Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 295318 Details for
Bug 429024
After establish trust with AD, wbinfo -u does not work
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
log after upgrade to 3.0.28
winbindd.log (text/plain), 163.97 KB, created by
Lin Li
on 2008-02-19 18:58:12 UTC
(
hide
)
Description:
log after upgrade to 3.0.28
Filename:
MIME Type:
Creator:
Lin Li
Created:
2008-02-19 18:58:12 UTC
Size:
163.97 KB
patch
obsolete
>[2008/02/19 13:42:48, 1] nsswitch/winbindd.c:main(990) > winbindd version 3.0.28-0.el5.6 started. > Copyright Andrew Tridgell and the Samba Team 1992-2007 >[2008/02/19 13:42:48, 1] param/loadparm.c:lp_do_parameter(3518) > WARNING: The "printer admin" option is deprecated >[2008/02/19 13:42:48, 0] nsswitch/winbindd_cache.c:initialize_winbindd_cache(2222) > initialize_winbindd_cache: clearing cache and re-creating with version number 1 >[2008/02/19 13:43:15, 1] nsswitch/winbindd_ads.c:ads_cached_connection(128) > ads_connect for domain WINQANET2 failed: No logon servers >[2008/02/19 13:43:58, 1] nsswitch/winbindd.c:main(990) > winbindd version 3.0.28-0.el5.6 started. > Copyright Andrew Tridgell and the Samba Team 1992-2007 >[2008/02/19 13:43:58, 1] param/loadparm.c:lp_do_parameter(3518) > WARNING: The "printer admin" option is deprecated >[2008/02/19 13:43:58, 0] nsswitch/winbindd_cache.c:initialize_winbindd_cache(2222) > initialize_winbindd_cache: clearing cache and re-creating with version number 1 >[2008/02/19 13:44:31, 1] nsswitch/winbindd_ads.c:ads_cached_connection(128) > ads_connect for domain WINQANET2 failed: No logon servers >[2008/02/19 13:45:20, 1] nsswitch/winbindd.c:main(990) > winbindd version 3.0.28-0.el5.6 started. > Copyright Andrew Tridgell and the Samba Team 1992-2007 >[2008/02/19 13:45:20, 5] lib/debug.c:debug_dump_status(391) > INFO: Current debug levels: > all: True/10 > tdb: False/0 > printdrivers: False/0 > lanman: False/0 > smb: False/0 > rpc_parse: False/0 > rpc_srv: False/0 > rpc_cli: False/0 > passdb: False/0 > sam: False/0 > auth: False/0 > winbind: False/0 > vfs: False/0 > idmap: False/0 > quota: False/0 > acls: False/0 > locking: False/0 > msdfs: False/0 > dmapi: False/0 > doing parameter logon drive = Z: > doing parameter logon home = \\%N\%U > doing parameter logon path = \\%N\profiles\%U > doing parameter name resolve order = lmhosts host wins bcast > doing parameter obey pam restrictions = yes > doing parameter os level = 65 > doing parameter passdb backend = ldapsam:ldap://127.0.0.1:4389 > doing parameter passwd chat = *Enter\snew\spassword:* %n\n . > doing parameter passwd program = /opt/xandros/bin/gumpasswdsync %u > doing parameter password server = * > doing parameter preferred master = yes > doing parameter printer admin = LINR51VD1+global-windrv-admin >[2008/02/19 13:45:20, 1] param/loadparm.c:lp_do_parameter(3518) > WARNING: The "printer admin" option is deprecated > doing parameter security = USER > doing parameter server string = Samba Server Version %v > doing parameter template shell = /bin/bash > doing parameter unix password sync = yes > doing parameter winbind enum groups = no > doing parameter winbind enum users = no > doing parameter winbind separator = + > doing parameter wins server = 172.16.3.1 > doing parameter workgroup = LINR51VD1 >[2008/02/19 13:45:20, 2] param/loadparm.c:do_section(3796) > Processing section "[homes]" >[2008/02/19 13:45:20, 8] param/loadparm.c:add_a_service(2577) > add_a_service: Creating snum = 0 for homes >[2008/02/19 13:45:20, 10] param/loadparm.c:hash_a_service(2614) > hash_a_service: creating tdb servicehash >[2008/02/19 13:45:20, 10] param/loadparm.c:hash_a_service(2624) > hash_a_service: hashing index 0 for service name homes > doing parameter comment = Home Directories > doing parameter browseable = no > doing parameter writable = yes >[2008/02/19 13:45:20, 2] param/loadparm.c:do_section(3796) > Processing section "[printers]" >[2008/02/19 13:45:20, 8] param/loadparm.c:add_a_service(2577) > add_a_service: Creating snum = 1 for printers >[2008/02/19 13:45:20, 10] param/loadparm.c:hash_a_service(2624) > hash_a_service: hashing index 1 for service name printers > doing parameter comment = All Printers > doing parameter path = /var/spool/samba > doing parameter browseable = no > doing parameter guest ok = no > doing parameter writable = no > doing parameter printable = yes >[2008/02/19 13:45:20, 2] param/loadparm.c:do_section(3796) > Processing section "[netlogon]" >[2008/02/19 13:45:20, 8] param/loadparm.c:add_a_service(2577) > add_a_service: Creating snum = 2 for netlogon >[2008/02/19 13:45:20, 10] param/loadparm.c:hash_a_service(2624) > hash_a_service: hashing index 2 for service name netlogon > doing parameter comment = Network Logon Service > doing parameter path = /var/lib/samba/netlogon > doing parameter read only = yes > doing parameter guest ok = yes >[2008/02/19 13:45:20, 2] param/loadparm.c:do_section(3796) > Processing section "[profiles]" >[2008/02/19 13:45:20, 8] param/loadparm.c:add_a_service(2577) > add_a_service: Creating snum = 3 for profiles >[2008/02/19 13:45:20, 10] param/loadparm.c:hash_a_service(2624) > hash_a_service: hashing index 3 for service name profiles > doing parameter comment = Desktop Profiles Share > doing parameter path = /var/lib/samba/profiles > doing parameter read only = no > doing parameter create mask = 0600 > doing parameter directory mask = 0700 >[2008/02/19 13:45:20, 2] param/loadparm.c:do_section(3796) > Processing section "[print$]" >[2008/02/19 13:45:20, 8] param/loadparm.c:add_a_service(2577) > add_a_service: Creating snum = 4 for print$ >[2008/02/19 13:45:20, 10] param/loadparm.c:hash_a_service(2624) > hash_a_service: hashing index 4 for service name print$ > doing parameter comment = Printer Drivers > doing parameter path = /var/lib/samba/printers > doing parameter browseable = yes > doing parameter read only = yes > doing parameter guest ok = yes > doing parameter write list = LINR51VD1+global-windrv-admin >[2008/02/19 13:45:20, 4] param/loadparm.c:lp_load(5071) > pm_process() returned Yes >[2008/02/19 13:45:20, 8] param/loadparm.c:add_a_service(2577) > add_a_service: Creating snum = 5 for IPC$ >[2008/02/19 13:45:20, 10] param/loadparm.c:hash_a_service(2624) > hash_a_service: hashing index 5 for service name IPC$ >[2008/02/19 13:45:20, 3] param/loadparm.c:lp_add_ipc(2711) > adding IPC service >[2008/02/19 13:45:20, 10] param/loadparm.c:set_server_role(4315) > set_server_role: role = ROLE_DOMAIN_PDC >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset UCS-2LE >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(113) > Registered charset UCS-2LE >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset UTF-16LE >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(113) > Registered charset UTF-16LE >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset UCS-2BE >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(113) > Registered charset UCS-2BE >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset UTF-16BE >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(113) > Registered charset UTF-16BE >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset UTF8 >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(113) > Registered charset UTF8 >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset UTF-8 >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(113) > Registered charset UTF-8 >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset ASCII >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(113) > Registered charset ASCII >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset 646 >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(113) > Registered charset 646 >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset ISO-8859-1 >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(113) > Registered charset ISO-8859-1 >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset UCS2-HEX >[2008/02/19 13:45:20, 5] lib/iconv.c:smb_register_charset(113) > Registered charset UCS2-HEX >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/02/19 13:45:20, 2] lib/interface.c:add_interface(81) > added interface ip=172.16.9.21 bcast=172.16.255.255 nmask=255.255.0.0 >[2008/02/19 13:45:20, 2] lib/interface.c:add_interface(81) > added interface ip=192.168.122.1 bcast=192.168.122.255 nmask=255.255.255.0 >[2008/02/19 13:45:20, 5] lib/util.c:init_names(309) > Netbios name list:- > my_netbios_names[0]="LINR5164VS1" >[2008/02/19 13:45:20, 2] lib/interface.c:add_interface(81) > added interface ip=172.16.9.21 bcast=172.16.255.255 nmask=255.255.0.0 >[2008/02/19 13:45:20, 2] lib/interface.c:add_interface(81) > added interface ip=192.168.122.1 bcast=192.168.122.255 nmask=255.255.255.0 >[2008/02/19 13:45:20, 5] lib/gencache.c:gencache_init(61) > Opening cache file at /var/cache/samba/gencache.tdb >[2008/02/19 13:45:20, 5] libsmb/namecache.c:namecache_enable(58) > namecache_enable: enabling netbios namecache, timeout 660 seconds >[2008/02/19 13:45:20, 10] nsswitch/idmap_cache.c:idmap_cache_init(60) > Opening cache file at /var/cache/samba/idmap_cache.tdb >[2008/02/19 13:45:20, 8] lib/util.c:fcntl_lock(2014) > fcntl_lock fd=8 op=6 offset=0 count=1 type=1 >[2008/02/19 13:45:20, 8] lib/util.c:fcntl_lock(2033) > fcntl_lock: Lock call successful >[2008/02/19 13:45:20, 4] lib/time.c:TimeInit(1258) > TimeInit: Serverzone is 18000 >[2008/02/19 13:45:20, 2] lib/tallocmsg.c:register_msg_pool_usage(105) > Registered MSG_REQ_POOL_USAGE >[2008/02/19 13:45:20, 2] lib/dmallocmsg.c:register_dmalloc_msgs(75) > Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED >[2008/02/19 13:45:20, 0] nsswitch/winbindd_cache.c:initialize_winbindd_cache(2222) > initialize_winbindd_cache: clearing cache and re-creating with version number 1 >[2008/02/19 13:45:20, 2] nsswitch/winbindd_util.c:add_trusted_domain(171) > Added domain LINR51VD1 S-1-5-21-3108159371-1334518997-429511618 >[2008/02/19 13:45:20, 2] nsswitch/winbindd_util.c:add_trusted_domain(171) > Added domain BUILTIN S-1-5-32 >[2008/02/19 13:45:20, 10] nsswitch/winbindd_util.c:open_winbindd_socket(921) > open_winbindd_socket: opened socket fd 12 >[2008/02/19 13:45:20, 10] nsswitch/winbindd_util.c:open_winbindd_priv_socket(933) > open_winbindd_priv_socket: opened socket fd 13 >[2008/02/19 13:45:20, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634ca0a0 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/999906 >[2008/02/19 13:45:20, 6] nsswitch/winbindd.c:new_connection(628) > accepted socket 17 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/963806 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/963782 >[2008/02/19 13:45:20, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn INTERFACE_VERSION >[2008/02/19 13:45:20, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(491) > [ 5463]: request interface version >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/963686 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/963643 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/963621 >[2008/02/19 13:45:20, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn WINBINDD_PRIV_PIPE_DIR >[2008/02/19 13:45:20, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(524) > [ 5463]: request location of privileged pipe >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/963523 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/963480 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/963405 >[2008/02/19 13:45:20, 6] nsswitch/winbindd.c:new_connection(628) > accepted socket 18 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/963341 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/963315 >[2008/02/19 13:45:20, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn GID_TO_SID >[2008/02/19 13:45:20, 3] nsswitch/winbindd_sid.c:winbindd_gid_to_sid(477) > [ 5463]: gid to sid 100 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/961010 >[2008/02/19 13:45:20, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 555563498070 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/960788 >[2008/02/19 13:45:20, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 555563498070 "async_request_timeout" >[2008/02/19 13:45:20, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5465 >[2008/02/19 13:45:20, 10] nsswitch/winbindd_sid.c:gid2sid_recv(462) > gid2sid: gid 100 has sid S-1-22-2-100 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/949417 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/884732 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/838763 >[2008/02/19 13:45:20, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:45:20, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5463]: sid to gid S-1-5-32-544 >[2008/02/19 13:45:20, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-32-544) >[2008/02/19 13:45:20, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/836206 >[2008/02/19 13:45:20, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634878c0 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/835994 >[2008/02/19 13:45:20, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634878c0 "async_request_timeout" >[2008/02/19 13:45:20, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5469 >[2008/02/19 13:45:20, 5] nsswitch/winbindd_async.c:lookupsid_recv(706) > lookupsid returned an error >[2008/02/19 13:45:20, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-32-544 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/834885 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/834810 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/834787 >[2008/02/19 13:45:20, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:20, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/834696 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/834632 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/834610 >[2008/02/19 13:45:20, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:20, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/834537 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/834278 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/834254 >[2008/02/19 13:45:20, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn ALLOCATE_GID >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/834196 >[2008/02/19 13:45:20, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634c95f0 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/834155 >[2008/02/19 13:45:20, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634c95f0 "async_request_timeout" >[2008/02/19 13:45:20, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5465 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/833882 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/832347 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/832029 >[2008/02/19 13:45:20, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:45:20, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5463]: sid to gid S-1-5-32-545 >[2008/02/19 13:45:20, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-32-545) >[2008/02/19 13:45:20, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/831566 >[2008/02/19 13:45:20, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 55556347f090 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/831309 >[2008/02/19 13:45:20, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 55556347f090 "async_request_timeout" >[2008/02/19 13:45:20, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5469 >[2008/02/19 13:45:20, 5] nsswitch/winbindd_async.c:lookupsid_recv(706) > lookupsid returned an error >[2008/02/19 13:45:20, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-32-545 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/830414 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/830367 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/830344 >[2008/02/19 13:45:20, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:20, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/830267 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/830205 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/830183 >[2008/02/19 13:45:20, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:20, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/830126 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/829933 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/829910 >[2008/02/19 13:45:20, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn ALLOCATE_GID >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/829863 >[2008/02/19 13:45:20, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634cbb40 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/829812 >[2008/02/19 13:45:20, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634cbb40 "async_request_timeout" >[2008/02/19 13:45:20, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5465 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/829621 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/828225 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/828198 >[2008/02/19 13:45:20, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:45:20, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5463]: sid to gid S-1-1-0 >[2008/02/19 13:45:20, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-1-0) >[2008/02/19 13:45:20, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:45:20, 5] nsswitch/winbindd_async.c:winbindd_lookupsid_async(729) > Could not find domain for sid S-1-1-0 >[2008/02/19 13:45:20, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-1-0 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/828091 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/828051 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/828030 >[2008/02/19 13:45:20, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:20, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/827974 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/827905 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/827872 >[2008/02/19 13:45:20, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:45:20, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5463]: sid to gid S-1-5-2 >[2008/02/19 13:45:20, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-2) >[2008/02/19 13:45:20, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:45:20, 5] nsswitch/winbindd_async.c:winbindd_lookupsid_async(729) > Could not find domain for sid S-1-5-2 >[2008/02/19 13:45:20, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-2 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/827745 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/827705 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/827684 >[2008/02/19 13:45:20, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:20, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/827627 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/827559 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/827537 >[2008/02/19 13:45:20, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:45:20, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5463]: sid to gid S-1-5-11 >[2008/02/19 13:45:20, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-11) >[2008/02/19 13:45:20, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:45:20, 5] nsswitch/winbindd_async.c:winbindd_lookupsid_async(729) > Could not find domain for sid S-1-5-11 >[2008/02/19 13:45:20, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-11 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/827423 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/827370 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/827348 >[2008/02/19 13:45:20, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:20, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/827270 >[2008/02/19 13:45:20, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/818252 >[2008/02/19 13:45:20, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634ca0a0 "async_request_timeout" >[2008/02/19 13:45:20, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5462 >[2008/02/19 13:45:20, 5] nsswitch/winbindd_util.c:init_child_recv(419) > Received child initialization response for domain LINR51VD1 >[2008/02/19 13:45:21, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634a02c0 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/999978 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/991105 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn GID_TO_SID >[2008/02/19 13:45:21, 3] nsswitch/winbindd_sid.c:winbindd_gid_to_sid(477) > [ 5463]: gid to sid 100 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/991011 >[2008/02/19 13:45:21, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 555563498070 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/990529 >[2008/02/19 13:45:21, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 555563498070 "async_request_timeout" >[2008/02/19 13:45:21, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5465 >[2008/02/19 13:45:21, 10] nsswitch/winbindd_sid.c:gid2sid_recv(462) > gid2sid: gid 100 has sid S-1-22-2-100 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/990432 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/967168 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/879239 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:45:21, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5463]: sid to gid S-1-5-32-544 >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-32-544) >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/879124 >[2008/02/19 13:45:21, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634cac10 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/878911 >[2008/02/19 13:45:21, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634cac10 "async_request_timeout" >[2008/02/19 13:45:21, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5469 >[2008/02/19 13:45:21, 5] nsswitch/winbindd_async.c:lookupsid_recv(706) > lookupsid returned an error >[2008/02/19 13:45:21, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-32-544 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/878800 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/878760 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/878738 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:21, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/878683 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/878614 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/878592 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:21, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/878536 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/878290 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/878267 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn ALLOCATE_GID >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/878205 >[2008/02/19 13:45:21, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634cbb40 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/878045 >[2008/02/19 13:45:21, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634cbb40 "async_request_timeout" >[2008/02/19 13:45:21, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5465 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/877970 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/876501 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/875216 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:45:21, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5463]: sid to gid S-1-5-32-545 >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-32-545) >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/875091 >[2008/02/19 13:45:21, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634878c0 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/874630 >[2008/02/19 13:45:21, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634878c0 "async_request_timeout" >[2008/02/19 13:45:21, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5469 >[2008/02/19 13:45:21, 5] nsswitch/winbindd_async.c:lookupsid_recv(706) > lookupsid returned an error >[2008/02/19 13:45:21, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-32-545 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/874532 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/874491 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/874469 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:21, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/874413 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/874342 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/874320 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:21, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/874263 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/874079 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/874056 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn ALLOCATE_GID >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/874010 >[2008/02/19 13:45:21, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634cb5c0 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/873860 >[2008/02/19 13:45:21, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634cb5c0 "async_request_timeout" >[2008/02/19 13:45:21, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5465 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/873787 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/872410 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/872371 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:45:21, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5463]: sid to gid S-1-1-0 >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-1-0) >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:45:21, 5] nsswitch/winbindd_async.c:winbindd_lookupsid_async(729) > Could not find domain for sid S-1-1-0 >[2008/02/19 13:45:21, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-1-0 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/872180 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/872139 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/872117 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:21, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/872061 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/871990 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/871967 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:45:21, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5463]: sid to gid S-1-5-2 >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-2) >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:45:21, 5] nsswitch/winbindd_async.c:winbindd_lookupsid_async(729) > Could not find domain for sid S-1-5-2 >[2008/02/19 13:45:21, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-2 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/871864 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/871825 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/871803 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:21, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/871734 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/871666 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/871644 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:45:21, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5463]: sid to gid S-1-5-11 >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-11) >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:45:21, 5] nsswitch/winbindd_async.c:winbindd_lookupsid_async(729) > Could not find domain for sid S-1-5-11 >[2008/02/19 13:45:21, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-11 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/871541 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/871502 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/871481 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:21, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/871425 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/859891 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/836195 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn GID_TO_SID >[2008/02/19 13:45:21, 3] nsswitch/winbindd_sid.c:winbindd_gid_to_sid(477) > [ 5463]: gid to sid 100 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/836107 >[2008/02/19 13:45:21, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 555563498070 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/835632 >[2008/02/19 13:45:21, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 555563498070 "async_request_timeout" >[2008/02/19 13:45:21, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5465 >[2008/02/19 13:45:21, 10] nsswitch/winbindd_sid.c:gid2sid_recv(462) > gid2sid: gid 100 has sid S-1-22-2-100 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/835545 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/771930 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/724000 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:45:21, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5463]: sid to gid S-1-5-32-544 >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-32-544) >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/723885 >[2008/02/19 13:45:21, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 55556347f090 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/723672 >[2008/02/19 13:45:21, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 55556347f090 "async_request_timeout" >[2008/02/19 13:45:21, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5469 >[2008/02/19 13:45:21, 5] nsswitch/winbindd_async.c:lookupsid_recv(706) > lookupsid returned an error >[2008/02/19 13:45:21, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-32-544 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/723574 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/723552 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/723503 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:21, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/723443 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/723409 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/723313 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:21, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/723185 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/723160 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/722940 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn ALLOCATE_GID >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/722902 >[2008/02/19 13:45:21, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634cb5c0 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/722720 >[2008/02/19 13:45:21, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634cb5c0 "async_request_timeout" >[2008/02/19 13:45:21, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5465 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/722645 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/722623 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/720444 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:45:21, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5463]: sid to gid S-1-5-32-545 >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-32-545) >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/720075 >[2008/02/19 13:45:21, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634cac10 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/719362 >[2008/02/19 13:45:21, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634cac10 "async_request_timeout" >[2008/02/19 13:45:21, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5469 >[2008/02/19 13:45:21, 5] nsswitch/winbindd_async.c:lookupsid_recv(706) > lookupsid returned an error >[2008/02/19 13:45:21, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-32-545 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/718684 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/718659 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/718608 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:21, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/718546 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/718525 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/718454 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:21, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/718395 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/718372 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/718072 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn ALLOCATE_GID >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/718034 >[2008/02/19 13:45:21, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634cbb40 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/717880 >[2008/02/19 13:45:21, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634cbb40 "async_request_timeout" >[2008/02/19 13:45:21, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5465 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/717807 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/717755 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/715957 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:45:21, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5463]: sid to gid S-1-1-0 >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-1-0) >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:45:21, 5] nsswitch/winbindd_async.c:winbindd_lookupsid_async(729) > Could not find domain for sid S-1-1-0 >[2008/02/19 13:45:21, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-1-0 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/715855 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/715833 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/715784 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:21, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/715737 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/715716 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/715623 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:45:21, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5463]: sid to gid S-1-5-2 >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-2) >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:45:21, 5] nsswitch/winbindd_async.c:winbindd_lookupsid_async(729) > Could not find domain for sid S-1-5-2 >[2008/02/19 13:45:21, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-2 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/715530 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/715508 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/715461 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:21, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/715403 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/715380 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/715301 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:45:21, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5463]: sid to gid S-1-5-11 >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-11) >[2008/02/19 13:45:21, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:45:21, 5] nsswitch/winbindd_async.c:winbindd_lookupsid_async(729) > Could not find domain for sid S-1-5-11 >[2008/02/19 13:45:21, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-11 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/715198 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/715175 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/714692 >[2008/02/19 13:45:21, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:45:21, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5463]: ping >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/714631 >[2008/02/19 13:45:21, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/714609 >[2008/02/19 13:45:21, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634a02c0 "async_request_timeout" >[2008/02/19 13:45:21, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5462 >[2008/02/19 13:45:21, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2322) > Retrieving extra data length=51 >[2008/02/19 13:45:21, 2] nsswitch/winbindd_util.c:add_trusted_domain(171) > Added domain WINQANET2 S-1-5-21-219342671-855131705-3133343938 >[2008/02/19 13:45:45, 6] nsswitch/winbindd.c:new_connection(628) > accepted socket 20 >[2008/02/19 13:45:45, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn INTERFACE_VERSION >[2008/02/19 13:45:45, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(491) > [ 5479]: request interface version >[2008/02/19 13:45:45, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn WINBINDD_PRIV_PIPE_DIR >[2008/02/19 13:45:45, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(524) > [ 5479]: request location of privileged pipe >[2008/02/19 13:45:45, 6] nsswitch/winbindd.c:new_connection(628) > accepted socket 22 >[2008/02/19 13:45:45, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn LIST_USERS >[2008/02/19 13:45:45, 3] nsswitch/winbindd_user.c:winbindd_list_users(754) > [ 5479]: list users >[2008/02/19 13:45:45, 8] nsswitch/winbindd_cm.c:connection_ok(1496) > connection_ok: Connection to for domain WINQANET2 has NULL cli! >[2008/02/19 13:45:45, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = SAF/DOMAIN/WINQANET2, value = W2K3R2, timeout = Tue Feb 19 14:00:16 2008 >[2008/02/19 13:45:45, 5] libsmb/namequery.c:saf_fetch(136) > saf_fetch: Returning "W2K3R2" for "WINQANET2" domain >[2008/02/19 13:45:45, 10] nsswitch/winbindd_cm.c:cm_open_connection(1336) > cm_open_connection: saf_servername is 'W2K3R2' for domain WINQANET2 >[2008/02/19 13:45:45, 10] nsswitch/winbindd_cm.c:cm_open_connection(1366) > cm_open_connection: dcname is 'W2K3R2' for domain WINQANET2 >[2008/02/19 13:45:45, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = AD_SITENAME/DOMAIN/ couldn't be found >[2008/02/19 13:45:45, 5] libads/dns.c:sitename_fetch(674) > sitename_fetch: No stored sitename for >[2008/02/19 13:45:45, 10] libsmb/namequery.c:internal_resolve_name(1166) > internal_resolve_name: looking up W2K3R2#20 (sitename (null)) >[2008/02/19 13:45:45, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = NBT/W2K3R2#20, value = 172.17.0.2:0, timeout = Tue Feb 19 13:55:27 2008 >[2008/02/19 13:45:45, 5] libsmb/namecache.c:namecache_fetch(214) > name W2K3R2#20 found. >[2008/02/19 13:45:45, 10] nsswitch/winbindd_cm.c:cm_prepare_connection(654) > cm_prepare_connection: connecting to DC W2K3R2 for domain WINQANET2 >[2008/02/19 13:45:45, 10] passdb/secrets.c:secrets_named_mutex(1006) > secrets_named_mutex: got mutex for W2K3R2 >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(153) > write_socket(20,194) >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(156) > write_socket(20,194) wrote 194 >[2008/02/19 13:45:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 178 >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=178 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=5460 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 9 (0x9) > smb_vwv[ 1]=12815 (0x320F) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]= 499 (0x1F3) > smb_vwv[11]=11904 (0x2E80) > smb_vwv[12]=56866 (0xDE22) > smb_vwv[13]=10202 (0x27DA) > smb_vwv[14]=51315 (0xC873) > smb_vwv[15]=11265 (0x2C01) > smb_vwv[16]= 1 (0x1) > smb_bcc=109 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 7B E7 14 77 FB 05 4F 4A AB D9 19 18 4E 48 21 8A {..w..OJ ....NH!. > [010] 60 5B 06 06 2B 06 01 05 05 02 A0 51 30 4F A0 30 `[..+... ...Q0O.0 > [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* > [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... > [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... > [050] A3 1B 30 19 A0 17 1B 15 77 32 6B 33 72 32 24 40 ..0..... w2k3r2$@ > [060] 57 49 4E 51 41 4E 45 54 32 2E 43 4F 4D WINQANET 2.COM >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=178 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=5460 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 9 (0x9) > smb_vwv[ 1]=12815 (0x320F) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]= 499 (0x1F3) > smb_vwv[11]=11904 (0x2E80) > smb_vwv[12]=56866 (0xDE22) > smb_vwv[13]=10202 (0x27DA) > smb_vwv[14]=51315 (0xC873) > smb_vwv[15]=11265 (0x2C01) > smb_vwv[16]= 1 (0x1) > smb_bcc=109 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 7B E7 14 77 FB 05 4F 4A AB D9 19 18 4E 48 21 8A {..w..OJ ....NH!. > [010] 60 5B 06 06 2B 06 01 05 05 02 A0 51 30 4F A0 30 `[..+... ...Q0O.0 > [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* > [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... > [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... > [050] A3 1B 30 19 A0 17 1B 15 77 32 6B 33 72 32 24 40 ..0..... w2k3r2$@ > [060] 57 49 4E 51 41 4E 45 54 32 2E 43 4F 4D WINQANET 2.COM >[2008/02/19 13:45:45, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(507) > cm_get_ipc_userpass: No auth-user defined >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(153) > write_socket(20,92) >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(156) > write_socket(20,92) wrote 92 >[2008/02/19 13:45:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 201 >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=201 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=5460 > smb_uid=4098 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 201 (0xC9) > smb_vwv[ 2]= 0 (0x0) > smb_bcc=160 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. > [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 > [020] 00 30 00 30 00 33 00 20 00 52 00 32 00 20 00 33 .0.0.3. .R.2. .3 > [030] 00 37 00 39 00 30 00 20 00 53 00 65 00 72 00 76 .7.9.0. .S.e.r.v > [040] 00 69 00 63 00 65 00 20 00 50 00 61 00 63 00 6B .i.c.e. .P.a.c.k > [050] 00 20 00 32 00 00 00 57 00 69 00 6E 00 64 00 6F . .2...W .i.n.d.o > [060] 00 77 00 73 00 20 00 53 00 65 00 72 00 76 00 65 .w.s. .S .e.r.v.e > [070] 00 72 00 20 00 32 00 30 00 30 00 33 00 20 00 52 .r. .2.0 .0.3. .R > [080] 00 32 00 20 00 35 00 2E 00 32 00 00 00 57 00 49 .2. .5.. .2...W.I > [090] 00 4E 00 51 00 41 00 4E 00 45 00 54 00 32 00 00 .N.Q.A.N .E.T.2.. >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=201 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=5460 > smb_uid=4098 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 201 (0xC9) > smb_vwv[ 2]= 0 (0x0) > smb_bcc=160 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. > [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 > [020] 00 30 00 30 00 33 00 20 00 52 00 32 00 20 00 33 .0.0.3. .R.2. .3 > [030] 00 37 00 39 00 30 00 20 00 53 00 65 00 72 00 76 .7.9.0. .S.e.r.v > [040] 00 69 00 63 00 65 00 20 00 50 00 61 00 63 00 6B .i.c.e. .P.a.c.k > [050] 00 20 00 32 00 00 00 57 00 69 00 6E 00 64 00 6F . .2...W .i.n.d.o > [060] 00 77 00 73 00 20 00 53 00 65 00 72 00 76 00 65 .w.s. .S .e.r.v.e > [070] 00 72 00 20 00 32 00 30 00 30 00 33 00 20 00 52 .r. .2.0 .0.3. .R > [080] 00 32 00 20 00 35 00 2E 00 32 00 00 00 57 00 49 .2. .5.. .2...W.I > [090] 00 4E 00 51 00 41 00 4E 00 45 00 54 00 32 00 00 .N.Q.A.N .E.T.2.. >[2008/02/19 13:45:45, 5] nsswitch/winbindd_cm.c:cm_prepare_connection(810) > Connected anonymously >[2008/02/19 13:45:45, 10] libsmb/clientgen.c:cli_init_creds(254) > cli_init_creds: user domain >[2008/02/19 13:45:45, 10] libsmb/namequery.c:saf_store(74) > saf_store: domain = [WINQANET2], server = [W2K3R2], expire = [1203447645] >[2008/02/19 13:45:45, 10] lib/gencache.c:gencache_set(140) > Adding cache entry with key = SAF/DOMAIN/WINQANET2; value = W2K3R2 and timeout = Tue Feb 19 14:00:45 2008 > (900 seconds ahead) >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(153) > write_socket(20,80) >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(156) > write_socket(20,80) wrote 80 >[2008/02/19 13:45:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 56 >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=56 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=3 > smt_wct=7 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 56 (0x38) > smb_vwv[ 2]= 1 (0x1) > smb_vwv[ 3]= 511 (0x1FF) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 511 (0x1FF) > smb_vwv[ 6]= 0 (0x0) > smb_bcc=7 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 49 50 43 00 00 00 00 IPC.... >[2008/02/19 13:45:45, 10] passdb/secrets.c:secrets_named_mutex_release(1018) > secrets_named_mutex: released mutex for W2K3R2 >[2008/02/19 13:45:45, 10] nsswitch/winbindd_cache.c:set_global_winbindd_state_online(2687) > set_global_winbindd_state_online: online requested. >[2008/02/19 13:45:45, 10] nsswitch/winbindd_cache.c:set_global_winbindd_state_online(2690) > set_global_winbindd_state_online: rejecting. >[2008/02/19 13:45:45, 10] nsswitch/winbindd_cm.c:set_domain_online(359) > set_domain_online: called for domain WINQANET2 >[2008/02/19 13:45:45, 5] nsswitch/winbindd_cm.c:set_dc_type_and_flags(1589) > set_dc_type_and_flags: domain WINQANET2 >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(153) > write_socket(20,104) >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(156) > write_socket(20,104) wrote 104 >[2008/02/19 13:45:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 103 >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=4 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 103 (0x67) > smb_vwv[ 2]= 512 (0x200) > smb_vwv[ 3]= 320 (0x140) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=32768 (0x8000) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 16 (0x10) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 512 (0x200) > smb_vwv[32]=65280 (0xFF00) > smb_vwv[33]= 5 (0x5) > smb_bcc=0 >[2008/02/19 13:45:45, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) > Bind RPC Pipe[4002]: \lsarpc auth_type 0, auth_level 0 >[2008/02/19 13:45:45, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) > Bind Abstract Syntax: [000] 6A 28 19 39 0C B1 D0 11 9B A8 00 C0 4F D9 2E F5 j(.9.... ....O... > [010] 00 00 00 00 .... >[2008/02/19 13:45:45, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) > Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` > [010] 02 00 00 00 .... >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 0b >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0048 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000001 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_rb >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0010 max_tsize: 10b8 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0012 max_rsize: 10b8 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0014 assoc_gid: 00000000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0018 num_contexts: 01 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 001c context_id : 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 001e num_transfer_syntaxes: 01 >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00001f smb_io_rpc_iface >[2008/02/19 13:45:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_uuid uuid >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0020 data : 3919286a >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0024 data : b10c >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0026 data : 11d0 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 0028 data : 9b a8 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 002a data : 00 c0 4f d9 2e f5 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0030 version: 00000000 >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_rpc_iface >[2008/02/19 13:45:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_uuid uuid >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0034 data : 8a885d04 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0038 data : 1ceb >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 003a data : 11c9 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 003c data : 9f e8 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 003e data : 08 00 2b 10 48 60 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0044 version: 00000002 >[2008/02/19 13:45:45, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine W2K3R2 pipe \lsarpc fnum 0x4002 >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=154 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=5 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 72 (0x48) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 72 (0x48) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16386 (0x4002) > smb_bcc=87 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H ........ > [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 6A ........ .......j > [030] 28 19 39 0C B1 D0 11 9B A8 00 C0 4F D9 2E F5 00 (.9..... ...O.... > [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ > [050] 10 48 60 02 00 00 00 .H`.... >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(153) > write_socket(20,158) >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(156) > write_socket(20,158) wrote 158 >[2008/02/19 13:45:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 124 >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... > [010] 00 B8 10 B8 10 F7 76 00 00 0C 00 5C 50 49 50 45 ......v. ...\PIPE > [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... > [010] 00 B8 10 B8 10 F7 76 00 00 0C 00 5C 50 49 50 45 ......v. ...\PIPE > [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 0c >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0044 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000001 >[2008/02/19 13:45:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 68 at offset 0 >[2008/02/19 13:45:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine W2K3R2 pipe \lsarpc fnum 0x4002 returned 68 bytes. >[2008/02/19 13:45:45, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) > rpc_pipe_bind: Remote machine W2K3R2 pipe \lsarpc fnum 0x4002 bind request returned ok. >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 0c >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0044 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000001 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_ba >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0010 max_tsize: 10b8 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0012 max_rsize: 10b8 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0014 assoc_gid: 000076f7 >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_rpc_addr_str >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0018 len: 000c >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 001a str: \PIPE\lsass. >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000026 smb_io_rpc_results >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0028 num_results: 01 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 002c result : 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 002e reason : 0000 >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_rpc_iface >[2008/02/19 13:45:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_uuid uuid >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0030 data : 8a885d04 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0034 data : 1ceb >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0036 data : 11c9 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 0038 data : 9f e8 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 003a data : 08 00 2b 10 48 60 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0040 version: 00000002 >[2008/02/19 13:45:45, 5] rpc_client/cli_pipe.c:check_bind_response(1701) > check_bind_response: accepted! >[2008/02/19 13:45:45, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2277) > cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine W2K3R2 and bound anonymously. >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 ds_io_q_getprimdominfo >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0000 level: 0001 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 001a >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000002 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 00000002 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0016 opnum : 0000 >[2008/02/19 13:45:45, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine W2K3R2 pipe \lsarpc fnum 0x4002 >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=108 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=6 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 26 (0x1A) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 26 (0x1A) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16386 (0x4002) > smb_bcc=41 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 1A 00 00 00 02 00 00 00 02 ........ ........ > [020] 00 00 00 00 00 00 00 01 00 ........ . >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(153) > write_socket(20,112) >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(156) > write_socket(20,112) wrote 112 >[2008/02/19 13:45:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 240 >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=240 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 184 (0xB8) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 184 (0xB8) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=185 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 00 05 00 02 03 10 00 00 00 B8 00 00 00 02 00 00 ........ ........ > [010] 00 A0 00 00 00 00 00 00 00 00 00 02 00 01 00 00 ........ ........ > [020] 00 05 00 00 00 03 00 00 01 04 00 02 00 08 00 02 ........ ........ > [030] 00 0C 00 02 00 52 CB CA 12 F3 6A 71 4C B0 55 E2 .....R.. ..jqL.U. > [040] AB D4 6F E5 F3 0A 00 00 00 00 00 00 00 0A 00 00 ..o..... ........ > [050] 00 57 00 49 00 4E 00 51 00 41 00 4E 00 45 00 54 .W.I.N.Q .A.N.E.T > [060] 00 32 00 00 00 0E 00 00 00 00 00 00 00 0E 00 00 .2...... ........ > [070] 00 77 00 69 00 6E 00 71 00 61 00 6E 00 65 00 74 .w.i.n.q .a.n.e.t > [080] 00 32 00 2E 00 63 00 6F 00 6D 00 00 00 0E 00 00 .2...c.o .m...... > [090] 00 00 00 00 00 0E 00 00 00 77 00 69 00 6E 00 71 ........ .w.i.n.q > [0A0] 00 61 00 6E 00 65 00 74 00 32 00 2E 00 63 00 6F .a.n.e.t .2...c.o > [0B0] 00 6D 00 00 00 00 00 00 00 .m...... . >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=240 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 184 (0xB8) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 184 (0xB8) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=185 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 00 05 00 02 03 10 00 00 00 B8 00 00 00 02 00 00 ........ ........ > [010] 00 A0 00 00 00 00 00 00 00 00 00 02 00 01 00 00 ........ ........ > [020] 00 05 00 00 00 03 00 00 01 04 00 02 00 08 00 02 ........ ........ > [030] 00 0C 00 02 00 52 CB CA 12 F3 6A 71 4C B0 55 E2 .....R.. ..jqL.U. > [040] AB D4 6F E5 F3 0A 00 00 00 00 00 00 00 0A 00 00 ..o..... ........ > [050] 00 57 00 49 00 4E 00 51 00 41 00 4E 00 45 00 54 .W.I.N.Q .A.N.E.T > [060] 00 32 00 00 00 0E 00 00 00 00 00 00 00 0E 00 00 .2...... ........ > [070] 00 77 00 69 00 6E 00 71 00 61 00 6E 00 65 00 74 .w.i.n.q .a.n.e.t > [080] 00 32 00 2E 00 63 00 6F 00 6D 00 00 00 0E 00 00 .2...c.o .m...... > [090] 00 00 00 00 00 0E 00 00 00 77 00 69 00 6E 00 71 ........ .w.i.n.q > [0A0] 00 61 00 6E 00 65 00 74 00 32 00 2E 00 63 00 6F .a.n.e.t .2...c.o > [0B0] 00 6D 00 00 00 00 00 00 00 .m...... . >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 02 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 00b8 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000002 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 000000a0 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0016 cancel_ct : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0017 reserved : 00 >[2008/02/19 13:45:45, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 184, data_len 160, ss_len 0 >[2008/02/19 13:45:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 184 at offset 0 >[2008/02/19 13:45:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine W2K3R2 pipe \lsarpc fnum 0x4002 returned 320 bytes. >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 ds_io_r_getprimdominfo >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 ptr: 00020000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0004 level: 0001 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0006 unknown0: 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 machine_role: 0005 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c flags: 01000003 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 netbios_ptr: 00020004 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0014 dnsname_ptr: 00020008 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0018 forestname_ptr: 0002000c >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00001c smb_io_uuid domain_guid >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 001c data : 12cacb52 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0020 data : 6af3 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0022 data : 4c71 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 0024 data : b0 55 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 0026 data : e2 ab d4 6f e5 f3 >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00002c smb_io_unistr2 netbios_domain >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 002c uni_max_len: 0000000a >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0030 offset : 00000000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0034 uni_str_len: 0000000a >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:dbg_rw_punival(942) > 0038 buffer : W.I.N.Q.A.N.E.T.2... >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00004c smb_io_unistr2 dns_domain >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 004c uni_max_len: 0000000e >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0050 offset : 00000000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0054 uni_str_len: 0000000e >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:dbg_rw_punival(942) > 0058 buffer : w.i.n.q.a.n.e.t.2...c.o.m... >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000074 smb_io_unistr2 forest_domain >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0074 uni_max_len: 0000000e >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0078 offset : 00000000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 007c uni_str_len: 0000000e >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:dbg_rw_punival(942) > 0080 buffer : w.i.n.q.a.n.e.t.2...c.o.m... >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) > 009c status: NT_STATUS_OK >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(153) > write_socket(20,45) >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(156) > write_socket(20,45) wrote 45 >[2008/02/19 13:45:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 35 >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=7 > smt_wct=0 > smb_bcc=0 >[2008/02/19 13:45:45, 10] libsmb/clientgen.c:cli_rpc_pipe_close(395) > cli_rpc_pipe_close: closed pipe \lsarpc to machine W2K3R2 >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(153) > write_socket(20,104) >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(156) > write_socket(20,104) wrote 104 >[2008/02/19 13:45:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 103 >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=8 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 103 (0x67) > smb_vwv[ 2]= 768 (0x300) > smb_vwv[ 3]= 320 (0x140) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=32768 (0x8000) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 16 (0x10) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 512 (0x200) > smb_vwv[32]=65280 (0xFF00) > smb_vwv[33]= 5 (0x5) > smb_bcc=0 >[2008/02/19 13:45:45, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) > Bind RPC Pipe[4003]: \lsarpc auth_type 0, auth_level 0 >[2008/02/19 13:45:45, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) > Bind Abstract Syntax: [000] 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB xW4.4... ...#Eg.. > [010] 00 00 00 00 .... >[2008/02/19 13:45:45, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) > Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` > [010] 02 00 00 00 .... >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 0b >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0048 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000003 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_rb >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0010 max_tsize: 10b8 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0012 max_rsize: 10b8 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0014 assoc_gid: 00000000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0018 num_contexts: 01 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 001c context_id : 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 001e num_transfer_syntaxes: 01 >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00001f smb_io_rpc_iface >[2008/02/19 13:45:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_uuid uuid >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0020 data : 12345778 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0024 data : 1234 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0026 data : abcd >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 0028 data : ef 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 002a data : 01 23 45 67 89 ab >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0030 version: 00000000 >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_rpc_iface >[2008/02/19 13:45:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_uuid uuid >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0034 data : 8a885d04 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0038 data : 1ceb >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 003a data : 11c9 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 003c data : 9f e8 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 003e data : 08 00 2b 10 48 60 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0044 version: 00000002 >[2008/02/19 13:45:45, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine W2K3R2 pipe \lsarpc fnum 0x4003 >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=154 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=9 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 72 (0x48) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 72 (0x48) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16387 (0x4003) > smb_bcc=87 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 0B 03 10 00 00 00 48 00 00 00 03 00 00 00 B8 .......H ........ > [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x > [030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... > [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ > [050] 10 48 60 02 00 00 00 .H`.... >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(153) > write_socket(20,158) >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(156) > write_socket(20,158) wrote 158 >[2008/02/19 13:45:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 124 >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=9 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 03 00 00 ........ .D...... > [010] 00 B8 10 B8 10 F8 76 00 00 0C 00 5C 50 49 50 45 ......v. ...\PIPE > [020] 5C 6C 73 61 73 73 00 00 01 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=9 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 03 00 00 ........ .D...... > [010] 00 B8 10 B8 10 F8 76 00 00 0C 00 5C 50 49 50 45 ......v. ...\PIPE > [020] 5C 6C 73 61 73 73 00 00 01 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 0c >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0044 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000003 >[2008/02/19 13:45:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 68 at offset 0 >[2008/02/19 13:45:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine W2K3R2 pipe \lsarpc fnum 0x4003 returned 68 bytes. >[2008/02/19 13:45:45, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) > rpc_pipe_bind: Remote machine W2K3R2 pipe \lsarpc fnum 0x4003 bind request returned ok. >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 0c >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0044 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000003 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_ba >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0010 max_tsize: 10b8 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0012 max_rsize: 10b8 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0014 assoc_gid: 000076f8 >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_rpc_addr_str >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0018 len: 000c >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 001a str: \PIPE\lsass. >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000026 smb_io_rpc_results >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0028 num_results: 01 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 002c result : 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 002e reason : 0000 >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_rpc_iface >[2008/02/19 13:45:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_uuid uuid >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0030 data : 8a885d04 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0034 data : 1ceb >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0036 data : 11c9 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 0038 data : 9f e8 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 003a data : 08 00 2b 10 48 60 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0040 version: 00000002 >[2008/02/19 13:45:45, 5] rpc_client/cli_pipe.c:check_bind_response(1701) > check_bind_response: accepted! >[2008/02/19 13:45:45, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2277) > cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine W2K3R2 and bound anonymously. >[2008/02/19 13:45:45, 5] rpc_parse/parse_lsa.c:init_lsa_sec_qos(185) > init_lsa_sec_qos >[2008/02/19 13:45:45, 5] rpc_parse/parse_lsa.c:init_q_open_pol2(368) > init_q_open_pol2: attr:0 da:33554432 >[2008/02/19 13:45:45, 5] rpc_parse/parse_lsa.c:init_lsa_obj_attr(236) > init_lsa_obj_attr >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_q_open_pol2 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 ptr : 00000001 >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_unistr2 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0004 uni_max_len: 00000009 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0008 offset : 00000000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c uni_str_len: 00000009 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:dbg_rw_punival(942) > 0010 buffer : \.\.W.2.K.3.R.2... >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000022 lsa_io_obj_attr >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0024 len : 00000018 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0028 ptr_root_dir: 00000000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 002c ptr_obj_name: 00000000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0030 attributes : 00000000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0034 ptr_sec_desc: 00000000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0038 ptr_sec_qos : 00000001 >[2008/02/19 13:45:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 00003c lsa_io_obj_qos sec_qos >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 003c len : 0000000c >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0040 sec_imp_level : 0002 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0042 sec_ctxt_mode : 01 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0043 effective_only: 00 >[2008/02/19 13:45:45, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(224) > lsa_io_sec_qos: length c does not match size 8 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0044 des_access: 02000000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0060 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000004 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 00000048 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0016 opnum : 002c >[2008/02/19 13:45:45, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine W2K3R2 pipe \lsarpc fnum 0x4003 >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=178 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=10 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 96 (0x60) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 96 (0x60) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16387 (0x4003) > smb_bcc=111 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 60 00 00 00 04 00 00 00 48 .......` .......H > [020] 00 00 00 00 00 2C 00 01 00 00 00 09 00 00 00 00 .....,.. ........ > [030] 00 00 00 09 00 00 00 5C 00 5C 00 57 00 32 00 4B .......\ .\.W.2.K > [040] 00 33 00 52 00 32 00 00 00 00 00 18 00 00 00 00 .3.R.2.. ........ > [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ........ ........ > [060] 00 00 00 0C 00 00 00 02 00 01 00 00 00 00 02 ........ ....... >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(153) > write_socket(20,182) >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(156) > write_socket(20,182) wrote 182 >[2008/02/19 13:45:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 104 >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=10 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 04 00 00 ........ .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 44 87 3F ........ .....D.? > [020] 75 E7 87 6E 48 9B D7 AD 57 19 95 58 6D 00 00 00 u..nH... W..Xm... > [030] 00 . >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=10 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 04 00 00 ........ .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 44 87 3F ........ .....D.? > [020] 75 E7 87 6E 48 9B D7 AD 57 19 95 58 6D 00 00 00 u..nH... W..Xm... > [030] 00 . >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 02 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0030 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000004 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 00000018 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0016 cancel_ct : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0017 reserved : 00 >[2008/02/19 13:45:45, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 >[2008/02/19 13:45:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 48 at offset 0 >[2008/02/19 13:45:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine W2K3R2 pipe \lsarpc fnum 0x4003 returned 48 bytes. >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_r_open_pol2 >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 handle_type: 00000000 >[2008/02/19 13:45:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_uuid uuid >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0004 data : 753f8744 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 data : 87e7 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a data : 486e >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000c data : 9b d7 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000e data : ad 57 19 95 58 6d >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) > 0014 status: NT_STATUS_OK >[2008/02/19 13:45:45, 5] rpc_parse/parse_lsa.c:init_q_query2(3141) > init_q_query2 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_q_query_info2 >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd pol >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 handle_type: 00000000 >[2008/02/19 13:45:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_uuid uuid >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0004 data : 753f8744 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 data : 87e7 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a data : 486e >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000c data : 9b d7 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000e data : ad 57 19 95 58 6d >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 info_class: 000c >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 002e >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000005 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 00000016 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0016 opnum : 002e >[2008/02/19 13:45:45, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine W2K3R2 pipe \lsarpc fnum 0x4003 >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=128 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=11 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 46 (0x2E) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 46 (0x2E) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16387 (0x4003) > smb_bcc=61 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 2E 00 00 00 05 00 00 00 16 ........ ........ > [020] 00 00 00 00 00 2E 00 00 00 00 00 44 87 3F 75 E7 ........ ...D.?u. > [030] 87 6E 48 9B D7 AD 57 19 95 58 6D 0C 00 .nH...W. .Xm.. >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(153) > write_socket(20,132) >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(156) > write_socket(20,132) wrote 132 >[2008/02/19 13:45:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 276 >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=276 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=11 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 220 (0xDC) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 220 (0xDC) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=221 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 00 05 00 02 03 10 00 00 00 DC 00 00 00 05 00 00 ........ ........ > [010] 00 C4 00 00 00 00 00 00 00 00 00 02 00 0C 00 00 ........ ........ > [020] 00 12 00 14 00 04 00 02 00 1A 00 1C 00 08 00 02 ........ ........ > [030] 00 1A 00 1C 00 0C 00 02 00 52 CB CA 12 F3 6A 71 ........ .R....jq > [040] 4C B0 55 E2 AB D4 6F E5 F3 10 00 02 00 0A 00 00 L.U...o. ........ > [050] 00 00 00 00 00 09 00 00 00 57 00 49 00 4E 00 51 ........ .W.I.N.Q > [060] 00 41 00 4E 00 45 00 54 00 32 00 00 00 0E 00 00 .A.N.E.T .2...... > [070] 00 00 00 00 00 0D 00 00 00 77 00 69 00 6E 00 71 ........ .w.i.n.q > [080] 00 61 00 6E 00 65 00 74 00 32 00 2E 00 63 00 6F .a.n.e.t .2...c.o > [090] 00 6D 00 00 00 0E 00 00 00 00 00 00 00 0D 00 00 .m...... ........ > [0A0] 00 77 00 69 00 6E 00 71 00 61 00 6E 00 65 00 74 .w.i.n.q .a.n.e.t > [0B0] 00 32 00 2E 00 63 00 6F 00 6D 00 3D 00 04 00 00 .2...c.o .m.=.... > [0C0] 00 01 04 00 00 00 00 00 05 15 00 00 00 4F E7 12 ........ .....O.. > [0D0] 0D 39 46 F8 32 C2 08 C3 BA 00 00 00 00 .9F.2... ..... >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=276 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=11 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 220 (0xDC) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 220 (0xDC) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=221 >[2008/02/19 13:45:45, 10] lib/util.c:dump_data(2286) > [000] 00 05 00 02 03 10 00 00 00 DC 00 00 00 05 00 00 ........ ........ > [010] 00 C4 00 00 00 00 00 00 00 00 00 02 00 0C 00 00 ........ ........ > [020] 00 12 00 14 00 04 00 02 00 1A 00 1C 00 08 00 02 ........ ........ > [030] 00 1A 00 1C 00 0C 00 02 00 52 CB CA 12 F3 6A 71 ........ .R....jq > [040] 4C B0 55 E2 AB D4 6F E5 F3 10 00 02 00 0A 00 00 L.U...o. ........ > [050] 00 00 00 00 00 09 00 00 00 57 00 49 00 4E 00 51 ........ .W.I.N.Q > [060] 00 41 00 4E 00 45 00 54 00 32 00 00 00 0E 00 00 .A.N.E.T .2...... > [070] 00 00 00 00 00 0D 00 00 00 77 00 69 00 6E 00 71 ........ .w.i.n.q > [080] 00 61 00 6E 00 65 00 74 00 32 00 2E 00 63 00 6F .a.n.e.t .2...c.o > [090] 00 6D 00 00 00 0E 00 00 00 00 00 00 00 0D 00 00 .m...... ........ > [0A0] 00 77 00 69 00 6E 00 71 00 61 00 6E 00 65 00 74 .w.i.n.q .a.n.e.t > [0B0] 00 32 00 2E 00 63 00 6F 00 6D 00 3D 00 04 00 00 .2...c.o .m.=.... > [0C0] 00 01 04 00 00 00 00 00 05 15 00 00 00 4F E7 12 ........ .....O.. > [0D0] 0D 39 46 F8 32 C2 08 C3 BA 00 00 00 00 .9F.2... ..... >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 02 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 00dc >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000005 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 000000c4 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0016 cancel_ct : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0017 reserved : 00 >[2008/02/19 13:45:45, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 220, data_len 196, ss_len 0 >[2008/02/19 13:45:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 220 at offset 0 >[2008/02/19 13:45:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine W2K3R2 pipe \lsarpc fnum 0x4003 returned 392 bytes. >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_r_query_info2 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 dom_ptr: 00020000 >[2008/02/19 13:45:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000004 lsa_io_query_info_ctr2 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0004 info_class: 000c >[2008/02/19 13:45:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000006 lsa_io_dom_query_12 >[2008/02/19 13:45:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000008 smb_io_unihdr nb_name >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 uni_str_len: 0012 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a uni_max_len: 0014 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c buffer : 00020004 >[2008/02/19 13:45:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_unihdr dns_name >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0010 uni_str_len: 001a >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0012 uni_max_len: 001c >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0014 buffer : 00020008 >[2008/02/19 13:45:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_unihdr forest >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0018 uni_str_len: 001a >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 001a uni_max_len: 001c >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 001c buffer : 0002000c >[2008/02/19 13:45:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_uuid dom_guid >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0020 data : 12cacb52 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0024 data : 6af3 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0026 data : 4c71 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 0028 data : b0 55 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 002a data : e2 ab d4 6f e5 f3 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0030 dom_sid: 00020010 >[2008/02/19 13:45:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_unistr2 nb_name >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0034 uni_max_len: 0000000a >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0038 offset : 00000000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 003c uni_str_len: 00000009 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:dbg_rw_punival(942) > 0040 buffer : W.I.N.Q.A.N.E.T.2. >[2008/02/19 13:45:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000052 smb_io_unistr2 dns_name >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0054 uni_max_len: 0000000e >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0058 offset : 00000000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 005c uni_str_len: 0000000d >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:dbg_rw_punival(942) > 0060 buffer : w.i.n.q.a.n.e.t.2...c.o.m. >[2008/02/19 13:45:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 00007a smb_io_unistr2 forest >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 007c uni_max_len: 0000000e >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0080 offset : 00000000 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0084 uni_str_len: 0000000d >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:dbg_rw_punival(942) > 0088 buffer : w.i.n.q.a.n.e.t.2...c.o.m. >[2008/02/19 13:45:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0000a2 smb_io_dom_sid2 dom_sid >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 00a4 num_auths: 00000004 >[2008/02/19 13:45:45, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0000a8 smb_io_dom_sid sid >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 00a8 sid_rev_num: 01 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 00a9 num_auths : 04 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 00aa id_auth[0] : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 00ab id_auth[1] : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 00ac id_auth[2] : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 00ad id_auth[3] : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 00ae id_auth[4] : 00 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 00af id_auth[5] : 05 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_uint32s(997) > 00b0 sub_auths : 00000015 0d12e74f 32f84639 bac308c2 >[2008/02/19 13:45:45, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) > 00c0 status: NT_STATUS_OK >[2008/02/19 13:45:45, 5] nsswitch/winbindd_cm.c:set_dc_type_and_flags(1705) > set_dc_type_and_flags: domain WINQANET2 is NOT in native mode. >[2008/02/19 13:45:45, 5] nsswitch/winbindd_cm.c:set_dc_type_and_flags(1708) > set_dc_type_and_flags: domain WINQANET2 is running active directory. >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(153) > write_socket(20,45) >[2008/02/19 13:45:45, 6] libsmb/clientgen.c:write_socket(156) > write_socket(20,45) wrote 45 >[2008/02/19 13:45:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 35 >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(506) >[2008/02/19 13:45:45, 5] lib/util.c:show_msg(516) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=32768 > smb_pid=5460 > smb_uid=4098 > smb_mid=12 > smt_wct=0 > smb_bcc=0 >[2008/02/19 13:45:45, 10] libsmb/clientgen.c:cli_rpc_pipe_close(395) > cli_rpc_pipe_close: closed pipe \lsarpc to machine W2K3R2 >[2008/02/19 13:45:45, 5] nsswitch/winbindd_cache.c:get_cache(170) > get_cache: Setting ADS methods for domain WINQANET2 >[2008/02/19 13:45:45, 10] nsswitch/winbindd_cache.c:fetch_cache_seqnum(384) > fetch_cache_seqnum: invalid data size key [SEQNUM/WINQANET2] >[2008/02/19 13:45:45, 3] nsswitch/winbindd_ads.c:sequence_number(1010) > ads: fetch sequence_number for WINQANET2 >[2008/02/19 13:45:45, 10] nsswitch/winbindd_ads.c:ads_cached_connection(46) > ads_cached_connection >[2008/02/19 13:45:45, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = AD_SITENAME/DOMAIN/WINQANET2.COM couldn't be found >[2008/02/19 13:45:45, 5] libads/dns.c:sitename_fetch(674) > sitename_fetch: No stored sitename for winqanet2.com >[2008/02/19 13:45:45, 4] libsmb/namequery_dc.c:ads_dc_name(73) > ads_dc_name: domain=WINQANET2 >[2008/02/19 13:45:45, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = AD_SITENAME/DOMAIN/WINQANET2.COM couldn't be found >[2008/02/19 13:45:45, 5] libads/dns.c:sitename_fetch(674) > sitename_fetch: No stored sitename for winqanet2.com >[2008/02/19 13:45:45, 6] libads/ldap.c:ads_find_dc(294) > ads_find_dc: looking for realm 'winqanet2.com' >[2008/02/19 13:45:45, 8] libsmb/namequery.c:get_sorted_dc_list(1626) > get_sorted_dc_list: attempting lookup for name winqanet2.com (sitename NULL) using [ads] >[2008/02/19 13:45:45, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = SAF/DOMAIN/WINQANET2.COM couldn't be found >[2008/02/19 13:45:45, 5] libsmb/namequery.c:saf_fetch(133) > saf_fetch: failed to find server for "winqanet2.com" domain >[2008/02/19 13:45:45, 3] libsmb/namequery.c:get_dc_list(1489) > get_dc_list: preferred server list: ", *" >[2008/02/19 13:45:45, 10] libsmb/namequery.c:internal_resolve_name(1166) > internal_resolve_name: looking up winqanet2.com#1c (sitename (null)) >[2008/02/19 13:45:45, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = NBT/WINQANET2.COM#1C couldn't be found >[2008/02/19 13:45:45, 5] libsmb/namecache.c:namecache_fetch(210) > no entry for winqanet2.com#1C found. >[2008/02/19 13:45:45, 5] libsmb/namequery.c:resolve_ads(1066) > resolve_ads: Attempting to resolve DC's for winqanet2.com using DNS >[2008/02/19 13:45:45, 3] libads/dns.c:dns_send_req(296) > ads_dns_lookup_srv: Failed to resolve _ldap._tcp.dc._msdcs.winqanet2.com (Success) >[2008/02/19 13:45:45, 3] libads/dns.c:ads_dns_lookup_srv(339) > ads_dns_lookup_srv: Failed to send DNS query (NT_STATUS_UNSUCCESSFUL) >[2008/02/19 13:45:45, 8] libsmb/namequery.c:get_dc_list(1505) > Adding 0 DC's from auto lookup >[2008/02/19 13:45:45, 4] libsmb/namequery.c:get_dc_list(1516) > get_dc_list: no servers found >[2008/02/19 13:45:45, 6] libads/ldap.c:ads_find_dc(294) > ads_find_dc: looking for domain 'winqanet2.com' >[2008/02/19 13:45:45, 8] libsmb/namequery.c:get_sorted_dc_list(1626) > get_sorted_dc_list: attempting lookup for name winqanet2.com (sitename NULL) using [lmhosts host wins bcast] >[2008/02/19 13:45:45, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = SAF/DOMAIN/WINQANET2.COM couldn't be found >[2008/02/19 13:45:45, 5] libsmb/namequery.c:saf_fetch(133) > saf_fetch: failed to find server for "winqanet2.com" domain >[2008/02/19 13:45:45, 3] libsmb/namequery.c:get_dc_list(1489) > get_dc_list: preferred server list: ", *" >[2008/02/19 13:45:45, 10] libsmb/namequery.c:internal_resolve_name(1166) > internal_resolve_name: looking up winqanet2.com#1c (sitename (null)) >[2008/02/19 13:45:45, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = NBT/WINQANET2.COM#1C couldn't be found >[2008/02/19 13:45:45, 5] libsmb/namecache.c:namecache_fetch(210) > no entry for winqanet2.com#1C found. >[2008/02/19 13:45:45, 3] libsmb/namequery.c:resolve_lmhosts(966) > resolve_lmhosts: Attempting lmhosts lookup for name winqanet2.com<0x1c> >[2008/02/19 13:45:45, 4] libsmb/namequery.c:getlmhostsent(717) > getlmhostsent: lmhost entry: 127.0.0.1 localhost >[2008/02/19 13:45:45, 5] libsmb/namequery.c:resolve_hosts(1022) > resolve_hosts: not appropriate for name type <0x1c> >[2008/02/19 13:45:45, 3] libsmb/namequery.c:resolve_wins(863) > resolve_wins: Attempting wins lookup for name winqanet2.com<0x1c> >[2008/02/19 13:45:45, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = WINS_SRV_DEAD/172.16.3.1,0.0.0.0 couldn't be found >[2008/02/19 13:45:45, 4] lib/wins_srv.c:wins_srv_is_dead(111) > wins_srv_is_dead: 172.16.3.1 is alive >[2008/02/19 13:45:45, 6] lib/wins_srv.c:wins_srv_ip_tag(311) > Current wins server for tag '*' with source 0.0.0.0 is 172.16.3.1 >[2008/02/19 13:45:45, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = WINS_SRV_DEAD/172.16.3.1,0.0.0.0 couldn't be found >[2008/02/19 13:45:45, 4] lib/wins_srv.c:wins_srv_is_dead(111) > wins_srv_is_dead: 172.16.3.1 is alive >[2008/02/19 13:45:45, 3] libsmb/namequery.c:resolve_wins(902) > resolve_wins: using WINS server 172.16.3.1 and tag '*' >[2008/02/19 13:45:45, 10] lib/util_sock.c:open_socket_in(839) > bind succeeded on port 0 >[2008/02/19 13:45:45, 5] libsmb/nmblib.c:send_udp(779) > Sending a packet of len 50 to (172.16.3.1) on port 137 >[2008/02/19 13:45:45, 10] lib/util_sock.c:read_udp_socket(294) > read_udp_socket: lastip 172.16.3.1 lastport 137 read: 56 >[2008/02/19 13:45:45, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 10115 >[2008/02/19 13:45:45, 5] libsmb/nmblib.c:read_packet(757) > Received a packet of len 56 from (172.16.3.1) port 137 >[2008/02/19 13:45:45, 4] libsmb/nmblib.c:debug_nmb_packet(112) > nmb packet from 172.16.3.1(137) header: id=10115 opcode=Query(0) response=Yes > header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes > header: rcode=3 qdcount=0 ancount=0 nscount=0 arcount=0 >[2008/02/19 13:45:45, 3] libsmb/namequery.c:name_query(554) > Negative name query response, rcode 0x03: The name requested does not exist. >[2008/02/19 13:45:45, 3] libsmb/namequery.c:name_resolve_bcast(805) > name_resolve_bcast: Attempting broadcast lookup for name winqanet2.com<0x1c> >[2008/02/19 13:45:45, 10] lib/util_sock.c:open_socket_in(839) > bind succeeded on port 0 >[2008/02/19 13:45:45, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 0 >[2008/02/19 13:45:45, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 1 >[2008/02/19 13:45:45, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 1 >[2008/02/19 13:45:45, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_NODELAY. >[2008/02/19 13:45:45, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_KEEPCNT. >[2008/02/19 13:45:45, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_KEEPIDLE. >[2008/02/19 13:45:45, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_KEEPINTVL. >[2008/02/19 13:45:45, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2008/02/19 13:45:45, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2008/02/19 13:45:45, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 126976 >[2008/02/19 13:45:45, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 126976 >[2008/02/19 13:45:45, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2008/02/19 13:45:45, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2008/02/19 13:45:45, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2008/02/19 13:45:45, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2008/02/19 13:45:45, 5] libsmb/nmblib.c:send_udp(779) > Sending a packet of len 50 to (172.16.255.255) on port 137 >[2008/02/19 13:45:45, 5] libsmb/nmblib.c:send_udp(779) > Sending a packet of len 50 to (172.16.255.255) on port 137 >[2008/02/19 13:45:46, 5] libsmb/nmblib.c:send_udp(779) > Sending a packet of len 50 to (172.16.255.255) on port 137 >[2008/02/19 13:45:46, 5] libsmb/nmblib.c:send_udp(779) > Sending a packet of len 50 to (192.168.122.255) on port 137 >[2008/02/19 13:45:46, 5] libsmb/nmblib.c:send_udp(779) > Sending a packet of len 50 to (192.168.122.255) on port 137 >[2008/02/19 13:45:46, 5] libsmb/nmblib.c:send_udp(779) > Sending a packet of len 50 to (192.168.122.255) on port 137 >[2008/02/19 13:45:47, 8] libsmb/namequery.c:get_dc_list(1505) > Adding 0 DC's from auto lookup >[2008/02/19 13:45:47, 4] libsmb/namequery.c:get_dc_list(1516) > get_dc_list: no servers found >[2008/02/19 13:45:47, 8] libsmb/namequery.c:get_sorted_dc_list(1626) > get_sorted_dc_list: attempting lookup for name WINQANET2 (sitename NULL) using [lmhosts host wins bcast] >[2008/02/19 13:45:47, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = SAF/DOMAIN/WINQANET2, value = W2K3R2, timeout = Tue Feb 19 14:00:45 2008 >[2008/02/19 13:45:47, 5] libsmb/namequery.c:saf_fetch(136) > saf_fetch: Returning "W2K3R2" for "WINQANET2" domain >[2008/02/19 13:45:47, 3] libsmb/namequery.c:get_dc_list(1489) > get_dc_list: preferred server list: "W2K3R2, *" >[2008/02/19 13:45:47, 10] libsmb/namequery.c:internal_resolve_name(1166) > internal_resolve_name: looking up WINQANET2#1c (sitename (null)) >[2008/02/19 13:45:47, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = NBT/WINQANET2#1C, value = 172.17.0.2:0,172.17.0.3:0, timeout = Tue Feb 19 13:55:25 2008 >[2008/02/19 13:45:47, 5] libsmb/namecache.c:namecache_fetch(214) > name WINQANET2#1C found. >[2008/02/19 13:45:47, 8] libsmb/namequery.c:get_dc_list(1505) > Adding 2 DC's from auto lookup >[2008/02/19 13:45:47, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = AD_SITENAME/DOMAIN/ couldn't be found >[2008/02/19 13:45:47, 5] libads/dns.c:sitename_fetch(674) > sitename_fetch: No stored sitename for >[2008/02/19 13:45:47, 10] libsmb/namequery.c:internal_resolve_name(1166) > internal_resolve_name: looking up W2K3R2#20 (sitename (null)) >[2008/02/19 13:45:47, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = NBT/W2K3R2#20, value = 172.17.0.2:0, timeout = Tue Feb 19 13:55:27 2008 >[2008/02/19 13:45:47, 5] libsmb/namecache.c:namecache_fetch(214) > name W2K3R2#20 found. >[2008/02/19 13:45:47, 10] libsmb/namequery.c:remove_duplicate_addrs2(435) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2008/02/19 13:45:47, 4] libsmb/namequery.c:get_dc_list(1599) > get_dc_list: returning 2 ip addresses in an ordered list >[2008/02/19 13:45:47, 4] libsmb/namequery.c:get_dc_list(1600) > get_dc_list: 172.17.0.2:0 172.17.0.3:0 >[2008/02/19 13:45:47, 10] libsmb/namequery.c:name_status_find(303) > name_status_find: looking up WINQANET2#1c at 172.17.0.2 >[2008/02/19 13:45:47, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = NBT/WINQANET2#1C.20.172.17.0.2 couldn't be found >[2008/02/19 13:45:47, 5] libsmb/namecache.c:namecache_status_fetch(346) > namecache_status_fetch: no entry for NBT/WINQANET2#1C.20.172.17.0.2 found. >[2008/02/19 13:45:47, 10] lib/util_sock.c:open_socket_in(839) > bind succeeded on port 0 >[2008/02/19 13:45:47, 5] libsmb/nmblib.c:send_udp(779) > Sending a packet of len 50 to (172.17.0.2) on port 137 >[2008/02/19 13:45:47, 10] lib/util_sock.c:read_udp_socket(294) > read_udp_socket: lastip 172.17.0.2 lastport 137 read: 265 >[2008/02/19 13:45:47, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 31249 >[2008/02/19 13:45:47, 5] libsmb/nmblib.c:read_packet(757) > Received a packet of len 265 from (172.17.0.2) port 137 >[2008/02/19 13:45:47, 4] libsmb/nmblib.c:debug_nmb_packet(112) > nmb packet from 172.17.0.2(137) header: id=31249 opcode=Query(0) response=Yes > header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes > header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 > answers: nmb_name=WINQANET2<1c> rr_type=33 rr_class=1 ttl=0 > answers 0 char .W2K3R2 hex 0857324B335232202020202020202020 > answers 10 char .D.WINQANET2 hex 00440057494E51414E45543220202020 > answers 20 char ...WINQANET2 hex 202000C40057494E51414E4554322020 > answers 30 char ...W2K3R2 hex 202020201CC40057324B335232202020 > answers 40 char D.WINQANE hex 20202020202020440057494E51414E45 > answers 50 char T2 .D.WINQA hex 54322020202020201B440057494E5141 > answers 60 char NET2 ...WIN hex 4E4554322020202020201EC40057494E > answers 70 char QANET2 .D.. hex 51414E4554322020202020201D440001 > answers 80 char .__MSBROWSE__... hex 025F5F4D5342524F5753455F5F0201C4 > answers 90 char .. 5".-......... hex 0000203522032D000000000000000000 > answers a0 char ................ hex 00000000000000000000000000000000 > answers b0 char ............... hex 000000000000000000000000000000 >[2008/02/19 13:45:47, 10] libsmb/namequery.c:parse_node_status(185) > W2K3R2#00: flags = 0x44 >[2008/02/19 13:45:47, 10] libsmb/namequery.c:parse_node_status(185) > WINQANET2#00: flags = 0xc4 >[2008/02/19 13:45:47, 10] libsmb/namequery.c:parse_node_status(185) > WINQANET2#1c: flags = 0xc4 >[2008/02/19 13:45:47, 10] libsmb/namequery.c:parse_node_status(185) > W2K3R2#20: flags = 0x44 >[2008/02/19 13:45:47, 10] libsmb/namequery.c:parse_node_status(185) > WINQANET2#1b: flags = 0x44 >[2008/02/19 13:45:47, 10] libsmb/namequery.c:parse_node_status(185) > WINQANET2#1e: flags = 0xc4 >[2008/02/19 13:45:47, 10] libsmb/namequery.c:parse_node_status(185) > WINQANET2#1d: flags = 0x44 >[2008/02/19 13:45:47, 10] libsmb/namequery.c:parse_node_status(185) > __MSBROWSE__#01: flags = 0xc4 >[2008/02/19 13:45:47, 10] libsmb/namequery.c:name_status_find(342) > name_status_find: name found, name W2K3R2 ip address is 172.17.0.2 >[2008/02/19 13:45:47, 3] libsmb/namequery_dc.c:rpc_dc_name(194) > rpc_dc_name: Returning DC W2K3R2 (172.17.0.2) for domain WINQANET2 >[2008/02/19 13:45:47, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = AD_SITENAME/DOMAIN/WINQANET2.COM couldn't be found >[2008/02/19 13:45:47, 5] libads/dns.c:sitename_fetch(674) > sitename_fetch: No stored sitename for winqanet2.com >[2008/02/19 13:45:47, 6] libads/ldap.c:ads_find_dc(294) > ads_find_dc: looking for realm 'winqanet2.com' >[2008/02/19 13:45:47, 8] libsmb/namequery.c:get_sorted_dc_list(1626) > get_sorted_dc_list: attempting lookup for name winqanet2.com (sitename NULL) using [ads] >[2008/02/19 13:45:47, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = SAF/DOMAIN/WINQANET2.COM couldn't be found >[2008/02/19 13:45:47, 5] libsmb/namequery.c:saf_fetch(133) > saf_fetch: failed to find server for "winqanet2.com" domain >[2008/02/19 13:45:47, 3] libsmb/namequery.c:get_dc_list(1489) > get_dc_list: preferred server list: ", *" >[2008/02/19 13:45:47, 10] libsmb/namequery.c:internal_resolve_name(1166) > internal_resolve_name: looking up winqanet2.com#1c (sitename (null)) >[2008/02/19 13:45:47, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = NBT/WINQANET2.COM#1C couldn't be found >[2008/02/19 13:45:47, 5] libsmb/namecache.c:namecache_fetch(210) > no entry for winqanet2.com#1C found. >[2008/02/19 13:45:47, 5] libsmb/namequery.c:resolve_ads(1066) > resolve_ads: Attempting to resolve DC's for winqanet2.com using DNS >[2008/02/19 13:45:47, 3] libads/dns.c:dns_send_req(296) > ads_dns_lookup_srv: Failed to resolve _ldap._tcp.dc._msdcs.winqanet2.com (Success) >[2008/02/19 13:45:47, 3] libads/dns.c:ads_dns_lookup_srv(339) > ads_dns_lookup_srv: Failed to send DNS query (NT_STATUS_UNSUCCESSFUL) >[2008/02/19 13:45:47, 8] libsmb/namequery.c:get_dc_list(1505) > Adding 0 DC's from auto lookup >[2008/02/19 13:45:47, 4] libsmb/namequery.c:get_dc_list(1516) > get_dc_list: no servers found >[2008/02/19 13:45:47, 6] libads/ldap.c:ads_find_dc(294) > ads_find_dc: looking for domain 'winqanet2.com' >[2008/02/19 13:45:47, 8] libsmb/namequery.c:get_sorted_dc_list(1626) > get_sorted_dc_list: attempting lookup for name winqanet2.com (sitename NULL) using [lmhosts host wins bcast] >[2008/02/19 13:45:47, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = SAF/DOMAIN/WINQANET2.COM couldn't be found >[2008/02/19 13:45:47, 5] libsmb/namequery.c:saf_fetch(133) > saf_fetch: failed to find server for "winqanet2.com" domain >[2008/02/19 13:45:47, 3] libsmb/namequery.c:get_dc_list(1489) > get_dc_list: preferred server list: ", *" >[2008/02/19 13:45:47, 10] libsmb/namequery.c:internal_resolve_name(1166) > internal_resolve_name: looking up winqanet2.com#1c (sitename (null)) >[2008/02/19 13:45:47, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = NBT/WINQANET2.COM#1C couldn't be found >[2008/02/19 13:45:47, 5] libsmb/namecache.c:namecache_fetch(210) > no entry for winqanet2.com#1C found. >[2008/02/19 13:45:47, 3] libsmb/namequery.c:resolve_lmhosts(966) > resolve_lmhosts: Attempting lmhosts lookup for name winqanet2.com<0x1c> >[2008/02/19 13:45:47, 4] libsmb/namequery.c:getlmhostsent(717) > getlmhostsent: lmhost entry: 127.0.0.1 localhost >[2008/02/19 13:45:47, 5] libsmb/namequery.c:resolve_hosts(1022) > resolve_hosts: not appropriate for name type <0x1c> >[2008/02/19 13:45:47, 3] libsmb/namequery.c:resolve_wins(863) > resolve_wins: Attempting wins lookup for name winqanet2.com<0x1c> >[2008/02/19 13:45:47, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = WINS_SRV_DEAD/172.16.3.1,0.0.0.0 couldn't be found >[2008/02/19 13:45:47, 4] lib/wins_srv.c:wins_srv_is_dead(111) > wins_srv_is_dead: 172.16.3.1 is alive >[2008/02/19 13:45:47, 6] lib/wins_srv.c:wins_srv_ip_tag(311) > Current wins server for tag '*' with source 0.0.0.0 is 172.16.3.1 >[2008/02/19 13:45:47, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = WINS_SRV_DEAD/172.16.3.1,0.0.0.0 couldn't be found >[2008/02/19 13:45:47, 4] lib/wins_srv.c:wins_srv_is_dead(111) > wins_srv_is_dead: 172.16.3.1 is alive >[2008/02/19 13:45:47, 3] libsmb/namequery.c:resolve_wins(902) > resolve_wins: using WINS server 172.16.3.1 and tag '*' >[2008/02/19 13:45:47, 10] lib/util_sock.c:open_socket_in(839) > bind succeeded on port 0 >[2008/02/19 13:45:47, 5] libsmb/nmblib.c:send_udp(779) > Sending a packet of len 50 to (172.16.3.1) on port 137 >[2008/02/19 13:45:47, 10] lib/util_sock.c:read_udp_socket(294) > read_udp_socket: lastip 172.16.3.1 lastport 137 read: 56 >[2008/02/19 13:45:47, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 17666 >[2008/02/19 13:45:47, 5] libsmb/nmblib.c:read_packet(757) > Received a packet of len 56 from (172.16.3.1) port 137 >[2008/02/19 13:45:47, 4] libsmb/nmblib.c:debug_nmb_packet(112) > nmb packet from 172.16.3.1(137) header: id=17666 opcode=Query(0) response=Yes > header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes > header: rcode=3 qdcount=0 ancount=0 nscount=0 arcount=0 >[2008/02/19 13:45:47, 3] libsmb/namequery.c:name_query(554) > Negative name query response, rcode 0x03: The name requested does not exist. >[2008/02/19 13:45:47, 3] libsmb/namequery.c:name_resolve_bcast(805) > name_resolve_bcast: Attempting broadcast lookup for name winqanet2.com<0x1c> >[2008/02/19 13:45:47, 10] lib/util_sock.c:open_socket_in(839) > bind succeeded on port 0 >[2008/02/19 13:45:47, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 0 >[2008/02/19 13:45:47, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 1 >[2008/02/19 13:45:47, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 1 >[2008/02/19 13:45:47, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_NODELAY. >[2008/02/19 13:45:47, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_KEEPCNT. >[2008/02/19 13:45:47, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_KEEPIDLE. >[2008/02/19 13:45:47, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_KEEPINTVL. >[2008/02/19 13:45:47, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2008/02/19 13:45:47, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2008/02/19 13:45:47, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 126976 >[2008/02/19 13:45:47, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 126976 >[2008/02/19 13:45:47, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2008/02/19 13:45:47, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2008/02/19 13:45:47, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2008/02/19 13:45:47, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2008/02/19 13:45:47, 5] libsmb/nmblib.c:send_udp(779) > Sending a packet of len 50 to (172.16.255.255) on port 137 >[2008/02/19 13:45:47, 5] libsmb/nmblib.c:send_udp(779) > Sending a packet of len 50 to (172.16.255.255) on port 137 >[2008/02/19 13:45:47, 5] libsmb/nmblib.c:send_udp(779) > Sending a packet of len 50 to (172.16.255.255) on port 137 >[2008/02/19 13:45:48, 5] libsmb/nmblib.c:send_udp(779) > Sending a packet of len 50 to (192.168.122.255) on port 137 >[2008/02/19 13:45:48, 5] libsmb/nmblib.c:send_udp(779) > Sending a packet of len 50 to (192.168.122.255) on port 137 >[2008/02/19 13:45:48, 5] libsmb/nmblib.c:send_udp(779) > Sending a packet of len 50 to (192.168.122.255) on port 137 >[2008/02/19 13:45:48, 8] libsmb/namequery.c:get_dc_list(1505) > Adding 0 DC's from auto lookup >[2008/02/19 13:45:48, 4] libsmb/namequery.c:get_dc_list(1516) > get_dc_list: no servers found >[2008/02/19 13:45:48, 1] nsswitch/winbindd_ads.c:ads_cached_connection(128) > ads_connect for domain WINQANET2 failed: No logon servers >[2008/02/19 13:45:48, 10] nsswitch/winbindd_cache.c:refresh_sequence_number(487) > refresh_sequence_number: failed with NT_STATUS_UNSUCCESSFUL >[2008/02/19 13:45:48, 10] nsswitch/winbindd_cache.c:store_cache_seqnum(435) > store_cache_seqnum: success [WINQANET2][4294967295 @ 1203446748] >[2008/02/19 13:45:48, 10] nsswitch/winbindd_cache.c:refresh_sequence_number(499) > refresh_sequence_number: WINQANET2 seq number is now -1 >[2008/02/19 13:46:01, 6] nsswitch/winbindd.c:new_connection(628) > accepted socket 22 >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn INTERFACE_VERSION >[2008/02/19 13:46:01, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(491) > [ 5496]: request interface version >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn WINBINDD_PRIV_PIPE_DIR >[2008/02/19 13:46:01, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(524) > [ 5496]: request location of privileged pipe >[2008/02/19 13:46:01, 6] nsswitch/winbindd.c:new_connection(628) > accepted socket 23 >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:46:01, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5496]: sid to gid S-1-5-32-544 >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-32-544) >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:46:01, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634d0e10 >[2008/02/19 13:46:01, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/999970 >[2008/02/19 13:46:01, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634d0e10 "async_request_timeout" >[2008/02/19 13:46:01, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5469 >[2008/02/19 13:46:01, 5] nsswitch/winbindd_async.c:lookupsid_recv(706) > lookupsid returned an error >[2008/02/19 13:46:01, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-32-544 >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:46:01, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5496]: ping >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:46:01, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5496]: ping >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn ALLOCATE_GID >[2008/02/19 13:46:01, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634a02c0 >[2008/02/19 13:46:01, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/999981 >[2008/02/19 13:46:01, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634a02c0 "async_request_timeout" >[2008/02/19 13:46:01, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5465 >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:46:01, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5496]: sid to gid S-1-5-32-545 >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-32-545) >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:46:01, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634a02c0 >[2008/02/19 13:46:01, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/999981 >[2008/02/19 13:46:01, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634a02c0 "async_request_timeout" >[2008/02/19 13:46:01, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5469 >[2008/02/19 13:46:01, 5] nsswitch/winbindd_async.c:lookupsid_recv(706) > lookupsid returned an error >[2008/02/19 13:46:01, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-32-545 >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:46:01, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5496]: ping >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:46:01, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5496]: ping >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn ALLOCATE_GID >[2008/02/19 13:46:01, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634878c0 >[2008/02/19 13:46:01, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/999982 >[2008/02/19 13:46:01, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634878c0 "async_request_timeout" >[2008/02/19 13:46:01, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5465 >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:46:01, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5496]: sid to gid S-1-1-0 >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-1-0) >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:46:01, 5] nsswitch/winbindd_async.c:winbindd_lookupsid_async(729) > Could not find domain for sid S-1-1-0 >[2008/02/19 13:46:01, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-1-0 >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:46:01, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5496]: ping >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:46:01, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5496]: sid to gid S-1-5-2 >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-2) >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:46:01, 5] nsswitch/winbindd_async.c:winbindd_lookupsid_async(729) > Could not find domain for sid S-1-5-2 >[2008/02/19 13:46:01, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-2 >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:46:01, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5496]: ping >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:46:01, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5496]: sid to gid S-1-5-32-546 >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-32-546) >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:46:01, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634878c0 >[2008/02/19 13:46:01, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/999981 >[2008/02/19 13:46:01, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634878c0 "async_request_timeout" >[2008/02/19 13:46:01, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5469 >[2008/02/19 13:46:01, 5] nsswitch/winbindd_async.c:lookupsid_recv(706) > lookupsid returned an error >[2008/02/19 13:46:01, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-32-546 >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:46:01, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5496]: ping >[2008/02/19 13:46:01, 6] nsswitch/winbindd.c:new_connection(628) > accepted socket 22 >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn INTERFACE_VERSION >[2008/02/19 13:46:01, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(491) > [ 5497]: request interface version >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn WINBINDD_PRIV_PIPE_DIR >[2008/02/19 13:46:01, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(524) > [ 5497]: request location of privileged pipe >[2008/02/19 13:46:01, 6] nsswitch/winbindd.c:new_connection(628) > accepted socket 23 >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:46:01, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5497]: sid to gid S-1-5-32-544 >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-32-544) >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:46:01, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634cac10 >[2008/02/19 13:46:01, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/999980 >[2008/02/19 13:46:01, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634cac10 "async_request_timeout" >[2008/02/19 13:46:01, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5469 >[2008/02/19 13:46:01, 5] nsswitch/winbindd_async.c:lookupsid_recv(706) > lookupsid returned an error >[2008/02/19 13:46:01, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-32-544 >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:46:01, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5497]: ping >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:46:01, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5497]: ping >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn ALLOCATE_GID >[2008/02/19 13:46:01, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634a02c0 >[2008/02/19 13:46:01, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/999981 >[2008/02/19 13:46:01, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634a02c0 "async_request_timeout" >[2008/02/19 13:46:01, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5465 >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:46:01, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5497]: sid to gid S-1-5-32-545 >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-32-545) >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:46:01, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634a02c0 >[2008/02/19 13:46:01, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/999981 >[2008/02/19 13:46:01, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634a02c0 "async_request_timeout" >[2008/02/19 13:46:01, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5469 >[2008/02/19 13:46:01, 5] nsswitch/winbindd_async.c:lookupsid_recv(706) > lookupsid returned an error >[2008/02/19 13:46:01, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-32-545 >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:46:01, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5497]: ping >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:46:01, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5497]: ping >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn ALLOCATE_GID >[2008/02/19 13:46:01, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634878c0 >[2008/02/19 13:46:01, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/999981 >[2008/02/19 13:46:01, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634878c0 "async_request_timeout" >[2008/02/19 13:46:01, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5465 >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:46:01, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5497]: sid to gid S-1-1-0 >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-1-0) >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:46:01, 5] nsswitch/winbindd_async.c:winbindd_lookupsid_async(729) > Could not find domain for sid S-1-1-0 >[2008/02/19 13:46:01, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-1-0 >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:46:01, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5497]: ping >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:46:01, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5497]: sid to gid S-1-5-2 >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-2) >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:46:01, 5] nsswitch/winbindd_async.c:winbindd_lookupsid_async(729) > Could not find domain for sid S-1-5-2 >[2008/02/19 13:46:01, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-2 >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:46:01, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5497]: ping >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn SID_TO_GID >[2008/02/19 13:46:01, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) > [ 5497]: sid to gid S-1-5-32-546 >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(673) > find_lookup_domain_from_sid(S-1-5-32-546) >[2008/02/19 13:46:01, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(676) > calling find_domain_from_sid >[2008/02/19 13:46:01, 10] lib/events.c:event_add_timed(129) > Added timed event "async_request_timeout": 5555634878c0 >[2008/02/19 13:46:01, 10] lib/events.c:get_timed_events_timeout(295) > timed_events_timeout: 299/999961 >[2008/02/19 13:46:01, 10] lib/events.c:timed_event_destructor(66) > Destroying timed event 5555634878c0 "async_request_timeout" >[2008/02/19 13:46:01, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) > Retrieving response for pid 5469 >[2008/02/19 13:46:01, 5] nsswitch/winbindd_async.c:lookupsid_recv(706) > lookupsid returned an error >[2008/02/19 13:46:01, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274) > sid2gid_lookupsid_recv: Could not convert get sid type for S-1-5-32-546 >[2008/02/19 13:46:01, 10] nsswitch/winbindd.c:process_request(314) > process_request: request fn PING >[2008/02/19 13:46:01, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) > [ 5497]: ping
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 429024
:
291892
|
291893
|
291897
|
291898
|
292014
|
292015
|
292202
|
292203
|
293489
|
293625
|
293626
| 295318 |
299950
|
300141