[2009/08/17 17:42:21, 2] lib/interface.c:add_interface(337)
added interface eth0 ip=fe80::222:6bff:fee7:2cc0%eth0 bcast=fe80::ffff:ffff:ffff:ffff%eth0 netm$
[2009/08/17 17:42:21, 2] lib/interface.c:add_interface(337)
added interface eth0 ip=192.168.115.50 bcast=192.168.115.255 netmask=255.255.255.0
[2009/08/17 17:45:21, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:46:21, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:47:21, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:50:21, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:50:21, 3] smbd/process.c:check_reload(1885)
Printcap cache time expired.
[2009/08/17 17:50:21, 3] printing/pcap.c:pcap_cache_reload(116)
reloading printcap cache
[2009/08/17 17:50:21, 3] printing/pcap.c:pcap_cache_reload(223)
reload status: ok
[2009/08/17 17:51:21, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:16, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:16, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:16, 1] smbd/service.c:close_cnum(1405)
midas (::ffff:192.168.115.150) closed connection to service files
[2009/08/17 17:53:16, 3] smbd/connection.c:yield_connection(31)
Yielding connection to files
[2009/08/17 17:53:16, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:16, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:16, 3] smbd/service.c:close_cnum(1405)
midas (::ffff:192.168.115.150) closed connection to service IPC$
[2009/08/17 17:53:16, 3] smbd/connection.c:yield_connection(31)
Yielding connection to IPC$
[2009/08/17 17:53:16, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:16, 3] smbd/connection.c:yield_connection(31)
Yielding connection to
[2009/08/17 17:53:16, 3] smbd/server.c:exit_server_common(949)
Server exit (termination signal)
[2009/08/17 17:53:35, 3] smbd/oplock.c:init_oplocks(875)
init_oplocks: initializing messages.
[2009/08/17 17:53:35, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(241)
Linux kernel oplocks enabled
[2009/08/17 17:53:36, 3] smbd/process.c:process_smb(1549)
Transaction 0 of length 72 (0 toread)
[2009/08/17 17:53:36, 2] smbd/reply.c:reply_special(425)
netbios connect: name1=HIVE name2=MIDAS
[2009/08/17 17:53:36, 2] smbd/reply.c:reply_special(432)
netbios connect: local=hive remote=midas, name type = 0
[2009/08/17 17:53:36, 3] smbd/process.c:process_smb(1549)
Transaction 0 of length 137 (0 toread)
[2009/08/17 17:53:36, 3] smbd/process.c:switch_message(1361)
switch message SMBnegprot (pid 18444) conn 0x0
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] smbd/negprot.c:reply_negprot(568)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2009/08/17 17:53:36, 3] smbd/negprot.c:reply_negprot(568)
Requested protocol [LANMAN1.0]
[2009/08/17 17:53:36, 3] smbd/negprot.c:reply_negprot(568)
Requested protocol [Windows for Workgroups 3.1a]
[2009/08/17 17:53:36, 3] smbd/negprot.c:reply_negprot(568)
Requested protocol [LM1.2X002]
[2009/08/17 17:53:36, 3] smbd/negprot.c:reply_negprot(568)
Requested protocol [LANMAN2.1]
[2009/08/17 17:53:36, 3] smbd/negprot.c:reply_negprot(568)
Requested protocol [NT LM 0.12]
[2009/08/17 17:53:36, 3] smbd/negprot.c:reply_nt1(392)
using SPNEGO
[2009/08/17 17:53:36, 3] smbd/negprot.c:reply_negprot(673)
Selected protocol NT LM 0.12
[2009/08/17 17:53:36, 3] smbd/process.c:process_smb(1549)
Transaction 1 of length 256 (0 toread)
[2009/08/17 17:53:36, 3] smbd/process.c:switch_message(1361)
switch message SMBsesssetupX (pid 18444) conn 0x0
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1409)
wct=12 flg2=0xc807
[2009/08/17 17:53:36, 2] smbd/sesssetup.c:setup_new_vc_session(1363)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2009/08/17 17:53:36, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1173)
Doing spnego session setup
[2009/08/17 17:53:36, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1208)
NativeOS=[Windows 2002 Service Pack 3, v.3311 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDoma$
[2009/08/17 17:53:36, 3] smbd/sesssetup.c:reply_spnego_negotiate(800)
reply_spnego_negotiate: Got secblob of size 40
[2009/08/17 17:53:36, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0xa2088207
[2009/08/17 17:53:36, 3] smbd/process.c:process_smb(1549)
Transaction 2 of length 272 (0 toread)
[2009/08/17 17:53:36, 3] smbd/process.c:switch_message(1361)
switch message SMBsesssetupX (pid 18444) conn 0x0
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1409)
wct=12 flg2=0xc807
[2009/08/17 17:53:36, 2] smbd/sesssetup.c:setup_new_vc_session(1363)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2009/08/17 17:53:36, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1173)
Doing spnego session setup
[2009/08/17 17:53:36, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1208)
NativeOS=[Windows 2002 Service Pack 3, v.3311 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDoma$
[2009/08/17 17:53:36, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(745)
Got user=[] domain=[] workstation=[MIDAS] len1=1 len2=0
[2009/08/17 17:53:36, 3] auth/auth.c:check_ntlm_password(220)
check_ntlm_password: Checking password for unmapped user []\[]@[MIDAS] with the new password i$
[2009/08/17 17:53:36, 3] auth/auth.c:check_ntlm_password(223)
check_ntlm_password: mapped user is: [HIVE]\[]@[MIDAS]
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/08/17 17:53:36, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/08/17 17:53:36, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] auth/auth.c:check_ntlm_password(269)
check_ntlm_password: guest authentication for user [] succeeded
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/08/17 17:53:36, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:36, 3] groupdb/mapping.c:pdb_create_builtin_alias(786)
pdb_create_builtin_alias: Could not get a gid out of winbind
[2009/08/17 17:53:36, 2] auth/token_util.c:create_local_nt_token(385)
WARNING: Failed to create BUILTIN\Administrators group! Can Winbind allocate gids?
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/08/17 17:53:36, 3] smbd/uid.c:push_conn_ctx(357)
[2009/08/17 17:53:36, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:36, 3] groupdb/mapping.c:pdb_create_builtin_alias(786)
pdb_create_builtin_alias: Could not get a gid out of winbind
[2009/08/17 17:53:36, 2] auth/token_util.c:create_local_nt_token(413)
WARNING: Failed to create BUILTIN\Users group! Can Winbind allocate gids?
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/08/17 17:53:36, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-21-3962363092-2188158196-2505712852-501]
[2009/08/17 17:53:36, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-2]
[2009/08/17 17:53:36, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-32-546]
[2009/08/17 17:53:36, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(337)
NTLMSSP Sign/Seal - Initialising with flags:
[2009/08/17 17:53:36, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0xa2088205
[2009/08/17 17:53:36, 3] smbd/password.c:register_existing_vuid(314)
register_existing_vuid: User name: nobody Real name: nobody
[2009/08/17 17:53:36, 3] smbd/password.c:register_existing_vuid(326)
register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 100
[2009/08/17 17:53:36, 3] smbd/process.c:process_smb(1549)
Transaction 3 of length 78 (0 toread)
[2009/08/17 17:53:36, 3] smbd/process.c:switch_message(1361)
switch message SMBtconX (pid 18444) conn 0x0
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] smbd/service.c:make_connection_snum(940)
Connect path is '/tmp' for service [IPC$]
[2009/08/17 17:53:36, 3] lib/util_seaccess.c:se_access_check(249)
[2009/08/17 17:53:36, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-3962363092-2188158196-2505712852-501
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-32-546
[2009/08/17 17:53:36, 3] smbd/vfs.c:vfs_init_default(96)
Initialising default vfs hooks
[2009/08/17 17:53:36, 3] smbd/vfs.c:vfs_init_custom(130)
Initialising custom vfs hooks from [/[Default VFS]/]
[2009/08/17 17:53:36, 3] lib/util_seaccess.c:se_access_check(249)
[2009/08/17 17:53:36, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-3962363092-2188158196-2505712852-501
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-32-546
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] smbd/service.c:make_connection_snum(1194)
midas (::ffff:192.168.115.150) connect to service IPC$ initially as user nobody (uid=65534, gid$
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] smbd/reply.c:reply_tcon_and_X(727)
tconX service=IPC$
[2009/08/17 17:53:36, 3] smbd/process.c:process_smb(1549)
Transaction 4 of length 118 (0 toread)
[2009/08/17 17:53:36, 3] smbd/process.c:switch_message(1361)
switch message SMBtrans (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] smbd/ipc.c:handle_trans(436)
trans <\PIPE\LANMAN> data=0 params=22 setup=0
[2009/08/17 17:53:36, 3] smbd/ipc.c:named_pipe(387)
named pipe command on <LANMAN> name
[2009/08/17 17:53:36, 3] smbd/lanman.c:api_reply(4549)
Got API command 104 of form <WrLehDO> <B16> (tdscnt=0,tpscnt=22,mdrcnt=14724,mprcnt=8)
[2009/08/17 17:53:36, 3] smbd/lanman.c:api_reply(4553)
Doing NetServerEnum
[2009/08/17 17:53:36, 3] smbd/lanman.c:api_RNetServerEnum(1513)
NetServerEnum domain = NETZ uLevel=0 counted=1 total=1
[2009/08/17 17:53:36, 3] smbd/process.c:process_smb(1549)
Transaction 5 of length 43 (0 toread)
[2009/08/17 17:53:36, 3] smbd/process.c:switch_message(1361)
switch message SMBulogoffX (pid 18444) conn 0x0
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] smbd/reply.c:reply_ulogoffX(1910)
ulogoffX vuid=100
[2009/08/17 17:53:36, 3] smbd/process.c:process_smb(1549)
Transaction 6 of length 39 (0 toread)
[2009/08/17 17:53:36, 3] smbd/process.c:switch_message(1361)
switch message SMBtdis (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:36, 3] smbd/service.c:close_cnum(1405)
[2009/08/17 17:53:36, 3] smbd/service.c:close_cnum(1405)
midas (::ffff:192.168.115.150) closed connection to service IPC$
[2009/08/17 17:53:36, 3] smbd/connection.c:yield_connection(31)
Yielding connection to IPC$
[2009/08/17 17:53:36, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:37, 3] smbd/process.c:process_smb(1549)
Transaction 7 of length 256 (0 toread)
[2009/08/17 17:53:37, 3] smbd/process.c:switch_message(1361)
switch message SMBsesssetupX (pid 18444) conn 0x0
[2009/08/17 17:53:37, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:37, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1409)
wct=12 flg2=0xc807
[2009/08/17 17:53:37, 2] smbd/sesssetup.c:setup_new_vc_session(1363)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2009/08/17 17:53:37, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1173)
Doing spnego session setup
[2009/08/17 17:53:37, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1208)
NativeOS=[Windows 2002 Service Pack 3, v.3311 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDoma$
[2009/08/17 17:53:37, 3] smbd/sesssetup.c:reply_spnego_negotiate(800)
reply_spnego_negotiate: Got secblob of size 40
[2009/08/17 17:53:37, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0xa2088207
[2009/08/17 17:53:37, 3] smbd/process.c:process_smb(1549)
Transaction 8 of length 272 (0 toread)
[2009/08/17 17:53:37, 3] smbd/process.c:switch_message(1361)
switch message SMBsesssetupX (pid 18444) conn 0x0
[2009/08/17 17:53:37, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:37, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1409)
wct=12 flg2=0xc807
[2009/08/17 17:53:37, 2] smbd/sesssetup.c:setup_new_vc_session(1363)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2009/08/17 17:53:37, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1173)
Doing spnego session setup
[2009/08/17 17:53:37, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1208)
NativeOS=[Windows 2002 Service Pack 3, v.3311 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDoma$
[2009/08/17 17:53:37, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(745)
Got user=[] domain=[] workstation=[MIDAS] len1=1 len2=0
[2009/08/17 17:53:37, 3] auth/auth.c:check_ntlm_password(220)
check_ntlm_password: Checking password for unmapped user []\[]@[MIDAS] with the new password i$
[2009/08/17 17:53:37, 3] auth/auth.c:check_ntlm_password(223)
check_ntlm_password: mapped user is: [HIVE]\[]@[MIDAS]
[2009/08/17 17:53:37, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/08/17 17:53:37, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/08/17 17:53:37, 3] smbd/sec_ctx.c:set_sec_ctx(324)
[2009/08/17 17:53:37, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:37, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:37, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/08/17 17:53:37, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/08/17 17:53:37, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:37, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:37, 3] auth/auth.c:check_ntlm_password(269)
check_ntlm_password: guest authentication for user [] succeeded
[2009/08/17 17:53:37, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/08/17 17:53:37, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/08/17 17:53:37, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:37, 3] groupdb/mapping.c:pdb_create_builtin_alias(786)
pdb_create_builtin_alias: Could not get a gid out of winbind
[2009/08/17 17:53:37, 2] auth/token_util.c:create_local_nt_token(385)
WARNING: Failed to create BUILTIN\Administrators group! Can Winbind allocate gids?
[2009/08/17 17:53:37, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:37, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/08/17 17:53:37, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/08/17 17:53:37, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:37, 3] groupdb/mapping.c:pdb_create_builtin_alias(786)
pdb_create_builtin_alias: Could not get a gid out of winbind
[2009/08/17 17:53:37, 2] auth/token_util.c:create_local_nt_token(413)
WARNING: Failed to create BUILTIN\Users group! Can Winbind allocate gids?
[2009/08/17 17:53:37, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:37, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/08/17 17:53:37, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/08/17 17:53:37, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:37, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:37, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-21-3962363092-2188158196-2505712852-501]
[2009/08/17 17:53:37, 3] lib/privileges.c:get_privileges(63)
[2009/08/17 17:53:37, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-2]
[2009/08/17 17:53:37, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-32-546]
[2009/08/17 17:53:38, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(337)
NTLMSSP Sign/Seal - Initialising with flags:
[2009/08/17 17:53:38, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0xa2088205
[2009/08/17 17:53:38, 3] smbd/password.c:register_existing_vuid(314)
register_existing_vuid: User name: nobody Real name: nobody
[2009/08/17 17:53:38, 3] smbd/password.c:register_existing_vuid(326)
register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 102
[2009/08/17 17:53:38, 3] smbd/process.c:process_smb(1549)
Transaction 9 of length 78 (0 toread)
[2009/08/17 17:53:38, 3] smbd/process.c:switch_message(1361)
switch message SMBtconX (pid 18444) conn 0x0
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/service.c:make_connection_snum(940)
Connect path is '/tmp' for service [IPC$]
[2009/08/17 17:53:38, 3] lib/util_seaccess.c:se_access_check(249)
[2009/08/17 17:53:38, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-3962363092-2188158196-2505712852-501
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-32-546
[2009/08/17 17:53:38, 3] smbd/vfs.c:vfs_init_default(96)
Initialising default vfs hooks
[2009/08/17 17:53:38, 3] smbd/vfs.c:vfs_init_custom(130)
Initialising custom vfs hooks from [/[Default VFS]/]
[2009/08/17 17:53:38, 3] lib/util_seaccess.c:se_access_check(249)
[2009/08/17 17:53:38, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-3962363092-2188158196-2505712852-501
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-32-546
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/service.c:make_connection_snum(1194)
midas (::ffff:192.168.115.150) connect to service IPC$ initially as user nobody (uid=65534, gid$
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/reply.c:reply_tcon_and_X(727)
tconX service=IPC$
[2009/08/17 17:53:38, 3] smbd/process.c:process_smb(1549)
Transaction 10 of length 127 (0 toread)
[2009/08/17 17:53:38, 3] smbd/process.c:switch_message(1361)
switch message SMBtrans (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/ipc.c:handle_trans(436)
trans <\PIPE\LANMAN> data=0 params=31 setup=0
[2009/08/17 17:53:38, 3] smbd/ipc.c:named_pipe(387)
named pipe command on <LANMAN> name
[2009/08/17 17:53:38, 3] smbd/lanman.c:api_reply(4549)
Got API command 104 of form <WrLehDz> <B16BBDz> (tdscnt=0,tpscnt=31,mdrcnt=4200,mprcnt=8)
[2009/08/17 17:53:38, 3] smbd/lanman.c:api_reply(4553)
Doing NetServerEnum
[2009/08/17 17:53:38, 3] smbd/lanman.c:api_RNetServerEnum(1513)
NetServerEnum domain = NETZ uLevel=1 counted=1 total=1
[2009/08/17 17:53:38, 3] smbd/process.c:process_smb(1549)
Transaction 11 of length 43 (0 toread)
[2009/08/17 17:53:38, 3] smbd/process.c:switch_message(1361)
switch message SMBulogoffX (pid 18444) conn 0x0
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/reply.c:reply_ulogoffX(1910)
ulogoffX vuid=102
[2009/08/17 17:53:38, 3] smbd/process.c:process_smb(1549)
Transaction 12 of length 39 (0 toread)
[2009/08/17 17:53:38, 3] smbd/process.c:switch_message(1361)
switch message SMBtdis (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/service.c:close_cnum(1405)
midas (::ffff:192.168.115.150) closed connection to service IPC$
[2009/08/17 17:53:38, 3] smbd/connection.c:yield_connection(31)
Yielding connection to IPC$
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/process.c:process_smb(1549)
Transaction 13 of length 256 (0 toread)
[2009/08/17 17:53:38, 3] smbd/process.c:switch_message(1361)
switch message SMBsesssetupX (pid 18444) conn 0x0
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1409)
wct=12 flg2=0xc807
[2009/08/17 17:53:38, 2] smbd/sesssetup.c:setup_new_vc_session(1363)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2009/08/17 17:53:38, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1173)
Doing spnego session setup
[2009/08/17 17:53:38, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1208)
NativeOS=[Windows 2002 Service Pack 3, v.3311 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDoma$
[2009/08/17 17:53:38, 3] smbd/sesssetup.c:reply_spnego_negotiate(800)
[2009/08/17 17:53:38, 3] smbd/sesssetup.c:reply_spnego_negotiate(800)
reply_spnego_negotiate: Got secblob of size 40
[2009/08/17 17:53:38, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0xa2088207
[2009/08/17 17:53:38, 3] smbd/process.c:process_smb(1549)
Transaction 14 of length 348 (0 toread)
[2009/08/17 17:53:38, 3] smbd/process.c:switch_message(1361)
switch message SMBsesssetupX (pid 18444) conn 0x0
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1409)
wct=12 flg2=0xc807
[2009/08/17 17:53:38, 2] smbd/sesssetup.c:setup_new_vc_session(1363)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2009/08/17 17:53:38, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1173)
Doing spnego session setup
[2009/08/17 17:53:38, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1208)
NativeOS=[Windows 2002 Service Pack 3, v.3311 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDoma$
[2009/08/17 17:53:38, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(745)
Got user=[cevin.s] domain=[MIDAS] workstation=[MIDAS] len1=24 len2=24
[2009/08/17 17:53:38, 3] auth/auth.c:check_ntlm_password(220)
check_ntlm_password: Checking password for unmapped user [MIDAS]\[cevin.s]@[MIDAS] with the ne$
[2009/08/17 17:53:38, 3] auth/auth.c:check_ntlm_password(223)
check_ntlm_password: mapped user is: [HIVE]\[cevin.s]@[MIDAS]
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/08/17 17:53:38, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/08/17 17:53:38, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/08/17 17:53:38, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] auth/auth.c:check_ntlm_password(269)
check_ntlm_password: sam authentication for user [cevin.s] succeeded
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 2] auth/auth.c:check_ntlm_password(308)
check_ntlm_password: authentication for user [cevin.s] -> [cevin.s] -> [cevin.s] succeeded
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] groupdb/mapping.c:pdb_create_builtin_alias(786)
pdb_create_builtin_alias: Could not get a gid out of winbind
[2009/08/17 17:53:38, 2] auth/token_util.c:create_local_nt_token(385)
WARNING: Failed to create BUILTIN\Administrators group! Can Winbind allocate gids?
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:push_sec_ctx(224)
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] groupdb/mapping.c:pdb_create_builtin_alias(786)
pdb_create_builtin_alias: Could not get a gid out of winbind
[2009/08/17 17:53:38, 2] auth/token_util.c:create_local_nt_token(413)
WARNING: Failed to create BUILTIN\Users group! Can Winbind allocate gids?
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/08/17 17:53:38, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/08/17 17:53:38, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:39, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:39, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-21-3962363092-2188158196-2505712852-3008]
[2009/08/17 17:53:39, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-22-2-100]
[2009/08/17 17:53:39, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-2]
[2009/08/17 17:53:39, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-11]
[2009/08/17 17:53:39, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-22-2-27]
[2009/08/17 17:53:39, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-22-2-1000]
[2009/08/17 17:53:39, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-22-2-1006]
[2009/08/17 17:53:39, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-22-2-1007]
[2009/08/17 17:53:39, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-22-2-1008]
[2009/08/17 17:53:39, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(337)
NTLMSSP Sign/Seal - Initialising with flags:
[2009/08/17 17:53:39, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0xa2088205
[2009/08/17 17:53:39, 3] smbd/password.c:register_existing_vuid(314)
register_existing_vuid: User name: cevin.s Real name: Cevin
[2009/08/17 17:53:39, 3] smbd/password.c:register_existing_vuid(326)
register_existing_vuid: UNIX uid 1004 is UNIX user cevin.s, and will be vuid 104
[2009/08/17 17:53:39, 3] smbd/password.c:register_existing_vuid(350)
Adding homes service for user 'cevin.s' using home directory: '/home/cevin.s'
[2009/08/17 17:53:39, 3] smbd/process.c:process_smb(1549)
[2009/08/17 17:53:39, 3] smbd/process.c:process_smb(1549)
Transaction 15 of length 78 (0 toread)
[2009/08/17 17:53:39, 3] smbd/process.c:switch_message(1361)
switch message SMBtconX (pid 18444) conn 0x0
[2009/08/17 17:53:39, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:39, 3] smbd/service.c:make_connection_snum(940)
Connect path is '/tmp' for service [IPC$]
[2009/08/17 17:53:39, 3] lib/util_seaccess.c:se_access_check(249)
[2009/08/17 17:53:39, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-3962363092-2188158196-2505712852-3008
se_access_check: also S-1-22-2-100
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-22-2-27
se_access_check: also S-1-22-2-1000
se_access_check: also S-1-22-2-1006
se_access_check: also S-1-22-2-1007
se_access_check: also S-1-22-2-1008
[2009/08/17 17:53:39, 3] smbd/vfs.c:vfs_init_default(96)
Initialising default vfs hooks
[2009/08/17 17:53:39, 3] smbd/vfs.c:vfs_init_custom(130)
Initialising custom vfs hooks from [/[Default VFS]/]
[2009/08/17 17:53:39, 3] lib/util_seaccess.c:se_access_check(249)
[2009/08/17 17:53:39, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-3962363092-2188158196-2505712852-3008
se_access_check: also S-1-22-2-100
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-22-2-27
se_access_check: also S-1-22-2-1000
se_access_check: also S-1-22-2-1006
se_access_check: also S-1-22-2-1007
se_access_check: also S-1-22-2-1008
[2009/08/17 17:53:39, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (1004, 100) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:39, 3] smbd/service.c:make_connection_snum(1194)
midas (::ffff:192.168.115.150) connect to service IPC$ initially as user cevin.s (uid=1004, gid$
[2009/08/17 17:53:39, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:39, 3] smbd/reply.c:reply_tcon_and_X(727)
tconX service=IPC$
[2009/08/17 17:53:39, 3] smbd/process.c:process_smb(1549)
Transaction 16 of length 104 (0 toread)
[2009/08/17 17:53:39, 3] smbd/process.c:switch_message(1361)
switch message SMBntcreateX (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:39, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (1004, 100) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:39, 3] smbd/nttrans.c:nt_open_pipe(320)
nt_open_pipe: Known pipe srvsvc opening.
[2009/08/17 17:53:39, 3] smbd/process.c:process_smb(1549)
Transaction 17 of length 140 (0 toread)
[2009/08/17 17:53:39, 3] smbd/process.c:switch_message(1361)
switch message SMBwriteX (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:39, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1564)
api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc
[2009/08/17 17:53:39, 3] rpc_server/srv_pipe.c:check_bind_req(991)
check_bind_req for \PIPE\srvsvc
[2009/08/17 17:53:39, 3] smbd/pipes.c:reply_pipe_write_and_X(251)
writeX-IPC pnum=750f nwritten=72
[2009/08/17 17:53:39, 3] smbd/process.c:process_smb(1549)
Transaction 18 of length 63 (0 toread)
[2009/08/17 17:53:39, 3] smbd/process.c:switch_message(1361)
switch message SMBreadX (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:39, 3] smbd/pipes.c:reply_pipe_read_and_X(301)
readX-IPC pnum=750f min=1024 max=1024 nread=68
[2009/08/17 17:53:39, 3] smbd/process.c:process_smb(1549)
Transaction 19 of length 172 (0 toread)
[2009/08/17 17:53:39, 3] smbd/process.c:switch_message(1361)
switch message SMBtrans (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:39, 3] smbd/ipc.c:handle_trans(436)
trans <\PIPE\> data=84 params=0 setup=2
[2009/08/17 17:53:39, 3] smbd/ipc.c:named_pipe(387)
named pipe command on <> name
[2009/08/17 17:53:39, 3] smbd/ipc.c:api_fd_reply(345)
Got API command 0x26 on pipe "srvsvc" (pnum 750f)
[2009/08/17 17:53:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519)
free_pipe_context: destroying talloc pool of size 69
[2009/08/17 17:53:39, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304)
api_rpcTNP: rpc command: SRVSVC_NETSHAREENUMALL
[2009/08/17 17:53:39, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(1004, 100) : sec_ctx_stack_ndx = 1
[2009/08/17 17:53:39, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(104) : conn_ctx_stack_ndx = 0
[2009/08/17 17:53:39, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/08/17 17:53:39, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (1004, 100) - sec_ctx_stack_ndx = 0
[2009/08/17 17:53:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519)
free_pipe_context: destroying talloc pool of size 158
[2009/08/17 17:53:39, 3] smbd/process.c:process_smb(1549)
Transaction 20 of length 45 (0 toread)
[2009/08/17 17:53:39, 3] smbd/process.c:switch_message(1361)
switch message SMBclose (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:39, 3] smbd/process.c:process_smb(1549)
[2009/08/17 17:53:39, 3] smbd/process.c:process_smb(1549)
Transaction 21 of length 106 (0 toread)
[2009/08/17 17:53:39, 3] smbd/process.c:switch_message(1361)
switch message SMBntcreateX (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:39, 3] smbd/nttrans.c:nt_open_pipe(320)
nt_open_pipe: Known pipe spoolss opening.
[2009/08/17 17:53:39, 3] smbd/process.c:process_smb(1549)
Transaction 22 of length 140 (0 toread)
[2009/08/17 17:53:39, 3] smbd/process.c:switch_message(1361)
switch message SMBwriteX (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:39, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1564)
api_pipe_bind_req: \PIPE\spoolss -> \PIPE\spoolss
[2009/08/17 17:53:39, 3] rpc_server/srv_pipe.c:check_bind_req(991)
check_bind_req for \PIPE\spoolss
[2009/08/17 17:53:39, 3] smbd/pipes.c:reply_pipe_write_and_X(251)
writeX-IPC pnum=7510 nwritten=72
[2009/08/17 17:53:39, 3] smbd/process.c:process_smb(1549)
Transaction 23 of length 63 (0 toread)
[2009/08/17 17:53:39, 3] smbd/process.c:switch_message(1361)
switch message SMBreadX (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:39, 3] smbd/pipes.c:reply_pipe_read_and_X(301)
readX-IPC pnum=7510 min=1024 max=1024 nread=68
[2009/08/17 17:53:39, 3] smbd/process.c:process_smb(1549)
Transaction 24 of length 268 (0 toread)
[2009/08/17 17:53:39, 3] smbd/process.c:switch_message(1361)
switch message SMBtrans (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:39, 3] smbd/ipc.c:handle_trans(436)
trans <\PIPE\> data=180 params=0 setup=2
[2009/08/17 17:53:39, 3] smbd/ipc.c:named_pipe(387)
named pipe command on <> name
[2009/08/17 17:53:39, 3] smbd/ipc.c:api_fd_reply(345)
Got API command 0x26 on pipe "spoolss" (pnum 7510)
[2009/08/17 17:53:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519)
free_pipe_context: destroying talloc pool of size 70
[2009/08/17 17:53:39, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304)
api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX
checking name: \\Hive
[2009/08/17 17:53:39, 3] rpc_server/srv_spoolss_nt.c:set_printer_hnd_printertype(427)
Setting printer type=\\Hive
[2009/08/17 17:53:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519)
free_pipe_context: destroying talloc pool of size 134
[2009/08/17 17:53:39, 3] smbd/process.c:process_smb(1549)
Transaction 25 of length 132 (0 toread)
[2009/08/17 17:53:39, 3] smbd/process.c:switch_message(1361)
switch message SMBtrans (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:39, 3] smbd/ipc.c:handle_trans(436)
trans <\PIPE\> data=44 params=0 setup=2
[2009/08/17 17:53:39, 3] smbd/ipc.c:named_pipe(387)
named pipe command on <> name
[2009/08/17 17:53:39, 3] smbd/ipc.c:api_fd_reply(345)
Got API command 0x26 on pipe "spoolss" (pnum 7510)
[2009/08/17 17:53:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519)
free_pipe_context: destroying talloc pool of size 0
[2009/08/17 17:53:39, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304)
api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER
[2009/08/17 17:53:39, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(206)
Closed policy
[2009/08/17 17:53:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519)
free_pipe_context: destroying talloc pool of size 0
[2009/08/17 17:53:39, 3] smbd/process.c:process_smb(1549)
Transaction 26 of length 45 (0 toread)
[2009/08/17 17:53:39, 3] smbd/process.c:switch_message(1361)
switch message SMBclose (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:39, 3] smbd/process.c:process_smb(1549)
Transaction 27 of length 104 (0 toread)
[2009/08/17 17:53:39, 3] smbd/process.c:switch_message(1361)
switch message SMBntcreateX (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:39, 3] smbd/nttrans.c:nt_open_pipe(320)
nt_open_pipe: Known pipe wkssvc opening.
[2009/08/17 17:53:39, 3] smbd/process.c:process_smb(1549)
Transaction 28 of length 140 (0 toread)
[2009/08/17 17:53:39, 3] smbd/process.c:switch_message(1361)
switch message SMBwriteX (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:39, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1564)
api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\wkssvc
[2009/08/17 17:53:39, 3] rpc_server/srv_pipe.c:check_bind_req(991)
check_bind_req for \PIPE\wkssvc
[2009/08/17 17:53:39, 3] smbd/pipes.c:reply_pipe_write_and_X(251)
writeX-IPC pnum=7511 nwritten=72
[2009/08/17 17:53:39, 3] smbd/process.c:process_smb(1549)
Transaction 29 of length 63 (0 toread)
[2009/08/17 17:53:39, 3] smbd/process.c:switch_message(1361)
switch message SMBreadX (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:39, 3] smbd/pipes.c:reply_pipe_read_and_X(301)
readX-IPC pnum=7511 min=1024 max=1024 nread=68
[2009/08/17 17:53:39, 3] smbd/process.c:process_smb(1549)
Transaction 30 of length 148 (0 toread)
[2009/08/17 17:53:39, 3] smbd/process.c:switch_message(1361)
switch message SMBtrans (pid 18444) conn 0x5ec1b0
[2009/08/17 17:53:39, 3] smbd/ipc.c:handle_trans(436)
trans <\PIPE\> data=60 params=0 setup=2
[2009/08/17 17:53:39, 3] smbd/ipc.c:named_pipe(387)
named pipe command on <> name
[2009/08/17 17:53:39, 3] smbd/ipc.c:api_fd_reply(345)
Got API command 0x26 on pipe "wkssvc" (pnum 7511)
[2009/08/17 17:53:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519)
free_pipe_context: destroying talloc pool of size 69