Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 827403 Details for
Bug 1033216
Re-adding existing trust fails
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
Http error logs with samba log level 100
error_log (text/plain), 258.93 KB, created by
Steeve Goveas
on 2013-11-21 17:47:38 UTC
(
hide
)
Description:
Http error logs with samba log level 100
Filename:
MIME Type:
Creator:
Steeve Goveas
Created:
2013-11-21 17:47:38 UTC
Size:
258.93 KB
patch
obsolete
>INFO: Current debug levels: > all: 100 > tdb: 100 > printdrivers: 100 > lanman: 100 > smb: 100 > rpc_parse: 100 > rpc_srv: 100 > rpc_cli: 100 > passdb: 100 > sam: 100 > auth: 100 > winbind: 100 > vfs: 100 > idmap: 100 > quota: 100 > acls: 100 > locking: 100 > msdfs: 100 > dmapi: 100 > registry: 100 > scavenger: 100 > dns: 100 > ldb: 100 >pm_process() returned Yes >GENSEC backend 'gssapi_spnego' registered >GENSEC backend 'gssapi_krb5' registered >GENSEC backend 'gssapi_krb5_sasl' registered >GENSEC backend 'sasl-DIGEST-MD5' registered >GENSEC backend 'schannel' registered >GENSEC backend 'spnego' registered >GENSEC backend 'ntlmssp' registered >Using binding ncacn_np:rhel7-b.testrelm.com[,] >s4_tevent: Added timed event "dcerpc_connect_timeout_handler": 0x7f3d603184b0 >s4_tevent: Added timed event "composite_trigger": 0x7f3d600cf0c0 >s4_tevent: Added timed event "composite_trigger": 0x7f3d6031b2a0 >s4_tevent: Running timer event 0x7f3d600cf0c0 "composite_trigger" >s4_tevent: Destroying timer event 0x7f3d6031b2a0 "composite_trigger" >Mapped to DCERPC endpoint \pipe\lsarpc >added interface enp9s0f0 ip=2620:52:0:102f:21e:67ff:fe65:9608 bcast= netmask=ffff:ffff:ffff:ffff:: >added interface enp9s0f0 ip=10.16.44.98 bcast=10.16.47.255 netmask=255.255.248.0 >added interface enp9s0f0 ip=2620:52:0:102f:21e:67ff:fe65:9608 bcast= netmask=ffff:ffff:ffff:ffff:: >added interface enp9s0f0 ip=10.16.44.98 bcast=10.16.47.255 netmask=255.255.248.0 >s4_tevent: Ending timer event 0x7f3d600cf0c0 "composite_trigger" >s4_tevent: Added timed event "connect_multi_timer": 0x7f3d6032e600 >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d60330190 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d60330190 >s4_tevent: Destroying timer event 0x7f3d6032e600 "connect_multi_timer" >Socket options: > SO_KEEPALIVE = 0 > SO_REUSEADDR = 0 > SO_BROADCAST = 0 > TCP_NODELAY = 1 > TCP_KEEPCNT = 9 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_REUSEPORT = 0 > SO_SNDBUF = 663430 > SO_RCVBUF = 261942 > SO_SNDLOWAT = 1 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 > TCP_QUICKACK = 1 > TCP_DEFER_ACCEPT = 0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600d0f50 >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Destroying timer event 0x7f3d600d0f50 "tevent_req_timedout" >Starting GENSEC mechanism spnego >Starting GENSEC submechanism gssapi_krb5 >Ticket in credentials cache for admin@TESTRELM.COM will expire in 84595 secs >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600d4a20 >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Destroying timer event 0x7f3d600d4a20 "tevent_req_timedout" >gensec_gssapi: NO credentials were delegated >GSSAPI Connection will be cryptographically sealed >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d6039ec70 >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Destroying timer event 0x7f3d6039ec70 "tevent_req_timedout" >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600dd760 >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Destroying timer event 0x7f3d600dd760 "tevent_req_timedout" >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=65535, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600ddbd0 >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d6022e520 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d603a9910 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d603a9910 >s4_tevent: Destroying timer event 0x7f3d600ddbd0 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d6022e520 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d6022c060 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d6022c060 >s4_tevent: Destroying timer event 0x7f3d603184b0 "dcerpc_connect_timeout_handler" > lsa_OpenPolicy2: struct lsa_OpenPolicy2 > in: struct lsa_OpenPolicy2 > system_name : * > system_name : '' > attr : * > attr: struct lsa_ObjectAttribute > len : 0x00000000 (0) > root_dir : NULL > object_name : NULL > attributes : 0x00000000 (0) > sec_desc : NULL > sec_qos : * > sec_qos: struct lsa_QosInfo > len : 0x00000000 (0) > impersonation_level : 0x0000 (0) > context_mode : 0x00 (0) > effective_only : 0x00 (0) > access_mask : 0x02000000 (33554432) > 0: LSA_POLICY_VIEW_LOCAL_INFORMATION > 0: LSA_POLICY_VIEW_AUDIT_INFORMATION > 0: LSA_POLICY_GET_PRIVATE_INFORMATION > 0: LSA_POLICY_TRUST_ADMIN > 0: LSA_POLICY_CREATE_ACCOUNT > 0: LSA_POLICY_CREATE_SECRET > 0: LSA_POLICY_CREATE_PRIVILEGE > 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS > 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS > 0: LSA_POLICY_AUDIT_LOG_ADMIN > 0: LSA_POLICY_SERVER_ADMIN > 0: LSA_POLICY_LOOKUP_NAMES > 0: LSA_POLICY_NOTIFICATION >rpc request data: >[0000] 00 00 02 00 01 00 00 00 00 00 00 00 01 00 00 00 ........ ........ >[0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ >[0020] 00 00 00 00 00 00 00 00 04 00 02 00 00 00 00 00 ........ ........ >[0030] 00 00 00 00 00 00 00 02 ........ >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d603b6820 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d60317250 >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=80, this_data=80, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d6023cad0 >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d6023c1a0 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d6023c1a0 >s4_tevent: Destroying timer event 0x7f3d6023cad0 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d603b6820 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d60237820 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d60237820 > lsa_OpenPolicy2: struct lsa_OpenPolicy2 > out: struct lsa_OpenPolicy2 > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000d-0000-0000-8e52-7b2e2e040200 > result : NT_STATUS_OK >rpc reply data: >[0000] 00 00 00 00 0D 00 00 00 00 00 00 00 8E 52 7B 2E ........ .....R{. >[0010] 2E 04 02 00 00 00 00 00 ........ > lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2 > in: struct lsa_QueryInfoPolicy2 > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000d-0000-0000-8e52-7b2e2e040200 > level : LSA_POLICY_INFO_DNS (12) >rpc request data: >[0000] 00 00 00 00 0D 00 00 00 00 00 00 00 8E 52 7B 2E ........ .....R{. >[0010] 2E 04 02 00 0C 00 ...... >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d60253a50 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d60317250 >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=46, this_data=46, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d6025c420 >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d60259f60 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d60259f60 >s4_tevent: Destroying timer event 0x7f3d6025c420 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d60253a50 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d601614a0 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d601614a0 > lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2 > out: struct lsa_QueryInfoPolicy2 > info : * > info : * > info : union lsa_PolicyInformation(case 12) > dns: struct lsa_DnsDomainInfo > name: struct lsa_StringLarge > length : 0x0010 (16) > size : 0x0012 (18) > string : * > string : 'TESTRELM' > dns_domain: struct lsa_StringLarge > length : 0x0018 (24) > size : 0x001a (26) > string : * > string : 'testrelm.com' > dns_forest: struct lsa_StringLarge > length : 0x0018 (24) > size : 0x001a (26) > string : * > string : 'testrelm.com' > domain_guid : 00000015-d741-d333-6492-cf56bd34c56d > sid : * > sid : S-1-5-21-3543390017-1456444004-1841640637 > result : NT_STATUS_OK >rpc reply data: >[0000] 00 00 02 00 0C 00 00 00 10 00 12 00 04 00 02 00 ........ ........ >[0010] 18 00 1A 00 08 00 02 00 18 00 1A 00 0C 00 02 00 ........ ........ >[0020] 15 00 00 00 41 D7 33 D3 64 92 CF 56 BD 34 C5 6D ....A.3. d..V.4.m >[0030] 10 00 02 00 09 00 00 00 00 00 00 00 08 00 00 00 ........ ........ >[0040] 54 00 45 00 53 00 54 00 52 00 45 00 4C 00 4D 00 T.E.S.T. R.E.L.M. >[0050] 0D 00 00 00 00 00 00 00 0C 00 00 00 74 00 65 00 ........ ....t.e. >[0060] 73 00 74 00 72 00 65 00 6C 00 6D 00 2E 00 63 00 s.t.r.e. l.m...c. >[0070] 6F 00 6D 00 0D 00 00 00 00 00 00 00 0C 00 00 00 o.m..... ........ >[0080] 74 00 65 00 73 00 74 00 72 00 65 00 6C 00 6D 00 t.e.s.t. r.e.l.m. >[0090] 2E 00 63 00 6F 00 6D 00 04 00 00 00 01 04 00 00 ..c.o.m. ........ >[00A0] 00 00 00 05 15 00 00 00 41 D7 33 D3 64 92 CF 56 ........ A.3.d..V >[00B0] BD 34 C5 6D 00 00 00 00 .4.m.... >lpcfg_load: refreshing parameters from /usr/share/ipa/smb.conf.empty >params.c:pm_process() - Processing configuration file "/usr/share/ipa/smb.conf.empty" >Processing section "[global]" >INFO: Current debug levels: > all: 100 > tdb: 100 > printdrivers: 100 > lanman: 100 > smb: 100 > rpc_parse: 100 > rpc_srv: 100 > rpc_cli: 100 > passdb: 100 > sam: 100 > auth: 100 > winbind: 100 > vfs: 100 > idmap: 100 > quota: 100 > acls: 100 > locking: 100 > msdfs: 100 > dmapi: 100 > registry: 100 > scavenger: 100 > dns: 100 > ldb: 100 >pm_process() returned Yes >added interface enp9s0f0 ip=2620:52:0:102f:21e:67ff:fe65:9608 bcast= netmask=ffff:ffff:ffff:ffff:: >added interface enp9s0f0 ip=10.16.44.98 bcast=10.16.47.255 netmask=255.255.248.0 >added interface enp9s0f0 ip=2620:52:0:102f:21e:67ff:fe65:9608 bcast= netmask=ffff:ffff:ffff:ffff:: >added interface enp9s0f0 ip=10.16.44.98 bcast=10.16.47.255 netmask=255.255.248.0 >added interface enp9s0f0 ip=2620:52:0:102f:21e:67ff:fe65:9608 bcast= netmask=ffff:ffff:ffff:ffff:: >added interface enp9s0f0 ip=10.16.44.98 bcast=10.16.47.255 netmask=255.255.248.0 >added interface enp9s0f0 ip=2620:52:0:102f:21e:67ff:fe65:9608 bcast= netmask=ffff:ffff:ffff:ffff:: >added interface enp9s0f0 ip=10.16.44.98 bcast=10.16.47.255 netmask=255.255.248.0 >finddcs: searching for a DC by DNS domain adtest.qe >finddcs: looking for SRV records for _ldap._tcp.adtest.qe >ads_dns_lookup_srv: 1 records returned in the answer section. >ads_dns_parse_rr_srv: Parsed ad12srv1.adtest.qe [0, 100, 389] >Addrs = 2620:52:0:41ce:c191:ad8a:e0f7:2c3a@389/ad12srv1,10.65.207.38@389/ad12srv1 >finddcs: DNS SRV response 0 at '2620:52:0:41ce:c191:ad8a:e0f7:2c3a' >finddcs: DNS SRV response 1 at '10.65.207.38' >finddcs: performing CLDAP query on 2620:52:0:41ce:c191:ad8a:e0f7:2c3a >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d6033fc00 >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d6013a800 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d6013a800 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d6034fd80 >s4_tevent: Destroying timer event 0x7f3d6034fd80 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d6033fc00 "tevent_req_timedout" > &response->data.nt5_ex: struct NETLOGON_SAM_LOGON_RESPONSE_EX > command : LOGON_SAM_LOGON_RESPONSE_EX (23) > sbz : 0x0000 (0) > server_type : 0x000073fd (29693) > 1: NBT_SERVER_PDC > 1: NBT_SERVER_GC > 1: NBT_SERVER_LDAP > 1: NBT_SERVER_DS > 1: NBT_SERVER_KDC > 1: NBT_SERVER_TIMESERV > 1: NBT_SERVER_CLOSEST > 1: NBT_SERVER_WRITABLE > 1: NBT_SERVER_GOOD_TIMESERV > 0: NBT_SERVER_NDNC > 0: NBT_SERVER_SELECT_SECRET_DOMAIN_6 > 1: NBT_SERVER_FULL_SECRET_DOMAIN_6 > 1: NBT_SERVER_ADS_WEB_SERVICE > 0: NBT_SERVER_HAS_DNS_NAME > 0: NBT_SERVER_IS_DEFAULT_NC > 0: NBT_SERVER_FOREST_ROOT > domain_uuid : 1c7a84b8-df8b-43b3-8e29-1a9d0e7ac73d > forest : 'adtest.qe' > dns_domain : 'adtest.qe' > pdc_dns_name : 'ad12srv1.adtest.qe' > domain_name : 'ADTEST' > pdc_name : 'AD12SRV1' > user_name : '' > server_site : 'Default-First-Site-Name' > client_site : 'Default-First-Site-Name' > sockaddr_size : 0x00 (0) > sockaddr: struct nbt_sockaddr > sockaddr_family : 0x00000000 (0) > pdc_ip : (null) > remaining : DATA_BLOB length=0 > next_closest_site : NULL > nt_version : 0x00000005 (5) > 1: NETLOGON_NT_VERSION_1 > 0: NETLOGON_NT_VERSION_5 > 1: NETLOGON_NT_VERSION_5EX > 0: NETLOGON_NT_VERSION_5EX_WITH_IP > 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE > 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL > 0: NETLOGON_NT_VERSION_PDC > 0: NETLOGON_NT_VERSION_IP > 0: NETLOGON_NT_VERSION_LOCAL > 0: NETLOGON_NT_VERSION_GC > lmnt_token : 0xffff (65535) > lm20_token : 0xffff (65535) >finddcs: Found matching DC 2620:52:0:41ce:c191:ad8a:e0f7:2c3a with server_type=0x000073fd >lpcfg_load: refreshing parameters from /usr/share/ipa/smb.conf.empty >params.c:pm_process() - Processing configuration file "/usr/share/ipa/smb.conf.empty" >Processing section "[global]" >INFO: Current debug levels: > all: 100 > tdb: 100 > printdrivers: 100 > lanman: 100 > smb: 100 > rpc_parse: 100 > rpc_srv: 100 > rpc_cli: 100 > passdb: 100 > sam: 100 > auth: 100 > winbind: 100 > vfs: 100 > idmap: 100 > quota: 100 > acls: 100 > locking: 100 > msdfs: 100 > dmapi: 100 > registry: 100 > scavenger: 100 > dns: 100 > ldb: 100 >pm_process() returned Yes >Using binding ncacn_np:ad12srv1.adtest.qe[,] >s4_tevent: Added timed event "dcerpc_connect_timeout_handler": 0x7f3d60228940 >s4_tevent: Added timed event "composite_trigger": 0x7f3d600d5cd0 >s4_tevent: Added timed event "composite_trigger": 0x7f3d603a6d10 >s4_tevent: Running timer event 0x7f3d600d5cd0 "composite_trigger" >s4_tevent: Destroying timer event 0x7f3d603a6d10 "composite_trigger" >Mapped to DCERPC endpoint \pipe\lsarpc >added interface enp9s0f0 ip=2620:52:0:102f:21e:67ff:fe65:9608 bcast= netmask=ffff:ffff:ffff:ffff:: >added interface enp9s0f0 ip=10.16.44.98 bcast=10.16.47.255 netmask=255.255.248.0 >added interface enp9s0f0 ip=2620:52:0:102f:21e:67ff:fe65:9608 bcast= netmask=ffff:ffff:ffff:ffff:: >added interface enp9s0f0 ip=10.16.44.98 bcast=10.16.47.255 netmask=255.255.248.0 >s4_tevent: Ending timer event 0x7f3d600d5cd0 "composite_trigger" >s4_tevent: Added timed event "connect_multi_timer": 0x7f3d60242fe0 >s4_tevent: Running timer event 0x7f3d60242fe0 "connect_multi_timer" >s4_tevent: Added timed event "connect_multi_timer": 0x7f3d602401f0 >s4_tevent: Ending timer event 0x7f3d60242fe0 "connect_multi_timer" >s4_tevent: Running timer event 0x7f3d602401f0 "connect_multi_timer" >s4_tevent: Added timed event "connect_multi_timer": 0x7f3d603b55c0 >s4_tevent: Ending timer event 0x7f3d602401f0 "connect_multi_timer" >s4_tevent: Running timer event 0x7f3d603b55c0 "connect_multi_timer" >s4_tevent: Ending timer event 0x7f3d603b55c0 "connect_multi_timer" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d60254cb0 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d60254cb0 >Socket options: > SO_KEEPALIVE = 0 > SO_REUSEADDR = 0 > SO_BROADCAST = 0 > TCP_NODELAY = 1 > TCP_KEEPCNT = 9 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_REUSEPORT = 0 > SO_SNDBUF = 22080 > SO_RCVBUF = 87380 > SO_SNDLOWAT = 1 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 > TCP_QUICKACK = 1 > TCP_DEFER_ACCEPT = 0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600dbe00 >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >s4_tevent: Destroying timer event 0x7f3d600dbe00 "tevent_req_timedout" >Starting GENSEC mechanism spnego >Starting GENSEC submechanism ntlmssp > negotiate: struct NEGOTIATE_MESSAGE > Signature : 'NTLMSSP' > MessageType : NtLmNegotiate (1) > NegotiateFlags : 0x60088215 (1611170325) > 1: NTLMSSP_NEGOTIATE_UNICODE > 0: NTLMSSP_NEGOTIATE_OEM > 1: NTLMSSP_REQUEST_TARGET > 1: NTLMSSP_NEGOTIATE_SIGN > 0: NTLMSSP_NEGOTIATE_SEAL > 0: NTLMSSP_NEGOTIATE_DATAGRAM > 0: NTLMSSP_NEGOTIATE_LM_KEY > 0: NTLMSSP_NEGOTIATE_NETWARE > 1: NTLMSSP_NEGOTIATE_NTLM > 0: NTLMSSP_NEGOTIATE_NT_ONLY > 0: NTLMSSP_ANONYMOUS > 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED > 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED > 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL > 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN > 0: NTLMSSP_TARGET_TYPE_DOMAIN > 0: NTLMSSP_TARGET_TYPE_SERVER > 0: NTLMSSP_TARGET_TYPE_SHARE > 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY > 0: NTLMSSP_NEGOTIATE_IDENTIFY > 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY > 0: NTLMSSP_NEGOTIATE_TARGET_INFO > 0: NTLMSSP_NEGOTIATE_VERSION > 1: NTLMSSP_NEGOTIATE_128 > 1: NTLMSSP_NEGOTIATE_KEY_EXCH > 0: NTLMSSP_NEGOTIATE_56 > DomainNameLen : 0x0008 (8) > DomainNameMaxLen : 0x0008 (8) > DomainName : * > DomainName : 'TESTRELM' > WorkstationLen : 0x0008 (8) > WorkstationMaxLen : 0x0008 (8) > Workstation : * > Workstation : 'TESTRELM' >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600dc250 >smb_signing_sign_pdu: sent SMB signature of >[0000] 42 53 52 53 50 59 4C 20 BSRSPYL >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >s4_tevent: Destroying timer event 0x7f3d600dc250 "tevent_req_timedout" >Got challenge flags: >Got NTLMSSP neg_flags=0x62898215 > NTLMSSP_NEGOTIATE_UNICODE > NTLMSSP_REQUEST_TARGET > NTLMSSP_NEGOTIATE_SIGN > NTLMSSP_NEGOTIATE_NTLM > NTLMSSP_NEGOTIATE_ALWAYS_SIGN > NTLMSSP_NEGOTIATE_NTLM2 > NTLMSSP_NEGOTIATE_TARGET_INFO > NTLMSSP_NEGOTIATE_VERSION > NTLMSSP_NEGOTIATE_128 > NTLMSSP_NEGOTIATE_KEY_EXCH >NTLMSSP: Set final flags: >Got NTLMSSP neg_flags=0x60088215 > NTLMSSP_NEGOTIATE_UNICODE > NTLMSSP_REQUEST_TARGET > NTLMSSP_NEGOTIATE_SIGN > NTLMSSP_NEGOTIATE_NTLM > NTLMSSP_NEGOTIATE_ALWAYS_SIGN > NTLMSSP_NEGOTIATE_NTLM2 > NTLMSSP_NEGOTIATE_128 > NTLMSSP_NEGOTIATE_KEY_EXCH >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600dca00 >smb_signing_sign_pdu: sent SMB signature of >[0000] 42 53 52 53 50 59 4C 20 BSRSPYL >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >s4_tevent: Destroying timer event 0x7f3d600dca00 "tevent_req_timedout" >smb_signing_activate: user_session_key >[0000] 3B FD 97 C3 FF 55 D5 0B 0F 22 49 B3 85 B8 14 09 ;....U.. ."I..... >smb_signing_activate: NULL response_data >smb_signing_md5: sequence number 1 >smb_signing_check_pdu: seq 1: got good SMB signature of >[0000] 45 9D A3 9A 44 EA A4 F2 E...D... >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600dc500 >smb_signing_md5: sequence number 2 >smb_signing_sign_pdu: sent SMB signature of >[0000] CB 1D 22 16 AA DF 29 DF .."...). >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >smb_signing_md5: sequence number 3 >smb_signing_check_pdu: seq 3: got good SMB signature of >[0000] 88 4D CF 5C BE 65 C3 27 .M.\.e.' >s4_tevent: Destroying timer event 0x7f3d600dc500 "tevent_req_timedout" >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600dc730 >smb_signing_md5: sequence number 4 >smb_signing_sign_pdu: sent SMB signature of >[0000] A2 42 47 60 07 70 B1 21 .BG`.p.! >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >smb_signing_md5: sequence number 5 >smb_signing_check_pdu: seq 5: got good SMB signature of >[0000] 75 26 9B 46 E2 05 63 29 u&.F..c) >s4_tevent: Destroying timer event 0x7f3d600dc730 "tevent_req_timedout" >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=65535, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600dcd70 >smb_signing_md5: sequence number 6 >smb_signing_sign_pdu: sent SMB signature of >[0000] 74 7E 4E 92 28 D8 51 4E t~N.(.QN >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d6015bf70 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >smb_signing_md5: sequence number 7 >smb_signing_check_pdu: seq 7: got good SMB signature of >[0000] 47 A3 A0 8B 20 BC 5E D8 G... .^. >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d603b4360 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d603b4360 >s4_tevent: Destroying timer event 0x7f3d600dcd70 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d6015bf70 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d603b01e0 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d603b01e0 >s4_tevent: Destroying timer event 0x7f3d60228940 "dcerpc_connect_timeout_handler" > lsa_OpenPolicy2: struct lsa_OpenPolicy2 > in: struct lsa_OpenPolicy2 > system_name : * > system_name : '' > attr : * > attr: struct lsa_ObjectAttribute > len : 0x00000000 (0) > root_dir : NULL > object_name : NULL > attributes : 0x00000000 (0) > sec_desc : NULL > sec_qos : * > sec_qos: struct lsa_QosInfo > len : 0x00000000 (0) > impersonation_level : 0x0000 (0) > context_mode : 0x00 (0) > effective_only : 0x00 (0) > access_mask : 0x02000000 (33554432) > 0: LSA_POLICY_VIEW_LOCAL_INFORMATION > 0: LSA_POLICY_VIEW_AUDIT_INFORMATION > 0: LSA_POLICY_GET_PRIVATE_INFORMATION > 0: LSA_POLICY_TRUST_ADMIN > 0: LSA_POLICY_CREATE_ACCOUNT > 0: LSA_POLICY_CREATE_SECRET > 0: LSA_POLICY_CREATE_PRIVILEGE > 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS > 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS > 0: LSA_POLICY_AUDIT_LOG_ADMIN > 0: LSA_POLICY_SERVER_ADMIN > 0: LSA_POLICY_LOOKUP_NAMES > 0: LSA_POLICY_NOTIFICATION >rpc request data: >[0000] 00 00 02 00 01 00 00 00 00 00 00 00 01 00 00 00 ........ ........ >[0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ >[0020] 00 00 00 00 00 00 00 00 04 00 02 00 00 00 00 00 ........ ........ >[0030] 00 00 00 00 00 00 00 02 ........ >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d6030ccf0 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=80, this_data=80, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600dcd60 >smb_signing_md5: sequence number 8 >smb_signing_sign_pdu: sent SMB signature of >[0000] 3B 5A DE BC 46 F9 24 DD ;Z..F.$. >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >smb_signing_md5: sequence number 9 >smb_signing_check_pdu: seq 9: got good SMB signature of >[0000] C5 7A EB E3 39 5C 28 99 .z..9\(. >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d602f38b0 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d602f38b0 >s4_tevent: Destroying timer event 0x7f3d600dcd60 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d6030ccf0 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d6023c1a0 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d6023c1a0 > lsa_OpenPolicy2: struct lsa_OpenPolicy2 > out: struct lsa_OpenPolicy2 > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 2dc598bc-20f8-4637-8da4-d173ebba0475 > result : NT_STATUS_OK >rpc reply data: >[0000] 00 00 00 00 BC 98 C5 2D F8 20 37 46 8D A4 D1 73 .......- . 7F...s >[0010] EB BA 04 75 00 00 00 00 ...u.... > lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2 > in: struct lsa_QueryInfoPolicy2 > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 2dc598bc-20f8-4637-8da4-d173ebba0475 > level : LSA_POLICY_INFO_DNS (12) >rpc request data: >[0000] 00 00 00 00 BC 98 C5 2D F8 20 37 46 8D A4 D1 73 .......- . 7F...s >[0010] EB BA 04 75 0C 00 ...u.. >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d602f2650 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=46, this_data=46, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600dc610 >smb_signing_md5: sequence number 10 >smb_signing_sign_pdu: sent SMB signature of >[0000] C0 55 16 6D D6 1F 35 32 .U.m..52 >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >smb_signing_md5: sequence number 11 >smb_signing_check_pdu: seq 11: got good SMB signature of >[0000] AC 26 5D 69 30 2D 9A 28 .&]i0-.( >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d603307b0 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d603307b0 >s4_tevent: Destroying timer event 0x7f3d600dc610 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d602f2650 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d6031fc20 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d6031fc20 > lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2 > out: struct lsa_QueryInfoPolicy2 > info : * > info : * > info : union lsa_PolicyInformation(case 12) > dns: struct lsa_DnsDomainInfo > name: struct lsa_StringLarge > length : 0x000c (12) > size : 0x000e (14) > string : * > string : 'ADTEST' > dns_domain: struct lsa_StringLarge > length : 0x0012 (18) > size : 0x0014 (20) > string : * > string : 'adtest.qe' > dns_forest: struct lsa_StringLarge > length : 0x0012 (18) > size : 0x0014 (20) > string : * > string : 'adtest.qe' > domain_guid : 1c7a84b8-df8b-43b3-8e29-1a9d0e7ac73d > sid : * > sid : S-1-5-21-1910160501-511572375-3625658879 > result : NT_STATUS_OK >rpc reply data: >[0000] 00 00 02 00 0C 00 00 00 0C 00 0E 00 04 00 02 00 ........ ........ >[0010] 12 00 14 00 08 00 02 00 12 00 14 00 0C 00 02 00 ........ ........ >[0020] B8 84 7A 1C 8B DF B3 43 8E 29 1A 9D 0E 7A C7 3D ..z....C .)...z.= >[0030] 10 00 02 00 07 00 00 00 00 00 00 00 06 00 00 00 ........ ........ >[0040] 41 00 44 00 54 00 45 00 53 00 54 00 0A 00 00 00 A.D.T.E. S.T..... >[0050] 00 00 00 00 09 00 00 00 61 00 64 00 74 00 65 00 ........ a.d.t.e. >[0060] 73 00 74 00 2E 00 71 00 65 00 00 00 0A 00 00 00 s.t...q. e....... >[0070] 00 00 00 00 09 00 00 00 61 00 64 00 74 00 65 00 ........ a.d.t.e. >[0080] 73 00 74 00 2E 00 71 00 65 00 00 00 04 00 00 00 s.t...q. e....... >[0090] 01 04 00 00 00 00 00 05 15 00 00 00 75 BC DA 71 ........ ....u..q >[00A0] 97 F9 7D 1E FF 29 1B D8 00 00 00 00 ..}..).. .... > lsa_QueryTrustedDomainInfoByName: struct lsa_QueryTrustedDomainInfoByName > in: struct lsa_QueryTrustedDomainInfoByName > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 2dc598bc-20f8-4637-8da4-d173ebba0475 > trusted_domain : * > trusted_domain: struct lsa_String > length : 0x0018 (24) > size : 0x0018 (24) > string : * > string : 'testrelm.com' > level : LSA_TRUSTED_DOMAIN_INFO_FULL_INFO (8) >rpc request data: >[0000] 00 00 00 00 BC 98 C5 2D F8 20 37 46 8D A4 D1 73 .......- . 7F...s >[0010] EB BA 04 75 18 00 18 00 00 00 02 00 0C 00 00 00 ...u.... ........ >[0020] 00 00 00 00 0C 00 00 00 74 00 65 00 73 00 74 00 ........ t.e.s.t. >[0030] 72 00 65 00 6C 00 6D 00 2E 00 63 00 6F 00 6D 00 r.e.l.m. ..c.o.m. >[0040] 08 00 .. >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d603b4c90 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=90, this_data=90, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600f50a0 >smb_signing_md5: sequence number 12 >smb_signing_sign_pdu: sent SMB signature of >[0000] 22 10 E4 D4 02 CE F4 E1 "....... >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >smb_signing_md5: sequence number 13 >smb_signing_check_pdu: seq 13: got good SMB signature of >[0000] DB 15 55 40 17 B3 A3 28 ..U@...( >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d60250330 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d60250330 >s4_tevent: Destroying timer event 0x7f3d600f50a0 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d603b4c90 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d603becc0 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d603becc0 > lsa_QueryTrustedDomainInfoByName: struct lsa_QueryTrustedDomainInfoByName > out: struct lsa_QueryTrustedDomainInfoByName > info : * > info : * > info : union lsa_TrustedDomainInfo(case 8) > full_info: struct lsa_TrustDomainInfoFullInfo > info_ex: struct lsa_TrustDomainInfoInfoEx > domain_name: struct lsa_StringLarge > length : 0x0018 (24) > size : 0x001a (26) > string : * > string : 'testrelm.com' > netbios_name: struct lsa_StringLarge > length : 0x0010 (16) > size : 0x0012 (18) > string : * > string : 'TESTRELM' > sid : * > sid : S-1-5-21-3543390017-1456444004-1841640637 > trust_direction : 0x00000003 (3) > 1: LSA_TRUST_DIRECTION_INBOUND > 1: LSA_TRUST_DIRECTION_OUTBOUND > trust_type : LSA_TRUST_TYPE_UPLEVEL (2) > trust_attributes : 0x00000008 (8) > 0: LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE > 0: LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY > 0: LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN > 1: LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE > 0: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION > 0: LSA_TRUST_ATTRIBUTE_WITHIN_FOREST > 0: LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL > 0: LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION > posix_offset: struct lsa_TrustDomainInfoPosixOffset > posix_offset : 0x40000000 (1073741824) > auth_info: struct lsa_TrustDomainInfoAuthInfo > incoming_count : 0x00000000 (0) > incoming_current_auth_info: NULL > incoming_previous_auth_info: NULL > outgoing_count : 0x00000000 (0) > outgoing_current_auth_info: NULL > outgoing_previous_auth_info: NULL > result : NT_STATUS_OK >rpc reply data: >[0000] 00 00 02 00 08 00 00 00 18 00 1A 00 04 00 02 00 ........ ........ >[0010] 10 00 12 00 08 00 02 00 0C 00 02 00 03 00 00 00 ........ ........ >[0020] 02 00 00 00 08 00 00 00 00 00 00 40 00 00 00 00 ........ ...@.... >[0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ >[0040] 00 00 00 00 0D 00 00 00 00 00 00 00 0C 00 00 00 ........ ........ >[0050] 74 00 65 00 73 00 74 00 72 00 65 00 6C 00 6D 00 t.e.s.t. r.e.l.m. >[0060] 2E 00 63 00 6F 00 6D 00 09 00 00 00 00 00 00 00 ..c.o.m. ........ >[0070] 08 00 00 00 54 00 45 00 53 00 54 00 52 00 45 00 ....T.E. S.T.R.E. >[0080] 4C 00 4D 00 04 00 00 00 01 04 00 00 00 00 00 05 L.M..... ........ >[0090] 15 00 00 00 41 D7 33 D3 64 92 CF 56 BD 34 C5 6D ....A.3. d..V.4.m >[00A0] 00 00 00 00 .... > lsa_DeleteTrustedDomain: struct lsa_DeleteTrustedDomain > in: struct lsa_DeleteTrustedDomain > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 2dc598bc-20f8-4637-8da4-d173ebba0475 > dom_sid : * > dom_sid : S-1-5-21-3543390017-1456444004-1841640637 >rpc request data: >[0000] 00 00 00 00 BC 98 C5 2D F8 20 37 46 8D A4 D1 73 .......- . 7F...s >[0010] EB BA 04 75 04 00 00 00 01 04 00 00 00 00 00 05 ...u.... ........ >[0020] 15 00 00 00 41 D7 33 D3 64 92 CF 56 BD 34 C5 6D ....A.3. d..V.4.m >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d60228940 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600f50a0 >smb_signing_md5: sequence number 14 >smb_signing_sign_pdu: sent SMB signature of >[0000] EB 3D 0E E7 F5 38 A2 9A .=...8.. >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >smb_signing_md5: sequence number 15 >smb_signing_check_pdu: seq 15: got good SMB signature of >[0000] 5F 0A 6A 0D 3C 45 E6 8A _.j.<E.. >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d6016b0d0 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d6016b0d0 >s4_tevent: Destroying timer event 0x7f3d600f50a0 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d60228940 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d603aef80 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d603aef80 > lsa_DeleteTrustedDomain: struct lsa_DeleteTrustedDomain > out: struct lsa_DeleteTrustedDomain > result : NT_STATUS_OK >rpc reply data: >[0000] 00 00 00 00 .... > lsa_CreateTrustedDomainEx2: struct lsa_CreateTrustedDomainEx2 > in: struct lsa_CreateTrustedDomainEx2 > policy_handle : * > policy_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 2dc598bc-20f8-4637-8da4-d173ebba0475 > info : * > info: struct lsa_TrustDomainInfoInfoEx > domain_name: struct lsa_StringLarge > length : 0x0018 (24) > size : 0x001a (26) > string : * > string : 'testrelm.com' > netbios_name: struct lsa_StringLarge > length : 0x0010 (16) > size : 0x0012 (18) > string : * > string : 'TESTRELM' > sid : * > sid : S-1-5-21-3543390017-1456444004-1841640637 > trust_direction : 0x00000003 (3) > 1: LSA_TRUST_DIRECTION_INBOUND > 1: LSA_TRUST_DIRECTION_OUTBOUND > trust_type : LSA_TRUST_TYPE_UPLEVEL (2) > trust_attributes : 0x00000008 (8) > 0: LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE > 0: LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY > 0: LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN > 1: LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE > 0: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION > 0: LSA_TRUST_ATTRIBUTE_WITHIN_FOREST > 0: LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL > 0: LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION > auth_info_internal : * > auth_info_internal: struct lsa_TrustDomainInfoAuthInfoInternal > auth_blob: struct lsa_DATA_BUF2 > size : 0x00000440 (1088) > data : * > data: ARRAY(1088) > [0] : 0x9c (156) > [1] : 0xdb (219) > [2] : 0xa2 (162) > [3] : 0x4d (77) > [4] : 0xc5 (197) > [5] : 0xb2 (178) > [6] : 0x09 (9) > [7] : 0x41 (65) > [8] : 0xa3 (163) > [9] : 0x89 (137) > [10] : 0x4a (74) > [11] : 0xb8 (184) > [12] : 0x2e (46) > [13] : 0x09 (9) > [14] : 0xaf (175) > [15] : 0x20 (32) > [16] : 0x23 (35) > [17] : 0x24 (36) > [18] : 0xd9 (217) > [19] : 0x09 (9) > [20] : 0x84 (132) > [21] : 0xbf (191) > [22] : 0xef (239) > [23] : 0x5d (93) > [24] : 0x36 (54) > [25] : 0xa3 (163) > [26] : 0x14 (20) > [27] : 0xaf (175) > [28] : 0x3c (60) > [29] : 0x10 (16) > [30] : 0x4a (74) > [31] : 0xc3 (195) > [32] : 0x79 (121) > [33] : 0x64 (100) > [34] : 0x49 (73) > [35] : 0xac (172) > [36] : 0xbc (188) > [37] : 0xa2 (162) > [38] : 0x98 (152) > [39] : 0x8a (138) > [40] : 0xb1 (177) > [41] : 0x7f (127) > [42] : 0xfd (253) > [43] : 0x84 (132) > [44] : 0x5e (94) > [45] : 0x07 (7) > [46] : 0x45 (69) > [47] : 0xa4 (164) > [48] : 0x4f (79) > [49] : 0x07 (7) > [50] : 0xaf (175) > [51] : 0xc4 (196) > [52] : 0xf3 (243) > [53] : 0x49 (73) > [54] : 0x63 (99) > [55] : 0x8a (138) > [56] : 0xbc (188) > [57] : 0x75 (117) > [58] : 0xea (234) > [59] : 0x16 (22) > [60] : 0x2d (45) > [61] : 0x16 (22) > [62] : 0x46 (70) > [63] : 0x83 (131) > [64] : 0x59 (89) > [65] : 0x3d (61) > [66] : 0x17 (23) > [67] : 0x8c (140) > [68] : 0x4f (79) > [69] : 0xfa (250) > [70] : 0x54 (84) > [71] : 0x96 (150) > [72] : 0x85 (133) > [73] : 0x5d (93) > [74] : 0xaf (175) > [75] : 0xe1 (225) > [76] : 0xc1 (193) > [77] : 0x50 (80) > [78] : 0xf7 (247) > [79] : 0xb7 (183) > [80] : 0x1e (30) > [81] : 0x50 (80) > [82] : 0xa9 (169) > [83] : 0x92 (146) > [84] : 0x7e (126) > [85] : 0xc4 (196) > [86] : 0x95 (149) > [87] : 0xe3 (227) > [88] : 0xf2 (242) > [89] : 0x62 (98) > [90] : 0xda (218) > [91] : 0x22 (34) > [92] : 0xce (206) > [93] : 0x72 (114) > [94] : 0xae (174) > [95] : 0xa4 (164) > [96] : 0xb6 (182) > [97] : 0x91 (145) > [98] : 0xc7 (199) > [99] : 0x96 (150) > [100] : 0x6b (107) > [101] : 0xcc (204) > [102] : 0x5a (90) > [103] : 0x8e (142) > [104] : 0xc9 (201) > [105] : 0x4b (75) > [106] : 0xb4 (180) > [107] : 0xd4 (212) > [108] : 0xc1 (193) > [109] : 0x6e (110) > [110] : 0x77 (119) > [111] : 0x97 (151) > [112] : 0x90 (144) > [113] : 0x30 (48) > [114] : 0x58 (88) > [115] : 0x50 (80) > [116] : 0xfe (254) > [117] : 0xd3 (211) > [118] : 0x1f (31) > [119] : 0x03 (3) > [120] : 0x13 (19) > [121] : 0x63 (99) > [122] : 0xe4 (228) > [123] : 0xa6 (166) > [124] : 0x48 (72) > [125] : 0xf1 (241) > [126] : 0x11 (17) > [127] : 0x7d (125) > [128] : 0xe7 (231) > [129] : 0x71 (113) > [130] : 0x36 (54) > [131] : 0x88 (136) > [132] : 0x67 (103) > [133] : 0x89 (137) > [134] : 0x7d (125) > [135] : 0x09 (9) > [136] : 0x14 (20) > [137] : 0x54 (84) > [138] : 0xc0 (192) > [139] : 0xd6 (214) > [140] : 0x8b (139) > [141] : 0x77 (119) > [142] : 0x18 (24) > [143] : 0xc9 (201) > [144] : 0x57 (87) > [145] : 0xf9 (249) > [146] : 0x87 (135) > [147] : 0x43 (67) > [148] : 0x3e (62) > [149] : 0xd4 (212) > [150] : 0xca (202) > [151] : 0x29 (41) > [152] : 0xae (174) > [153] : 0x30 (48) > [154] : 0x25 (37) > [155] : 0xf8 (248) > [156] : 0xac (172) > [157] : 0xb2 (178) > [158] : 0x5a (90) > [159] : 0xbd (189) > [160] : 0x61 (97) > [161] : 0x35 (53) > [162] : 0xae (174) > [163] : 0x3e (62) > [164] : 0xbf (191) > [165] : 0xd5 (213) > [166] : 0x13 (19) > [167] : 0x28 (40) > [168] : 0xbe (190) > [169] : 0x63 (99) > [170] : 0xf5 (245) > [171] : 0x4a (74) > [172] : 0xee (238) > [173] : 0x65 (101) > [174] : 0xfe (254) > [175] : 0x41 (65) > [176] : 0x36 (54) > [177] : 0xd6 (214) > [178] : 0xf9 (249) > [179] : 0xf4 (244) > [180] : 0x2a (42) > [181] : 0x9f (159) > [182] : 0x03 (3) > [183] : 0xe7 (231) > [184] : 0x8c (140) > [185] : 0xbf (191) > [186] : 0x86 (134) > [187] : 0x50 (80) > [188] : 0xe5 (229) > [189] : 0x93 (147) > [190] : 0x46 (70) > [191] : 0x88 (136) > [192] : 0xf6 (246) > [193] : 0x23 (35) > [194] : 0xed (237) > [195] : 0x3c (60) > [196] : 0x32 (50) > [197] : 0xca (202) > [198] : 0x23 (35) > [199] : 0x0a (10) > [200] : 0x56 (86) > [201] : 0xbf (191) > [202] : 0xd3 (211) > [203] : 0x4a (74) > [204] : 0xf5 (245) > [205] : 0xd9 (217) > [206] : 0x16 (22) > [207] : 0x0e (14) > [208] : 0x1e (30) > [209] : 0xe6 (230) > [210] : 0x78 (120) > [211] : 0x75 (117) > [212] : 0xe5 (229) > [213] : 0x38 (56) > [214] : 0x47 (71) > [215] : 0xa9 (169) > [216] : 0x1d (29) > [217] : 0x10 (16) > [218] : 0x06 (6) > [219] : 0x12 (18) > [220] : 0xbe (190) > [221] : 0x80 (128) > [222] : 0xb3 (179) > [223] : 0x38 (56) > [224] : 0xdd (221) > [225] : 0xd2 (210) > [226] : 0x3b (59) > [227] : 0xd6 (214) > [228] : 0x7b (123) > [229] : 0xae (174) > [230] : 0x90 (144) > [231] : 0x4e (78) > [232] : 0xd1 (209) > [233] : 0xb8 (184) > [234] : 0xfb (251) > [235] : 0xc7 (199) > [236] : 0x55 (85) > [237] : 0xa5 (165) > [238] : 0x70 (112) > [239] : 0x39 (57) > [240] : 0x74 (116) > [241] : 0x4f (79) > [242] : 0x77 (119) > [243] : 0x98 (152) > [244] : 0xa6 (166) > [245] : 0xa8 (168) > [246] : 0xa4 (164) > [247] : 0x8a (138) > [248] : 0xd6 (214) > [249] : 0x4b (75) > [250] : 0x80 (128) > [251] : 0xbd (189) > [252] : 0xdc (220) > [253] : 0x03 (3) > [254] : 0xcb (203) > [255] : 0x84 (132) > [256] : 0x84 (132) > [257] : 0x7b (123) > [258] : 0x8d (141) > [259] : 0x0b (11) > [260] : 0x56 (86) > [261] : 0x8f (143) > [262] : 0x4b (75) > [263] : 0xa9 (169) > [264] : 0x91 (145) > [265] : 0xf1 (241) > [266] : 0x4b (75) > [267] : 0x72 (114) > [268] : 0x0a (10) > [269] : 0x3e (62) > [270] : 0x96 (150) > [271] : 0xc7 (199) > [272] : 0x8c (140) > [273] : 0x5f (95) > [274] : 0x1b (27) > [275] : 0x36 (54) > [276] : 0x91 (145) > [277] : 0x22 (34) > [278] : 0x46 (70) > [279] : 0x77 (119) > [280] : 0xbe (190) > [281] : 0xc7 (199) > [282] : 0xed (237) > [283] : 0x5f (95) > [284] : 0x7b (123) > [285] : 0x12 (18) > [286] : 0x7f (127) > [287] : 0xe5 (229) > [288] : 0x11 (17) > [289] : 0x02 (2) > [290] : 0xb6 (182) > [291] : 0x2f (47) > [292] : 0x67 (103) > [293] : 0x1f (31) > [294] : 0x8c (140) > [295] : 0x45 (69) > [296] : 0xeb (235) > [297] : 0xf0 (240) > [298] : 0x04 (4) > [299] : 0x7c (124) > [300] : 0x57 (87) > [301] : 0x26 (38) > [302] : 0x50 (80) > [303] : 0xd3 (211) > [304] : 0xcf (207) > [305] : 0x0c (12) > [306] : 0xf6 (246) > [307] : 0x1b (27) > [308] : 0x49 (73) > [309] : 0x4f (79) > [310] : 0x0c (12) > [311] : 0x4a (74) > [312] : 0x9f (159) > [313] : 0x6b (107) > [314] : 0x25 (37) > [315] : 0x51 (81) > [316] : 0x63 (99) > [317] : 0xed (237) > [318] : 0x69 (105) > [319] : 0x86 (134) > [320] : 0xa9 (169) > [321] : 0x1b (27) > [322] : 0x7d (125) > [323] : 0xe4 (228) > [324] : 0x68 (104) > [325] : 0x87 (135) > [326] : 0x6e (110) > [327] : 0x7e (126) > [328] : 0x06 (6) > [329] : 0xaa (170) > [330] : 0x85 (133) > [331] : 0x66 (102) > [332] : 0x11 (17) > [333] : 0x0c (12) > [334] : 0xbb (187) > [335] : 0xc1 (193) > [336] : 0xab (171) > [337] : 0x31 (49) > [338] : 0xc8 (200) > [339] : 0x76 (118) > [340] : 0xba (186) > [341] : 0xf9 (249) > [342] : 0xd1 (209) > [343] : 0xae (174) > [344] : 0x6f (111) > [345] : 0x3e (62) > [346] : 0x13 (19) > [347] : 0x8c (140) > [348] : 0xbf (191) > [349] : 0x74 (116) > [350] : 0x16 (22) > [351] : 0xf6 (246) > [352] : 0x33 (51) > [353] : 0x13 (19) > [354] : 0xdf (223) > [355] : 0x88 (136) > [356] : 0xa1 (161) > [357] : 0x4c (76) > [358] : 0x42 (66) > [359] : 0x6f (111) > [360] : 0x93 (147) > [361] : 0xeb (235) > [362] : 0xbf (191) > [363] : 0x0f (15) > [364] : 0x35 (53) > [365] : 0x2d (45) > [366] : 0x77 (119) > [367] : 0x04 (4) > [368] : 0x7c (124) > [369] : 0xd5 (213) > [370] : 0x55 (85) > [371] : 0x36 (54) > [372] : 0x07 (7) > [373] : 0xc9 (201) > [374] : 0x4a (74) > [375] : 0x97 (151) > [376] : 0x81 (129) > [377] : 0x00 (0) > [378] : 0xe6 (230) > [379] : 0x9e (158) > [380] : 0x91 (145) > [381] : 0xea (234) > [382] : 0x7c (124) > [383] : 0xf6 (246) > [384] : 0x84 (132) > [385] : 0x0e (14) > [386] : 0xa9 (169) > [387] : 0xf9 (249) > [388] : 0x6d (109) > [389] : 0x30 (48) > [390] : 0x77 (119) > [391] : 0x16 (22) > [392] : 0xf8 (248) > [393] : 0x7a (122) > [394] : 0x6e (110) > [395] : 0xba (186) > [396] : 0x9c (156) > [397] : 0x72 (114) > [398] : 0x06 (6) > [399] : 0xda (218) > [400] : 0x3a (58) > [401] : 0x85 (133) > [402] : 0xc0 (192) > [403] : 0x27 (39) > [404] : 0xa0 (160) > [405] : 0x4a (74) > [406] : 0xb4 (180) > [407] : 0xc3 (195) > [408] : 0x7e (126) > [409] : 0xe8 (232) > [410] : 0x5d (93) > [411] : 0xe7 (231) > [412] : 0xc9 (201) > [413] : 0x49 (73) > [414] : 0xf3 (243) > [415] : 0x10 (16) > [416] : 0x12 (18) > [417] : 0x05 (5) > [418] : 0x30 (48) > [419] : 0xda (218) > [420] : 0x08 (8) > [421] : 0x01 (1) > [422] : 0x96 (150) > [423] : 0x47 (71) > [424] : 0x6a (106) > [425] : 0x86 (134) > [426] : 0x54 (84) > [427] : 0xda (218) > [428] : 0x8b (139) > [429] : 0xe2 (226) > [430] : 0xab (171) > [431] : 0xa0 (160) > [432] : 0xe7 (231) > [433] : 0xbc (188) > [434] : 0x2b (43) > [435] : 0x2b (43) > [436] : 0xb0 (176) > [437] : 0x45 (69) > [438] : 0x3e (62) > [439] : 0x58 (88) > [440] : 0x55 (85) > [441] : 0x69 (105) > [442] : 0x48 (72) > [443] : 0x96 (150) > [444] : 0x3d (61) > [445] : 0x47 (71) > [446] : 0xd0 (208) > [447] : 0x7d (125) > [448] : 0x94 (148) > [449] : 0x11 (17) > [450] : 0x80 (128) > [451] : 0x9e (158) > [452] : 0xc2 (194) > [453] : 0x69 (105) > [454] : 0x51 (81) > [455] : 0x39 (57) > [456] : 0xd1 (209) > [457] : 0x61 (97) > [458] : 0x25 (37) > [459] : 0x7d (125) > [460] : 0x4c (76) > [461] : 0x06 (6) > [462] : 0x8e (142) > [463] : 0x28 (40) > [464] : 0xa8 (168) > [465] : 0xfb (251) > [466] : 0xa0 (160) > [467] : 0xb8 (184) > [468] : 0x2e (46) > [469] : 0xfd (253) > [470] : 0x22 (34) > [471] : 0x8d (141) > [472] : 0x93 (147) > [473] : 0x11 (17) > [474] : 0xa7 (167) > [475] : 0x1d (29) > [476] : 0x3c (60) > [477] : 0x3a (58) > [478] : 0x98 (152) > [479] : 0xe9 (233) > [480] : 0xee (238) > [481] : 0x12 (18) > [482] : 0x92 (146) > [483] : 0x92 (146) > [484] : 0xb1 (177) > [485] : 0x5e (94) > [486] : 0xe1 (225) > [487] : 0x99 (153) > [488] : 0x88 (136) > [489] : 0xef (239) > [490] : 0x0f (15) > [491] : 0x91 (145) > [492] : 0x45 (69) > [493] : 0x3e (62) > [494] : 0xaa (170) > [495] : 0x53 (83) > [496] : 0x45 (69) > [497] : 0xd7 (215) > [498] : 0xaf (175) > [499] : 0x65 (101) > [500] : 0x4a (74) > [501] : 0xc8 (200) > [502] : 0x91 (145) > [503] : 0xdb (219) > [504] : 0x35 (53) > [505] : 0x75 (117) > [506] : 0xc8 (200) > [507] : 0x2f (47) > [508] : 0x3d (61) > [509] : 0x59 (89) > [510] : 0x81 (129) > [511] : 0x24 (36) > [512] : 0x5a (90) > [513] : 0x14 (20) > [514] : 0x9c (156) > [515] : 0xc0 (192) > [516] : 0x3c (60) > [517] : 0x76 (118) > [518] : 0xf7 (247) > [519] : 0x3c (60) > [520] : 0xe8 (232) > [521] : 0x75 (117) > [522] : 0x81 (129) > [523] : 0x2f (47) > [524] : 0xfa (250) > [525] : 0x40 (64) > [526] : 0x14 (20) > [527] : 0xf0 (240) > [528] : 0x79 (121) > [529] : 0x77 (119) > [530] : 0x38 (56) > [531] : 0x35 (53) > [532] : 0x7a (122) > [533] : 0x3d (61) > [534] : 0xbf (191) > [535] : 0xbf (191) > [536] : 0x5b (91) > [537] : 0x02 (2) > [538] : 0x5f (95) > [539] : 0x79 (121) > [540] : 0x54 (84) > [541] : 0x17 (23) > [542] : 0xfc (252) > [543] : 0x94 (148) > [544] : 0x07 (7) > [545] : 0x23 (35) > [546] : 0x13 (19) > [547] : 0x3c (60) > [548] : 0x60 (96) > [549] : 0xfe (254) > [550] : 0xc7 (199) > [551] : 0x04 (4) > [552] : 0x0b (11) > [553] : 0x75 (117) > [554] : 0x76 (118) > [555] : 0xb8 (184) > [556] : 0x1e (30) > [557] : 0x8e (142) > [558] : 0x28 (40) > [559] : 0xb5 (181) > [560] : 0xbe (190) > [561] : 0xa3 (163) > [562] : 0x84 (132) > [563] : 0x61 (97) > [564] : 0x8f (143) > [565] : 0xed (237) > [566] : 0x5f (95) > [567] : 0xaa (170) > [568] : 0x97 (151) > [569] : 0xcd (205) > [570] : 0x86 (134) > [571] : 0xdf (223) > [572] : 0xef (239) > [573] : 0xfa (250) > [574] : 0xe7 (231) > [575] : 0x4e (78) > [576] : 0xd4 (212) > [577] : 0x7e (126) > [578] : 0x44 (68) > [579] : 0xc6 (198) > [580] : 0xcd (205) > [581] : 0xf3 (243) > [582] : 0xd7 (215) > [583] : 0x95 (149) > [584] : 0x2d (45) > [585] : 0xad (173) > [586] : 0xde (222) > [587] : 0x5f (95) > [588] : 0x60 (96) > [589] : 0xd3 (211) > [590] : 0x6f (111) > [591] : 0x37 (55) > [592] : 0x2d (45) > [593] : 0x8d (141) > [594] : 0xd0 (208) > [595] : 0xa3 (163) > [596] : 0xb1 (177) > [597] : 0xcd (205) > [598] : 0xaf (175) > [599] : 0x8e (142) > [600] : 0x26 (38) > [601] : 0xa5 (165) > [602] : 0x61 (97) > [603] : 0x58 (88) > [604] : 0x86 (134) > [605] : 0x2f (47) > [606] : 0x7a (122) > [607] : 0x67 (103) > [608] : 0x54 (84) > [609] : 0xd5 (213) > [610] : 0xe6 (230) > [611] : 0xd6 (214) > [612] : 0x33 (51) > [613] : 0x12 (18) > [614] : 0xec (236) > [615] : 0x8f (143) > [616] : 0x41 (65) > [617] : 0xb9 (185) > [618] : 0x08 (8) > [619] : 0xaf (175) > [620] : 0x9f (159) > [621] : 0xb5 (181) > [622] : 0xa5 (165) > [623] : 0xd1 (209) > [624] : 0x08 (8) > [625] : 0xb5 (181) > [626] : 0x52 (82) > [627] : 0x95 (149) > [628] : 0x02 (2) > [629] : 0x4d (77) > [630] : 0xce (206) > [631] : 0x63 (99) > [632] : 0x60 (96) > [633] : 0xde (222) > [634] : 0xe7 (231) > [635] : 0x67 (103) > [636] : 0xad (173) > [637] : 0x55 (85) > [638] : 0x59 (89) > [639] : 0x1c (28) > [640] : 0x87 (135) > [641] : 0x2e (46) > [642] : 0x3a (58) > [643] : 0x5f (95) > [644] : 0x34 (52) > [645] : 0x6c (108) > [646] : 0x69 (105) > [647] : 0xe8 (232) > [648] : 0x30 (48) > [649] : 0x6b (107) > [650] : 0x56 (86) > [651] : 0x3e (62) > [652] : 0x47 (71) > [653] : 0x3c (60) > [654] : 0xb2 (178) > [655] : 0xd7 (215) > [656] : 0xa8 (168) > [657] : 0x3c (60) > [658] : 0x3f (63) > [659] : 0x36 (54) > [660] : 0x61 (97) > [661] : 0x3f (63) > [662] : 0xe1 (225) > [663] : 0x8f (143) > [664] : 0x7b (123) > [665] : 0x52 (82) > [666] : 0xf1 (241) > [667] : 0x40 (64) > [668] : 0xfc (252) > [669] : 0x7f (127) > [670] : 0xd9 (217) > [671] : 0x39 (57) > [672] : 0x2d (45) > [673] : 0x16 (22) > [674] : 0xf3 (243) > [675] : 0x8c (140) > [676] : 0x6c (108) > [677] : 0xe7 (231) > [678] : 0x29 (41) > [679] : 0x02 (2) > [680] : 0x72 (114) > [681] : 0x81 (129) > [682] : 0xc3 (195) > [683] : 0xbc (188) > [684] : 0xe9 (233) > [685] : 0xd1 (209) > [686] : 0x85 (133) > [687] : 0x5a (90) > [688] : 0xb5 (181) > [689] : 0xa7 (167) > [690] : 0xa5 (165) > [691] : 0x80 (128) > [692] : 0x49 (73) > [693] : 0x8a (138) > [694] : 0xeb (235) > [695] : 0x55 (85) > [696] : 0x22 (34) > [697] : 0x83 (131) > [698] : 0x65 (101) > [699] : 0x5a (90) > [700] : 0x99 (153) > [701] : 0xe1 (225) > [702] : 0x46 (70) > [703] : 0x9e (158) > [704] : 0xfd (253) > [705] : 0x2a (42) > [706] : 0xb2 (178) > [707] : 0x71 (113) > [708] : 0xdd (221) > [709] : 0x84 (132) > [710] : 0x6f (111) > [711] : 0x07 (7) > [712] : 0xa6 (166) > [713] : 0xf3 (243) > [714] : 0xe2 (226) > [715] : 0xcf (207) > [716] : 0x2f (47) > [717] : 0x55 (85) > [718] : 0x37 (55) > [719] : 0xe3 (227) > [720] : 0x07 (7) > [721] : 0xad (173) > [722] : 0x9f (159) > [723] : 0x04 (4) > [724] : 0xe9 (233) > [725] : 0xd6 (214) > [726] : 0xb8 (184) > [727] : 0x07 (7) > [728] : 0xb2 (178) > [729] : 0xde (222) > [730] : 0x52 (82) > [731] : 0x1e (30) > [732] : 0xaf (175) > [733] : 0xdd (221) > [734] : 0xd0 (208) > [735] : 0x6e (110) > [736] : 0xa7 (167) > [737] : 0x97 (151) > [738] : 0x98 (152) > [739] : 0x70 (112) > [740] : 0x5c (92) > [741] : 0x53 (83) > [742] : 0x61 (97) > [743] : 0x80 (128) > [744] : 0xdb (219) > [745] : 0x2c (44) > [746] : 0x75 (117) > [747] : 0x64 (100) > [748] : 0xf8 (248) > [749] : 0x46 (70) > [750] : 0x83 (131) > [751] : 0x51 (81) > [752] : 0xec (236) > [753] : 0xf2 (242) > [754] : 0x9b (155) > [755] : 0x29 (41) > [756] : 0x4a (74) > [757] : 0x8f (143) > [758] : 0xac (172) > [759] : 0x36 (54) > [760] : 0x0f (15) > [761] : 0xc0 (192) > [762] : 0x44 (68) > [763] : 0x33 (51) > [764] : 0xb0 (176) > [765] : 0x9f (159) > [766] : 0x37 (55) > [767] : 0x39 (57) > [768] : 0x2b (43) > [769] : 0xc6 (198) > [770] : 0x82 (130) > [771] : 0xec (236) > [772] : 0xab (171) > [773] : 0x76 (118) > [774] : 0x1b (27) > [775] : 0xe1 (225) > [776] : 0x4a (74) > [777] : 0x9e (158) > [778] : 0xca (202) > [779] : 0x5e (94) > [780] : 0xb5 (181) > [781] : 0xb8 (184) > [782] : 0x93 (147) > [783] : 0x44 (68) > [784] : 0x7d (125) > [785] : 0xa5 (165) > [786] : 0x43 (67) > [787] : 0x41 (65) > [788] : 0x03 (3) > [789] : 0x16 (22) > [790] : 0xf6 (246) > [791] : 0x4e (78) > [792] : 0x27 (39) > [793] : 0x04 (4) > [794] : 0x61 (97) > [795] : 0xc5 (197) > [796] : 0x9d (157) > [797] : 0x48 (72) > [798] : 0xa7 (167) > [799] : 0x60 (96) > [800] : 0x5c (92) > [801] : 0xab (171) > [802] : 0x03 (3) > [803] : 0x1f (31) > [804] : 0x3e (62) > [805] : 0x5e (94) > [806] : 0xe4 (228) > [807] : 0x6a (106) > [808] : 0xcf (207) > [809] : 0xe6 (230) > [810] : 0xac (172) > [811] : 0xfb (251) > [812] : 0x74 (116) > [813] : 0x30 (48) > [814] : 0xab (171) > [815] : 0x63 (99) > [816] : 0xef (239) > [817] : 0xef (239) > [818] : 0x84 (132) > [819] : 0x87 (135) > [820] : 0xe9 (233) > [821] : 0x5c (92) > [822] : 0x90 (144) > [823] : 0x04 (4) > [824] : 0x54 (84) > [825] : 0x1d (29) > [826] : 0x03 (3) > [827] : 0xa6 (166) > [828] : 0xaa (170) > [829] : 0x04 (4) > [830] : 0x09 (9) > [831] : 0x0a (10) > [832] : 0x21 (33) > [833] : 0x94 (148) > [834] : 0x2a (42) > [835] : 0xd0 (208) > [836] : 0x95 (149) > [837] : 0x2d (45) > [838] : 0xde (222) > [839] : 0xfa (250) > [840] : 0x66 (102) > [841] : 0x2f (47) > [842] : 0xe8 (232) > [843] : 0xaf (175) > [844] : 0xa2 (162) > [845] : 0x15 (21) > [846] : 0x06 (6) > [847] : 0x27 (39) > [848] : 0x06 (6) > [849] : 0x0c (12) > [850] : 0x41 (65) > [851] : 0x45 (69) > [852] : 0x37 (55) > [853] : 0xc3 (195) > [854] : 0x03 (3) > [855] : 0xc3 (195) > [856] : 0xb2 (178) > [857] : 0x7f (127) > [858] : 0x56 (86) > [859] : 0x8e (142) > [860] : 0x68 (104) > [861] : 0x81 (129) > [862] : 0xd0 (208) > [863] : 0xa6 (166) > [864] : 0x9b (155) > [865] : 0xe5 (229) > [866] : 0x99 (153) > [867] : 0xcc (204) > [868] : 0x08 (8) > [869] : 0xde (222) > [870] : 0xd1 (209) > [871] : 0xea (234) > [872] : 0x4b (75) > [873] : 0x29 (41) > [874] : 0xa0 (160) > [875] : 0x24 (36) > [876] : 0x3a (58) > [877] : 0x87 (135) > [878] : 0xc8 (200) > [879] : 0xf0 (240) > [880] : 0x60 (96) > [881] : 0x7c (124) > [882] : 0x5d (93) > [883] : 0x5c (92) > [884] : 0xaf (175) > [885] : 0x59 (89) > [886] : 0x45 (69) > [887] : 0xe2 (226) > [888] : 0xb4 (180) > [889] : 0xd0 (208) > [890] : 0xf8 (248) > [891] : 0x38 (56) > [892] : 0x7b (123) > [893] : 0xf4 (244) > [894] : 0xc6 (198) > [895] : 0xc4 (196) > [896] : 0xfe (254) > [897] : 0xa9 (169) > [898] : 0x23 (35) > [899] : 0x06 (6) > [900] : 0x5f (95) > [901] : 0xa8 (168) > [902] : 0x4a (74) > [903] : 0xf3 (243) > [904] : 0xc5 (197) > [905] : 0x22 (34) > [906] : 0x85 (133) > [907] : 0x4a (74) > [908] : 0x28 (40) > [909] : 0x7a (122) > [910] : 0x2a (42) > [911] : 0xb2 (178) > [912] : 0x34 (52) > [913] : 0x6d (109) > [914] : 0xe7 (231) > [915] : 0x6c (108) > [916] : 0x8f (143) > [917] : 0xca (202) > [918] : 0x32 (50) > [919] : 0x02 (2) > [920] : 0xc8 (200) > [921] : 0x6a (106) > [922] : 0x80 (128) > [923] : 0xb9 (185) > [924] : 0x01 (1) > [925] : 0x94 (148) > [926] : 0x4d (77) > [927] : 0xe5 (229) > [928] : 0x0f (15) > [929] : 0xdb (219) > [930] : 0x7c (124) > [931] : 0x95 (149) > [932] : 0x84 (132) > [933] : 0xa7 (167) > [934] : 0x7d (125) > [935] : 0x33 (51) > [936] : 0x70 (112) > [937] : 0x01 (1) > [938] : 0xd0 (208) > [939] : 0x5b (91) > [940] : 0x20 (32) > [941] : 0xa9 (169) > [942] : 0x74 (116) > [943] : 0x3c (60) > [944] : 0x2d (45) > [945] : 0xce (206) > [946] : 0xeb (235) > [947] : 0x5c (92) > [948] : 0x79 (121) > [949] : 0x59 (89) > [950] : 0xc5 (197) > [951] : 0x1e (30) > [952] : 0xe2 (226) > [953] : 0x99 (153) > [954] : 0xe5 (229) > [955] : 0x41 (65) > [956] : 0x4a (74) > [957] : 0xbc (188) > [958] : 0x99 (153) > [959] : 0xf1 (241) > [960] : 0x1b (27) > [961] : 0x03 (3) > [962] : 0x64 (100) > [963] : 0x9e (158) > [964] : 0x38 (56) > [965] : 0x9a (154) > [966] : 0xd9 (217) > [967] : 0xef (239) > [968] : 0xd2 (210) > [969] : 0x2c (44) > [970] : 0x05 (5) > [971] : 0xcd (205) > [972] : 0xed (237) > [973] : 0x85 (133) > [974] : 0x75 (117) > [975] : 0xb0 (176) > [976] : 0x06 (6) > [977] : 0xc2 (194) > [978] : 0xba (186) > [979] : 0x1f (31) > [980] : 0x80 (128) > [981] : 0xea (234) > [982] : 0xd2 (210) > [983] : 0xc9 (201) > [984] : 0x0b (11) > [985] : 0x48 (72) > [986] : 0x50 (80) > [987] : 0x5e (94) > [988] : 0xcb (203) > [989] : 0x00 (0) > [990] : 0x90 (144) > [991] : 0x75 (117) > [992] : 0x72 (114) > [993] : 0xa1 (161) > [994] : 0xe5 (229) > [995] : 0x1b (27) > [996] : 0x56 (86) > [997] : 0x50 (80) > [998] : 0x09 (9) > [999] : 0x4e (78) > [1000] : 0x40 (64) > [1001] : 0x45 (69) > [1002] : 0x58 (88) > [1003] : 0x6f (111) > [1004] : 0x8f (143) > [1005] : 0xe7 (231) > [1006] : 0xf2 (242) > [1007] : 0x02 (2) > [1008] : 0x14 (20) > [1009] : 0x88 (136) > [1010] : 0x35 (53) > [1011] : 0xfb (251) > [1012] : 0xe5 (229) > [1013] : 0xaf (175) > [1014] : 0x75 (117) > [1015] : 0x19 (25) > [1016] : 0x3a (58) > [1017] : 0x63 (99) > [1018] : 0x60 (96) > [1019] : 0xda (218) > [1020] : 0xe3 (227) > [1021] : 0xf7 (247) > [1022] : 0xd5 (213) > [1023] : 0x2b (43) > [1024] : 0x04 (4) > [1025] : 0xa5 (165) > [1026] : 0x41 (65) > [1027] : 0x94 (148) > [1028] : 0x61 (97) > [1029] : 0x19 (25) > [1030] : 0x99 (153) > [1031] : 0xaa (170) > [1032] : 0xe9 (233) > [1033] : 0x9b (155) > [1034] : 0xbb (187) > [1035] : 0x60 (96) > [1036] : 0x69 (105) > [1037] : 0xea (234) > [1038] : 0xda (218) > [1039] : 0x9b (155) > [1040] : 0x8c (140) > [1041] : 0x9f (159) > [1042] : 0x48 (72) > [1043] : 0x48 (72) > [1044] : 0xaf (175) > [1045] : 0x5e (94) > [1046] : 0xb6 (182) > [1047] : 0xe8 (232) > [1048] : 0x83 (131) > [1049] : 0x5d (93) > [1050] : 0x24 (36) > [1051] : 0x71 (113) > [1052] : 0xe0 (224) > [1053] : 0xa8 (168) > [1054] : 0x9a (154) > [1055] : 0xb8 (184) > [1056] : 0x2e (46) > [1057] : 0x5c (92) > [1058] : 0xa6 (166) > [1059] : 0xe7 (231) > [1060] : 0xcf (207) > [1061] : 0xfa (250) > [1062] : 0x14 (20) > [1063] : 0xc1 (193) > [1064] : 0xd0 (208) > [1065] : 0xb7 (183) > [1066] : 0x2b (43) > [1067] : 0x6c (108) > [1068] : 0x3a (58) > [1069] : 0x75 (117) > [1070] : 0x0e (14) > [1071] : 0xa5 (165) > [1072] : 0xaf (175) > [1073] : 0x51 (81) > [1074] : 0x69 (105) > [1075] : 0x87 (135) > [1076] : 0xf8 (248) > [1077] : 0x3b (59) > [1078] : 0x3f (63) > [1079] : 0x9f (159) > [1080] : 0x1c (28) > [1081] : 0x0e (14) > [1082] : 0x3a (58) > [1083] : 0x6f (111) > [1084] : 0x54 (84) > [1085] : 0x8a (138) > [1086] : 0x55 (85) > [1087] : 0xff (255) > access_mask : 0x00010000 (65536) > 0: LSA_TRUSTED_QUERY_DOMAIN_NAME > 0: LSA_TRUSTED_QUERY_CONTROLLERS > 0: LSA_TRUSTED_SET_CONTROLLERS > 0: LSA_TRUSTED_QUERY_POSIX > 0: LSA_TRUSTED_SET_POSIX > 0: LSA_TRUSTED_SET_AUTH > 0: LSA_TRUSTED_QUERY_AUTH >rpc request data: >[0000] 00 00 00 00 BC 98 C5 2D F8 20 37 46 8D A4 D1 73 .......- . 7F...s >[0010] EB BA 04 75 18 00 1A 00 00 00 02 00 10 00 12 00 ...u.... ........ >[0020] 04 00 02 00 08 00 02 00 03 00 00 00 02 00 00 00 ........ ........ >[0030] 08 00 00 00 0D 00 00 00 00 00 00 00 0C 00 00 00 ........ ........ >[0040] 74 00 65 00 73 00 74 00 72 00 65 00 6C 00 6D 00 t.e.s.t. r.e.l.m. >[0050] 2E 00 63 00 6F 00 6D 00 09 00 00 00 00 00 00 00 ..c.o.m. ........ >[0060] 08 00 00 00 54 00 45 00 53 00 54 00 52 00 45 00 ....T.E. S.T.R.E. >[0070] 4C 00 4D 00 04 00 00 00 01 04 00 00 00 00 00 05 L.M..... ........ >[0080] 15 00 00 00 41 D7 33 D3 64 92 CF 56 BD 34 C5 6D ....A.3. d..V.4.m >[0090] 40 04 00 00 0C 00 02 00 40 04 00 00 9C DB A2 4D @....... @......M >[00A0] C5 B2 09 41 A3 89 4A B8 2E 09 AF 20 23 24 D9 09 ...A..J. ... #$.. >[00B0] 84 BF EF 5D 36 A3 14 AF 3C 10 4A C3 79 64 49 AC ...]6... <.J.ydI. >[00C0] BC A2 98 8A B1 7F FD 84 5E 07 45 A4 4F 07 AF C4 ........ ^.E.O... >[00D0] F3 49 63 8A BC 75 EA 16 2D 16 46 83 59 3D 17 8C .Ic..u.. -.F.Y=.. >[00E0] 4F FA 54 96 85 5D AF E1 C1 50 F7 B7 1E 50 A9 92 O.T..].. .P...P.. >[00F0] 7E C4 95 E3 F2 62 DA 22 CE 72 AE A4 B6 91 C7 96 ~....b." .r...... >[0100] 6B CC 5A 8E C9 4B B4 D4 C1 6E 77 97 90 30 58 50 k.Z..K.. .nw..0XP >[0110] FE D3 1F 03 13 63 E4 A6 48 F1 11 7D E7 71 36 88 .....c.. H..}.q6. >[0120] 67 89 7D 09 14 54 C0 D6 8B 77 18 C9 57 F9 87 43 g.}..T.. .w..W..C >[0130] 3E D4 CA 29 AE 30 25 F8 AC B2 5A BD 61 35 AE 3E >..).0%. ..Z.a5.> >[0140] BF D5 13 28 BE 63 F5 4A EE 65 FE 41 36 D6 F9 F4 ...(.c.J .e.A6... >[0150] 2A 9F 03 E7 8C BF 86 50 E5 93 46 88 F6 23 ED 3C *......P ..F..#.< >[0160] 32 CA 23 0A 56 BF D3 4A F5 D9 16 0E 1E E6 78 75 2.#.V..J ......xu >[0170] E5 38 47 A9 1D 10 06 12 BE 80 B3 38 DD D2 3B D6 .8G..... ...8..;. >[0180] 7B AE 90 4E D1 B8 FB C7 55 A5 70 39 74 4F 77 98 {..N.... U.p9tOw. >[0190] A6 A8 A4 8A D6 4B 80 BD DC 03 CB 84 84 7B 8D 0B .....K.. .....{.. >[01A0] 56 8F 4B A9 91 F1 4B 72 0A 3E 96 C7 8C 5F 1B 36 V.K...Kr .>..._.6 >[01B0] 91 22 46 77 BE C7 ED 5F 7B 12 7F E5 11 02 B6 2F ."Fw..._ {....../ >[01C0] 67 1F 8C 45 EB F0 04 7C 57 26 50 D3 CF 0C F6 1B g..E...| W&P..... >[01D0] 49 4F 0C 4A 9F 6B 25 51 63 ED 69 86 A9 1B 7D E4 IO.J.k%Q c.i...}. >[01E0] 68 87 6E 7E 06 AA 85 66 11 0C BB C1 AB 31 C8 76 h.n~...f .....1.v >[01F0] BA F9 D1 AE 6F 3E 13 8C BF 74 16 F6 33 13 DF 88 ....o>.. .t..3... >[0200] A1 4C 42 6F 93 EB BF 0F 35 2D 77 04 7C D5 55 36 .LBo.... 5-w.|.U6 >[0210] 07 C9 4A 97 81 00 E6 9E 91 EA 7C F6 84 0E A9 F9 ..J..... ..|..... >[0220] 6D 30 77 16 F8 7A 6E BA 9C 72 06 DA 3A 85 C0 27 m0w..zn. .r..:..' >[0230] A0 4A B4 C3 7E E8 5D E7 C9 49 F3 10 12 05 30 DA .J..~.]. .I....0. >[0240] 08 01 96 47 6A 86 54 DA 8B E2 AB A0 E7 BC 2B 2B ...Gj.T. ......++ >[0250] B0 45 3E 58 55 69 48 96 3D 47 D0 7D 94 11 80 9E .E>XUiH. =G.}.... >[0260] C2 69 51 39 D1 61 25 7D 4C 06 8E 28 A8 FB A0 B8 .iQ9.a%} L..(.... >[0270] 2E FD 22 8D 93 11 A7 1D 3C 3A 98 E9 EE 12 92 92 .."..... <:...... >[0280] B1 5E E1 99 88 EF 0F 91 45 3E AA 53 45 D7 AF 65 .^...... E>.SE..e >[0290] 4A C8 91 DB 35 75 C8 2F 3D 59 81 24 5A 14 9C C0 J...5u./ =Y.$Z... >[02A0] 3C 76 F7 3C E8 75 81 2F FA 40 14 F0 79 77 38 35 <v.<.u./ .@..yw85 >[02B0] 7A 3D BF BF 5B 02 5F 79 54 17 FC 94 07 23 13 3C z=..[._y T....#.< >[02C0] 60 FE C7 04 0B 75 76 B8 1E 8E 28 B5 BE A3 84 61 `....uv. ..(....a >[02D0] 8F ED 5F AA 97 CD 86 DF EF FA E7 4E D4 7E 44 C6 .._..... ...N.~D. >[02E0] CD F3 D7 95 2D AD DE 5F 60 D3 6F 37 2D 8D D0 A3 ....-.._ `.o7-... >[02F0] B1 CD AF 8E 26 A5 61 58 86 2F 7A 67 54 D5 E6 D6 ....&.aX ./zgT... >[0300] 33 12 EC 8F 41 B9 08 AF 9F B5 A5 D1 08 B5 52 95 3...A... ......R. >[0310] 02 4D CE 63 60 DE E7 67 AD 55 59 1C 87 2E 3A 5F .M.c`..g .UY...:_ >[0320] 34 6C 69 E8 30 6B 56 3E 47 3C B2 D7 A8 3C 3F 36 4li.0kV> G<...<?6 >[0330] 61 3F E1 8F 7B 52 F1 40 FC 7F D9 39 2D 16 F3 8C a?..{R.@ ...9-... >[0340] 6C E7 29 02 72 81 C3 BC E9 D1 85 5A B5 A7 A5 80 l.).r... ...Z.... >[0350] 49 8A EB 55 22 83 65 5A 99 E1 46 9E FD 2A B2 71 I..U".eZ ..F..*.q >[0360] DD 84 6F 07 A6 F3 E2 CF 2F 55 37 E3 07 AD 9F 04 ..o..... /U7..... >[0370] E9 D6 B8 07 B2 DE 52 1E AF DD D0 6E A7 97 98 70 ......R. ...n...p >[0380] 5C 53 61 80 DB 2C 75 64 F8 46 83 51 EC F2 9B 29 \Sa..,ud .F.Q...) >[0390] 4A 8F AC 36 0F C0 44 33 B0 9F 37 39 2B C6 82 EC J..6..D3 ..79+... >[03A0] AB 76 1B E1 4A 9E CA 5E B5 B8 93 44 7D A5 43 41 .v..J..^ ...D}.CA >[03B0] 03 16 F6 4E 27 04 61 C5 9D 48 A7 60 5C AB 03 1F ...N'.a. .H.`\... >[03C0] 3E 5E E4 6A CF E6 AC FB 74 30 AB 63 EF EF 84 87 >^.j.... t0.c.... >[03D0] E9 5C 90 04 54 1D 03 A6 AA 04 09 0A 21 94 2A D0 .\..T... ....!.*. >[03E0] 95 2D DE FA 66 2F E8 AF A2 15 06 27 06 0C 41 45 .-..f/.. ...'..AE >[03F0] 37 C3 03 C3 B2 7F 56 8E 68 81 D0 A6 9B E5 99 CC 7.....V. h....... >[0400] 08 DE D1 EA 4B 29 A0 24 3A 87 C8 F0 60 7C 5D 5C ....K).$ :...`|]\ >[0410] AF 59 45 E2 B4 D0 F8 38 7B F4 C6 C4 FE A9 23 06 .YE....8 {.....#. >[0420] 5F A8 4A F3 C5 22 85 4A 28 7A 2A B2 34 6D E7 6C _.J..".J (z*.4m.l >[0430] 8F CA 32 02 C8 6A 80 B9 01 94 4D E5 0F DB 7C 95 ..2..j.. ..M...|. >[0440] 84 A7 7D 33 70 01 D0 5B 20 A9 74 3C 2D CE EB 5C ..}3p..[ .t<-..\ >[0450] 79 59 C5 1E E2 99 E5 41 4A BC 99 F1 1B 03 64 9E yY.....A J.....d. >[0460] 38 9A D9 EF D2 2C 05 CD ED 85 75 B0 06 C2 BA 1F 8....,.. ..u..... >[0470] 80 EA D2 C9 0B 48 50 5E CB 00 90 75 72 A1 E5 1B .....HP^ ...ur... >[0480] 56 50 09 4E 40 45 58 6F 8F E7 F2 02 14 88 35 FB VP.N@EXo ......5. >[0490] E5 AF 75 19 3A 63 60 DA E3 F7 D5 2B 04 A5 41 94 ..u.:c`. ...+..A. >[04A0] 61 19 99 AA E9 9B BB 60 69 EA DA 9B 8C 9F 48 48 a......` i.....HH >[04B0] AF 5E B6 E8 83 5D 24 71 E0 A8 9A B8 2E 5C A6 E7 .^...]$q .....\.. >[04C0] CF FA 14 C1 D0 B7 2B 6C 3A 75 0E A5 AF 51 69 87 ......+l :u...Qi. >[04D0] F8 3B 3F 9F 1C 0E 3A 6F 54 8A 55 FF 00 00 01 00 .;?...:o T.U..... >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d602fc280 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=1272, this_data=1272, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600f6180 >smb_signing_md5: sequence number 16 >smb_signing_sign_pdu: sent SMB signature of >[0000] 30 C8 77 D3 FD 0B AF EA 0.w..... >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >smb_signing_md5: sequence number 17 >smb_signing_check_pdu: seq 17: got good SMB signature of >[0000] 84 1C 63 83 5E 01 FA 47 ..c.^..G >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d60254380 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d60254380 >s4_tevent: Destroying timer event 0x7f3d600f6180 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d602fc280 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d602f7900 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d602f7900 > lsa_CreateTrustedDomainEx2: struct lsa_CreateTrustedDomainEx2 > out: struct lsa_CreateTrustedDomainEx2 > trustdom_handle : * > trustdom_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : e03b48bf-f032-44d3-bb0a-94bfde3ee5da > result : NT_STATUS_OK >rpc reply data: >[0000] 00 00 00 00 BF 48 3B E0 32 F0 D3 44 BB 0A 94 BF .....H;. 2..D.... >[0010] DE 3E E5 DA 00 00 00 00 .>...... > lsa_lsaRSetForestTrustInformation: struct lsa_lsaRSetForestTrustInformation > in: struct lsa_lsaRSetForestTrustInformation > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 2dc598bc-20f8-4637-8da4-d173ebba0475 > trusted_domain_name : * > trusted_domain_name: struct lsa_StringLarge > length : 0x0018 (24) > size : 0x001a (26) > string : * > string : 'testrelm.com' > highest_record_type : 0x0002 (2) > forest_trust_info : * > forest_trust_info: struct lsa_ForestTrustInformation > count : 0x00000001 (1) > entries : * > entries: ARRAY(1) > entries : * > entries: struct lsa_ForestTrustRecord > flags : 0x00000000 (0) > type : LSA_FOREST_TRUST_TOP_LEVEL_NAME (0) > time : 0x01cee6f8b0094b00 (130295395020000000) > forest_trust_data : union lsa_ForestTrustData(case 0) > top_level_name: struct lsa_StringLarge > length : 0x0018 (24) > size : 0x001a (26) > string : * > string : 'testrelm.com' > check_only : 0x00 (0) >rpc request data: >[0000] 00 00 00 00 BC 98 C5 2D F8 20 37 46 8D A4 D1 73 .......- . 7F...s >[0010] EB BA 04 75 18 00 1A 00 00 00 02 00 0D 00 00 00 ...u.... ........ >[0020] 00 00 00 00 0C 00 00 00 74 00 65 00 73 00 74 00 ........ t.e.s.t. >[0030] 72 00 65 00 6C 00 6D 00 2E 00 63 00 6F 00 6D 00 r.e.l.m. ..c.o.m. >[0040] 02 00 00 00 01 00 00 00 04 00 02 00 01 00 00 00 ........ ........ >[0050] 08 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ >[0060] 00 4B 09 B0 F8 E6 CE 01 00 00 00 00 18 00 1A 00 .K...... ........ >[0070] 0C 00 02 00 0D 00 00 00 00 00 00 00 0C 00 00 00 ........ ........ >[0080] 74 00 65 00 73 00 74 00 72 00 65 00 6C 00 6D 00 t.e.s.t. r.e.l.m. >[0090] 2E 00 63 00 6F 00 6D 00 00 ..c.o.m. . >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d6025c420 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=177, this_data=177, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600f55b0 >smb_signing_md5: sequence number 18 >smb_signing_sign_pdu: sent SMB signature of >[0000] 07 EF 2C 48 EC EC 43 EC ..,H..C. >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >smb_signing_md5: sequence number 19 >smb_signing_check_pdu: seq 19: got good SMB signature of >[0000] 3A 38 FF FA D6 DB 1E 8E :8...... >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d601763a0 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d601763a0 >s4_tevent: Destroying timer event 0x7f3d600f55b0 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d6025c420 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d6024c2e0 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d6024c2e0 > lsa_lsaRSetForestTrustInformation: struct lsa_lsaRSetForestTrustInformation > out: struct lsa_lsaRSetForestTrustInformation > collision_info : * > collision_info : NULL > result : NT_STATUS_OK >rpc reply data: >[0000] 00 00 00 00 00 00 00 00 ........ > lsa_OpenTrustedDomainByName: struct lsa_OpenTrustedDomainByName > in: struct lsa_OpenTrustedDomainByName > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 2dc598bc-20f8-4637-8da4-d173ebba0475 > name: struct lsa_String > length : 0x0018 (24) > size : 0x0018 (24) > string : * > string : 'testrelm.com' > access_mask : 0x02000000 (33554432) > 0: LSA_TRUSTED_QUERY_DOMAIN_NAME > 0: LSA_TRUSTED_QUERY_CONTROLLERS > 0: LSA_TRUSTED_SET_CONTROLLERS > 0: LSA_TRUSTED_QUERY_POSIX > 0: LSA_TRUSTED_SET_POSIX > 0: LSA_TRUSTED_SET_AUTH > 0: LSA_TRUSTED_QUERY_AUTH >rpc request data: >[0000] 00 00 00 00 BC 98 C5 2D F8 20 37 46 8D A4 D1 73 .......- . 7F...s >[0010] EB BA 04 75 18 00 18 00 00 00 02 00 0C 00 00 00 ...u.... ........ >[0020] 00 00 00 00 0C 00 00 00 74 00 65 00 73 00 74 00 ........ t.e.s.t. >[0030] 72 00 65 00 6C 00 6D 00 2E 00 63 00 6F 00 6D 00 r.e.l.m. ..c.o.m. >[0040] 00 00 00 02 .... >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d60175140 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=92, this_data=92, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600f5510 >smb_signing_md5: sequence number 20 >smb_signing_sign_pdu: sent SMB signature of >[0000] 0A E0 95 14 50 E7 47 D1 ....P.G. >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >smb_signing_md5: sequence number 21 >smb_signing_check_pdu: seq 21: got good SMB signature of >[0000] 83 4C 70 77 27 93 64 6D .Lpw'.dm >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d602393b0 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d602393b0 >s4_tevent: Destroying timer event 0x7f3d600f5510 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d60175140 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d600106b0 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d600106b0 > lsa_OpenTrustedDomainByName: struct lsa_OpenTrustedDomainByName > out: struct lsa_OpenTrustedDomainByName > trustdom_handle : * > trustdom_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 3087e43d-e018-4d21-9f29-bb18f51373b8 > result : NT_STATUS_OK >rpc reply data: >[0000] 00 00 00 00 3D E4 87 30 18 E0 21 4D 9F 29 BB 18 ....=..0 ..!M.).. >[0010] F5 13 73 B8 00 00 00 00 ..s..... > lsa_SetInformationTrustedDomain: struct lsa_SetInformationTrustedDomain > in: struct lsa_SetInformationTrustedDomain > trustdom_handle : * > trustdom_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 3087e43d-e018-4d21-9f29-bb18f51373b8 > level : LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES (13) > info : * > info : union lsa_TrustedDomainInfo(case 13) > enc_types: struct lsa_TrustDomainInfoSupportedEncTypes > enc_types : 0x0000001c (28) > 0: KERB_ENCTYPE_DES_CBC_CRC > 0: KERB_ENCTYPE_DES_CBC_MD5 > 1: KERB_ENCTYPE_RC4_HMAC_MD5 > 1: KERB_ENCTYPE_AES128_CTS_HMAC_SHA1_96 > 1: KERB_ENCTYPE_AES256_CTS_HMAC_SHA1_96 >rpc request data: >[0000] 00 00 00 00 3D E4 87 30 18 E0 21 4D 9F 29 BB 18 ....=..0 ..!M.).. >[0010] F5 13 73 B8 0D 00 0D 00 1C 00 00 00 ..s..... .... >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d60332c70 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=52, this_data=52, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600f5510 >smb_signing_md5: sequence number 22 >smb_signing_sign_pdu: sent SMB signature of >[0000] B0 C8 12 39 F9 26 61 72 ...9.&ar >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d603a63e0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600dba10 >smb_signing_md5: sequence number 23 >smb_signing_check_pdu: seq 23: got good SMB signature of >[0000] A2 BB 0B 13 CB 4D 4D CC .....MM. >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d6013fab0 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d6013fab0 >s4_tevent: Destroying timer event 0x7f3d600f5510 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d60332c70 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d6013ba60 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d6013ba60 > lsa_SetInformationTrustedDomain: struct lsa_SetInformationTrustedDomain > out: struct lsa_SetInformationTrustedDomain > result : NT_STATUS_OK >rpc reply data: >[0000] 00 00 00 00 .... > lsa_QueryTrustedDomainInfoByName: struct lsa_QueryTrustedDomainInfoByName > in: struct lsa_QueryTrustedDomainInfoByName > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000d-0000-0000-8e52-7b2e2e040200 > trusted_domain : * > trusted_domain: struct lsa_String > length : 0x0012 (18) > size : 0x0012 (18) > string : * > string : 'adtest.qe' > level : LSA_TRUSTED_DOMAIN_INFO_FULL_INFO (8) >rpc request data: >[0000] 00 00 00 00 0D 00 00 00 00 00 00 00 8E 52 7B 2E ........ .....R{. >[0010] 2E 04 02 00 12 00 12 00 00 00 02 00 09 00 00 00 ........ ........ >[0020] 00 00 00 00 09 00 00 00 61 00 64 00 74 00 65 00 ........ a.d.t.e. >[0030] 73 00 74 00 2E 00 71 00 65 00 08 00 s.t...q. e... >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d60138340 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d60317250 >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=84, this_data=84, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600fd480 >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d60135550 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d60135550 >s4_tevent: Destroying timer event 0x7f3d600fd480 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d60138340 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d600106b0 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d600106b0 > lsa_QueryTrustedDomainInfoByName: struct lsa_QueryTrustedDomainInfoByName > out: struct lsa_QueryTrustedDomainInfoByName > info : * > info : * > info : union lsa_TrustedDomainInfo(case 8) > full_info: struct lsa_TrustDomainInfoFullInfo > info_ex: struct lsa_TrustDomainInfoInfoEx > domain_name: struct lsa_StringLarge > length : 0x0012 (18) > size : 0x0014 (20) > string : * > string : 'adtest.qe' > netbios_name: struct lsa_StringLarge > length : 0x000c (12) > size : 0x000e (14) > string : * > string : 'ADTEST' > sid : * > sid : S-1-5-21-1910160501-511572375-3625658879 > trust_direction : 0x00000003 (3) > 1: LSA_TRUST_DIRECTION_INBOUND > 1: LSA_TRUST_DIRECTION_OUTBOUND > trust_type : LSA_TRUST_TYPE_UPLEVEL (2) > trust_attributes : 0x00000008 (8) > 0: LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE > 0: LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY > 0: LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN > 1: LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE > 0: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION > 0: LSA_TRUST_ATTRIBUTE_WITHIN_FOREST > 0: LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL > 0: LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION > posix_offset: struct lsa_TrustDomainInfoPosixOffset > posix_offset : 0x00000000 (0) > auth_info: struct lsa_TrustDomainInfoAuthInfo > incoming_count : 0x00000001 (1) > incoming_current_auth_info: * > incoming_current_auth_info: struct lsa_TrustDomainInfoBuffer > last_update_time : Thu Nov 21 11:00:11 2013 EST > AuthType : TRUST_AUTH_TYPE_CLEAR (2) > data: struct lsa_DATA_BUF2 > size : 0x00000080 (128) > data : * > data : 3f5a2d6638722d4759485623443f3b3066724d2b70285750594f3a23414e75293124724226423228694c23492c5f786d722e665d2e2b614131576a4a4756563934396e2d56673d264534773a613f4835786a556167434a734d6e37212b73484b7453502444564d6354506e2d2562506e4e66775671235b6642546f5334786257 > incoming_previous_auth_info: NULL > outgoing_count : 0x00000001 (1) > outgoing_current_auth_info: * > outgoing_current_auth_info: struct lsa_TrustDomainInfoBuffer > last_update_time : Thu Nov 21 11:00:11 2013 EST > AuthType : TRUST_AUTH_TYPE_CLEAR (2) > data: struct lsa_DATA_BUF2 > size : 0x00000080 (128) > data : * > data : 3f5a2d6638722d4759485623443f3b3066724d2b70285750594f3a23414e75293124724226423228694c23492c5f786d722e665d2e2b614131576a4a4756563934396e2d56673d264534773a613f4835786a556167434a734d6e37212b73484b7453502444564d6354506e2d2562506e4e66775671235b6642546f5334786257 > outgoing_previous_auth_info: NULL > result : NT_STATUS_OK >rpc reply data: >[0000] 04 00 02 00 08 00 00 00 12 00 14 00 08 00 02 00 ........ ........ >[0010] 0C 00 0E 00 0C 00 02 00 10 00 02 00 03 00 00 00 ........ ........ >[0020] 02 00 00 00 08 00 00 00 00 00 00 00 01 00 00 00 ........ ........ >[0030] 14 00 02 00 00 00 00 00 01 00 00 00 18 00 02 00 ........ ........ >[0040] 00 00 00 00 0A 00 00 00 00 00 00 00 09 00 00 00 ........ ........ >[0050] 61 00 64 00 74 00 65 00 73 00 74 00 2E 00 71 00 a.d.t.e. s.t...q. >[0060] 65 00 00 00 07 00 00 00 00 00 00 00 06 00 00 00 e....... ........ >[0070] 41 00 44 00 54 00 45 00 53 00 54 00 04 00 00 00 A.D.T.E. S.T..... >[0080] 01 04 00 00 00 00 00 05 15 00 00 00 75 BC DA 71 ........ ....u..q >[0090] 97 F9 7D 1E FF 29 1B D8 80 F7 D7 C1 D2 E6 CE 01 ..}..).. ........ >[00A0] 02 00 00 00 80 00 00 00 1C 00 02 00 80 00 00 00 ........ ........ >[00B0] 3F 5A 2D 66 38 72 2D 47 59 48 56 23 44 3F 3B 30 ?Z-f8r-G YHV#D?;0 >[00C0] 66 72 4D 2B 70 28 57 50 59 4F 3A 23 41 4E 75 29 frM+p(WP YO:#ANu) >[00D0] 31 24 72 42 26 42 32 28 69 4C 23 49 2C 5F 78 6D 1$rB&B2( iL#I,_xm >[00E0] 72 2E 66 5D 2E 2B 61 41 31 57 6A 4A 47 56 56 39 r.f].+aA 1WjJGVV9 >[00F0] 34 39 6E 2D 56 67 3D 26 45 34 77 3A 61 3F 48 35 49n-Vg=& E4w:a?H5 >[0100] 78 6A 55 61 67 43 4A 73 4D 6E 37 21 2B 73 48 4B xjUagCJs Mn7!+sHK >[0110] 74 53 50 24 44 56 4D 63 54 50 6E 2D 25 62 50 6E tSP$DVMc TPn-%bPn >[0120] 4E 66 77 56 71 23 5B 66 42 54 6F 53 34 78 62 57 NfwVq#[f BToS4xbW >[0130] 80 F7 D7 C1 D2 E6 CE 01 02 00 00 00 80 00 00 00 ........ ........ >[0140] 20 00 02 00 80 00 00 00 3F 5A 2D 66 38 72 2D 47 ....... ?Z-f8r-G >[0150] 59 48 56 23 44 3F 3B 30 66 72 4D 2B 70 28 57 50 YHV#D?;0 frM+p(WP >[0160] 59 4F 3A 23 41 4E 75 29 31 24 72 42 26 42 32 28 YO:#ANu) 1$rB&B2( >[0170] 69 4C 23 49 2C 5F 78 6D 72 2E 66 5D 2E 2B 61 41 iL#I,_xm r.f].+aA >[0180] 31 57 6A 4A 47 56 56 39 34 39 6E 2D 56 67 3D 26 1WjJGVV9 49n-Vg=& >[0190] 45 34 77 3A 61 3F 48 35 78 6A 55 61 67 43 4A 73 E4w:a?H5 xjUagCJs >[01A0] 4D 6E 37 21 2B 73 48 4B 74 53 50 24 44 56 4D 63 Mn7!+sHK tSP$DVMc >[01B0] 54 50 6E 2D 25 62 50 6E 4E 66 77 56 71 23 5B 66 TPn-%bPn NfwVq#[f >[01C0] 42 54 6F 53 34 78 62 57 00 00 00 00 BToS4xbW .... > lsa_DeleteTrustedDomain: struct lsa_DeleteTrustedDomain > in: struct lsa_DeleteTrustedDomain > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000d-0000-0000-8e52-7b2e2e040200 > dom_sid : * > dom_sid : S-1-5-21-1910160501-511572375-3625658879 >rpc request data: >[0000] 00 00 00 00 0D 00 00 00 00 00 00 00 8E 52 7B 2E ........ .....R{. >[0010] 2E 04 02 00 04 00 00 00 01 04 00 00 00 00 00 05 ........ ........ >[0020] 15 00 00 00 75 BC DA 71 97 F9 7D 1E FF 29 1B D8 ....u..q ..}..).. >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d60236ef0 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d60317250 >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600fd480 >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d6015f910 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d6015f910 >s4_tevent: Destroying timer event 0x7f3d600fd480 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d60236ef0 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d603b4360 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d603b4360 > lsa_DeleteTrustedDomain: struct lsa_DeleteTrustedDomain > out: struct lsa_DeleteTrustedDomain > result : NT_STATUS_UNSUCCESSFUL >rpc reply data: >[0000] 01 00 00 C0 .... > lsa_CreateTrustedDomainEx2: struct lsa_CreateTrustedDomainEx2 > in: struct lsa_CreateTrustedDomainEx2 > policy_handle : * > policy_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000d-0000-0000-8e52-7b2e2e040200 > info : * > info: struct lsa_TrustDomainInfoInfoEx > domain_name: struct lsa_StringLarge > length : 0x0012 (18) > size : 0x0014 (20) > string : * > string : 'adtest.qe' > netbios_name: struct lsa_StringLarge > length : 0x000c (12) > size : 0x000e (14) > string : * > string : 'ADTEST' > sid : * > sid : S-1-5-21-1910160501-511572375-3625658879 > trust_direction : 0x00000003 (3) > 1: LSA_TRUST_DIRECTION_INBOUND > 1: LSA_TRUST_DIRECTION_OUTBOUND > trust_type : LSA_TRUST_TYPE_UPLEVEL (2) > trust_attributes : 0x00000008 (8) > 0: LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE > 0: LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY > 0: LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN > 1: LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE > 0: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION > 0: LSA_TRUST_ATTRIBUTE_WITHIN_FOREST > 0: LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL > 0: LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION > auth_info_internal : * > auth_info_internal: struct lsa_TrustDomainInfoAuthInfoInternal > auth_blob: struct lsa_DATA_BUF2 > size : 0x00000440 (1088) > data : * > data: ARRAY(1088) > [0] : 0xe0 (224) > [1] : 0x4d (77) > [2] : 0x0b (11) > [3] : 0x42 (66) > [4] : 0xc3 (195) > [5] : 0x47 (71) > [6] : 0x79 (121) > [7] : 0x2f (47) > [8] : 0xa8 (168) > [9] : 0xc6 (198) > [10] : 0x93 (147) > [11] : 0x71 (113) > [12] : 0xbb (187) > [13] : 0x06 (6) > [14] : 0x78 (120) > [15] : 0xa1 (161) > [16] : 0x29 (41) > [17] : 0x9c (156) > [18] : 0xfb (251) > [19] : 0x2a (42) > [20] : 0x9d (157) > [21] : 0xa4 (164) > [22] : 0xd0 (208) > [23] : 0x8b (139) > [24] : 0x10 (16) > [25] : 0x6f (111) > [26] : 0x69 (105) > [27] : 0x96 (150) > [28] : 0xad (173) > [29] : 0xdf (223) > [30] : 0x55 (85) > [31] : 0x3b (59) > [32] : 0x6a (106) > [33] : 0xb6 (182) > [34] : 0xb1 (177) > [35] : 0x29 (41) > [36] : 0xab (171) > [37] : 0x53 (83) > [38] : 0x7c (124) > [39] : 0xd4 (212) > [40] : 0xbb (187) > [41] : 0x41 (65) > [42] : 0x9a (154) > [43] : 0xce (206) > [44] : 0x8e (142) > [45] : 0xb9 (185) > [46] : 0xfd (253) > [47] : 0x9b (155) > [48] : 0x45 (69) > [49] : 0xbb (187) > [50] : 0x05 (5) > [51] : 0x1a (26) > [52] : 0xfc (252) > [53] : 0x58 (88) > [54] : 0x4b (75) > [55] : 0x5d (93) > [56] : 0x38 (56) > [57] : 0x90 (144) > [58] : 0xb5 (181) > [59] : 0x84 (132) > [60] : 0x9f (159) > [61] : 0x4d (77) > [62] : 0x9d (157) > [63] : 0xb7 (183) > [64] : 0xd7 (215) > [65] : 0x56 (86) > [66] : 0xca (202) > [67] : 0x2b (43) > [68] : 0x21 (33) > [69] : 0xea (234) > [70] : 0x56 (86) > [71] : 0x65 (101) > [72] : 0xe6 (230) > [73] : 0xd9 (217) > [74] : 0x21 (33) > [75] : 0x01 (1) > [76] : 0xf1 (241) > [77] : 0x6f (111) > [78] : 0xb6 (182) > [79] : 0xb8 (184) > [80] : 0x0c (12) > [81] : 0xb9 (185) > [82] : 0x84 (132) > [83] : 0xf0 (240) > [84] : 0x6b (107) > [85] : 0x7d (125) > [86] : 0x3e (62) > [87] : 0xfd (253) > [88] : 0x2e (46) > [89] : 0xae (174) > [90] : 0xeb (235) > [91] : 0xd1 (209) > [92] : 0x60 (96) > [93] : 0xa5 (165) > [94] : 0xd2 (210) > [95] : 0x6b (107) > [96] : 0x80 (128) > [97] : 0x4a (74) > [98] : 0x2f (47) > [99] : 0x7a (122) > [100] : 0xf9 (249) > [101] : 0x83 (131) > [102] : 0x79 (121) > [103] : 0xab (171) > [104] : 0x15 (21) > [105] : 0x6b (107) > [106] : 0xd0 (208) > [107] : 0x5a (90) > [108] : 0x13 (19) > [109] : 0xba (186) > [110] : 0x2c (44) > [111] : 0xad (173) > [112] : 0x7e (126) > [113] : 0x7c (124) > [114] : 0xe7 (231) > [115] : 0x24 (36) > [116] : 0x2a (42) > [117] : 0xe6 (230) > [118] : 0x3c (60) > [119] : 0xc2 (194) > [120] : 0xef (239) > [121] : 0x8a (138) > [122] : 0x79 (121) > [123] : 0x79 (121) > [124] : 0xfa (250) > [125] : 0xac (172) > [126] : 0xca (202) > [127] : 0x8e (142) > [128] : 0x02 (2) > [129] : 0x8f (143) > [130] : 0xe7 (231) > [131] : 0xe4 (228) > [132] : 0x2c (44) > [133] : 0x3d (61) > [134] : 0x65 (101) > [135] : 0xf7 (247) > [136] : 0x21 (33) > [137] : 0x65 (101) > [138] : 0xe3 (227) > [139] : 0x76 (118) > [140] : 0x6a (106) > [141] : 0xa9 (169) > [142] : 0x0e (14) > [143] : 0x61 (97) > [144] : 0xfb (251) > [145] : 0xa4 (164) > [146] : 0x43 (67) > [147] : 0x0a (10) > [148] : 0xa5 (165) > [149] : 0xdf (223) > [150] : 0x00 (0) > [151] : 0xd6 (214) > [152] : 0xb0 (176) > [153] : 0xe9 (233) > [154] : 0xc7 (199) > [155] : 0x56 (86) > [156] : 0xe6 (230) > [157] : 0x18 (24) > [158] : 0x0a (10) > [159] : 0xd8 (216) > [160] : 0xee (238) > [161] : 0x39 (57) > [162] : 0x6c (108) > [163] : 0xd2 (210) > [164] : 0x92 (146) > [165] : 0xf7 (247) > [166] : 0x8c (140) > [167] : 0x9d (157) > [168] : 0xd8 (216) > [169] : 0xde (222) > [170] : 0x50 (80) > [171] : 0x9a (154) > [172] : 0x19 (25) > [173] : 0x1e (30) > [174] : 0x43 (67) > [175] : 0x60 (96) > [176] : 0xd1 (209) > [177] : 0x58 (88) > [178] : 0xfd (253) > [179] : 0x4d (77) > [180] : 0x11 (17) > [181] : 0xa1 (161) > [182] : 0xb5 (181) > [183] : 0xb5 (181) > [184] : 0xeb (235) > [185] : 0x20 (32) > [186] : 0x34 (52) > [187] : 0x29 (41) > [188] : 0x3e (62) > [189] : 0x69 (105) > [190] : 0x21 (33) > [191] : 0x3f (63) > [192] : 0x29 (41) > [193] : 0xc9 (201) > [194] : 0xc6 (198) > [195] : 0x06 (6) > [196] : 0xf7 (247) > [197] : 0x42 (66) > [198] : 0x25 (37) > [199] : 0xaa (170) > [200] : 0x64 (100) > [201] : 0x51 (81) > [202] : 0xe5 (229) > [203] : 0x62 (98) > [204] : 0x8b (139) > [205] : 0x68 (104) > [206] : 0x29 (41) > [207] : 0x86 (134) > [208] : 0xda (218) > [209] : 0x04 (4) > [210] : 0xf6 (246) > [211] : 0x4e (78) > [212] : 0x34 (52) > [213] : 0xb0 (176) > [214] : 0x3e (62) > [215] : 0x15 (21) > [216] : 0x6d (109) > [217] : 0xb1 (177) > [218] : 0x8e (142) > [219] : 0x91 (145) > [220] : 0xf4 (244) > [221] : 0x8b (139) > [222] : 0xf7 (247) > [223] : 0x25 (37) > [224] : 0x4b (75) > [225] : 0x7c (124) > [226] : 0xba (186) > [227] : 0xef (239) > [228] : 0xa6 (166) > [229] : 0x23 (35) > [230] : 0xb1 (177) > [231] : 0x14 (20) > [232] : 0xfa (250) > [233] : 0x26 (38) > [234] : 0x14 (20) > [235] : 0x01 (1) > [236] : 0x48 (72) > [237] : 0xa3 (163) > [238] : 0xb1 (177) > [239] : 0xa0 (160) > [240] : 0xda (218) > [241] : 0x69 (105) > [242] : 0xcb (203) > [243] : 0x26 (38) > [244] : 0x7f (127) > [245] : 0x9e (158) > [246] : 0xb0 (176) > [247] : 0xcb (203) > [248] : 0x58 (88) > [249] : 0xe4 (228) > [250] : 0x58 (88) > [251] : 0x61 (97) > [252] : 0xa5 (165) > [253] : 0xf9 (249) > [254] : 0x75 (117) > [255] : 0xa8 (168) > [256] : 0x36 (54) > [257] : 0xce (206) > [258] : 0x39 (57) > [259] : 0x06 (6) > [260] : 0xcc (204) > [261] : 0xeb (235) > [262] : 0xb7 (183) > [263] : 0x26 (38) > [264] : 0xfa (250) > [265] : 0xd7 (215) > [266] : 0xb6 (182) > [267] : 0xb6 (182) > [268] : 0xf0 (240) > [269] : 0xf2 (242) > [270] : 0x67 (103) > [271] : 0x0e (14) > [272] : 0x8d (141) > [273] : 0x35 (53) > [274] : 0x47 (71) > [275] : 0x27 (39) > [276] : 0xd5 (213) > [277] : 0x5d (93) > [278] : 0x72 (114) > [279] : 0x35 (53) > [280] : 0xfb (251) > [281] : 0x9c (156) > [282] : 0xfb (251) > [283] : 0x84 (132) > [284] : 0xf7 (247) > [285] : 0xfe (254) > [286] : 0x8f (143) > [287] : 0x86 (134) > [288] : 0x31 (49) > [289] : 0xd3 (211) > [290] : 0xea (234) > [291] : 0x3a (58) > [292] : 0x95 (149) > [293] : 0x75 (117) > [294] : 0x86 (134) > [295] : 0x19 (25) > [296] : 0x43 (67) > [297] : 0x6e (110) > [298] : 0xa6 (166) > [299] : 0x8e (142) > [300] : 0x07 (7) > [301] : 0x08 (8) > [302] : 0x53 (83) > [303] : 0x17 (23) > [304] : 0x11 (17) > [305] : 0xe2 (226) > [306] : 0xfe (254) > [307] : 0xe8 (232) > [308] : 0xd0 (208) > [309] : 0xef (239) > [310] : 0xb9 (185) > [311] : 0x6c (108) > [312] : 0xa3 (163) > [313] : 0x7c (124) > [314] : 0xe0 (224) > [315] : 0x24 (36) > [316] : 0x64 (100) > [317] : 0x76 (118) > [318] : 0x7b (123) > [319] : 0xec (236) > [320] : 0x7a (122) > [321] : 0x45 (69) > [322] : 0xbb (187) > [323] : 0x74 (116) > [324] : 0xd5 (213) > [325] : 0x41 (65) > [326] : 0xfd (253) > [327] : 0x77 (119) > [328] : 0x44 (68) > [329] : 0xd2 (210) > [330] : 0x3c (60) > [331] : 0xb0 (176) > [332] : 0x5c (92) > [333] : 0x3f (63) > [334] : 0xda (218) > [335] : 0xbd (189) > [336] : 0xae (174) > [337] : 0x8d (141) > [338] : 0xcd (205) > [339] : 0xe1 (225) > [340] : 0xe7 (231) > [341] : 0xaf (175) > [342] : 0x21 (33) > [343] : 0x9d (157) > [344] : 0x77 (119) > [345] : 0x2e (46) > [346] : 0x64 (100) > [347] : 0x8c (140) > [348] : 0xad (173) > [349] : 0x5e (94) > [350] : 0x30 (48) > [351] : 0x70 (112) > [352] : 0xf6 (246) > [353] : 0xcc (204) > [354] : 0xc5 (197) > [355] : 0xc2 (194) > [356] : 0xad (173) > [357] : 0x75 (117) > [358] : 0x24 (36) > [359] : 0x40 (64) > [360] : 0xd3 (211) > [361] : 0x0e (14) > [362] : 0x10 (16) > [363] : 0x69 (105) > [364] : 0xb7 (183) > [365] : 0x1a (26) > [366] : 0xb4 (180) > [367] : 0xbe (190) > [368] : 0x63 (99) > [369] : 0xec (236) > [370] : 0xba (186) > [371] : 0x23 (35) > [372] : 0x81 (129) > [373] : 0x7f (127) > [374] : 0x1a (26) > [375] : 0x01 (1) > [376] : 0xc3 (195) > [377] : 0xa1 (161) > [378] : 0x87 (135) > [379] : 0x89 (137) > [380] : 0xa2 (162) > [381] : 0x75 (117) > [382] : 0x32 (50) > [383] : 0x05 (5) > [384] : 0xc0 (192) > [385] : 0xfa (250) > [386] : 0x21 (33) > [387] : 0x91 (145) > [388] : 0x98 (152) > [389] : 0x62 (98) > [390] : 0xf6 (246) > [391] : 0x72 (114) > [392] : 0x8a (138) > [393] : 0xec (236) > [394] : 0x27 (39) > [395] : 0x58 (88) > [396] : 0x80 (128) > [397] : 0x1f (31) > [398] : 0x4e (78) > [399] : 0xa5 (165) > [400] : 0x4f (79) > [401] : 0xd3 (211) > [402] : 0xa8 (168) > [403] : 0xae (174) > [404] : 0xcf (207) > [405] : 0x1a (26) > [406] : 0xd7 (215) > [407] : 0x7f (127) > [408] : 0xb9 (185) > [409] : 0x2b (43) > [410] : 0x90 (144) > [411] : 0x3e (62) > [412] : 0x9c (156) > [413] : 0xf2 (242) > [414] : 0x7d (125) > [415] : 0x9e (158) > [416] : 0xd8 (216) > [417] : 0x67 (103) > [418] : 0x7f (127) > [419] : 0x86 (134) > [420] : 0x78 (120) > [421] : 0x9e (158) > [422] : 0x04 (4) > [423] : 0xdf (223) > [424] : 0xc3 (195) > [425] : 0xfc (252) > [426] : 0x21 (33) > [427] : 0x82 (130) > [428] : 0x56 (86) > [429] : 0x4f (79) > [430] : 0x46 (70) > [431] : 0x02 (2) > [432] : 0x47 (71) > [433] : 0x01 (1) > [434] : 0x71 (113) > [435] : 0x13 (19) > [436] : 0xa8 (168) > [437] : 0xf0 (240) > [438] : 0x5f (95) > [439] : 0x33 (51) > [440] : 0x48 (72) > [441] : 0x31 (49) > [442] : 0x05 (5) > [443] : 0x99 (153) > [444] : 0xdf (223) > [445] : 0x13 (19) > [446] : 0xb5 (181) > [447] : 0x39 (57) > [448] : 0x65 (101) > [449] : 0x93 (147) > [450] : 0x57 (87) > [451] : 0x3e (62) > [452] : 0x76 (118) > [453] : 0x02 (2) > [454] : 0xd7 (215) > [455] : 0xff (255) > [456] : 0x00 (0) > [457] : 0x0f (15) > [458] : 0x92 (146) > [459] : 0x71 (113) > [460] : 0x63 (99) > [461] : 0x2e (46) > [462] : 0x24 (36) > [463] : 0xe5 (229) > [464] : 0x62 (98) > [465] : 0x77 (119) > [466] : 0xd9 (217) > [467] : 0x40 (64) > [468] : 0x0c (12) > [469] : 0xb9 (185) > [470] : 0xd5 (213) > [471] : 0x9d (157) > [472] : 0x26 (38) > [473] : 0x78 (120) > [474] : 0x98 (152) > [475] : 0x42 (66) > [476] : 0x0d (13) > [477] : 0xe8 (232) > [478] : 0xd5 (213) > [479] : 0xef (239) > [480] : 0x29 (41) > [481] : 0x3b (59) > [482] : 0x34 (52) > [483] : 0x98 (152) > [484] : 0x02 (2) > [485] : 0x1d (29) > [486] : 0x8c (140) > [487] : 0x88 (136) > [488] : 0xb0 (176) > [489] : 0x5b (91) > [490] : 0x13 (19) > [491] : 0x7c (124) > [492] : 0x28 (40) > [493] : 0xb6 (182) > [494] : 0x05 (5) > [495] : 0x61 (97) > [496] : 0x6d (109) > [497] : 0xb2 (178) > [498] : 0x70 (112) > [499] : 0x53 (83) > [500] : 0x55 (85) > [501] : 0x6f (111) > [502] : 0x7b (123) > [503] : 0xcd (205) > [504] : 0x85 (133) > [505] : 0x85 (133) > [506] : 0x44 (68) > [507] : 0x66 (102) > [508] : 0xf1 (241) > [509] : 0x7a (122) > [510] : 0x62 (98) > [511] : 0xa9 (169) > [512] : 0x7a (122) > [513] : 0x28 (40) > [514] : 0x4a (74) > [515] : 0x81 (129) > [516] : 0x9d (157) > [517] : 0xa0 (160) > [518] : 0x7c (124) > [519] : 0xfc (252) > [520] : 0x8d (141) > [521] : 0x84 (132) > [522] : 0xec (236) > [523] : 0x5b (91) > [524] : 0xf7 (247) > [525] : 0x65 (101) > [526] : 0x03 (3) > [527] : 0x40 (64) > [528] : 0x79 (121) > [529] : 0x74 (116) > [530] : 0x5e (94) > [531] : 0xd0 (208) > [532] : 0x76 (118) > [533] : 0x6d (109) > [534] : 0xb5 (181) > [535] : 0x59 (89) > [536] : 0x42 (66) > [537] : 0x04 (4) > [538] : 0x75 (117) > [539] : 0xb5 (181) > [540] : 0x28 (40) > [541] : 0xa2 (162) > [542] : 0xcf (207) > [543] : 0x77 (119) > [544] : 0x5a (90) > [545] : 0xeb (235) > [546] : 0x40 (64) > [547] : 0x3c (60) > [548] : 0x05 (5) > [549] : 0xba (186) > [550] : 0xaf (175) > [551] : 0xe3 (227) > [552] : 0x6b (107) > [553] : 0xc6 (198) > [554] : 0xfa (250) > [555] : 0x4b (75) > [556] : 0xdb (219) > [557] : 0x7e (126) > [558] : 0x1d (29) > [559] : 0x6f (111) > [560] : 0x83 (131) > [561] : 0x08 (8) > [562] : 0x79 (121) > [563] : 0xb8 (184) > [564] : 0x53 (83) > [565] : 0xcb (203) > [566] : 0xfc (252) > [567] : 0xb5 (181) > [568] : 0xc8 (200) > [569] : 0xe6 (230) > [570] : 0x9b (155) > [571] : 0x76 (118) > [572] : 0x97 (151) > [573] : 0xd0 (208) > [574] : 0x03 (3) > [575] : 0x3b (59) > [576] : 0x87 (135) > [577] : 0x00 (0) > [578] : 0x59 (89) > [579] : 0x74 (116) > [580] : 0xf5 (245) > [581] : 0x71 (113) > [582] : 0x1d (29) > [583] : 0x71 (113) > [584] : 0x37 (55) > [585] : 0x95 (149) > [586] : 0x55 (85) > [587] : 0xc0 (192) > [588] : 0x51 (81) > [589] : 0x68 (104) > [590] : 0x88 (136) > [591] : 0x9d (157) > [592] : 0x13 (19) > [593] : 0x03 (3) > [594] : 0x4a (74) > [595] : 0x3b (59) > [596] : 0x2d (45) > [597] : 0x0f (15) > [598] : 0x26 (38) > [599] : 0xbb (187) > [600] : 0x30 (48) > [601] : 0xa1 (161) > [602] : 0x14 (20) > [603] : 0x43 (67) > [604] : 0xd7 (215) > [605] : 0x2f (47) > [606] : 0xf9 (249) > [607] : 0xe0 (224) > [608] : 0x07 (7) > [609] : 0xd7 (215) > [610] : 0xa1 (161) > [611] : 0x72 (114) > [612] : 0x6c (108) > [613] : 0xc5 (197) > [614] : 0x34 (52) > [615] : 0x42 (66) > [616] : 0x3b (59) > [617] : 0x8c (140) > [618] : 0x4a (74) > [619] : 0x85 (133) > [620] : 0x05 (5) > [621] : 0xca (202) > [622] : 0x84 (132) > [623] : 0x19 (25) > [624] : 0x76 (118) > [625] : 0x1b (27) > [626] : 0xec (236) > [627] : 0x24 (36) > [628] : 0x00 (0) > [629] : 0x82 (130) > [630] : 0x75 (117) > [631] : 0x73 (115) > [632] : 0x3c (60) > [633] : 0x6e (110) > [634] : 0x4b (75) > [635] : 0x40 (64) > [636] : 0x62 (98) > [637] : 0x43 (67) > [638] : 0xe3 (227) > [639] : 0x23 (35) > [640] : 0xa1 (161) > [641] : 0x7c (124) > [642] : 0xd4 (212) > [643] : 0xa3 (163) > [644] : 0xce (206) > [645] : 0x8b (139) > [646] : 0xc9 (201) > [647] : 0x81 (129) > [648] : 0x2b (43) > [649] : 0xf2 (242) > [650] : 0xf5 (245) > [651] : 0xb3 (179) > [652] : 0x34 (52) > [653] : 0xb9 (185) > [654] : 0x61 (97) > [655] : 0x42 (66) > [656] : 0xac (172) > [657] : 0x24 (36) > [658] : 0x4b (75) > [659] : 0x88 (136) > [660] : 0x1a (26) > [661] : 0xa0 (160) > [662] : 0xee (238) > [663] : 0xaf (175) > [664] : 0xf4 (244) > [665] : 0x37 (55) > [666] : 0x9d (157) > [667] : 0xb7 (183) > [668] : 0x8b (139) > [669] : 0xbf (191) > [670] : 0x9a (154) > [671] : 0xb6 (182) > [672] : 0xbf (191) > [673] : 0xdd (221) > [674] : 0xec (236) > [675] : 0x33 (51) > [676] : 0xec (236) > [677] : 0x25 (37) > [678] : 0xaf (175) > [679] : 0xbb (187) > [680] : 0x79 (121) > [681] : 0x75 (117) > [682] : 0xd1 (209) > [683] : 0x97 (151) > [684] : 0x28 (40) > [685] : 0x8b (139) > [686] : 0xa8 (168) > [687] : 0xbd (189) > [688] : 0x29 (41) > [689] : 0x8e (142) > [690] : 0x6b (107) > [691] : 0x4f (79) > [692] : 0x4f (79) > [693] : 0x00 (0) > [694] : 0xee (238) > [695] : 0x57 (87) > [696] : 0x30 (48) > [697] : 0xf2 (242) > [698] : 0xf5 (245) > [699] : 0xdf (223) > [700] : 0x1a (26) > [701] : 0x46 (70) > [702] : 0x0e (14) > [703] : 0x4b (75) > [704] : 0xe6 (230) > [705] : 0xeb (235) > [706] : 0x89 (137) > [707] : 0x23 (35) > [708] : 0x42 (66) > [709] : 0xac (172) > [710] : 0xac (172) > [711] : 0x4a (74) > [712] : 0xf2 (242) > [713] : 0x25 (37) > [714] : 0x4e (78) > [715] : 0x39 (57) > [716] : 0xc7 (199) > [717] : 0x3c (60) > [718] : 0xcb (203) > [719] : 0xae (174) > [720] : 0x73 (115) > [721] : 0x94 (148) > [722] : 0x2a (42) > [723] : 0xc7 (199) > [724] : 0xf9 (249) > [725] : 0x4f (79) > [726] : 0x1c (28) > [727] : 0x57 (87) > [728] : 0x1b (27) > [729] : 0x7b (123) > [730] : 0x1d (29) > [731] : 0x2b (43) > [732] : 0xa9 (169) > [733] : 0x9f (159) > [734] : 0x6d (109) > [735] : 0x23 (35) > [736] : 0x56 (86) > [737] : 0x87 (135) > [738] : 0xee (238) > [739] : 0xd3 (211) > [740] : 0xb9 (185) > [741] : 0x0d (13) > [742] : 0x6d (109) > [743] : 0x0f (15) > [744] : 0xb3 (179) > [745] : 0x96 (150) > [746] : 0x29 (41) > [747] : 0x5e (94) > [748] : 0x9f (159) > [749] : 0x05 (5) > [750] : 0x52 (82) > [751] : 0x4f (79) > [752] : 0x6b (107) > [753] : 0xf1 (241) > [754] : 0x35 (53) > [755] : 0x38 (56) > [756] : 0x3f (63) > [757] : 0x63 (99) > [758] : 0xb0 (176) > [759] : 0xbd (189) > [760] : 0xc1 (193) > [761] : 0xe6 (230) > [762] : 0x2d (45) > [763] : 0xbb (187) > [764] : 0x9f (159) > [765] : 0x62 (98) > [766] : 0x11 (17) > [767] : 0x7b (123) > [768] : 0xc7 (199) > [769] : 0x02 (2) > [770] : 0x21 (33) > [771] : 0x17 (23) > [772] : 0x95 (149) > [773] : 0xa3 (163) > [774] : 0x5a (90) > [775] : 0xf7 (247) > [776] : 0xf8 (248) > [777] : 0x29 (41) > [778] : 0x38 (56) > [779] : 0x31 (49) > [780] : 0xc2 (194) > [781] : 0xe2 (226) > [782] : 0x8b (139) > [783] : 0x53 (83) > [784] : 0x15 (21) > [785] : 0xb2 (178) > [786] : 0x75 (117) > [787] : 0xaa (170) > [788] : 0x85 (133) > [789] : 0x9c (156) > [790] : 0x2c (44) > [791] : 0xfe (254) > [792] : 0x93 (147) > [793] : 0x05 (5) > [794] : 0x34 (52) > [795] : 0xcc (204) > [796] : 0x27 (39) > [797] : 0x01 (1) > [798] : 0x8a (138) > [799] : 0xff (255) > [800] : 0x55 (85) > [801] : 0x35 (53) > [802] : 0xec (236) > [803] : 0x73 (115) > [804] : 0x7e (126) > [805] : 0x8c (140) > [806] : 0x6d (109) > [807] : 0x1d (29) > [808] : 0x04 (4) > [809] : 0x49 (73) > [810] : 0xa3 (163) > [811] : 0xd5 (213) > [812] : 0xb6 (182) > [813] : 0x74 (116) > [814] : 0xf1 (241) > [815] : 0x90 (144) > [816] : 0x3e (62) > [817] : 0x95 (149) > [818] : 0x1e (30) > [819] : 0x28 (40) > [820] : 0xae (174) > [821] : 0x2b (43) > [822] : 0xad (173) > [823] : 0xfe (254) > [824] : 0xd9 (217) > [825] : 0x21 (33) > [826] : 0xa6 (166) > [827] : 0x48 (72) > [828] : 0x37 (55) > [829] : 0x22 (34) > [830] : 0x70 (112) > [831] : 0xc7 (199) > [832] : 0x25 (37) > [833] : 0xd3 (211) > [834] : 0xcf (207) > [835] : 0x9c (156) > [836] : 0xa9 (169) > [837] : 0x84 (132) > [838] : 0x57 (87) > [839] : 0xb6 (182) > [840] : 0x20 (32) > [841] : 0xff (255) > [842] : 0xb4 (180) > [843] : 0xc9 (201) > [844] : 0x55 (85) > [845] : 0x29 (41) > [846] : 0xbb (187) > [847] : 0x8c (140) > [848] : 0xa7 (167) > [849] : 0x3d (61) > [850] : 0xed (237) > [851] : 0xea (234) > [852] : 0x8e (142) > [853] : 0x03 (3) > [854] : 0x09 (9) > [855] : 0xa8 (168) > [856] : 0x6e (110) > [857] : 0x82 (130) > [858] : 0xda (218) > [859] : 0x73 (115) > [860] : 0x71 (113) > [861] : 0x07 (7) > [862] : 0x9f (159) > [863] : 0xb1 (177) > [864] : 0x9b (155) > [865] : 0x72 (114) > [866] : 0x58 (88) > [867] : 0xa7 (167) > [868] : 0x99 (153) > [869] : 0x83 (131) > [870] : 0x04 (4) > [871] : 0xa6 (166) > [872] : 0x9e (158) > [873] : 0x03 (3) > [874] : 0x8b (139) > [875] : 0x5f (95) > [876] : 0x69 (105) > [877] : 0x81 (129) > [878] : 0x68 (104) > [879] : 0x0d (13) > [880] : 0x46 (70) > [881] : 0xaa (170) > [882] : 0xc4 (196) > [883] : 0x70 (112) > [884] : 0x4f (79) > [885] : 0x9c (156) > [886] : 0xe5 (229) > [887] : 0xa8 (168) > [888] : 0x60 (96) > [889] : 0x3c (60) > [890] : 0x41 (65) > [891] : 0x15 (21) > [892] : 0x2d (45) > [893] : 0xb6 (182) > [894] : 0x92 (146) > [895] : 0xc8 (200) > [896] : 0x73 (115) > [897] : 0xa3 (163) > [898] : 0xa4 (164) > [899] : 0xde (222) > [900] : 0x53 (83) > [901] : 0xa7 (167) > [902] : 0x79 (121) > [903] : 0x92 (146) > [904] : 0x6a (106) > [905] : 0xd8 (216) > [906] : 0x04 (4) > [907] : 0x56 (86) > [908] : 0x4e (78) > [909] : 0xa8 (168) > [910] : 0xcf (207) > [911] : 0x89 (137) > [912] : 0x42 (66) > [913] : 0x93 (147) > [914] : 0x6d (109) > [915] : 0xea (234) > [916] : 0x92 (146) > [917] : 0x6f (111) > [918] : 0xfa (250) > [919] : 0xce (206) > [920] : 0x64 (100) > [921] : 0x9f (159) > [922] : 0x41 (65) > [923] : 0x0a (10) > [924] : 0xdd (221) > [925] : 0x39 (57) > [926] : 0x1d (29) > [927] : 0x51 (81) > [928] : 0xf7 (247) > [929] : 0x87 (135) > [930] : 0x57 (87) > [931] : 0xa2 (162) > [932] : 0x3d (61) > [933] : 0x0d (13) > [934] : 0xd6 (214) > [935] : 0x07 (7) > [936] : 0x37 (55) > [937] : 0x1e (30) > [938] : 0x96 (150) > [939] : 0xa3 (163) > [940] : 0x89 (137) > [941] : 0x01 (1) > [942] : 0xbf (191) > [943] : 0xe0 (224) > [944] : 0xb5 (181) > [945] : 0x1d (29) > [946] : 0x7f (127) > [947] : 0x7d (125) > [948] : 0x74 (116) > [949] : 0xba (186) > [950] : 0x3b (59) > [951] : 0x9d (157) > [952] : 0xb1 (177) > [953] : 0x1b (27) > [954] : 0x17 (23) > [955] : 0xdc (220) > [956] : 0xaf (175) > [957] : 0x37 (55) > [958] : 0xb0 (176) > [959] : 0xac (172) > [960] : 0x07 (7) > [961] : 0xdc (220) > [962] : 0xda (218) > [963] : 0xf3 (243) > [964] : 0x1f (31) > [965] : 0xae (174) > [966] : 0x4d (77) > [967] : 0xd1 (209) > [968] : 0x4c (76) > [969] : 0xa0 (160) > [970] : 0xb1 (177) > [971] : 0xc2 (194) > [972] : 0xca (202) > [973] : 0xd6 (214) > [974] : 0x11 (17) > [975] : 0xd4 (212) > [976] : 0x49 (73) > [977] : 0x9e (158) > [978] : 0x64 (100) > [979] : 0xa1 (161) > [980] : 0x69 (105) > [981] : 0x1c (28) > [982] : 0xc7 (199) > [983] : 0xa6 (166) > [984] : 0xc1 (193) > [985] : 0xc4 (196) > [986] : 0x0d (13) > [987] : 0xfd (253) > [988] : 0x8f (143) > [989] : 0xdd (221) > [990] : 0x74 (116) > [991] : 0x90 (144) > [992] : 0x40 (64) > [993] : 0x1c (28) > [994] : 0xe9 (233) > [995] : 0x70 (112) > [996] : 0x78 (120) > [997] : 0xf2 (242) > [998] : 0x7f (127) > [999] : 0xb3 (179) > [1000] : 0xa7 (167) > [1001] : 0x8c (140) > [1002] : 0x8d (141) > [1003] : 0xa7 (167) > [1004] : 0xcb (203) > [1005] : 0x20 (32) > [1006] : 0x52 (82) > [1007] : 0xe7 (231) > [1008] : 0xe0 (224) > [1009] : 0x4b (75) > [1010] : 0xac (172) > [1011] : 0xd5 (213) > [1012] : 0x94 (148) > [1013] : 0x1e (30) > [1014] : 0xf0 (240) > [1015] : 0x60 (96) > [1016] : 0xaf (175) > [1017] : 0xaa (170) > [1018] : 0x82 (130) > [1019] : 0x30 (48) > [1020] : 0x29 (41) > [1021] : 0xf0 (240) > [1022] : 0x1d (29) > [1023] : 0xa7 (167) > [1024] : 0x3f (63) > [1025] : 0x1c (28) > [1026] : 0xf3 (243) > [1027] : 0x29 (41) > [1028] : 0xab (171) > [1029] : 0x49 (73) > [1030] : 0xc5 (197) > [1031] : 0x44 (68) > [1032] : 0x94 (148) > [1033] : 0x2c (44) > [1034] : 0x39 (57) > [1035] : 0x06 (6) > [1036] : 0x8a (138) > [1037] : 0x04 (4) > [1038] : 0xc3 (195) > [1039] : 0xc1 (193) > [1040] : 0xd4 (212) > [1041] : 0x51 (81) > [1042] : 0xe4 (228) > [1043] : 0x94 (148) > [1044] : 0x41 (65) > [1045] : 0xe2 (226) > [1046] : 0x23 (35) > [1047] : 0xdb (219) > [1048] : 0xe9 (233) > [1049] : 0xdd (221) > [1050] : 0x5c (92) > [1051] : 0xb7 (183) > [1052] : 0x8f (143) > [1053] : 0x86 (134) > [1054] : 0xf4 (244) > [1055] : 0x67 (103) > [1056] : 0x68 (104) > [1057] : 0x6c (108) > [1058] : 0x92 (146) > [1059] : 0x10 (16) > [1060] : 0x15 (21) > [1061] : 0x42 (66) > [1062] : 0xd4 (212) > [1063] : 0x35 (53) > [1064] : 0x20 (32) > [1065] : 0xc6 (198) > [1066] : 0x28 (40) > [1067] : 0xaf (175) > [1068] : 0xa2 (162) > [1069] : 0xc6 (198) > [1070] : 0xe1 (225) > [1071] : 0xb3 (179) > [1072] : 0xd5 (213) > [1073] : 0xd5 (213) > [1074] : 0xb4 (180) > [1075] : 0x30 (48) > [1076] : 0x76 (118) > [1077] : 0x12 (18) > [1078] : 0x6c (108) > [1079] : 0x45 (69) > [1080] : 0x20 (32) > [1081] : 0x6e (110) > [1082] : 0x80 (128) > [1083] : 0x15 (21) > [1084] : 0x5b (91) > [1085] : 0x60 (96) > [1086] : 0xf8 (248) > [1087] : 0xb3 (179) > access_mask : 0x00010000 (65536) > 0: LSA_TRUSTED_QUERY_DOMAIN_NAME > 0: LSA_TRUSTED_QUERY_CONTROLLERS > 0: LSA_TRUSTED_SET_CONTROLLERS > 0: LSA_TRUSTED_QUERY_POSIX > 0: LSA_TRUSTED_SET_POSIX > 0: LSA_TRUSTED_SET_AUTH > 0: LSA_TRUSTED_QUERY_AUTH >rpc request data: >[0000] 00 00 00 00 0D 00 00 00 00 00 00 00 8E 52 7B 2E ........ .....R{. >[0010] 2E 04 02 00 12 00 14 00 00 00 02 00 0C 00 0E 00 ........ ........ >[0020] 04 00 02 00 08 00 02 00 03 00 00 00 02 00 00 00 ........ ........ >[0030] 08 00 00 00 0A 00 00 00 00 00 00 00 09 00 00 00 ........ ........ >[0040] 61 00 64 00 74 00 65 00 73 00 74 00 2E 00 71 00 a.d.t.e. s.t...q. >[0050] 65 00 00 00 07 00 00 00 00 00 00 00 06 00 00 00 e....... ........ >[0060] 41 00 44 00 54 00 45 00 53 00 54 00 04 00 00 00 A.D.T.E. S.T..... >[0070] 01 04 00 00 00 00 00 05 15 00 00 00 75 BC DA 71 ........ ....u..q >[0080] 97 F9 7D 1E FF 29 1B D8 40 04 00 00 0C 00 02 00 ..}..).. @....... >[0090] 40 04 00 00 E0 4D 0B 42 C3 47 79 2F A8 C6 93 71 @....M.B .Gy/...q >[00A0] BB 06 78 A1 29 9C FB 2A 9D A4 D0 8B 10 6F 69 96 ..x.)..* .....oi. >[00B0] AD DF 55 3B 6A B6 B1 29 AB 53 7C D4 BB 41 9A CE ..U;j..) .S|..A.. >[00C0] 8E B9 FD 9B 45 BB 05 1A FC 58 4B 5D 38 90 B5 84 ....E... .XK]8... >[00D0] 9F 4D 9D B7 D7 56 CA 2B 21 EA 56 65 E6 D9 21 01 .M...V.+ !.Ve..!. >[00E0] F1 6F B6 B8 0C B9 84 F0 6B 7D 3E FD 2E AE EB D1 .o...... k}>..... >[00F0] 60 A5 D2 6B 80 4A 2F 7A F9 83 79 AB 15 6B D0 5A `..k.J/z ..y..k.Z >[0100] 13 BA 2C AD 7E 7C E7 24 2A E6 3C C2 EF 8A 79 79 ..,.~|.$ *.<...yy >[0110] FA AC CA 8E 02 8F E7 E4 2C 3D 65 F7 21 65 E3 76 ........ ,=e.!e.v >[0120] 6A A9 0E 61 FB A4 43 0A A5 DF 00 D6 B0 E9 C7 56 j..a..C. .......V >[0130] E6 18 0A D8 EE 39 6C D2 92 F7 8C 9D D8 DE 50 9A .....9l. ......P. >[0140] 19 1E 43 60 D1 58 FD 4D 11 A1 B5 B5 EB 20 34 29 ..C`.X.M ..... 4) >[0150] 3E 69 21 3F 29 C9 C6 06 F7 42 25 AA 64 51 E5 62 >i!?)... .B%.dQ.b >[0160] 8B 68 29 86 DA 04 F6 4E 34 B0 3E 15 6D B1 8E 91 .h)....N 4.>.m... >[0170] F4 8B F7 25 4B 7C BA EF A6 23 B1 14 FA 26 14 01 ...%K|.. .#...&.. >[0180] 48 A3 B1 A0 DA 69 CB 26 7F 9E B0 CB 58 E4 58 61 H....i.& ....X.Xa >[0190] A5 F9 75 A8 36 CE 39 06 CC EB B7 26 FA D7 B6 B6 ..u.6.9. ...&.... >[01A0] F0 F2 67 0E 8D 35 47 27 D5 5D 72 35 FB 9C FB 84 ..g..5G' .]r5.... >[01B0] F7 FE 8F 86 31 D3 EA 3A 95 75 86 19 43 6E A6 8E ....1..: .u..Cn.. >[01C0] 07 08 53 17 11 E2 FE E8 D0 EF B9 6C A3 7C E0 24 ..S..... ...l.|.$ >[01D0] 64 76 7B EC 7A 45 BB 74 D5 41 FD 77 44 D2 3C B0 dv{.zE.t .A.wD.<. >[01E0] 5C 3F DA BD AE 8D CD E1 E7 AF 21 9D 77 2E 64 8C \?...... ..!.w.d. >[01F0] AD 5E 30 70 F6 CC C5 C2 AD 75 24 40 D3 0E 10 69 .^0p.... .u$@...i >[0200] B7 1A B4 BE 63 EC BA 23 81 7F 1A 01 C3 A1 87 89 ....c..# ........ >[0210] A2 75 32 05 C0 FA 21 91 98 62 F6 72 8A EC 27 58 .u2...!. .b.r..'X >[0220] 80 1F 4E A5 4F D3 A8 AE CF 1A D7 7F B9 2B 90 3E ..N.O... .....+.> >[0230] 9C F2 7D 9E D8 67 7F 86 78 9E 04 DF C3 FC 21 82 ..}..g.. x.....!. >[0240] 56 4F 46 02 47 01 71 13 A8 F0 5F 33 48 31 05 99 VOF.G.q. .._3H1.. >[0250] DF 13 B5 39 65 93 57 3E 76 02 D7 FF 00 0F 92 71 ...9e.W> v......q >[0260] 63 2E 24 E5 62 77 D9 40 0C B9 D5 9D 26 78 98 42 c.$.bw.@ ....&x.B >[0270] 0D E8 D5 EF 29 3B 34 98 02 1D 8C 88 B0 5B 13 7C ....);4. .....[.| >[0280] 28 B6 05 61 6D B2 70 53 55 6F 7B CD 85 85 44 66 (..am.pS Uo{...Df >[0290] F1 7A 62 A9 7A 28 4A 81 9D A0 7C FC 8D 84 EC 5B .zb.z(J. ..|....[ >[02A0] F7 65 03 40 79 74 5E D0 76 6D B5 59 42 04 75 B5 .e.@yt^. vm.YB.u. >[02B0] 28 A2 CF 77 5A EB 40 3C 05 BA AF E3 6B C6 FA 4B (..wZ.@< ....k..K >[02C0] DB 7E 1D 6F 83 08 79 B8 53 CB FC B5 C8 E6 9B 76 .~.o..y. S......v >[02D0] 97 D0 03 3B 87 00 59 74 F5 71 1D 71 37 95 55 C0 ...;..Yt .q.q7.U. >[02E0] 51 68 88 9D 13 03 4A 3B 2D 0F 26 BB 30 A1 14 43 Qh....J; -.&.0..C >[02F0] D7 2F F9 E0 07 D7 A1 72 6C C5 34 42 3B 8C 4A 85 ./.....r l.4B;.J. >[0300] 05 CA 84 19 76 1B EC 24 00 82 75 73 3C 6E 4B 40 ....v..$ ..us<nK@ >[0310] 62 43 E3 23 A1 7C D4 A3 CE 8B C9 81 2B F2 F5 B3 bC.#.|.. ....+... >[0320] 34 B9 61 42 AC 24 4B 88 1A A0 EE AF F4 37 9D B7 4.aB.$K. .....7.. >[0330] 8B BF 9A B6 BF DD EC 33 EC 25 AF BB 79 75 D1 97 .......3 .%..yu.. >[0340] 28 8B A8 BD 29 8E 6B 4F 4F 00 EE 57 30 F2 F5 DF (...).kO O..W0... >[0350] 1A 46 0E 4B E6 EB 89 23 42 AC AC 4A F2 25 4E 39 .F.K...# B..J.%N9 >[0360] C7 3C CB AE 73 94 2A C7 F9 4F 1C 57 1B 7B 1D 2B .<..s.*. .O.W.{.+ >[0370] A9 9F 6D 23 56 87 EE D3 B9 0D 6D 0F B3 96 29 5E ..m#V... ..m...)^ >[0380] 9F 05 52 4F 6B F1 35 38 3F 63 B0 BD C1 E6 2D BB ..ROk.58 ?c....-. >[0390] 9F 62 11 7B C7 02 21 17 95 A3 5A F7 F8 29 38 31 .b.{..!. ..Z..)81 >[03A0] C2 E2 8B 53 15 B2 75 AA 85 9C 2C FE 93 05 34 CC ...S..u. ..,...4. >[03B0] 27 01 8A FF 55 35 EC 73 7E 8C 6D 1D 04 49 A3 D5 '...U5.s ~.m..I.. >[03C0] B6 74 F1 90 3E 95 1E 28 AE 2B AD FE D9 21 A6 48 .t..>..( .+...!.H >[03D0] 37 22 70 C7 25 D3 CF 9C A9 84 57 B6 20 FF B4 C9 7"p.%... ..W. ... >[03E0] 55 29 BB 8C A7 3D ED EA 8E 03 09 A8 6E 82 DA 73 U)...=.. ....n..s >[03F0] 71 07 9F B1 9B 72 58 A7 99 83 04 A6 9E 03 8B 5F q....rX. ......._ >[0400] 69 81 68 0D 46 AA C4 70 4F 9C E5 A8 60 3C 41 15 i.h.F..p O...`<A. >[0410] 2D B6 92 C8 73 A3 A4 DE 53 A7 79 92 6A D8 04 56 -...s... S.y.j..V >[0420] 4E A8 CF 89 42 93 6D EA 92 6F FA CE 64 9F 41 0A N...B.m. .o..d.A. >[0430] DD 39 1D 51 F7 87 57 A2 3D 0D D6 07 37 1E 96 A3 .9.Q..W. =...7... >[0440] 89 01 BF E0 B5 1D 7F 7D 74 BA 3B 9D B1 1B 17 DC .......} t.;..... >[0450] AF 37 B0 AC 07 DC DA F3 1F AE 4D D1 4C A0 B1 C2 .7...... ..M.L... >[0460] CA D6 11 D4 49 9E 64 A1 69 1C C7 A6 C1 C4 0D FD ....I.d. i....... >[0470] 8F DD 74 90 40 1C E9 70 78 F2 7F B3 A7 8C 8D A7 ..t.@..p x....... >[0480] CB 20 52 E7 E0 4B AC D5 94 1E F0 60 AF AA 82 30 . R..K.. ...`...0 >[0490] 29 F0 1D A7 3F 1C F3 29 AB 49 C5 44 94 2C 39 06 )...?..) .I.D.,9. >[04A0] 8A 04 C3 C1 D4 51 E4 94 41 E2 23 DB E9 DD 5C B7 .....Q.. A.#...\. >[04B0] 8F 86 F4 67 68 6C 92 10 15 42 D4 35 20 C6 28 AF ...ghl.. .B.5 .(. >[04C0] A2 C6 E1 B3 D5 D5 B4 30 76 12 6C 45 20 6E 80 15 .......0 v.lE n.. >[04D0] 5B 60 F8 B3 00 00 01 00 [`...... >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d60174810 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d60317250 >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=1264, this_data=1264, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600f49c0 >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d6023f8c0 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d6023f8c0 >s4_tevent: Destroying timer event 0x7f3d600f49c0 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d60174810 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d60231310 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d60231310 > lsa_CreateTrustedDomainEx2: struct lsa_CreateTrustedDomainEx2 > out: struct lsa_CreateTrustedDomainEx2 > trustdom_handle : * > trustdom_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000f-0000-0000-8e52-812e2e040200 > result : NT_STATUS_OK >rpc reply data: >[0000] 00 00 00 00 0F 00 00 00 00 00 00 00 8E 52 81 2E ........ .....R.. >[0010] 2E 04 02 00 00 00 00 00 ........ > lsa_OpenTrustedDomainByName: struct lsa_OpenTrustedDomainByName > in: struct lsa_OpenTrustedDomainByName > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000d-0000-0000-8e52-7b2e2e040200 > name: struct lsa_String > length : 0x0012 (18) > size : 0x0012 (18) > string : * > string : 'adtest.qe' > access_mask : 0x02000000 (33554432) > 0: LSA_TRUSTED_QUERY_DOMAIN_NAME > 0: LSA_TRUSTED_QUERY_CONTROLLERS > 0: LSA_TRUSTED_SET_CONTROLLERS > 0: LSA_TRUSTED_QUERY_POSIX > 0: LSA_TRUSTED_SET_POSIX > 0: LSA_TRUSTED_SET_AUTH > 0: LSA_TRUSTED_QUERY_AUTH >rpc request data: >[0000] 00 00 00 00 0D 00 00 00 00 00 00 00 8E 52 7B 2E ........ .....R{. >[0010] 2E 04 02 00 12 00 12 00 00 00 02 00 09 00 00 00 ........ ........ >[0020] 00 00 00 00 09 00 00 00 61 00 64 00 74 00 65 00 ........ a.d.t.e. >[0030] 73 00 74 00 2E 00 71 00 65 00 00 00 00 00 00 02 s.t...q. e....... >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d6011c110 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d60317250 >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=88, this_data=88, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600fd480 >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d602f7900 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d602f7900 >s4_tevent: Destroying timer event 0x7f3d600fd480 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d6011c110 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d6022f780 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d6022f780 > lsa_OpenTrustedDomainByName: struct lsa_OpenTrustedDomainByName > out: struct lsa_OpenTrustedDomainByName > trustdom_handle : * > trustdom_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000010-0000-0000-8e52-812e2e040200 > result : NT_STATUS_OK >rpc reply data: >[0000] 00 00 00 00 10 00 00 00 00 00 00 00 8E 52 81 2E ........ .....R.. >[0010] 2E 04 02 00 00 00 00 00 ........ > lsa_SetInformationTrustedDomain: struct lsa_SetInformationTrustedDomain > in: struct lsa_SetInformationTrustedDomain > trustdom_handle : * > trustdom_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000010-0000-0000-8e52-812e2e040200 > level : LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES (13) > info : * > info : union lsa_TrustedDomainInfo(case 13) > enc_types: struct lsa_TrustDomainInfoSupportedEncTypes > enc_types : 0x0000001c (28) > 0: KERB_ENCTYPE_DES_CBC_CRC > 0: KERB_ENCTYPE_DES_CBC_MD5 > 1: KERB_ENCTYPE_RC4_HMAC_MD5 > 1: KERB_ENCTYPE_AES128_CTS_HMAC_SHA1_96 > 1: KERB_ENCTYPE_AES256_CTS_HMAC_SHA1_96 >rpc request data: >[0000] 00 00 00 00 10 00 00 00 00 00 00 00 8E 52 81 2E ........ .....R.. >[0010] 2E 04 02 00 0D 00 0D 00 1C 00 00 00 ........ .... >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d6024d540 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d60317250 >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=52, this_data=52, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600fd520 >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d60317250 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600cf8a0 >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d60330190 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d60330190 >s4_tevent: Destroying timer event 0x7f3d600fd520 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d6024d540 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d6011aeb0 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d6011aeb0 > lsa_SetInformationTrustedDomain: struct lsa_SetInformationTrustedDomain > out: struct lsa_SetInformationTrustedDomain > result : NT_STATUS_OK >rpc reply data: >[0000] 00 00 00 00 .... >Using binding ncacn_np:ad12srv1.adtest.qe[,] >s4_tevent: Added timed event "dcerpc_connect_timeout_handler": 0x7f3d60241450 >s4_tevent: Added timed event "composite_trigger": 0x7f3d600fcc10 >s4_tevent: Added timed event "composite_trigger": 0x7f3d602426b0 >s4_tevent: Running timer event 0x7f3d600fcc10 "composite_trigger" >s4_tevent: Destroying timer event 0x7f3d602426b0 "composite_trigger" >Mapped to DCERPC endpoint \pipe\netlogon >added interface enp9s0f0 ip=2620:52:0:102f:21e:67ff:fe65:9608 bcast= netmask=ffff:ffff:ffff:ffff:: >added interface enp9s0f0 ip=10.16.44.98 bcast=10.16.47.255 netmask=255.255.248.0 >added interface enp9s0f0 ip=2620:52:0:102f:21e:67ff:fe65:9608 bcast= netmask=ffff:ffff:ffff:ffff:: >added interface enp9s0f0 ip=10.16.44.98 bcast=10.16.47.255 netmask=255.255.248.0 >s4_tevent: Ending timer event 0x7f3d600fcc10 "composite_trigger" >s4_tevent: Added timed event "connect_multi_timer": 0x7f3d6024b080 >s4_tevent: Running timer event 0x7f3d6024b080 "connect_multi_timer" >s4_tevent: Added timed event "connect_multi_timer": 0x7f3d60132760 >s4_tevent: Ending timer event 0x7f3d6024b080 "connect_multi_timer" >s4_tevent: Running timer event 0x7f3d60132760 "connect_multi_timer" >s4_tevent: Added timed event "connect_multi_timer": 0x7f3d603537b0 >s4_tevent: Ending timer event 0x7f3d60132760 "connect_multi_timer" >s4_tevent: Running timer event 0x7f3d603537b0 "connect_multi_timer" >s4_tevent: Ending timer event 0x7f3d603537b0 "connect_multi_timer" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d6015efe0 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d6015efe0 >Socket options: > SO_KEEPALIVE = 0 > SO_REUSEADDR = 0 > SO_BROADCAST = 0 > TCP_NODELAY = 1 > TCP_KEEPCNT = 9 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_REUSEPORT = 0 > SO_SNDBUF = 22080 > SO_RCVBUF = 87380 > SO_SNDLOWAT = 1 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 > TCP_QUICKACK = 1 > TCP_DEFER_ACCEPT = 0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d603540e0 >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600fd7e0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600fd7e0 >s4_tevent: Destroying timer event 0x7f3d603540e0 "tevent_req_timedout" >Starting GENSEC mechanism spnego >Starting GENSEC submechanism ntlmssp > negotiate: struct NEGOTIATE_MESSAGE > Signature : 'NTLMSSP' > MessageType : NtLmNegotiate (1) > NegotiateFlags : 0x60088215 (1611170325) > 1: NTLMSSP_NEGOTIATE_UNICODE > 0: NTLMSSP_NEGOTIATE_OEM > 1: NTLMSSP_REQUEST_TARGET > 1: NTLMSSP_NEGOTIATE_SIGN > 0: NTLMSSP_NEGOTIATE_SEAL > 0: NTLMSSP_NEGOTIATE_DATAGRAM > 0: NTLMSSP_NEGOTIATE_LM_KEY > 0: NTLMSSP_NEGOTIATE_NETWARE > 1: NTLMSSP_NEGOTIATE_NTLM > 0: NTLMSSP_NEGOTIATE_NT_ONLY > 0: NTLMSSP_ANONYMOUS > 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED > 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED > 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL > 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN > 0: NTLMSSP_TARGET_TYPE_DOMAIN > 0: NTLMSSP_TARGET_TYPE_SERVER > 0: NTLMSSP_TARGET_TYPE_SHARE > 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY > 0: NTLMSSP_NEGOTIATE_IDENTIFY > 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY > 0: NTLMSSP_NEGOTIATE_TARGET_INFO > 0: NTLMSSP_NEGOTIATE_VERSION > 1: NTLMSSP_NEGOTIATE_128 > 1: NTLMSSP_NEGOTIATE_KEY_EXCH > 0: NTLMSSP_NEGOTIATE_56 > DomainNameLen : 0x0008 (8) > DomainNameMaxLen : 0x0008 (8) > DomainName : * > DomainName : 'TESTRELM' > WorkstationLen : 0x0008 (8) > WorkstationMaxLen : 0x0008 (8) > Workstation : * > Workstation : 'TESTRELM' >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600f4e80 >smb_signing_sign_pdu: sent SMB signature of >[0000] 42 53 52 53 50 59 4C 20 BSRSPYL >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600fd7e0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600fd7e0 >s4_tevent: Destroying timer event 0x7f3d600f4e80 "tevent_req_timedout" >Got challenge flags: >Got NTLMSSP neg_flags=0x62898215 > NTLMSSP_NEGOTIATE_UNICODE > NTLMSSP_REQUEST_TARGET > NTLMSSP_NEGOTIATE_SIGN > NTLMSSP_NEGOTIATE_NTLM > NTLMSSP_NEGOTIATE_ALWAYS_SIGN > NTLMSSP_NEGOTIATE_NTLM2 > NTLMSSP_NEGOTIATE_TARGET_INFO > NTLMSSP_NEGOTIATE_VERSION > NTLMSSP_NEGOTIATE_128 > NTLMSSP_NEGOTIATE_KEY_EXCH >NTLMSSP: Set final flags: >Got NTLMSSP neg_flags=0x60088215 > NTLMSSP_NEGOTIATE_UNICODE > NTLMSSP_REQUEST_TARGET > NTLMSSP_NEGOTIATE_SIGN > NTLMSSP_NEGOTIATE_NTLM > NTLMSSP_NEGOTIATE_ALWAYS_SIGN > NTLMSSP_NEGOTIATE_NTLM2 > NTLMSSP_NEGOTIATE_128 > NTLMSSP_NEGOTIATE_KEY_EXCH >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600f5510 >smb_signing_sign_pdu: sent SMB signature of >[0000] 42 53 52 53 50 59 4C 20 BSRSPYL >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600fd7e0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600fd7e0 >s4_tevent: Destroying timer event 0x7f3d600f5510 "tevent_req_timedout" >smb_signing_activate: user_session_key >[0000] 98 26 AC 1D 46 F4 8F 26 F0 83 CD EA EE B2 ED A5 .&..F..& ........ >smb_signing_activate: NULL response_data >smb_signing_md5: sequence number 1 >smb_signing_check_pdu: seq 1: got good SMB signature of >[0000] 1B AE 01 C4 E1 B6 94 BE ........ >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600f51e0 >smb_signing_md5: sequence number 2 >smb_signing_sign_pdu: sent SMB signature of >[0000] 49 EF 0B E3 E4 60 BA F8 I....`.. >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600fd7e0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600fd7e0 >smb_signing_md5: sequence number 3 >smb_signing_check_pdu: seq 3: got good SMB signature of >[0000] 84 75 2B 8C D9 BC 55 6E .u+...Un >s4_tevent: Destroying timer event 0x7f3d600f51e0 "tevent_req_timedout" >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600f5410 >smb_signing_md5: sequence number 4 >smb_signing_sign_pdu: sent SMB signature of >[0000] 1C 1C 53 E3 FC 56 4B 3D ..S..VK= >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600fd7e0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600fd7e0 >smb_signing_md5: sequence number 5 >smb_signing_check_pdu: seq 5: got good SMB signature of >[0000] 37 8C BE 96 D6 59 93 12 7....Y.. >s4_tevent: Destroying timer event 0x7f3d600f5410 "tevent_req_timedout" >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=65535, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600f5860 >smb_signing_md5: sequence number 6 >smb_signing_sign_pdu: sent SMB signature of >[0000] 8B BE F9 8C 8B 1C E2 98 ........ >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600fd7e0 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d60253a50 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600fd7e0 >smb_signing_md5: sequence number 7 >smb_signing_check_pdu: seq 7: got good SMB signature of >[0000] 43 B2 18 66 39 58 EC 87 C..f9X.. >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d60120a90 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d60120a90 >s4_tevent: Destroying timer event 0x7f3d600f5860 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d60253a50 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d60351c20 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d60351c20 >s4_tevent: Destroying timer event 0x7f3d60241450 "dcerpc_connect_timeout_handler" > netr_LogonControl2Ex: struct netr_LogonControl2Ex > in: struct netr_LogonControl2Ex > logon_server : NULL > function_code : NETLOGON_CONTROL_TC_VERIFY (10) > level : 0x00000002 (2) > data : * > data : union netr_CONTROL_DATA_INFORMATION(case 10) > domain : * > domain : 'testrelm.com' >rpc request data: >[0000] 00 00 00 00 0A 00 00 00 02 00 00 00 0A 00 00 00 ........ ........ >[0010] 00 00 02 00 0D 00 00 00 00 00 00 00 0D 00 00 00 ........ ........ >[0020] 74 00 65 00 73 00 74 00 72 00 65 00 6C 00 6D 00 t.e.s.t. r.e.l.m. >[0030] 2E 00 63 00 6F 00 6D 00 00 00 ..c.o.m. .. >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d603becc0 >s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7f3d60245dd0 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d603becc0 >s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7f3d603becc0 >num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=82, this_data=82, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600f5760 >smb_signing_md5: sequence number 8 >smb_signing_sign_pdu: sent SMB signature of >[0000] 27 0B 4E 14 13 84 2E 2E '.N..... >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600fd7e0 >s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7f3d603becc0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600fd7e0 >smb_signing_md5: sequence number 9 >smb_signing_check_pdu: seq 9: got good SMB signature of >[0000] 49 90 5A 8E E4 95 D5 AC I.Z..... >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d6023b870 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d6023b870 >s4_tevent: Destroying timer event 0x7f3d600f5760 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d60245dd0 "dcerpc_timeout_handler" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d6015bf70 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d6015bf70 > netr_LogonControl2Ex: struct netr_LogonControl2Ex > out: struct netr_LogonControl2Ex > query : * > query : union netr_CONTROL_QUERY_INFORMATION(case 2) > info2 : * > info2: struct netr_NETLOGON_INFO_2 > flags : 0x000000b0 (176) > 0: NETLOGON_REPLICATION_NEEDED > 0: NETLOGON_REPLICATION_IN_PROGRESS > 0: NETLOGON_FULL_SYNC_REPLICATION > 0: NETLOGON_REDO_NEEDED > 1: NETLOGON_HAS_IP > 1: NETLOGON_HAS_TIMESERV > 0: NETLOGON_DNS_UPDATE_FAILURE > 1: NETLOGON_VERIFY_STATUS_RETURNED > pdc_connection_status : WERR_OK > trusted_dc_name : * > trusted_dc_name : '\\rhel7-b.testrelm.com' > tc_connection_status : WERR_OK > result : WERR_OK >rpc reply data: >[0000] 02 00 00 00 00 00 02 00 B0 00 00 00 00 00 00 00 ........ ........ >[0010] 04 00 02 00 00 00 00 00 17 00 00 00 00 00 00 00 ........ ........ >[0020] 17 00 00 00 5C 00 5C 00 72 00 68 00 65 00 6C 00 ....\.\. r.h.e.l. >[0030] 37 00 2D 00 62 00 2E 00 74 00 65 00 73 00 74 00 7.-.b... t.e.s.t. >[0040] 72 00 65 00 6C 00 6D 00 2E 00 63 00 6F 00 6D 00 r.e.l.m. ..c.o.m. >[0050] 00 00 00 00 00 00 00 00 ........ >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d603becc0 >smb_signing_md5: sequence number 10 >smb_signing_sign_pdu: sent SMB signature of >[0000] 01 83 BB E5 E8 1E 86 5E .......^ >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600fd7e0 >s4_tevent: Destroying timer event 0x7f3d603becc0 "tevent_req_timedout" >s4_tevent: Cancel immediate event 0x7f3d600fd7e0 "tevent_queue_immediate_trigger" >lpcfg_load: refreshing parameters from /usr/share/ipa/smb.conf.empty >params.c:pm_process() - Processing configuration file "/usr/share/ipa/smb.conf.empty" >Processing section "[global]" >INFO: Current debug levels: > all: 100 > tdb: 100 > printdrivers: 100 > lanman: 100 > smb: 100 > rpc_parse: 100 > rpc_srv: 100 > rpc_cli: 100 > passdb: 100 > sam: 100 > auth: 100 > winbind: 100 > vfs: 100 > idmap: 100 > quota: 100 > acls: 100 > locking: 100 > msdfs: 100 > dmapi: 100 > registry: 100 > scavenger: 100 > dns: 100 > ldb: 100 >pm_process() returned Yes >added interface enp9s0f0 ip=2620:52:0:102f:21e:67ff:fe65:9608 bcast= netmask=ffff:ffff:ffff:ffff:: >added interface enp9s0f0 ip=10.16.44.98 bcast=10.16.47.255 netmask=255.255.248.0 >added interface enp9s0f0 ip=2620:52:0:102f:21e:67ff:fe65:9608 bcast= netmask=ffff:ffff:ffff:ffff:: >added interface enp9s0f0 ip=10.16.44.98 bcast=10.16.47.255 netmask=255.255.248.0 >added interface enp9s0f0 ip=2620:52:0:102f:21e:67ff:fe65:9608 bcast= netmask=ffff:ffff:ffff:ffff:: >added interface enp9s0f0 ip=10.16.44.98 bcast=10.16.47.255 netmask=255.255.248.0 >added interface enp9s0f0 ip=2620:52:0:102f:21e:67ff:fe65:9608 bcast= netmask=ffff:ffff:ffff:ffff:: >added interface enp9s0f0 ip=10.16.44.98 bcast=10.16.47.255 netmask=255.255.248.0 >finddcs: searching for a DC by DNS domain adtest.qe >finddcs: looking for SRV records for _ldap._tcp.adtest.qe >ads_dns_lookup_srv: 1 records returned in the answer section. >ads_dns_parse_rr_srv: Parsed ad12srv1.adtest.qe [0, 100, 389] >Addrs = 2620:52:0:41ce:c191:ad8a:e0f7:2c3a@389/ad12srv1,10.65.207.38@389/ad12srv1 >finddcs: DNS SRV response 0 at '2620:52:0:41ce:c191:ad8a:e0f7:2c3a' >finddcs: DNS SRV response 1 at '10.65.207.38' >finddcs: performing CLDAP query on 2620:52:0:41ce:c191:ad8a:e0f7:2c3a >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d6023ef90 >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d6035ac10 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d6035ac10 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d6024cc10 >s4_tevent: Destroying timer event 0x7f3d6024cc10 "tevent_req_timedout" >s4_tevent: Destroying timer event 0x7f3d6023ef90 "tevent_req_timedout" > &response->data.nt5_ex: struct NETLOGON_SAM_LOGON_RESPONSE_EX > command : LOGON_SAM_LOGON_RESPONSE_EX (23) > sbz : 0x0000 (0) > server_type : 0x000073fd (29693) > 1: NBT_SERVER_PDC > 1: NBT_SERVER_GC > 1: NBT_SERVER_LDAP > 1: NBT_SERVER_DS > 1: NBT_SERVER_KDC > 1: NBT_SERVER_TIMESERV > 1: NBT_SERVER_CLOSEST > 1: NBT_SERVER_WRITABLE > 1: NBT_SERVER_GOOD_TIMESERV > 0: NBT_SERVER_NDNC > 0: NBT_SERVER_SELECT_SECRET_DOMAIN_6 > 1: NBT_SERVER_FULL_SECRET_DOMAIN_6 > 1: NBT_SERVER_ADS_WEB_SERVICE > 0: NBT_SERVER_HAS_DNS_NAME > 0: NBT_SERVER_IS_DEFAULT_NC > 0: NBT_SERVER_FOREST_ROOT > domain_uuid : 1c7a84b8-df8b-43b3-8e29-1a9d0e7ac73d > forest : 'adtest.qe' > dns_domain : 'adtest.qe' > pdc_dns_name : 'ad12srv1.adtest.qe' > domain_name : 'ADTEST' > pdc_name : 'AD12SRV1' > user_name : '' > server_site : 'Default-First-Site-Name' > client_site : 'Default-First-Site-Name' > sockaddr_size : 0x00 (0) > sockaddr: struct nbt_sockaddr > sockaddr_family : 0x00000000 (0) > pdc_ip : (null) > remaining : DATA_BLOB length=0 > next_closest_site : NULL > nt_version : 0x00000005 (5) > 1: NETLOGON_NT_VERSION_1 > 0: NETLOGON_NT_VERSION_5 > 1: NETLOGON_NT_VERSION_5EX > 0: NETLOGON_NT_VERSION_5EX_WITH_IP > 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE > 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL > 0: NETLOGON_NT_VERSION_PDC > 0: NETLOGON_NT_VERSION_IP > 0: NETLOGON_NT_VERSION_LOCAL > 0: NETLOGON_NT_VERSION_GC > lmnt_token : 0xffff (65535) > lm20_token : 0xffff (65535) >finddcs: Found matching DC 2620:52:0:41ce:c191:ad8a:e0f7:2c3a with server_type=0x000073fd >Using binding ncacn_np:ad12srv1.adtest.qe[,] >s4_tevent: Added timed event "dcerpc_connect_timeout_handler": 0x7f3d60356290 >s4_tevent: Added timed event "composite_trigger": 0x7f3d600e2500 >s4_tevent: Added timed event "composite_trigger": 0x7f3d603351d0 >s4_tevent: Running timer event 0x7f3d600e2500 "composite_trigger" >s4_tevent: Destroying timer event 0x7f3d603351d0 "composite_trigger" >Mapped to DCERPC endpoint \pipe\lsarpc >added interface enp9s0f0 ip=2620:52:0:102f:21e:67ff:fe65:9608 bcast= netmask=ffff:ffff:ffff:ffff:: >added interface enp9s0f0 ip=10.16.44.98 bcast=10.16.47.255 netmask=255.255.248.0 >added interface enp9s0f0 ip=2620:52:0:102f:21e:67ff:fe65:9608 bcast= netmask=ffff:ffff:ffff:ffff:: >added interface enp9s0f0 ip=10.16.44.98 bcast=10.16.47.255 netmask=255.255.248.0 >s4_tevent: Ending timer event 0x7f3d600e2500 "composite_trigger" >s4_tevent: Added timed event "connect_multi_timer": 0x7f3d6016b0d0 >s4_tevent: Running timer event 0x7f3d6016b0d0 "connect_multi_timer" >s4_tevent: Added timed event "connect_multi_timer": 0x7f3d60337070 >s4_tevent: Ending timer event 0x7f3d6016b0d0 "connect_multi_timer" >s4_tevent: Running timer event 0x7f3d60337070 "connect_multi_timer" >s4_tevent: Added timed event "connect_multi_timer": 0x7f3d6016d590 >s4_tevent: Ending timer event 0x7f3d60337070 "connect_multi_timer" >s4_tevent: Running timer event 0x7f3d6016d590 "connect_multi_timer" >s4_tevent: Ending timer event 0x7f3d6016d590 "connect_multi_timer" >s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7f3d60238150 >s4_tevent: Run immediate event "tevent_req_trigger": 0x7f3d60238150 >Socket options: > SO_KEEPALIVE = 0 > SO_REUSEADDR = 0 > SO_BROADCAST = 0 > TCP_NODELAY = 1 > TCP_KEEPCNT = 9 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_REUSEPORT = 0 > SO_SNDBUF = 22080 > SO_RCVBUF = 87380 > SO_SNDLOWAT = 1 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 > TCP_QUICKACK = 1 > TCP_DEFER_ACCEPT = 0 >s4_tevent: Added timed event "tevent_req_timedout": 0x7f3d600e4490 >s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7f3d600e40a0 >s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7f3d600e40a0 >s4_tevent: Destroying timer event 0x7f3d600e4490 "tevent_req_timedout" >Starting GENSEC mechanism spnego >Starting GENSEC submechanism gssapi_krb5 >Ticket in credentials cache for @TESTRELM will expire in 86399 secs >Server cifs/ad12srv1.adtest.qe@ is not registered with our KDC: Unspecified GSS failure. Minor code may provide more information: Server krbtgt/ADTEST.QE@TESTRELM.COM not found in Kerberos database >SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_INVALID_PARAMETER >SPNEGO: Could not find a suitable mechtype in NEG_TOKEN_INIT >Failed initial gensec_update with mechanism spnego: NT_STATUS_INVALID_PARAMETER >s4_tevent: Added timed event "composite_trigger": 0x7f3d600e2500 >s4_tevent: Destroying timer event 0x7f3d600e2500 "composite_trigger" >s4_tevent: Destroying timer event 0x7f3d60356290 "dcerpc_connect_timeout_handler" >[Thu Nov 21 11:02:16.129391 2013] [:error] [pid 131162] ipa: INFO: admin@TESTRELM.COM: trust_add(u'adtest.qe', trust_type=u'ad', realm_admin=u'Administrator', realm_passwd=u'********', all=False, raw=False, version=u'2.65'): RemoteRetrieveError >[Thu Nov 21 11:02:16.131054 2013] [:error] [pid 131162] ipa: ERROR: release_ipa_ccache: ccache_name (FILE:/var/run/ipa_memcached/krbcc_131162) != KRB5CCNAME environment variable (/var/run/ipa_memcached/krbcc_TDadtest-qe)
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=827403">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 1033216
: 827403