLIENT1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3]
> passdb/secrets.c:1242(secrets_store_schannel_session_info)
> secrets_store_schannel_session_info: stored schannel info with key
> SECRETS/SCHANNEL/CLIENT1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3]
> rpc_server/srv_netlog_nt.c:945(_netr_LogonSamLogon)
> SAM Logon (Interactive). Domain:[OFFICE_DOMAIN]. User:[guest2(a)CLIENT1]
> Requested Domain:[OFFICE_DOMAIN]
> [2010/05/08 17:57:06, 3] auth/auth.c:222(check_ntlm_password)
> check_ntlm_password: Checking password for unmapped user
> [OFFICE_DOMAIN]\[guest2]@[CLIENT1] with the new password interface
> [2010/05/08 17:57:06, 3] auth/auth.c:225(check_ntlm_password)
> check_ntlm_password: mapped user is: [OFFICE_DOMAIN]\[guest2]@[CLIENT1]
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] auth/auth.c:271(check_ntlm_password)
> check_ntlm_password: sam authentication for user [guest2] succeeded
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 2] auth/auth.c:310(check_ntlm_password)
> check_ntlm_password: authentication for user [guest2] -> [guest2] ->
> [guest2] succeeded
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
> free_pipe_context: destroying talloc pool of size 342
> [2010/05/08 17:57:06, 3] smbd/pipes.c:325(pipe_write_andx_done)
> writeX-IPC nwritten=352
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 12 of length 63 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBreadX (pid 3539) conn 0xb91e3530
> [2010/05/08 17:57:06, 3] smbd/pipes.c:435(pipe_read_andx_done)
> readX-IPC min=1024 max=1024 nread=560
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 13 of length 240 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBsesssetupX (pid 3539) conn 0x0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
> wct=12 flg2=0xc803
> [2010/05/08 17:57:06, 3]
> smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
> Doing spnego session setup
> [2010/05/08 17:57:06, 3]
> smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
> NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002
> 5.1] PrimaryDomain=[]
> [2010/05/08 17:57:06, 3] smbd/sesssetup.c:786(reply_spnego_negotiate)
> reply_spnego_negotiate: Got secblob of size 40
> [2010/05/08 17:57:06, 3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags)
> Got NTLMSSP neg_flags=0xa2088207
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 14 of length 266 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBsesssetupX (pid 3539) conn 0x0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
> wct=12 flg2=0xc803
> [2010/05/08 17:57:06, 3]
> smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
> Doing spnego session setup
> [2010/05/08 17:57:06, 3]
> smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
> NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002
> 5.1] PrimaryDomain=[]
> [2010/05/08 17:57:06, 3] libsmb/ntlmssp.c:745(ntlmssp_server_auth)
> Got user=[] domain=[] workstation=[CLIENT1] len1=1 len2=0
> [2010/05/08 17:57:06, 3] auth/auth.c:222(check_ntlm_password)
> check_ntlm_password: Checking password for unmapped user []\[]@[CLIENT1]
> with the new password interface
> [2010/05/08 17:57:06, 3] auth/auth.c:225(check_ntlm_password)
> check_ntlm_password: mapped user is: [OFFICE_DOMAIN]\[]@[CLIENT1]
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] auth/auth.c:271(check_ntlm_password)
> check_ntlm_password: guest authentication for user [] succeeded
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] groupdb/mapping.c:786(pdb_create_builtin_alias)
> pdb_create_builtin_alias: Could not get a gid out of winbind
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 2] auth/token_util.c:450(create_local_nt_token)
> WARNING: Failed to create BUILTIN\Administrators group! Can Winbind
> allocate gids?
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] groupdb/mapping.c:786(pdb_create_builtin_alias)
> pdb_create_builtin_alias: Could not get a gid out of winbind
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 2] auth/token_util.c:474(create_local_nt_token)
> WARNING: Failed to create BUILTIN\Users group! Can Winbind allocate gids?
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] lib/privileges.c:63(get_privileges)
> get_privileges: No privileges assigned to SID
> [S-1-5-21-3428137395-2921487481-2471230916-501]
> [2010/05/08 17:57:06, 3] lib/privileges.c:63(get_privileges)
> get_privileges: No privileges assigned to SID [S-1-5-2]
> [2010/05/08 17:57:06, 3] lib/privileges.c:63(get_privileges)
> get_privileges: No privileges assigned to SID [S-1-5-32-546]
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] libsmb/ntlmssp_sign.c:342(ntlmssp_sign_init)
> NTLMSSP Sign/Seal - Initialising with flags:
> [2010/05/08 17:57:06, 3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags)
> Got NTLMSSP neg_flags=0xa2088205
> [2010/05/08 17:57:06, 3] smbd/password.c:269(register_existing_vuid)
> register_existing_vuid: User name: nobody Real name: Nobody
> [2010/05/08 17:57:06, 3] smbd/password.c:279(register_existing_vuid)
> register_existing_vuid: UNIX uid 99 is UNIX user nobody, and will be vuid
> 101
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 15 of length 76 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBtconX (pid 3539) conn 0x0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/service.c:807(make_connection_snum)
> Connect path is '/tmp' for service [IPC$]
> [2010/05/08 17:57:06, 3] smbd/vfs.c:95(vfs_init_default)
> Initialising default vfs hooks
> [2010/05/08 17:57:06, 3] smbd/vfs.c:129(vfs_init_custom)
> Initialising custom vfs hooks from [/[Default VFS]/]
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/service.c:1063(make_connection_snum)
> client1 (::ffff:192.168.0.123) connect to service IPC$ initially as user
> nobody (uid=99, gid=99) (pid 3539)
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/reply.c:759(reply_tcon_and_X)
> tconX service=IPC$
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 16 of length 104 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBntcreateX (pid 3539) conn 0xb91d2660
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(101) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(101) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(101) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(101) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 17 of length 76 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBtrans2 (pid 3539) conn 0xb91d2660
> [2010/05/08 17:57:06, 3] smbd/error.c:60(error_packet_set)
> error packet at smbd/trans2.c(3804) cmd=50 (SMBtrans2)
> NT_STATUS_INVALID_LEVEL
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 18 of length 45 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBclose (pid 3539) conn 0xb91d2660
> [2010/05/08 17:57:06, 3] smbd/reply.c:4488(reply_close)
> close fd=-1 fnum=18595 (numopen=1)
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 19 of length 104 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBntcreateX (pid 3539) conn 0xb91d2660
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(101) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(101) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(101) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(101) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 20 of length 140 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBwriteX (pid 3539) conn 0xb91d2660
> [2010/05/08 17:57:06, 3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req)
> api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsarpc
> [2010/05/08 17:57:06, 3] rpc_server/srv_pipe.c:960(check_bind_req)
> check_bind_req for \lsarpc
> [2010/05/08 17:57:06, 3] smbd/pipes.c:325(pipe_write_andx_done)
> writeX-IPC nwritten=72
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 21 of length 63 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBreadX (pid 3539) conn 0xb91d2660
> [2010/05/08 17:57:06, 3] smbd/pipes.c:435(pipe_read_andx_done)
> readX-IPC min=1024 max=1024 nread=68
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 22 of length 176 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBtrans (pid 3539) conn 0xb91d2660
> [2010/05/08 17:57:06, 3] smbd/ipc.c:539(handle_trans)
> trans <\PIPE\> data=88 params=0 setup=2
> [2010/05/08 17:57:06, 3] smbd/ipc.c:490(named_pipe)
> named pipe command on <> name
> [2010/05/08 17:57:06, 3] smbd/ipc.c:454(api_fd_reply)
> Got API command 0x26 on pipe "lsarpc" (pnum 48a4)
> [2010/05/08 17:57:06, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
> free_pipe_context: destroying talloc pool of size 72
> [2010/05/08 17:57:06, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP)
> api_rpcTNP: rpc command: LSA_OPENPOLICY2
> [2010/05/08 17:57:06, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
> free_pipe_context: destroying talloc pool of size 1052
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 23 of length 196 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBtrans (pid 3539) conn 0xb91d2660
> [2010/05/08 17:57:06, 3] smbd/ipc.c:539(handle_trans)
> trans <\PIPE\> data=108 params=0 setup=2
> [2010/05/08 17:57:06, 3] smbd/ipc.c:490(named_pipe)
> named pipe command on <> name
> [2010/05/08 17:57:06, 3] smbd/ipc.c:454(api_fd_reply)
> Got API command 0x26 on pipe "lsarpc" (pnum 48a4)
> [2010/05/08 17:57:06, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
> free_pipe_context: destroying talloc pool of size 0
> [2010/05/08 17:57:06, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP)
> api_rpcTNP: rpc command: LSA_LOOKUPNAMES
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(101) : conn_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(101) : conn_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(101) : conn_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(101) : conn_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(101) : conn_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(101) : conn_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(101) : conn_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:210(push_sec_ctx)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 4
> [2010/05/08 17:57:06, 3] smbd/uid.c:428(push_conn_ctx)
> push_conn_ctx(101) : conn_ctx_stack_ndx = 3
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 4
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 3
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/05/08 17:57:06, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:06, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
> free_pipe_context: destroying talloc pool of size 111
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 24 of length 132 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBtrans (pid 3539) conn 0xb91d2660
> [2010/05/08 17:57:06, 3] smbd/ipc.c:539(handle_trans)
> trans <\PIPE\> data=44 params=0 setup=2
> [2010/05/08 17:57:06, 3] smbd/ipc.c:490(named_pipe)
> named pipe command on <> name
> [2010/05/08 17:57:06, 3] smbd/ipc.c:454(api_fd_reply)
> Got API command 0x26 on pipe "lsarpc" (pnum 48a4)
> [2010/05/08 17:57:06, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
> free_pipe_context: destroying talloc pool of size 0
> [2010/05/08 17:57:06, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP)
> api_rpcTNP: rpc command: LSA_CLOSE
> [2010/05/08 17:57:06, 3] rpc_server/srv_lsa_hnd.c:218(close_policy_hnd)
> Closed policy
> [2010/05/08 17:57:06, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
> free_pipe_context: destroying talloc pool of size 0
> [2010/05/08 17:57:06, 3] smbd/process.c:1459(process_smb)
> Transaction 25 of length 45 (0 toread)
> [2010/05/08 17:57:06, 3] smbd/process.c:1273(switch_message)
> switch message SMBclose (pid 3539) conn 0xb91d2660
> [2010/05/08 17:57:06, 3] smbd/reply.c:4488(reply_close)
> close fd=-1 fnum=18596 (numopen=1)
> [2010/05/08 17:57:17, 3] smbd/process.c:1459(process_smb)
> Transaction 26 of length 43 (0 toread)
> [2010/05/08 17:57:17, 3] smbd/process.c:1273(switch_message)
> switch message SMBulogoffX (pid 3539) conn 0x0
> [2010/05/08 17:57:17, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:17, 3] smbd/reply.c:1948(reply_ulogoffX)
> ulogoffX vuid=101
> [2010/05/08 17:57:17, 3] smbd/process.c:1459(process_smb)
> Transaction 27 of length 39 (0 toread)
> [2010/05/08 17:57:17, 3] smbd/process.c:1273(switch_message)
> switch message SMBtdis (pid 3539) conn 0xb91d2660
> [2010/05/08 17:57:17, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:17, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:17, 3] smbd/service.c:1240(close_cnum)
> client1 (::ffff:192.168.0.123) closed connection to service IPC$
> [2010/05/08 17:57:17, 3] smbd/connection.c:31(yield_connection)
> Yielding connection to IPC$
> [2010/05/08 17:57:17, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:35, 3] smbd/process.c:1459(process_smb)
> Transaction 28 of length 45 (0 toread)
> [2010/05/08 17:57:35, 3] smbd/process.c:1273(switch_message)
> switch message SMBclose (pid 3539) conn 0xb91e3530
> [2010/05/08 17:57:35, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:35, 3] smbd/reply.c:4488(reply_close)
> close fd=-1 fnum=18594 (numopen=1)
> [2010/05/08 17:57:46, 3] smbd/process.c:1459(process_smb)
> Transaction 29 of length 43 (0 toread)
> [2010/05/08 17:57:46, 3] smbd/process.c:1273(switch_message)
> switch message SMBulogoffX (pid 3539) conn 0x0
> [2010/05/08 17:57:46, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:46, 3] smbd/reply.c:1948(reply_ulogoffX)
> ulogoffX vuid=100
> [2010/05/08 17:57:46, 3] smbd/process.c:1459(process_smb)
> Transaction 30 of length 39 (0 toread)
> [2010/05/08 17:57:46, 3] smbd/process.c:1273(switch_message)
> switch message SMBtdis (pid 3539) conn 0xb91e3530
> [2010/05/08 17:57:46, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:46, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:46, 3] smbd/service.c:1240(close_cnum)
> client1 (::ffff:192.168.0.123) closed connection to service IPC$
> [2010/05/08 17:57:46, 3] smbd/connection.c:31(yield_connection)
> Yielding connection to IPC$
> [2010/05/08 17:57:46, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:46, 3] smbd/sec_ctx.c:310(set_sec_ctx)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/05/08 17:57:46, 3] smbd/connection.c:31(yield_connection)
> Yielding connection to
> [2010/05/08 17:57:46, 3] smbd/server.c:845(exit_server_common)
> Server exit (failed to receive smb request)
>
>
--
To unsubscribe from this list go to the following URL and read t