[2017/03/08 10:28:23.547510, 3, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3739(lp_load_ex) lp_load_ex: refreshing parameters [2017/03/08 10:28:23.547559, 5, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1312(free_param_opts) Freeing parametrics: [2017/03/08 10:28:23.547612, 3, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:543(init_globals) Initialising global parameters [2017/03/08 10:28:23.547635, 2, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:315(max_open_files) rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) [2017/03/08 10:28:23.547732, 3, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2668(lp_do_section) Processing section "[global]" doing parameter debug level = 10 [2017/03/08 10:28:23.547761, 5, pid=21493, effective(0, 0), real(0, 0)] ../lib/util/debug.c:642(debug_dump_status) INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10 passdb: 10 sam: 10 auth: 10 winbind: 10 vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 scavenger: 10 dns: 10 ldb: 10 tevent: 10 doing parameter logging = file doing parameter max log size = 0 doing parameter max open files = 32808 doing parameter server string = %h univention corporate server doing parameter ntlm auth = yes doing parameter machine password timeout = 0 doing parameter acl allow execute always = True doing parameter bind interfaces only = yes doing parameter interfaces = lo eth0 doing parameter netbios name = ucs-1950 doing parameter ldap suffix = dc=ltbtest,dc=intranet doing parameter ldap admin dn = "cn=ucs-1950,cn=memberserver,cn=computers,dc=ltbtest,dc=intranet" doing parameter ldap ssl = start tls doing parameter passdb expand explicit = no doing parameter ldap idmap suffix = cn=idmap,cn=univention doing parameter idmap config * : backend = ldap doing parameter idmap config * : range = 55000-64000 doing parameter idmap config * : ldap_url = ldap://ucs-7437.ltbtest.intranet:7389 doing parameter idmap config * : ldap_user_dn = cn=ucs-1950,cn=memberserver,cn=computers,dc=ltbtest,dc=intranet doing parameter idmap config LTBTEST : backend = nss doing parameter idmap config LTBTEST : range = 1000-54999 doing parameter winbind max clients = 500 doing parameter winbind nested groups = no doing parameter winbind enum users = yes doing parameter winbind enum groups = yes doing parameter winbind separator = + doing parameter template shell = /bin/bash doing parameter template homedir = /home/%D-%U doing parameter pam password change = no doing parameter unix password sync = no doing parameter passwd chat = *New*password* %n\n *Re-enter*new*password* %n\n *password*changed* doing parameter passwd chat timeout = 60 doing parameter client use spnego = yes doing parameter obey pam restrictions = yes doing parameter encrypt passwords = yes doing parameter spoolss: architecture = Windows x64 doing parameter security = ads doing parameter realm = LTBTEST.INTRANET doing parameter domain logons = no doing parameter domain master = no doing parameter preferred master = no doing parameter local master = no doing parameter os level = 65 doing parameter wins support = no doing parameter workgroup = LTBTEST doing parameter oplocks = yes doing parameter kernel oplocks = yes doing parameter large readwrite = yes doing parameter deadtime = 15 doing parameter read raw = yes doing parameter write raw = yes doing parameter max xmit = 65535 doing parameter getwd cache = yes doing parameter wide links = no doing parameter store dos attributes = yes doing parameter preserve case = yes doing parameter short preserve case = yes doing parameter time server = yes doing parameter host msdfs = no doing parameter msdfs root = no doing parameter guest account = nobody doing parameter map to guest = Bad User doing parameter admin users = administrator join-backup doing parameter set quota command = /usr/sbin/univention-setquota doing parameter check password script = /usr/share/univention-samba/password_check %u doing parameter usershare max shares = 0 doing parameter include = /etc/samba/base.conf [2017/03/08 10:28:23.548678, 2, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[homes]" [2017/03/08 10:28:23.548711, 8, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1428(add_a_service) add_a_service: Creating snum = 0 for homes [2017/03/08 10:28:23.548727, 10, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1469(hash_a_service) hash_a_service: creating servicehash [2017/03/08 10:28:23.548741, 10, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1478(hash_a_service) hash_a_service: hashing index 0 for service name homes doing parameter comment = Heimatverzeichnisse doing parameter browsable = no doing parameter read only = no doing parameter create mask = 0700 doing parameter directory mask = 0700 doing parameter vfs objects = acl_xattr [2017/03/08 10:28:23.548903, 2, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[printers]" [2017/03/08 10:28:23.548936, 8, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1428(add_a_service) add_a_service: Creating snum = 1 for printers [2017/03/08 10:28:23.548951, 10, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1478(hash_a_service) hash_a_service: hashing index 1 for service name printers doing parameter comment = Drucker doing parameter browseable = no doing parameter path = /tmp doing parameter printable = yes doing parameter public = no doing parameter writable = no doing parameter create mode = 0700 [2017/03/08 10:28:23.549047, 2, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[print$]" [2017/03/08 10:28:23.549080, 8, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1428(add_a_service) add_a_service: Creating snum = 2 for print$ [2017/03/08 10:28:23.549097, 10, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1478(hash_a_service) hash_a_service: hashing index 2 for service name print$ doing parameter comment = Printer Drivers doing parameter path = /var/lib/samba/drivers doing parameter browseable = yes doing parameter guest ok = no doing parameter read only = no doing parameter write list = root, Administrator, @Printer-Admins doing parameter include = /etc/samba/shares.conf doing parameter include = /etc/samba/local.conf [2017/03/08 10:28:23.549284, 4, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3780(lp_load_ex) pm_process() returned Yes [2017/03/08 10:28:23.549325, 8, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1428(add_a_service) add_a_service: Creating snum = 3 for IPC$ [2017/03/08 10:28:23.549347, 10, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1478(hash_a_service) hash_a_service: hashing index 3 for service name IPC$ [2017/03/08 10:28:23.549366, 3, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1585(lp_add_ipc) adding IPC service [2017/03/08 10:28:23.549397, 6, pid=21493, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/local.conf -> /etc/samba/local.conf last mod_time: Wed Mar 8 08:59:21 2017 file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Wed Mar 8 10:07:46 2017 file /etc/samba/base.conf -> /etc/samba/base.conf last mod_time: Wed Mar 8 09:02:11 2017 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Mar 8 10:28:18 2017 [2017/03/08 10:28:23.549734, 2, pid=21493, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) added interface lo ip=::1 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff [2017/03/08 10:28:23.549777, 2, pid=21493, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) added interface lo ip=127.0.0.1 bcast=127.255.255.255 netmask=255.0.0.0 [2017/03/08 10:28:23.549797, 2, pid=21493, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) added interface eth0 ip=10.200.42.176 bcast=10.200.42.255 netmask=255.255.255.0 [2017/03/08 10:28:23.549837, 3, pid=21493, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1705(main) loaded services [2017/03/08 10:28:23.549860, 5, pid=21493, effective(0, 0), real(0, 0)] ../source3/lib/util_names.c:152(init_names) Netbios name list:- my_netbios_names[0]="UCS-1950" [2017/03/08 10:28:23.549925, 1, pid=21493, effective(0, 0), real(0, 0)] ../source3/profile/profile_dummy.c:30(set_profile_level) INFO: Profiling support unavailable in this build. [2017/03/08 10:28:23.549950, 3, pid=21493, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1737(main) Becoming a daemon. [2017/03/08 10:28:23.552539, 8, pid=21494, effective(0, 0), real(0, 0)] ../lib/util/util.c:390(fcntl_lock) fcntl_lock 12 6 0 1 1 [2017/03/08 10:28:23.552627, 8, pid=21494, effective(0, 0), real(0, 0)] ../lib/util/util.c:425(fcntl_lock) fcntl_lock: Lock call successful [2017/03/08 10:28:23.552914, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2017/03/08 10:28:23.553106, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Erfolg [2017/03/08 10:28:23.553137, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 12485708204199184008 [2017/03/08 10:28:23.553230, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:79(smb_register_passdb) Attempting to register passdb backend smbpasswd [2017/03/08 10:28:23.553264, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:92(smb_register_passdb) Successfully added passdb backend 'smbpasswd' [2017/03/08 10:28:23.553278, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:79(smb_register_passdb) Attempting to register passdb backend tdbsam [2017/03/08 10:28:23.553292, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:92(smb_register_passdb) Successfully added passdb backend 'tdbsam' [2017/03/08 10:28:23.553305, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:79(smb_register_passdb) Attempting to register passdb backend wbc_sam [2017/03/08 10:28:23.553319, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:92(smb_register_passdb) Successfully added passdb backend 'wbc_sam' [2017/03/08 10:28:23.553332, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:79(smb_register_passdb) Attempting to register passdb backend samba_dsdb [2017/03/08 10:28:23.553345, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:92(smb_register_passdb) Successfully added passdb backend 'samba_dsdb' [2017/03/08 10:28:23.553358, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:79(smb_register_passdb) Attempting to register passdb backend samba4 [2017/03/08 10:28:23.553372, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:92(smb_register_passdb) Successfully added passdb backend 'samba4' [2017/03/08 10:28:23.553390, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:79(smb_register_passdb) Attempting to register passdb backend ldapsam [2017/03/08 10:28:23.553404, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:92(smb_register_passdb) Successfully added passdb backend 'ldapsam' [2017/03/08 10:28:23.553430, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:79(smb_register_passdb) Attempting to register passdb backend NDS_ldapsam [2017/03/08 10:28:23.553444, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:92(smb_register_passdb) Successfully added passdb backend 'NDS_ldapsam' [2017/03/08 10:28:23.553462, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:79(smb_register_passdb) Attempting to register passdb backend IPA_ldapsam [2017/03/08 10:28:23.553477, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:92(smb_register_passdb) Successfully added passdb backend 'IPA_ldapsam' [2017/03/08 10:28:23.553492, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:155(make_pdb_method_name) Attempting to find a passdb backend to match tdbsam (tdbsam) [2017/03/08 10:28:23.553506, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:176(make_pdb_method_name) Found pdb backend tdbsam [2017/03/08 10:28:23.553532, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:187(make_pdb_method_name) pdb backend tdbsam has a valid init [2017/03/08 10:28:23.553872, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_version_global.tdb [2017/03/08 10:28:23.553900, 10, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_version_global.tdb 2: 3: [2017/03/08 10:28:23.553920, 10, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 736D62587372765F7665 [2017/03/08 10:28:23.553938, 10, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5631185fbed0 [2017/03/08 10:28:23.554047, 10, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 736D62587372765F7665 [2017/03/08 10:28:23.554072, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_version_global.tdb [2017/03/08 10:28:23.554086, 10, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:28:23.554102, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:250(smbXsrv_version_global_init) smbXsrv_version_global_init [2017/03/08 10:28:23.554115, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:251(smbXsrv_version_global_init) [2017/03/08 10:28:23.554125, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_version_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_version_globalU(case 0) info0 : * info0: struct smbXsrv_version_global0 db_rec : NULL num_nodes : 0x00000001 (1) nodes: ARRAY(1) nodes: struct smbXsrv_version_node0 server_id: struct server_id pid : 0x00000000000053f6 (21494) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xad462575a8790688 (-5961035869510367608) min_version : SMBXSRV_VERSION_0 (0) max_version : SMBXSRV_VERSION_0 (0) current_version : SMBXSRV_VERSION_0 (0) [2017/03/08 10:28:23.557391, 3, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/util_procid.c:54(pid_to_procid) pid_to_procid: messaging_dgm_get_unique failed: Datei oder Verzeichnis nicht gefunden [2017/03/08 10:28:23.559005, 10, pid=21498, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2017/03/08 10:28:23.559518, 10, pid=21498, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Erfolg [2017/03/08 10:28:23.559550, 10, pid=21498, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 17838077715734292891 [2017/03/08 10:28:23.559590, 5, pid=21498, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 13 - private_data=0x5631185fdb00 [2017/03/08 10:28:23.559610, 5, pid=21498, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 788 - private_data=0x5631185fdb00 [2017/03/08 10:28:23.559625, 5, pid=21498, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 773 - private_data=(nil) [2017/03/08 10:28:23.559660, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:580(cleanupd_init) cleanupd_init: Started cleanupd pid=21498 [2017/03/08 10:28:23.559760, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 789 - private_data=0x5631185fe250 [2017/03/08 10:28:23.559907, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:768(regdb_init) regdb_init: registry db openend. refcount reset (1) [2017/03/08 10:28:23.559941, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:70(reghook_cache_init) reghook_cache_init: new tree with default ops 0x7f75e0cf2020 for key [] [2017/03/08 10:28:23.560066, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2017/03/08 10:28:23.560103, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Samba Printer Port] len[2] [2017/03/08 10:28:23.560126, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2017/03/08 10:28:23.560151, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[DefaultSpoolDirectory] len[70] [2017/03/08 10:28:23.560169, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2017/03/08 10:28:23.560193, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[DisplayName] len[20] [2017/03/08 10:28:23.560211, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[1]: name[ErrorControl] len[4] [2017/03/08 10:28:23.560227, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2017/03/08 10:28:23.560265, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[DisplayName] len[20] [2017/03/08 10:28:23.560283, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[1]: name[ErrorControl] len[4] [2017/03/08 10:28:23.560309, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f75e1842920 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] [2017/03/08 10:28:23.560327, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2017/03/08 10:28:23.560344, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] to tree [2017/03/08 10:28:23.560359, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2017/03/08 10:28:23.560372, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f75e0cf2020 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2017/03/08 10:28:23.560386, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2017/03/08 10:28:23.560402, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] to tree [2017/03/08 10:28:23.560424, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2017/03/08 10:28:23.560438, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f75e0cf2020 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2017/03/08 10:28:23.560452, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2017/03/08 10:28:23.560468, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] to tree [2017/03/08 10:28:23.560482, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2017/03/08 10:28:23.560495, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f75e1842980 for key [\HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] [2017/03/08 10:28:23.560509, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2017/03/08 10:28:23.560524, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] to tree [2017/03/08 10:28:23.560538, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2017/03/08 10:28:23.560551, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f75df58e500 for key [\HKLM\SOFTWARE\Samba\smbconf] [2017/03/08 10:28:23.560565, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2017/03/08 10:28:23.560579, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Samba\smbconf] to tree [2017/03/08 10:28:23.560599, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2017/03/08 10:28:23.560613, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f75e18429e0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] [2017/03/08 10:28:23.560627, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2017/03/08 10:28:23.560643, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] to tree [2017/03/08 10:28:23.560656, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2017/03/08 10:28:23.560669, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f75e1842a40 for key [\HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] [2017/03/08 10:28:23.560683, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2017/03/08 10:28:23.560698, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] to tree [2017/03/08 10:28:23.560712, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2017/03/08 10:28:23.560725, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f75e1842aa0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] [2017/03/08 10:28:23.560738, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2017/03/08 10:28:23.560952, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] to tree [2017/03/08 10:28:23.560990, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2017/03/08 10:28:23.561007, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f75e1842b00 for key [\HKPT] [2017/03/08 10:28:23.561021, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2017/03/08 10:28:23.561035, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKPT] to tree [2017/03/08 10:28:23.561048, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2017/03/08 10:28:23.561062, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f75e1842b60 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] [2017/03/08 10:28:23.561075, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2017/03/08 10:28:23.561090, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] to tree [2017/03/08 10:28:23.561103, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2017/03/08 10:28:23.561116, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f75e1842bc0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] [2017/03/08 10:28:23.561138, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2017/03/08 10:28:23.561155, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] to tree [2017/03/08 10:28:23.561169, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2017/03/08 10:28:23.561183, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (1->0) [2017/03/08 10:28:23.561307, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2017/03/08 10:28:23.561333, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2017/03/08 10:28:23.561705, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2017/03/08 10:28:23.561752, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user UCS-1950+nobody [2017/03/08 10:28:23.561768, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is ucs-1950+nobody [2017/03/08 10:28:23.562963, 10, pid=21497, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2017/03/08 10:28:23.563231, 10, pid=21497, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Erfolg [2017/03/08 10:28:23.563263, 10, pid=21497, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 2741819754152522644 [2017/03/08 10:28:23.563502, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/username.c:128(Get_Pwnam_internals) Trying _Get_Pwnam(), username as given is UCS-1950+nobody [2017/03/08 10:28:23.563963, 4, pid=21497, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.563999, 4, pid=21497, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:28:23.564022, 4, pid=21497, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.564042, 5, pid=21497, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:28:23.564059, 5, pid=21497, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:28:23.564096, 10, pid=21497, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 21494 [2017/03/08 10:28:23.564138, 4, pid=21497, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:28:23.564630, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/username.c:141(Get_Pwnam_internals) Trying _Get_Pwnam(), username as uppercase is UCS-1950+NOBODY [2017/03/08 10:28:23.565786, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/username.c:153(Get_Pwnam_internals) Checking combinations of 0 uppercase letters in ucs-1950+nobody [2017/03/08 10:28:23.565819, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals didn't find user [UCS-1950+nobody]! [2017/03/08 10:28:23.565847, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2017/03/08 10:28:23.565861, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2017/03/08 10:28:23.565878, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2017/03/08 10:28:23.566268, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:224(create_local_nt_token_from_info3) Create local NT token for nobody [2017/03/08 10:28:23.566299, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2017/03/08 10:28:23.566315, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2017/03/08 10:28:23.566331, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2017/03/08 10:28:23.566365, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist) sys_getgrouplist: user [nobody] [2017/03/08 10:28:23.567673, 5, pid=21494, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:69(gencache_init) Opening cache file at /var/cache/samba/gencache.tdb [2017/03/08 10:28:23.567815, 5, pid=21494, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:120(gencache_init) Opening cache file at /var/run/samba/gencache_notrans.tdb [2017/03/08 10:28:23.571909, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid) gid 65534 -> sid S-1-22-2-65534 [2017/03/08 10:28:23.572085, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.572118, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:28:23.572139, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.572154, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:28:23.572168, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:28:23.572231, 10, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1563(pdb_default_sid_to_id) Could not find map for sid S-1-5-32-544 [2017/03/08 10:28:23.572255, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/passdb/pdb_util.c:157(create_builtin_administrators) create_builtin_administrators: Failed to create Administrators [2017/03/08 10:28:23.572275, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:28:23.572305, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.572323, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:28:23.572336, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.572349, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:28:23.572361, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:28:23.572412, 10, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1563(pdb_default_sid_to_id) Could not find map for sid S-1-5-32-545 [2017/03/08 10:28:23.572433, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/passdb/pdb_util.c:128(create_builtin_users) create_builtin_users: Failed to create Users [2017/03/08 10:28:23.572450, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:28:23.572512, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-232158225-1150262950-2424647211-501] [2017/03/08 10:28:23.572541, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-232158225-1150262950-2424647211-514] [2017/03/08 10:28:23.572563, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-22-2-65534] [2017/03/08 10:28:23.572584, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-1-0 Privilege set: 0x0 [2017/03/08 10:28:23.572606, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-2] [2017/03/08 10:28:23.572626, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2017/03/08 10:28:23.572664, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-232158225-1150262950-2424647211-501]: value=[65534:U] [2017/03/08 10:28:23.572681, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-232158225-1150262950-2424647211-501]: id=[65534], endptr=[:U] [2017/03/08 10:28:23.572713, 10, pid=21494, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:326(gencache_set_data_blob) Adding cache entry with key=[IDMAP/SID2XID/S-1-5-21-232158225-1150262950-2424647211-514] and timeout=[Do Jan 1 01:00:00 1970 CET] (-1488965303 seconds in the past) [2017/03/08 10:28:23.575249, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-1-0]: value=[55000:G] [2017/03/08 10:28:23.575282, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-1-0]: id=[55000], endptr=[:G] [2017/03/08 10:28:23.575310, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-2]: value=[55001:G] [2017/03/08 10:28:23.575326, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-2]: id=[55001], endptr=[:G] [2017/03/08 10:28:23.575354, 10, pid=21494, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:326(gencache_set_data_blob) Adding cache entry with key=[IDMAP/SID2XID/S-1-5-32-546] and timeout=[Do Jan 1 01:00:00 1970 CET] (-1488965303 seconds in the past) [2017/03/08 10:28:23.582200, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.582256, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:28:23.582273, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.582303, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:28:23.582319, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:28:23.582355, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1749(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 514. [2017/03/08 10:28:23.582375, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2017/03/08 10:28:23.582390, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2017/03/08 10:28:23.582403, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2017/03/08 10:28:23.582415, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:28:23.582428, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:28:23.582512, 4, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:558(tdbsam_open) tdbsam_open: successfully opened /var/lib/samba/private/passdb.tdb [2017/03/08 10:28:23.582539, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:658(tdbsam_getsampwrid) pdb_getsampwrid (TDB): error looking up RID 514 by key RID_00000202. [2017/03/08 10:28:23.582571, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.582589, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1825(lookup_global_sam_rid) Can't find a unix id for an unmapped group [2017/03/08 10:28:23.582602, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1535(pdb_default_sid_to_id) SID S-1-5-21-232158225-1150262950-2424647211-514 belongs to our domain, but there is no corresponding object in the database. [2017/03/08 10:28:23.582624, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:28:23.582639, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-21-232158225-1150262950-2424647211-514 [2017/03/08 10:28:23.582656, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.582670, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:28:23.582683, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.582696, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:28:23.582708, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:28:23.582728, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1749(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 514. [2017/03/08 10:28:23.582745, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2017/03/08 10:28:23.582759, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2017/03/08 10:28:23.582780, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2017/03/08 10:28:23.582793, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:28:23.582805, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:28:23.582831, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:658(tdbsam_getsampwrid) pdb_getsampwrid (TDB): error looking up RID 514 by key RID_00000202. [2017/03/08 10:28:23.582859, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.582876, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1825(lookup_global_sam_rid) Can't find a unix id for an unmapped group [2017/03/08 10:28:23.582889, 5, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1535(pdb_default_sid_to_id) SID S-1-5-21-232158225-1150262950-2424647211-514 belongs to our domain, but there is no corresponding object in the database. [2017/03/08 10:28:23.582908, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:28:23.582923, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-21-232158225-1150262950-2424647211-514 [2017/03/08 10:28:23.582939, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.582953, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:28:23.582966, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.582978, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:28:23.582991, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:28:23.583019, 10, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1563(pdb_default_sid_to_id) Could not find map for sid S-1-5-32-546 [2017/03/08 10:28:23.583045, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:28:23.583061, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-32-546 [2017/03/08 10:28:23.583075, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.583089, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:28:23.583103, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.583156, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:28:23.583172, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:28:23.583213, 10, pid=21494, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1563(pdb_default_sid_to_id) Could not find map for sid S-1-5-32-546 [2017/03/08 10:28:23.583237, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:28:23.583252, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-32-546 [2017/03/08 10:28:23.583268, 10, pid=21494, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:609(create_local_token) Could not convert SID S-1-5-21-232158225-1150262950-2424647211-514 to gid, ignoring it [2017/03/08 10:28:23.583288, 10, pid=21494, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:609(create_local_token) Could not convert SID S-1-5-32-546 to gid, ignoring it [2017/03/08 10:28:23.583308, 10, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (9): SID[ 0]: S-1-5-21-232158225-1150262950-2424647211-501 SID[ 1]: S-1-5-21-232158225-1150262950-2424647211-514 SID[ 2]: S-1-22-2-65534 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-65534 SID[ 7]: S-1-22-2-55000 SID[ 8]: S-1-22-2-55001 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:28:23.583369, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 65534 Primary group is 65534 and contains 3 supplementary groups Group[ 0]: 65534 Group[ 1]: 55000 Group[ 2]: 55001 [2017/03/08 10:28:23.583695, 3, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/rpc_server/svcctl/srv_svcctl_reg.c:565(svcctl_init_winreg) Initialise the svcctl registry keys if needed. [2017/03/08 10:28:23.583727, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.583742, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:28:23.583756, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.583769, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:28:23.583781, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:28:23.583842, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:28:23.583865, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:885(regdb_open) regdb_open: registry db opened. refcount reset (1) [2017/03/08 10:28:23.584062, 4, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:203(make_internal_rpc_pipe_p) Create pipe requested winreg [2017/03/08 10:28:23.584095, 10, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:223(init_pipe_handles) init_pipe_handle_list: created handle list for pipe winreg [2017/03/08 10:28:23.584112, 10, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:240(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe winreg [2017/03/08 10:28:23.584165, 4, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:243(make_internal_rpc_pipe_p) Created internal pipe winreg [2017/03/08 10:28:23.584230, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2017/03/08 10:28:23.584317, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2017/03/08 10:28:23.584334, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (1->2) [2017/03/08 10:28:23.584351, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2017/03/08 10:28:23.584366, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2017/03/08 10:28:23.584381, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.584393, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM] [2017/03/08 10:28:23.584444, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.584489, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-bf58-b7cef6530000 result : WERR_OK [2017/03/08 10:28:23.584624, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-bf58-b7cef6530000 keyname: struct winreg_String name_len : 0x0044 (68) name_size : 0x0044 (68) name : * name : 'SYSTEM\CurrentControlSet\Services' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2017/03/08 10:28:23.584811, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.584870, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2017/03/08 10:28:23.584889, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (2->3) [2017/03/08 10:28:23.584905, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2017/03/08 10:28:23.584919, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2017/03/08 10:28:23.584933, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.584946, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM] [2017/03/08 10:28:23.584972, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2017/03/08 10:28:23.584990, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2017/03/08 10:28:23.585011, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.585025, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.585041, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.585053, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.585078, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2017/03/08 10:28:23.585096, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.585111, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.585124, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.585140, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.585152, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.585191, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.585210, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2017/03/08 10:28:23.585227, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[2] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.585274, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-bf58-b7cef6530000 result : WERR_OK [2017/03/08 10:28:23.585355, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-bf58-b7cef6530000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2017/03/08 10:28:23.585431, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.585474, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services' (ops 0x7f75e0cf2020) [2017/03/08 10:28:23.585490, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.585513, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2088(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.585538, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000007 (7) max_subkeylen : * max_subkeylen : 0x0000001c (28) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000000 (0) max_valnamelen : * max_valnamelen : 0x00000002 (2) max_valbufsize : * max_valbufsize : 0x00000000 (0) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2017/03/08 10:28:23.585711, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-bf58-b7cef6530000 enum_index : 0x00000000 (0) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2017/03/08 10:28:23.585835, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.585875, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.585901, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x001a (26) size : 0x001e (30) name : * name : 'LanmanServer' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2017/03/08 10:28:23.586056, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-bf58-b7cef6530000 enum_index : 0x00000001 (1) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2017/03/08 10:28:23.586172, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.586219, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.586236, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0012 (18) size : 0x001e (30) name : * name : 'Eventlog' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2017/03/08 10:28:23.586351, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-bf58-b7cef6530000 enum_index : 0x00000002 (2) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2017/03/08 10:28:23.586463, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.586502, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.586518, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x000c (12) size : 0x001e (30) name : * name : 'Tcpip' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2017/03/08 10:28:23.586629, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-bf58-b7cef6530000 enum_index : 0x00000003 (3) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2017/03/08 10:28:23.586750, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.586789, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.586804, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0012 (18) size : 0x001e (30) name : * name : 'Netlogon' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2017/03/08 10:28:23.586917, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-bf58-b7cef6530000 enum_index : 0x00000004 (4) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2017/03/08 10:28:23.587030, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.587077, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.587093, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0010 (16) size : 0x001e (30) name : * name : 'Spooler' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2017/03/08 10:28:23.587214, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-bf58-b7cef6530000 enum_index : 0x00000005 (5) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2017/03/08 10:28:23.587328, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.587367, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.587383, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x001e (30) size : 0x001e (30) name : * name : 'RemoteRegistry' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2017/03/08 10:28:23.587507, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-bf58-b7cef6530000 enum_index : 0x00000006 (6) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2017/03/08 10:28:23.587622, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.587662, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.587678, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x000a (10) size : 0x001e (30) name : * name : 'WINS' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2017/03/08 10:28:23.587804, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0054 (84) name_size : 0x0054 (84) name : * name : 'SYSTEM\CurrentControlSet\Services\Spooler' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2017/03/08 10:28:23.587981, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.588022, 10, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler' [2017/03/08 10:28:23.588040, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.588056, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.588070, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2017/03/08 10:28:23.588085, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2017/03/08 10:28:23.588100, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2017/03/08 10:28:23.588113, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2017/03/08 10:28:23.588127, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.588140, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM] [2017/03/08 10:28:23.588167, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.588184, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2017/03/08 10:28:23.588199, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.588214, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.588227, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.588241, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.588254, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.588287, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.588308, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.588322, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2017/03/08 10:28:23.588337, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.588352, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.588365, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.588380, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.588392, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.588426, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.588444, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Spooler] [2017/03/08 10:28:23.588459, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.588474, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2017/03/08 10:28:23.588487, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2017/03/08 10:28:23.589892, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.589912, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2017/03/08 10:28:23.589958, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.589984, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.590027, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-bf58-b7cef6530000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2017/03/08 10:28:23.590156, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2017/03/08 10:28:23.590287, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.590328, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Start] [2017/03/08 10:28:23.590347, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.590361, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler' (ops 0x7f75e0cf2020) [2017/03/08 10:28:23.590377, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2017/03/08 10:28:23.590403, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Start] len[4] [2017/03/08 10:28:23.590421, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[1]: name[Type] len[4] [2017/03/08 10:28:23.590437, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[2]: name[ErrorControl] len[4] [2017/03/08 10:28:23.590452, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[3]: name[ObjectName] len[24] [2017/03/08 10:28:23.590468, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[4]: name[DisplayName] len[28] [2017/03/08 10:28:23.590483, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[5]: name[ImagePath] len[88] [2017/03/08 10:28:23.590499, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[6]: name[Description] len[106] [2017/03/08 10:28:23.590515, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.590570, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2017/03/08 10:28:23.590688, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.590729, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Type] [2017/03/08 10:28:23.590745, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.590761, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.590811, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2017/03/08 10:28:23.590920, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.590959, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ErrorControl] [2017/03/08 10:28:23.590976, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.590992, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.591060, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2017/03/08 10:28:23.591268, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.591306, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ObjectName] [2017/03/08 10:28:23.591323, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.591339, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.591404, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(28) [0] : 0x50 (80) [1] : 0x00 (0) [2] : 0x72 (114) [3] : 0x00 (0) [4] : 0x69 (105) [5] : 0x00 (0) [6] : 0x6e (110) [7] : 0x00 (0) [8] : 0x74 (116) [9] : 0x00 (0) [10] : 0x20 (32) [11] : 0x00 (0) [12] : 0x53 (83) [13] : 0x00 (0) [14] : 0x70 (112) [15] : 0x00 (0) [16] : 0x6f (111) [17] : 0x00 (0) [18] : 0x6f (111) [19] : 0x00 (0) [20] : 0x6c (108) [21] : 0x00 (0) [22] : 0x65 (101) [23] : 0x00 (0) [24] : 0x72 (114) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) size : 0x0000001c (28) [2017/03/08 10:28:23.591645, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.591685, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:DisplayName] [2017/03/08 10:28:23.591702, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.591719, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.591772, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(88) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x2f (47) [17] : 0x00 (0) [18] : 0x78 (120) [19] : 0x00 (0) [20] : 0x38 (56) [21] : 0x00 (0) [22] : 0x36 (54) [23] : 0x00 (0) [24] : 0x5f (95) [25] : 0x00 (0) [26] : 0x36 (54) [27] : 0x00 (0) [28] : 0x34 (52) [29] : 0x00 (0) [30] : 0x2d (45) [31] : 0x00 (0) [32] : 0x6c (108) [33] : 0x00 (0) [34] : 0x69 (105) [35] : 0x00 (0) [36] : 0x6e (110) [37] : 0x00 (0) [38] : 0x75 (117) [39] : 0x00 (0) [40] : 0x78 (120) [41] : 0x00 (0) [42] : 0x2d (45) [43] : 0x00 (0) [44] : 0x67 (103) [45] : 0x00 (0) [46] : 0x6e (110) [47] : 0x00 (0) [48] : 0x75 (117) [49] : 0x00 (0) [50] : 0x2f (47) [51] : 0x00 (0) [52] : 0x73 (115) [53] : 0x00 (0) [54] : 0x61 (97) [55] : 0x00 (0) [56] : 0x6d (109) [57] : 0x00 (0) [58] : 0x62 (98) [59] : 0x00 (0) [60] : 0x61 (97) [61] : 0x00 (0) [62] : 0x2f (47) [63] : 0x00 (0) [64] : 0x73 (115) [65] : 0x00 (0) [66] : 0x76 (118) [67] : 0x00 (0) [68] : 0x63 (99) [69] : 0x00 (0) [70] : 0x63 (99) [71] : 0x00 (0) [72] : 0x74 (116) [73] : 0x00 (0) [74] : 0x6c (108) [75] : 0x00 (0) [76] : 0x2f (47) [77] : 0x00 (0) [78] : 0x73 (115) [79] : 0x00 (0) [80] : 0x6d (109) [81] : 0x00 (0) [82] : 0x62 (98) [83] : 0x00 (0) [84] : 0x64 (100) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x00 (0) size : 0x00000058 (88) [2017/03/08 10:28:23.592311, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.592350, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ImagePath] [2017/03/08 10:28:23.592367, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.592383, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.592436, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(106) [0] : 0x49 (73) [1] : 0x00 (0) [2] : 0x6e (110) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x6e (110) [11] : 0x00 (0) [12] : 0x61 (97) [13] : 0x00 (0) [14] : 0x6c (108) [15] : 0x00 (0) [16] : 0x20 (32) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x65 (101) [21] : 0x00 (0) [22] : 0x72 (114) [23] : 0x00 (0) [24] : 0x76 (118) [25] : 0x00 (0) [26] : 0x69 (105) [27] : 0x00 (0) [28] : 0x63 (99) [29] : 0x00 (0) [30] : 0x65 (101) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x66 (102) [35] : 0x00 (0) [36] : 0x6f (111) [37] : 0x00 (0) [38] : 0x72 (114) [39] : 0x00 (0) [40] : 0x20 (32) [41] : 0x00 (0) [42] : 0x73 (115) [43] : 0x00 (0) [44] : 0x70 (112) [45] : 0x00 (0) [46] : 0x6f (111) [47] : 0x00 (0) [48] : 0x6f (111) [49] : 0x00 (0) [50] : 0x6c (108) [51] : 0x00 (0) [52] : 0x69 (105) [53] : 0x00 (0) [54] : 0x6e (110) [55] : 0x00 (0) [56] : 0x67 (103) [57] : 0x00 (0) [58] : 0x20 (32) [59] : 0x00 (0) [60] : 0x66 (102) [61] : 0x00 (0) [62] : 0x69 (105) [63] : 0x00 (0) [64] : 0x6c (108) [65] : 0x00 (0) [66] : 0x65 (101) [67] : 0x00 (0) [68] : 0x73 (115) [69] : 0x00 (0) [70] : 0x20 (32) [71] : 0x00 (0) [72] : 0x74 (116) [73] : 0x00 (0) [74] : 0x6f (111) [75] : 0x00 (0) [76] : 0x20 (32) [77] : 0x00 (0) [78] : 0x70 (112) [79] : 0x00 (0) [80] : 0x72 (114) [81] : 0x00 (0) [82] : 0x69 (105) [83] : 0x00 (0) [84] : 0x6e (110) [85] : 0x00 (0) [86] : 0x74 (116) [87] : 0x00 (0) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x64 (100) [91] : 0x00 (0) [92] : 0x65 (101) [93] : 0x00 (0) [94] : 0x76 (118) [95] : 0x00 (0) [96] : 0x69 (105) [97] : 0x00 (0) [98] : 0x63 (99) [99] : 0x00 (0) [100] : 0x65 (101) [101] : 0x00 (0) [102] : 0x73 (115) [103] : 0x00 (0) [104] : 0x00 (0) [105] : 0x00 (0) size : 0x0000006a (106) [2017/03/08 10:28:23.594428, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.594481, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Description] [2017/03/08 10:28:23.594502, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.594524, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.594604, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-bf58-b7cef6530000 [2017/03/08 10:28:23.594654, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.594693, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.594729, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2017/03/08 10:28:23.594745, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2017/03/08 10:28:23.594760, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2017/03/08 10:28:23.594840, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0066 (102) name_size : 0x0066 (102) name : * name : 'SYSTEM\CurrentControlSet\Services\Spooler\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2017/03/08 10:28:23.595021, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.595061, 10, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler\Security' [2017/03/08 10:28:23.595079, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.595095, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.595109, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2017/03/08 10:28:23.595125, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2017/03/08 10:28:23.595142, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2017/03/08 10:28:23.595157, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2017/03/08 10:28:23.595173, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.595186, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM] [2017/03/08 10:28:23.595221, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.595238, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2017/03/08 10:28:23.595252, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.595274, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.595288, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.595302, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.595315, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.595347, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.595366, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.595381, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2017/03/08 10:28:23.595395, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.595410, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.595424, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.595440, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.595452, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.595487, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.595506, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.595520, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Spooler] [2017/03/08 10:28:23.595534, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.595549, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2017/03/08 10:28:23.595562, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2017/03/08 10:28:23.595578, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.595591, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2017/03/08 10:28:23.595615, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.595642, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2017/03/08 10:28:23.595658, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.595673, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2017/03/08 10:28:23.595687, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2017/03/08 10:28:23.595702, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.595714, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2017/03/08 10:28:23.595736, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.595758, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.595798, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000004-0000-0000-bf58-b7cef6530000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2017/03/08 10:28:23.595896, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000004-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2017/03/08 10:28:23.596591, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.596631, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security:Security] [2017/03/08 10:28:23.596649, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.596663, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security' (ops 0x7f75e0cf2020) [2017/03/08 10:28:23.596679, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2017/03/08 10:28:23.596705, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Security] len[120] [2017/03/08 10:28:23.596723, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.597990, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000004-0000-0000-bf58-b7cef6530000 [2017/03/08 10:28:23.598073, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.598116, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.598152, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2017/03/08 10:28:23.598168, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2017/03/08 10:28:23.598183, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2017/03/08 10:28:23.598270, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0056 (86) name_size : 0x0056 (86) name : * name : 'SYSTEM\CurrentControlSet\Services\NETLOGON' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2017/03/08 10:28:23.598442, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.598481, 10, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON' [2017/03/08 10:28:23.598508, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.598525, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.598540, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2017/03/08 10:28:23.598556, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2017/03/08 10:28:23.598572, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2017/03/08 10:28:23.598587, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2017/03/08 10:28:23.598602, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.598614, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM] [2017/03/08 10:28:23.598648, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.598665, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2017/03/08 10:28:23.598679, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.598694, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.598707, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.598722, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.598734, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.598760, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.598778, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.598792, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2017/03/08 10:28:23.598806, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.598821, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.598834, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.598850, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.598868, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.598911, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.598930, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [NETLOGON] [2017/03/08 10:28:23.598945, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.598960, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2017/03/08 10:28:23.598974, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2017/03/08 10:28:23.598990, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.599002, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2017/03/08 10:28:23.599029, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.599051, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.599091, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-bf58-b7cef6530000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2017/03/08 10:28:23.599180, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2017/03/08 10:28:23.599291, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.599340, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Start] [2017/03/08 10:28:23.599358, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.599372, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON' (ops 0x7f75e0cf2020) [2017/03/08 10:28:23.599388, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2017/03/08 10:28:23.599423, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Start] len[4] [2017/03/08 10:28:23.599444, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[1]: name[Type] len[4] [2017/03/08 10:28:23.599460, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[2]: name[ErrorControl] len[4] [2017/03/08 10:28:23.599475, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[3]: name[ObjectName] len[24] [2017/03/08 10:28:23.599491, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[4]: name[DisplayName] len[20] [2017/03/08 10:28:23.599507, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[5]: name[ImagePath] len[88] [2017/03/08 10:28:23.599523, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[6]: name[Description] len[164] [2017/03/08 10:28:23.599540, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.599596, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2017/03/08 10:28:23.599705, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.599751, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Type] [2017/03/08 10:28:23.599768, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.599784, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.599835, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2017/03/08 10:28:23.599942, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.599980, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ErrorControl] [2017/03/08 10:28:23.599996, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.600012, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.600065, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2017/03/08 10:28:23.600280, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.600319, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ObjectName] [2017/03/08 10:28:23.600335, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.600351, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.600406, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(20) [0] : 0x4e (78) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x20 (32) [7] : 0x00 (0) [8] : 0x4c (76) [9] : 0x00 (0) [10] : 0x6f (111) [11] : 0x00 (0) [12] : 0x67 (103) [13] : 0x00 (0) [14] : 0x6f (111) [15] : 0x00 (0) [16] : 0x6e (110) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) size : 0x00000014 (20) [2017/03/08 10:28:23.600599, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.600638, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:DisplayName] [2017/03/08 10:28:23.600655, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.600671, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.600722, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(88) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x2f (47) [17] : 0x00 (0) [18] : 0x78 (120) [19] : 0x00 (0) [20] : 0x38 (56) [21] : 0x00 (0) [22] : 0x36 (54) [23] : 0x00 (0) [24] : 0x5f (95) [25] : 0x00 (0) [26] : 0x36 (54) [27] : 0x00 (0) [28] : 0x34 (52) [29] : 0x00 (0) [30] : 0x2d (45) [31] : 0x00 (0) [32] : 0x6c (108) [33] : 0x00 (0) [34] : 0x69 (105) [35] : 0x00 (0) [36] : 0x6e (110) [37] : 0x00 (0) [38] : 0x75 (117) [39] : 0x00 (0) [40] : 0x78 (120) [41] : 0x00 (0) [42] : 0x2d (45) [43] : 0x00 (0) [44] : 0x67 (103) [45] : 0x00 (0) [46] : 0x6e (110) [47] : 0x00 (0) [48] : 0x75 (117) [49] : 0x00 (0) [50] : 0x2f (47) [51] : 0x00 (0) [52] : 0x73 (115) [53] : 0x00 (0) [54] : 0x61 (97) [55] : 0x00 (0) [56] : 0x6d (109) [57] : 0x00 (0) [58] : 0x62 (98) [59] : 0x00 (0) [60] : 0x61 (97) [61] : 0x00 (0) [62] : 0x2f (47) [63] : 0x00 (0) [64] : 0x73 (115) [65] : 0x00 (0) [66] : 0x76 (118) [67] : 0x00 (0) [68] : 0x63 (99) [69] : 0x00 (0) [70] : 0x63 (99) [71] : 0x00 (0) [72] : 0x74 (116) [73] : 0x00 (0) [74] : 0x6c (108) [75] : 0x00 (0) [76] : 0x2f (47) [77] : 0x00 (0) [78] : 0x73 (115) [79] : 0x00 (0) [80] : 0x6d (109) [81] : 0x00 (0) [82] : 0x62 (98) [83] : 0x00 (0) [84] : 0x64 (100) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x00 (0) size : 0x00000058 (88) [2017/03/08 10:28:23.602357, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.602407, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ImagePath] [2017/03/08 10:28:23.602427, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.602447, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.602531, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(164) [0] : 0x46 (70) [1] : 0x00 (0) [2] : 0x69 (105) [3] : 0x00 (0) [4] : 0x6c (108) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x20 (32) [9] : 0x00 (0) [10] : 0x73 (115) [11] : 0x00 (0) [12] : 0x65 (101) [13] : 0x00 (0) [14] : 0x72 (114) [15] : 0x00 (0) [16] : 0x76 (118) [17] : 0x00 (0) [18] : 0x69 (105) [19] : 0x00 (0) [20] : 0x63 (99) [21] : 0x00 (0) [22] : 0x65 (101) [23] : 0x00 (0) [24] : 0x20 (32) [25] : 0x00 (0) [26] : 0x70 (112) [27] : 0x00 (0) [28] : 0x72 (114) [29] : 0x00 (0) [30] : 0x6f (111) [31] : 0x00 (0) [32] : 0x76 (118) [33] : 0x00 (0) [34] : 0x69 (105) [35] : 0x00 (0) [36] : 0x64 (100) [37] : 0x00 (0) [38] : 0x69 (105) [39] : 0x00 (0) [40] : 0x6e (110) [41] : 0x00 (0) [42] : 0x67 (103) [43] : 0x00 (0) [44] : 0x20 (32) [45] : 0x00 (0) [46] : 0x61 (97) [47] : 0x00 (0) [48] : 0x63 (99) [49] : 0x00 (0) [50] : 0x63 (99) [51] : 0x00 (0) [52] : 0x65 (101) [53] : 0x00 (0) [54] : 0x73 (115) [55] : 0x00 (0) [56] : 0x73 (115) [57] : 0x00 (0) [58] : 0x20 (32) [59] : 0x00 (0) [60] : 0x74 (116) [61] : 0x00 (0) [62] : 0x6f (111) [63] : 0x00 (0) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x70 (112) [67] : 0x00 (0) [68] : 0x6f (111) [69] : 0x00 (0) [70] : 0x6c (108) [71] : 0x00 (0) [72] : 0x69 (105) [73] : 0x00 (0) [74] : 0x63 (99) [75] : 0x00 (0) [76] : 0x79 (121) [77] : 0x00 (0) [78] : 0x20 (32) [79] : 0x00 (0) [80] : 0x61 (97) [81] : 0x00 (0) [82] : 0x6e (110) [83] : 0x00 (0) [84] : 0x64 (100) [85] : 0x00 (0) [86] : 0x20 (32) [87] : 0x00 (0) [88] : 0x70 (112) [89] : 0x00 (0) [90] : 0x72 (114) [91] : 0x00 (0) [92] : 0x6f (111) [93] : 0x00 (0) [94] : 0x66 (102) [95] : 0x00 (0) [96] : 0x69 (105) [97] : 0x00 (0) [98] : 0x6c (108) [99] : 0x00 (0) [100] : 0x65 (101) [101] : 0x00 (0) [102] : 0x20 (32) [103] : 0x00 (0) [104] : 0x64 (100) [105] : 0x00 (0) [106] : 0x61 (97) [107] : 0x00 (0) [108] : 0x74 (116) [109] : 0x00 (0) [110] : 0x61 (97) [111] : 0x00 (0) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x28 (40) [115] : 0x00 (0) [116] : 0x6e (110) [117] : 0x00 (0) [118] : 0x6f (111) [119] : 0x00 (0) [120] : 0x74 (116) [121] : 0x00 (0) [122] : 0x72 (114) [123] : 0x00 (0) [124] : 0x65 (101) [125] : 0x00 (0) [126] : 0x6d (109) [127] : 0x00 (0) [128] : 0x6f (111) [129] : 0x00 (0) [130] : 0x74 (116) [131] : 0x00 (0) [132] : 0x65 (101) [133] : 0x00 (0) [134] : 0x6c (108) [135] : 0x00 (0) [136] : 0x79 (121) [137] : 0x00 (0) [138] : 0x20 (32) [139] : 0x00 (0) [140] : 0x6d (109) [141] : 0x00 (0) [142] : 0x61 (97) [143] : 0x00 (0) [144] : 0x6e (110) [145] : 0x00 (0) [146] : 0x61 (97) [147] : 0x00 (0) [148] : 0x67 (103) [149] : 0x00 (0) [150] : 0x65 (101) [151] : 0x00 (0) [152] : 0x61 (97) [153] : 0x00 (0) [154] : 0x62 (98) [155] : 0x00 (0) [156] : 0x6c (108) [157] : 0x00 (0) [158] : 0x65 (101) [159] : 0x00 (0) [160] : 0x29 (41) [161] : 0x00 (0) [162] : 0x00 (0) [163] : 0x00 (0) size : 0x000000a4 (164) [2017/03/08 10:28:23.603452, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.603493, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Description] [2017/03/08 10:28:23.603509, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.603526, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.603581, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-bf58-b7cef6530000 [2017/03/08 10:28:23.603629, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.603674, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.603711, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2017/03/08 10:28:23.603727, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2017/03/08 10:28:23.603742, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2017/03/08 10:28:23.603817, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0068 (104) name_size : 0x0068 (104) name : * name : 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2017/03/08 10:28:23.603986, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.604025, 10, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' [2017/03/08 10:28:23.604044, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.604066, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.604082, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2017/03/08 10:28:23.604097, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2017/03/08 10:28:23.604113, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2017/03/08 10:28:23.604128, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2017/03/08 10:28:23.604143, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.604155, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM] [2017/03/08 10:28:23.604187, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.604204, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2017/03/08 10:28:23.604218, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.604233, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.604246, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.604260, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.604273, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.604299, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.604317, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.604331, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2017/03/08 10:28:23.604346, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.604360, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.604374, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.604389, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.604401, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.604443, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.604463, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.604477, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [NETLOGON] [2017/03/08 10:28:23.604491, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.604507, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2017/03/08 10:28:23.604520, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2017/03/08 10:28:23.604536, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.604548, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2017/03/08 10:28:23.604579, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.604598, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2017/03/08 10:28:23.604613, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.604628, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2017/03/08 10:28:23.604642, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2017/03/08 10:28:23.604658, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.604670, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2017/03/08 10:28:23.604691, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.604712, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.604752, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000006-0000-0000-bf58-b7cef6530000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2017/03/08 10:28:23.605883, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000006-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2017/03/08 10:28:23.606580, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.606627, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security:Security] [2017/03/08 10:28:23.606648, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.606663, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security' (ops 0x7f75e0cf2020) [2017/03/08 10:28:23.606680, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2017/03/08 10:28:23.606708, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Security] len[120] [2017/03/08 10:28:23.606727, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.606777, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000006-0000-0000-bf58-b7cef6530000 [2017/03/08 10:28:23.606825, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.606863, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.606899, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2017/03/08 10:28:23.606913, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2017/03/08 10:28:23.606927, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2017/03/08 10:28:23.607001, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0062 (98) name_size : 0x0062 (98) name : * name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2017/03/08 10:28:23.607178, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.607218, 10, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' [2017/03/08 10:28:23.607235, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.607250, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.607265, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2017/03/08 10:28:23.607279, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2017/03/08 10:28:23.607295, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2017/03/08 10:28:23.607309, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2017/03/08 10:28:23.607323, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.607335, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM] [2017/03/08 10:28:23.607364, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.607381, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2017/03/08 10:28:23.607395, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.607410, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.607434, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.607451, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.607463, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.607490, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.607508, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.607522, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2017/03/08 10:28:23.607537, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.607552, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.607565, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.607580, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.607592, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.607627, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.607645, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [RemoteRegistry] [2017/03/08 10:28:23.607660, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.607675, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2017/03/08 10:28:23.607688, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2017/03/08 10:28:23.607704, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.607716, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2017/03/08 10:28:23.607741, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.607762, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.607802, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-bf58-b7cef6530000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2017/03/08 10:28:23.607896, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2017/03/08 10:28:23.608006, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.608045, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Start] [2017/03/08 10:28:23.608062, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.608076, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry' (ops 0x7f75e0cf2020) [2017/03/08 10:28:23.608091, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2017/03/08 10:28:23.608115, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Start] len[4] [2017/03/08 10:28:23.608133, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[1]: name[Type] len[4] [2017/03/08 10:28:23.608149, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[2]: name[ErrorControl] len[4] [2017/03/08 10:28:23.608164, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[3]: name[ObjectName] len[24] [2017/03/08 10:28:23.608179, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[4]: name[DisplayName] len[48] [2017/03/08 10:28:23.608195, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[5]: name[ImagePath] len[88] [2017/03/08 10:28:23.608221, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[6]: name[Description] len[126] [2017/03/08 10:28:23.608239, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.608291, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2017/03/08 10:28:23.608401, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.608441, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Type] [2017/03/08 10:28:23.608457, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.608473, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.608522, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2017/03/08 10:28:23.608629, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.608674, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ErrorControl] [2017/03/08 10:28:23.608692, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.608708, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.609913, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2017/03/08 10:28:23.610139, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.610180, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ObjectName] [2017/03/08 10:28:23.610200, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.610219, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.610299, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(48) [0] : 0x52 (82) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x6d (109) [5] : 0x00 (0) [6] : 0x6f (111) [7] : 0x00 (0) [8] : 0x74 (116) [9] : 0x00 (0) [10] : 0x65 (101) [11] : 0x00 (0) [12] : 0x20 (32) [13] : 0x00 (0) [14] : 0x52 (82) [15] : 0x00 (0) [16] : 0x65 (101) [17] : 0x00 (0) [18] : 0x67 (103) [19] : 0x00 (0) [20] : 0x69 (105) [21] : 0x00 (0) [22] : 0x73 (115) [23] : 0x00 (0) [24] : 0x74 (116) [25] : 0x00 (0) [26] : 0x72 (114) [27] : 0x00 (0) [28] : 0x79 (121) [29] : 0x00 (0) [30] : 0x20 (32) [31] : 0x00 (0) [32] : 0x53 (83) [33] : 0x00 (0) [34] : 0x65 (101) [35] : 0x00 (0) [36] : 0x72 (114) [37] : 0x00 (0) [38] : 0x76 (118) [39] : 0x00 (0) [40] : 0x69 (105) [41] : 0x00 (0) [42] : 0x63 (99) [43] : 0x00 (0) [44] : 0x65 (101) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) size : 0x00000030 (48) [2017/03/08 10:28:23.610625, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.610671, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:DisplayName] [2017/03/08 10:28:23.610690, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.610706, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.610765, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(88) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x2f (47) [17] : 0x00 (0) [18] : 0x78 (120) [19] : 0x00 (0) [20] : 0x38 (56) [21] : 0x00 (0) [22] : 0x36 (54) [23] : 0x00 (0) [24] : 0x5f (95) [25] : 0x00 (0) [26] : 0x36 (54) [27] : 0x00 (0) [28] : 0x34 (52) [29] : 0x00 (0) [30] : 0x2d (45) [31] : 0x00 (0) [32] : 0x6c (108) [33] : 0x00 (0) [34] : 0x69 (105) [35] : 0x00 (0) [36] : 0x6e (110) [37] : 0x00 (0) [38] : 0x75 (117) [39] : 0x00 (0) [40] : 0x78 (120) [41] : 0x00 (0) [42] : 0x2d (45) [43] : 0x00 (0) [44] : 0x67 (103) [45] : 0x00 (0) [46] : 0x6e (110) [47] : 0x00 (0) [48] : 0x75 (117) [49] : 0x00 (0) [50] : 0x2f (47) [51] : 0x00 (0) [52] : 0x73 (115) [53] : 0x00 (0) [54] : 0x61 (97) [55] : 0x00 (0) [56] : 0x6d (109) [57] : 0x00 (0) [58] : 0x62 (98) [59] : 0x00 (0) [60] : 0x61 (97) [61] : 0x00 (0) [62] : 0x2f (47) [63] : 0x00 (0) [64] : 0x73 (115) [65] : 0x00 (0) [66] : 0x76 (118) [67] : 0x00 (0) [68] : 0x63 (99) [69] : 0x00 (0) [70] : 0x63 (99) [71] : 0x00 (0) [72] : 0x74 (116) [73] : 0x00 (0) [74] : 0x6c (108) [75] : 0x00 (0) [76] : 0x2f (47) [77] : 0x00 (0) [78] : 0x73 (115) [79] : 0x00 (0) [80] : 0x6d (109) [81] : 0x00 (0) [82] : 0x62 (98) [83] : 0x00 (0) [84] : 0x64 (100) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x00 (0) size : 0x00000058 (88) [2017/03/08 10:28:23.611291, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.611331, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ImagePath] [2017/03/08 10:28:23.611349, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.611365, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.611417, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(126) [0] : 0x49 (73) [1] : 0x00 (0) [2] : 0x6e (110) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x6e (110) [11] : 0x00 (0) [12] : 0x61 (97) [13] : 0x00 (0) [14] : 0x6c (108) [15] : 0x00 (0) [16] : 0x20 (32) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x65 (101) [21] : 0x00 (0) [22] : 0x72 (114) [23] : 0x00 (0) [24] : 0x76 (118) [25] : 0x00 (0) [26] : 0x69 (105) [27] : 0x00 (0) [28] : 0x63 (99) [29] : 0x00 (0) [30] : 0x65 (101) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x70 (112) [35] : 0x00 (0) [36] : 0x72 (114) [37] : 0x00 (0) [38] : 0x6f (111) [39] : 0x00 (0) [40] : 0x76 (118) [41] : 0x00 (0) [42] : 0x69 (105) [43] : 0x00 (0) [44] : 0x64 (100) [45] : 0x00 (0) [46] : 0x69 (105) [47] : 0x00 (0) [48] : 0x6e (110) [49] : 0x00 (0) [50] : 0x67 (103) [51] : 0x00 (0) [52] : 0x20 (32) [53] : 0x00 (0) [54] : 0x72 (114) [55] : 0x00 (0) [56] : 0x65 (101) [57] : 0x00 (0) [58] : 0x6d (109) [59] : 0x00 (0) [60] : 0x6f (111) [61] : 0x00 (0) [62] : 0x74 (116) [63] : 0x00 (0) [64] : 0x65 (101) [65] : 0x00 (0) [66] : 0x20 (32) [67] : 0x00 (0) [68] : 0x61 (97) [69] : 0x00 (0) [70] : 0x63 (99) [71] : 0x00 (0) [72] : 0x63 (99) [73] : 0x00 (0) [74] : 0x65 (101) [75] : 0x00 (0) [76] : 0x73 (115) [77] : 0x00 (0) [78] : 0x73 (115) [79] : 0x00 (0) [80] : 0x20 (32) [81] : 0x00 (0) [82] : 0x74 (116) [83] : 0x00 (0) [84] : 0x6f (111) [85] : 0x00 (0) [86] : 0x20 (32) [87] : 0x00 (0) [88] : 0x74 (116) [89] : 0x00 (0) [90] : 0x68 (104) [91] : 0x00 (0) [92] : 0x65 (101) [93] : 0x00 (0) [94] : 0x20 (32) [95] : 0x00 (0) [96] : 0x53 (83) [97] : 0x00 (0) [98] : 0x61 (97) [99] : 0x00 (0) [100] : 0x6d (109) [101] : 0x00 (0) [102] : 0x62 (98) [103] : 0x00 (0) [104] : 0x61 (97) [105] : 0x00 (0) [106] : 0x20 (32) [107] : 0x00 (0) [108] : 0x72 (114) [109] : 0x00 (0) [110] : 0x65 (101) [111] : 0x00 (0) [112] : 0x67 (103) [113] : 0x00 (0) [114] : 0x69 (105) [115] : 0x00 (0) [116] : 0x73 (115) [117] : 0x00 (0) [118] : 0x74 (116) [119] : 0x00 (0) [120] : 0x72 (114) [121] : 0x00 (0) [122] : 0x79 (121) [123] : 0x00 (0) [124] : 0x00 (0) [125] : 0x00 (0) size : 0x0000007e (126) [2017/03/08 10:28:23.612135, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.612180, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Description] [2017/03/08 10:28:23.612197, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.612215, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.612269, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-bf58-b7cef6530000 [2017/03/08 10:28:23.612317, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.612355, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.612392, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2017/03/08 10:28:23.612408, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2017/03/08 10:28:23.612422, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2017/03/08 10:28:23.612494, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0074 (116) name_size : 0x0074 (116) name : * name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2017/03/08 10:28:23.612674, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.612714, 10, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' [2017/03/08 10:28:23.612732, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.612747, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.613910, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2017/03/08 10:28:23.613938, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2017/03/08 10:28:23.613957, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2017/03/08 10:28:23.613972, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2017/03/08 10:28:23.613989, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.614002, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM] [2017/03/08 10:28:23.614043, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.614061, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2017/03/08 10:28:23.614075, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.614091, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.614104, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.614119, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.614132, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.614158, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.614187, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.614204, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2017/03/08 10:28:23.614219, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.614234, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.614248, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.614264, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.614276, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.614318, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.614338, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.614353, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [RemoteRegistry] [2017/03/08 10:28:23.614368, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.614383, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2017/03/08 10:28:23.614397, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2017/03/08 10:28:23.614413, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.614426, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2017/03/08 10:28:23.614451, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.614468, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2017/03/08 10:28:23.614483, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.614498, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2017/03/08 10:28:23.614512, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2017/03/08 10:28:23.614528, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.614546, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2017/03/08 10:28:23.614570, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.614595, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.614637, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000008-0000-0000-bf58-b7cef6530000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2017/03/08 10:28:23.614759, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000008-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2017/03/08 10:28:23.615457, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.615498, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security:Security] [2017/03/08 10:28:23.615517, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.615531, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' (ops 0x7f75e0cf2020) [2017/03/08 10:28:23.615548, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2017/03/08 10:28:23.615574, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Security] len[120] [2017/03/08 10:28:23.615593, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.615643, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000008-0000-0000-bf58-b7cef6530000 [2017/03/08 10:28:23.615691, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.615730, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.615766, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2017/03/08 10:28:23.615787, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2017/03/08 10:28:23.615803, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2017/03/08 10:28:23.615879, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x004e (78) name_size : 0x004e (78) name : * name : 'SYSTEM\CurrentControlSet\Services\WINS' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2017/03/08 10:28:23.616051, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.616090, 10, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS' [2017/03/08 10:28:23.616107, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.616122, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.616136, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2017/03/08 10:28:23.616150, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2017/03/08 10:28:23.616166, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2017/03/08 10:28:23.616187, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2017/03/08 10:28:23.616202, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.616215, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM] [2017/03/08 10:28:23.616243, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.616260, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2017/03/08 10:28:23.616274, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.616290, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.616303, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.616317, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.616329, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.616354, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.616373, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.616387, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2017/03/08 10:28:23.616401, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.616417, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.616430, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.616445, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.616457, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.616492, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.616510, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [WINS] [2017/03/08 10:28:23.616524, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.616540, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2017/03/08 10:28:23.616560, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2017/03/08 10:28:23.616577, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.616589, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2017/03/08 10:28:23.616614, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.616635, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.616676, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-bf58-b7cef6530000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2017/03/08 10:28:23.618330, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2017/03/08 10:28:23.618469, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.618511, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Start] [2017/03/08 10:28:23.618532, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.618547, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS' (ops 0x7f75e0cf2020) [2017/03/08 10:28:23.618564, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2017/03/08 10:28:23.618605, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Start] len[4] [2017/03/08 10:28:23.618625, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[1]: name[Type] len[4] [2017/03/08 10:28:23.618641, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[2]: name[ErrorControl] len[4] [2017/03/08 10:28:23.618657, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[3]: name[ObjectName] len[24] [2017/03/08 10:28:23.618672, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[4]: name[DisplayName] len[74] [2017/03/08 10:28:23.618688, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[5]: name[ImagePath] len[88] [2017/03/08 10:28:23.618704, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[6]: name[Description] len[178] [2017/03/08 10:28:23.618720, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.618785, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2017/03/08 10:28:23.618897, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.618936, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Type] [2017/03/08 10:28:23.618952, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.618968, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.619017, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2017/03/08 10:28:23.619134, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.619174, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ErrorControl] [2017/03/08 10:28:23.619190, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.619207, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.619261, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2017/03/08 10:28:23.619477, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.619517, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ObjectName] [2017/03/08 10:28:23.619533, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.619549, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.619614, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(74) [0] : 0x57 (87) [1] : 0x00 (0) [2] : 0x69 (105) [3] : 0x00 (0) [4] : 0x6e (110) [5] : 0x00 (0) [6] : 0x64 (100) [7] : 0x00 (0) [8] : 0x6f (111) [9] : 0x00 (0) [10] : 0x77 (119) [11] : 0x00 (0) [12] : 0x73 (115) [13] : 0x00 (0) [14] : 0x20 (32) [15] : 0x00 (0) [16] : 0x49 (73) [17] : 0x00 (0) [18] : 0x6e (110) [19] : 0x00 (0) [20] : 0x74 (116) [21] : 0x00 (0) [22] : 0x65 (101) [23] : 0x00 (0) [24] : 0x72 (114) [25] : 0x00 (0) [26] : 0x6e (110) [27] : 0x00 (0) [28] : 0x65 (101) [29] : 0x00 (0) [30] : 0x74 (116) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x4e (78) [35] : 0x00 (0) [36] : 0x61 (97) [37] : 0x00 (0) [38] : 0x6d (109) [39] : 0x00 (0) [40] : 0x65 (101) [41] : 0x00 (0) [42] : 0x20 (32) [43] : 0x00 (0) [44] : 0x53 (83) [45] : 0x00 (0) [46] : 0x65 (101) [47] : 0x00 (0) [48] : 0x72 (114) [49] : 0x00 (0) [50] : 0x76 (118) [51] : 0x00 (0) [52] : 0x69 (105) [53] : 0x00 (0) [54] : 0x63 (99) [55] : 0x00 (0) [56] : 0x65 (101) [57] : 0x00 (0) [58] : 0x20 (32) [59] : 0x00 (0) [60] : 0x28 (40) [61] : 0x00 (0) [62] : 0x57 (87) [63] : 0x00 (0) [64] : 0x49 (73) [65] : 0x00 (0) [66] : 0x4e (78) [67] : 0x00 (0) [68] : 0x53 (83) [69] : 0x00 (0) [70] : 0x29 (41) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) size : 0x0000004a (74) [2017/03/08 10:28:23.620076, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.620116, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:DisplayName] [2017/03/08 10:28:23.620132, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.620149, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.620201, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(88) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x2f (47) [17] : 0x00 (0) [18] : 0x78 (120) [19] : 0x00 (0) [20] : 0x38 (56) [21] : 0x00 (0) [22] : 0x36 (54) [23] : 0x00 (0) [24] : 0x5f (95) [25] : 0x00 (0) [26] : 0x36 (54) [27] : 0x00 (0) [28] : 0x34 (52) [29] : 0x00 (0) [30] : 0x2d (45) [31] : 0x00 (0) [32] : 0x6c (108) [33] : 0x00 (0) [34] : 0x69 (105) [35] : 0x00 (0) [36] : 0x6e (110) [37] : 0x00 (0) [38] : 0x75 (117) [39] : 0x00 (0) [40] : 0x78 (120) [41] : 0x00 (0) [42] : 0x2d (45) [43] : 0x00 (0) [44] : 0x67 (103) [45] : 0x00 (0) [46] : 0x6e (110) [47] : 0x00 (0) [48] : 0x75 (117) [49] : 0x00 (0) [50] : 0x2f (47) [51] : 0x00 (0) [52] : 0x73 (115) [53] : 0x00 (0) [54] : 0x61 (97) [55] : 0x00 (0) [56] : 0x6d (109) [57] : 0x00 (0) [58] : 0x62 (98) [59] : 0x00 (0) [60] : 0x61 (97) [61] : 0x00 (0) [62] : 0x2f (47) [63] : 0x00 (0) [64] : 0x73 (115) [65] : 0x00 (0) [66] : 0x76 (118) [67] : 0x00 (0) [68] : 0x63 (99) [69] : 0x00 (0) [70] : 0x63 (99) [71] : 0x00 (0) [72] : 0x74 (116) [73] : 0x00 (0) [74] : 0x6c (108) [75] : 0x00 (0) [76] : 0x2f (47) [77] : 0x00 (0) [78] : 0x6e (110) [79] : 0x00 (0) [80] : 0x6d (109) [81] : 0x00 (0) [82] : 0x62 (98) [83] : 0x00 (0) [84] : 0x64 (100) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x00 (0) size : 0x00000058 (88) [2017/03/08 10:28:23.620735, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.620832, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ImagePath] [2017/03/08 10:28:23.620853, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.620871, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.620929, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(178) [0] : 0x49 (73) [1] : 0x00 (0) [2] : 0x6e (110) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x6e (110) [11] : 0x00 (0) [12] : 0x61 (97) [13] : 0x00 (0) [14] : 0x6c (108) [15] : 0x00 (0) [16] : 0x20 (32) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x65 (101) [21] : 0x00 (0) [22] : 0x72 (114) [23] : 0x00 (0) [24] : 0x76 (118) [25] : 0x00 (0) [26] : 0x69 (105) [27] : 0x00 (0) [28] : 0x63 (99) [29] : 0x00 (0) [30] : 0x65 (101) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x70 (112) [35] : 0x00 (0) [36] : 0x72 (114) [37] : 0x00 (0) [38] : 0x6f (111) [39] : 0x00 (0) [40] : 0x76 (118) [41] : 0x00 (0) [42] : 0x69 (105) [43] : 0x00 (0) [44] : 0x64 (100) [45] : 0x00 (0) [46] : 0x69 (105) [47] : 0x00 (0) [48] : 0x6e (110) [49] : 0x00 (0) [50] : 0x67 (103) [51] : 0x00 (0) [52] : 0x20 (32) [53] : 0x00 (0) [54] : 0x61 (97) [55] : 0x00 (0) [56] : 0x20 (32) [57] : 0x00 (0) [58] : 0x4e (78) [59] : 0x00 (0) [60] : 0x65 (101) [61] : 0x00 (0) [62] : 0x74 (116) [63] : 0x00 (0) [64] : 0x42 (66) [65] : 0x00 (0) [66] : 0x49 (73) [67] : 0x00 (0) [68] : 0x4f (79) [69] : 0x00 (0) [70] : 0x53 (83) [71] : 0x00 (0) [72] : 0x20 (32) [73] : 0x00 (0) [74] : 0x70 (112) [75] : 0x00 (0) [76] : 0x6f (111) [77] : 0x00 (0) [78] : 0x69 (105) [79] : 0x00 (0) [80] : 0x6e (110) [81] : 0x00 (0) [82] : 0x74 (116) [83] : 0x00 (0) [84] : 0x2d (45) [85] : 0x00 (0) [86] : 0x74 (116) [87] : 0x00 (0) [88] : 0x6f (111) [89] : 0x00 (0) [90] : 0x2d (45) [91] : 0x00 (0) [92] : 0x70 (112) [93] : 0x00 (0) [94] : 0x6f (111) [95] : 0x00 (0) [96] : 0x69 (105) [97] : 0x00 (0) [98] : 0x6e (110) [99] : 0x00 (0) [100] : 0x74 (116) [101] : 0x00 (0) [102] : 0x20 (32) [103] : 0x00 (0) [104] : 0x6e (110) [105] : 0x00 (0) [106] : 0x61 (97) [107] : 0x00 (0) [108] : 0x6d (109) [109] : 0x00 (0) [110] : 0x65 (101) [111] : 0x00 (0) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x73 (115) [115] : 0x00 (0) [116] : 0x65 (101) [117] : 0x00 (0) [118] : 0x72 (114) [119] : 0x00 (0) [120] : 0x76 (118) [121] : 0x00 (0) [122] : 0x65 (101) [123] : 0x00 (0) [124] : 0x72 (114) [125] : 0x00 (0) [126] : 0x28 (40) [127] : 0x00 (0) [128] : 0x6e (110) [129] : 0x00 (0) [130] : 0x6f (111) [131] : 0x00 (0) [132] : 0x74 (116) [133] : 0x00 (0) [134] : 0x20 (32) [135] : 0x00 (0) [136] : 0x72 (114) [137] : 0x00 (0) [138] : 0x65 (101) [139] : 0x00 (0) [140] : 0x6d (109) [141] : 0x00 (0) [142] : 0x6f (111) [143] : 0x00 (0) [144] : 0x74 (116) [145] : 0x00 (0) [146] : 0x65 (101) [147] : 0x00 (0) [148] : 0x6c (108) [149] : 0x00 (0) [150] : 0x79 (121) [151] : 0x00 (0) [152] : 0x20 (32) [153] : 0x00 (0) [154] : 0x6d (109) [155] : 0x00 (0) [156] : 0x61 (97) [157] : 0x00 (0) [158] : 0x6e (110) [159] : 0x00 (0) [160] : 0x61 (97) [161] : 0x00 (0) [162] : 0x67 (103) [163] : 0x00 (0) [164] : 0x65 (101) [165] : 0x00 (0) [166] : 0x61 (97) [167] : 0x00 (0) [168] : 0x62 (98) [169] : 0x00 (0) [170] : 0x6c (108) [171] : 0x00 (0) [172] : 0x65 (101) [173] : 0x00 (0) [174] : 0x29 (41) [175] : 0x00 (0) [176] : 0x00 (0) [177] : 0x00 (0) size : 0x000000b2 (178) [2017/03/08 10:28:23.621939, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.621981, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Description] [2017/03/08 10:28:23.621998, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.622080, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.622151, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-bf58-b7cef6530000 [2017/03/08 10:28:23.622200, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.622239, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.622275, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2017/03/08 10:28:23.622291, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2017/03/08 10:28:23.622306, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2017/03/08 10:28:23.622392, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0060 (96) name_size : 0x0060 (96) name : * name : 'SYSTEM\CurrentControlSet\Services\WINS\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2017/03/08 10:28:23.622563, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.622603, 10, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS\Security' [2017/03/08 10:28:23.622621, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.622636, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.622650, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2017/03/08 10:28:23.622665, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2017/03/08 10:28:23.622682, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2017/03/08 10:28:23.622697, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2017/03/08 10:28:23.622713, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.622725, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM] [2017/03/08 10:28:23.622766, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.622784, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2017/03/08 10:28:23.622798, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.622814, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.622827, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.622841, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.622854, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.622879, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.622898, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.622912, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2017/03/08 10:28:23.622927, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.622942, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.622955, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.622970, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.622982, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.623018, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.623037, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2017/03/08 10:28:23.623051, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [WINS] [2017/03/08 10:28:23.623065, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.623081, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2017/03/08 10:28:23.623094, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2017/03/08 10:28:23.623122, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.623136, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2017/03/08 10:28:23.623161, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.623179, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2017/03/08 10:28:23.623193, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.623208, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2017/03/08 10:28:23.623222, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2017/03/08 10:28:23.623237, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.623249, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2017/03/08 10:28:23.623271, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.623292, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.623332, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000a-0000-0000-bf58-b7cef6530000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2017/03/08 10:28:23.623429, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000a-0000-0000-bf58-b7cef6530000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2017/03/08 10:28:23.624127, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.624168, 8, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security:Security] [2017/03/08 10:28:23.624185, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2017/03/08 10:28:23.624199, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security' (ops 0x7f75e0cf2020) [2017/03/08 10:28:23.624215, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2017/03/08 10:28:23.624239, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Security] len[120] [2017/03/08 10:28:23.624264, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2017/03/08 10:28:23.624314, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000a-0000-0000-bf58-b7cef6530000 [2017/03/08 10:28:23.624361, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.624399, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.624435, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2017/03/08 10:28:23.624449, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2017/03/08 10:28:23.624463, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2017/03/08 10:28:23.624526, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-bf58-b7cef6530000 [2017/03/08 10:28:23.624572, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.624610, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.624646, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2017/03/08 10:28:23.624662, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (3->2) [2017/03/08 10:28:23.624676, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2017/03/08 10:28:23.624833, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (2->1) [2017/03/08 10:28:23.624877, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (1->0) [2017/03/08 10:28:23.624953, 10, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:418(close_policy_by_pipe) Deleted handle list for RPC connection winreg [2017/03/08 10:28:23.625016, 3, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/rpc_server/eventlog/srv_eventlog_reg.c:59(eventlog_init_winreg) Initialise the eventlog registry keys if needed. [2017/03/08 10:28:23.625140, 4, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:203(make_internal_rpc_pipe_p) Create pipe requested winreg [2017/03/08 10:28:23.625167, 10, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:223(init_pipe_handles) init_pipe_handle_list: created handle list for pipe winreg [2017/03/08 10:28:23.625183, 10, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:240(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe winreg [2017/03/08 10:28:23.625238, 4, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:243(make_internal_rpc_pipe_p) Created internal pipe winreg [2017/03/08 10:28:23.625274, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2017/03/08 10:28:23.625348, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2017/03/08 10:28:23.625379, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.625397, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:28:23.625412, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:28:23.625426, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:28:23.625439, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:28:23.625529, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:28:23.625551, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:885(regdb_open) regdb_open: registry db opened. refcount reset (1) [2017/03/08 10:28:23.625568, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2017/03/08 10:28:23.625599, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2017/03/08 10:28:23.625624, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.625638, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM] [2017/03/08 10:28:23.625679, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.625723, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000b-0000-0000-bf58-b7cef6530000 result : WERR_OK [2017/03/08 10:28:23.625805, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000b-0000-0000-bf58-b7cef6530000 keyname: struct winreg_String name_len : 0x0056 (86) name_size : 0x0056 (86) name : * name : 'SYSTEM\CurrentControlSet\Services\Eventlog' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2017/03/08 10:28:23.625940, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.625981, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2017/03/08 10:28:23.625997, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (1->2) [2017/03/08 10:28:23.626012, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2017/03/08 10:28:23.626026, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2017/03/08 10:28:23.626040, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.626053, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM] [2017/03/08 10:28:23.626092, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2017/03/08 10:28:23.626111, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (2->3) [2017/03/08 10:28:23.626127, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.626140, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.626154, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.626167, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet] [2017/03/08 10:28:23.626196, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2017/03/08 10:28:23.626214, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2017/03/08 10:28:23.626229, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.626242, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.626257, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.626269, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2017/03/08 10:28:23.626307, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Eventlog] [2017/03/08 10:28:23.626324, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:23.626340, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2017/03/08 10:28:23.626353, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2017/03/08 10:28:23.626368, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:23.626380, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2017/03/08 10:28:23.626406, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:23.626423, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2017/03/08 10:28:23.626437, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (3->2) [2017/03/08 10:28:23.626462, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[2] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.626502, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000c-0000-0000-bf58-b7cef6530000 result : WERR_OK [2017/03/08 10:28:23.626578, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000c-0000-0000-bf58-b7cef6530000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2017/03/08 10:28:23.626652, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.626694, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Eventlog' (ops 0x7f75e0cf2020) [2017/03/08 10:28:23.626709, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2017/03/08 10:28:23.626736, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[DisplayName] len[20] [2017/03/08 10:28:23.626755, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[1]: name[ErrorControl] len[4] [2017/03/08 10:28:23.626771, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2088(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2017/03/08 10:28:23.626797, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000000 (0) max_subkeylen : * max_subkeylen : 0x00000000 (0) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000002 (2) max_valnamelen : * max_valnamelen : 0x0000001a (26) max_valbufsize : * max_valbufsize : 0x00000014 (20) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2017/03/08 10:28:23.626954, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000c-0000-0000-bf58-b7cef6530000 [2017/03/08 10:28:23.627003, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.627042, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 BF 58 B7 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:23.627078, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2017/03/08 10:28:23.627092, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (2->1) [2017/03/08 10:28:23.627106, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2017/03/08 10:28:23.627163, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (1->0) [2017/03/08 10:28:23.627198, 10, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:418(close_policy_by_pipe) Deleted handle list for RPC connection winreg [2017/03/08 10:28:23.627252, 0, pid=21494, effective(0, 0), real(0, 0)] ../lib/util/become_daemon.c:124(daemon_ready) STATUS=daemon 'smbd' finished starting up and ready to serve connections [2017/03/08 10:28:23.627462, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 515 - private_data=(nil) [2017/03/08 10:28:23.627535, 6, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:486(ads_find_dc) ads_find_dc: (ldap) looking for realm 'LTBTEST.INTRANET' and falling back to domain 'LTBTEST' [2017/03/08 10:28:23.627597, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:104(sitename_fetch) sitename_fetch: Returning sitename for realm 'LTBTEST.INTRANET': "Default-First-Site-Name" [2017/03/08 10:28:23.627618, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery_dc.c:77(ads_dc_name) ads_dc_name: domain=LTBTEST [2017/03/08 10:28:23.627640, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:104(sitename_fetch) sitename_fetch: Returning sitename for realm 'LTBTEST.INTRANET': "Default-First-Site-Name" [2017/03/08 10:28:23.627657, 6, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:409(resolve_and_ping_dns) resolve_and_ping_dns: (cldap) looking for realm 'LTBTEST.INTRANET' [2017/03/08 10:28:23.627679, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3312(get_sorted_dc_list) get_sorted_dc_list: attempting lookup for name LTBTEST.INTRANET (sitename Default-First-Site-Name) [2017/03/08 10:28:23.627715, 10, pid=21494, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:326(gencache_set_data_blob) Adding cache entry with key=[SAFJOIN/DOMAIN/LTBTEST.INTRANET] and timeout=[Do Jan 1 01:00:00 1970 CET] (-1488965303 seconds in the past) [2017/03/08 10:28:23.627774, 10, pid=21494, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:326(gencache_set_data_blob) Adding cache entry with key=[SAF/DOMAIN/LTBTEST.INTRANET] and timeout=[Do Jan 1 01:00:00 1970 CET] (-1488965303 seconds in the past) [2017/03/08 10:28:23.627811, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:210(saf_fetch) saf_fetch: failed to find server for "LTBTEST.INTRANET" domain [2017/03/08 10:28:23.627831, 3, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3117(get_dc_list) get_dc_list: preferred server list: ", *" [2017/03/08 10:28:23.627846, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2596(internal_resolve_name) internal_resolve_name: looking up LTBTEST.INTRANET#1c (sitename Default-First-Site-Name) [2017/03/08 10:28:23.627879, 10, pid=21494, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:326(gencache_set_data_blob) Adding cache entry with key=[NBT/LTBTEST.INTRANET#1C] and timeout=[Do Jan 1 01:00:00 1970 CET] (-1488965303 seconds in the past) [2017/03/08 10:28:23.627916, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namecache.c:160(namecache_fetch) no entry for LTBTEST.INTRANET#1C found. [2017/03/08 10:28:23.627937, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2407(resolve_ads) resolve_ads: Attempting to resolve DCs for LTBTEST.INTRANET using DNS [2017/03/08 10:28:23.632024, 4, pid=21494, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:435(ads_dns_lookup_srv) ads_dns_lookup_srv: 1 records returned in the answer section. [2017/03/08 10:28:23.632077, 10, pid=21494, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:216(ads_dns_parse_rr_srv) ads_dns_parse_rr_srv: Parsed ucs-7437.ltbtest.intranet [0, 100, 389] [2017/03/08 10:28:23.632101, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1141(remove_duplicate_addrs2) remove_duplicate_addrs2: looking for duplicate address/port pairs [2017/03/08 10:28:23.632118, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namecache.c:78(namecache_store) namecache_store: storing 1 address for LTBTEST.INTRANET#1c: 10.200.42.175 [2017/03/08 10:28:23.632164, 10, pid=21494, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:326(gencache_set_data_blob) Adding cache entry with key=[NBT/LTBTEST.INTRANET#1C] and timeout=[Mi Mär 8 10:39:23 2017 CET] (660 seconds ahead) [2017/03/08 10:28:23.632209, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2789(internal_resolve_name) internal_resolve_name: returning 1 addresses: 10.200.42.175:389 [2017/03/08 10:28:23.632231, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3139(get_dc_list) Adding 1 DC's from auto lookup [2017/03/08 10:28:23.632258, 10, pid=21494, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:326(gencache_set_data_blob) Adding cache entry with key=[NEG_CONN_CACHE/LTBTEST.INTRANET,10.200.42.175] and timeout=[Do Jan 1 01:00:00 1970 CET] (-1488965303 seconds in the past) [2017/03/08 10:28:23.632298, 9, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) check_negative_conn_cache returning result 0 for domain LTBTEST.INTRANET server 10.200.42.175 [2017/03/08 10:28:23.632316, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1141(remove_duplicate_addrs2) remove_duplicate_addrs2: looking for duplicate address/port pairs [2017/03/08 10:28:23.632343, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3262(get_dc_list) get_dc_list: returning 1 ip addresses in an ordered list [2017/03/08 10:28:23.632358, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3263(get_dc_list) get_dc_list: 10.200.42.175:389 [2017/03/08 10:28:23.632383, 9, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) check_negative_conn_cache returning result 0 for domain LTBTEST.INTRANET server 10.200.42.175 [2017/03/08 10:28:23.632401, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:254(ads_try_connect) ads_try_connect: sending CLDAP request to 10.200.42.175 (realm: LTBTEST.INTRANET) [2017/03/08 10:28:23.637307, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &response->data.nt5_ex: struct NETLOGON_SAM_LOGON_RESPONSE_EX command : LOGON_SAM_LOGON_RESPONSE_EX (23) sbz : 0x0000 (0) server_type : 0x000013fd (5117) 1: NBT_SERVER_PDC 1: NBT_SERVER_GC 1: NBT_SERVER_LDAP 1: NBT_SERVER_DS 1: NBT_SERVER_KDC 1: NBT_SERVER_TIMESERV 1: NBT_SERVER_CLOSEST 1: NBT_SERVER_WRITABLE 1: NBT_SERVER_GOOD_TIMESERV 0: NBT_SERVER_NDNC 0: NBT_SERVER_SELECT_SECRET_DOMAIN_6 1: NBT_SERVER_FULL_SECRET_DOMAIN_6 0: NBT_SERVER_ADS_WEB_SERVICE 0: NBT_SERVER_DS_8 0: NBT_SERVER_HAS_DNS_NAME 0: NBT_SERVER_IS_DEFAULT_NC 0: NBT_SERVER_FOREST_ROOT domain_uuid : 1bdd7e2a-525c-41e9-9166-65df8812f632 forest : 'ltbtest.intranet' dns_domain : 'ltbtest.intranet' pdc_dns_name : 'ucs-7437.ltbtest.intranet' domain_name : 'LTBTEST' pdc_name : 'UCS-7437' user_name : '' server_site : 'Default-First-Site-Name' client_site : 'Default-First-Site-Name' sockaddr_size : 0x00 (0) sockaddr: struct nbt_sockaddr sockaddr_family : 0x00000000 (0) pdc_ip : (null) remaining : DATA_BLOB length=0 next_closest_site : NULL nt_version : 0x00000005 (5) 1: NETLOGON_NT_VERSION_1 0: NETLOGON_NT_VERSION_5 1: NETLOGON_NT_VERSION_5EX 0: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2017/03/08 10:28:23.637692, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:70(sitename_store) sitename_store: realm = [LTBTEST], sitename = [Default-First-Site-Name], expire = [2085923199] [2017/03/08 10:28:23.637745, 10, pid=21494, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:301(gencache_set_data_blob) Did not store value for AD_SITENAME/DOMAIN/LTBTEST, we already got it [2017/03/08 10:28:23.637765, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:70(sitename_store) sitename_store: realm = [ltbtest.intranet], sitename = [Default-First-Site-Name], expire = [2085923199] [2017/03/08 10:28:23.637787, 10, pid=21494, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:301(gencache_set_data_blob) Did not store value for AD_SITENAME/DOMAIN/LTBTEST.INTRANET, we already got it [2017/03/08 10:28:23.637827, 3, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:618(ads_connect) Successfully contacted LDAP server 10.200.42.175 [2017/03/08 10:28:23.637857, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:104(sitename_fetch) sitename_fetch: Returning sitename for realm 'LTBTEST.INTRANET': "Default-First-Site-Name" [2017/03/08 10:28:23.637882, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:212(ads_closest_dc) ads_closest_dc: NBT_SERVER_CLOSEST flag set [2017/03/08 10:28:23.637916, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/kerberos.c:870(create_local_private_krb5_conf_for_domain) create_local_private_krb5_conf_for_domain: fname = /var/run/samba/smb_krb5/krb5.conf.LTBTEST, realm = LTBTEST.INTRANET, domain = LTBTEST [2017/03/08 10:28:23.637947, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:210(saf_fetch) saf_fetch: failed to find server for "LTBTEST.INTRANET" domain [2017/03/08 10:28:23.637968, 3, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3117(get_dc_list) get_dc_list: preferred server list: ", *" [2017/03/08 10:28:23.637983, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2596(internal_resolve_name) internal_resolve_name: looking up LTBTEST.INTRANET#dcdc (sitename Default-First-Site-Name) [2017/03/08 10:28:23.638004, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2416(resolve_ads) resolve_ads: Attempting to resolve KDCs for LTBTEST.INTRANET using DNS [2017/03/08 10:28:23.641262, 4, pid=21494, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:435(ads_dns_lookup_srv) ads_dns_lookup_srv: 1 records returned in the answer section. [2017/03/08 10:28:23.641307, 10, pid=21494, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:216(ads_dns_parse_rr_srv) ads_dns_parse_rr_srv: Parsed ucs-7437.ltbtest.intranet [0, 100, 88] [2017/03/08 10:28:23.641335, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1141(remove_duplicate_addrs2) remove_duplicate_addrs2: looking for duplicate address/port pairs [2017/03/08 10:28:23.641351, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2789(internal_resolve_name) internal_resolve_name: returning 1 addresses: 10.200.42.175:88 [2017/03/08 10:28:23.641368, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3139(get_dc_list) Adding 1 DC's from auto lookup [2017/03/08 10:28:23.641395, 9, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) check_negative_conn_cache returning result 0 for domain LTBTEST.INTRANET server 10.200.42.175 [2017/03/08 10:28:23.641413, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1141(remove_duplicate_addrs2) remove_duplicate_addrs2: looking for duplicate address/port pairs [2017/03/08 10:28:23.641428, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3262(get_dc_list) get_dc_list: returning 1 ip addresses in an ordered list [2017/03/08 10:28:23.641442, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3263(get_dc_list) get_dc_list: 10.200.42.175:88 [2017/03/08 10:28:23.641457, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/kerberos.c:702(get_kdc_ip_string) got 1 addresses from site Default-First-Site-Name search [2017/03/08 10:28:23.641481, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:210(saf_fetch) saf_fetch: failed to find server for "LTBTEST.INTRANET" domain [2017/03/08 10:28:23.641499, 3, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3117(get_dc_list) get_dc_list: preferred server list: ", *" [2017/03/08 10:28:23.641513, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2596(internal_resolve_name) internal_resolve_name: looking up LTBTEST.INTRANET#dcdc (sitename (null)) [2017/03/08 10:28:23.641538, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2416(resolve_ads) resolve_ads: Attempting to resolve KDCs for LTBTEST.INTRANET using DNS [2017/03/08 10:28:23.644490, 4, pid=21494, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:435(ads_dns_lookup_srv) ads_dns_lookup_srv: 1 records returned in the answer section. [2017/03/08 10:28:23.644537, 10, pid=21494, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:216(ads_dns_parse_rr_srv) ads_dns_parse_rr_srv: Parsed ucs-7437.ltbtest.intranet [0, 100, 88] [2017/03/08 10:28:23.644563, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1141(remove_duplicate_addrs2) remove_duplicate_addrs2: looking for duplicate address/port pairs [2017/03/08 10:28:23.644581, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2789(internal_resolve_name) internal_resolve_name: returning 1 addresses: 10.200.42.175:88 [2017/03/08 10:28:23.644603, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3139(get_dc_list) Adding 1 DC's from auto lookup [2017/03/08 10:28:23.644635, 9, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) check_negative_conn_cache returning result 0 for domain LTBTEST.INTRANET server 10.200.42.175 [2017/03/08 10:28:23.644657, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1141(remove_duplicate_addrs2) remove_duplicate_addrs2: looking for duplicate address/port pairs [2017/03/08 10:28:23.644675, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3262(get_dc_list) get_dc_list: returning 1 ip addresses in an ordered list [2017/03/08 10:28:23.644691, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3263(get_dc_list) get_dc_list: 10.200.42.175:88 [2017/03/08 10:28:23.644710, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/kerberos.c:708(get_kdc_ip_string) got 1 addresses from site-less search [2017/03/08 10:28:23.644728, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/kerberos.c:740(get_kdc_ip_string) 0 additional KDCs to test [2017/03/08 10:28:23.644744, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/kerberos.c:800(get_kdc_ip_string) get_kdc_ip_string: Returning kdc = 10.200.42.175 [2017/03/08 10:28:23.644889, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/kerberos.c:962(create_local_private_krb5_conf_for_domain) create_local_private_krb5_conf_for_domain: wrote file /var/run/samba/smb_krb5/krb5.conf.LTBTEST with realm LTBTEST.INTRANET KDC list = kdc = 10.200.42.175 [2017/03/08 10:28:23.644952, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery_dc.c:151(ads_dc_name) ads_dc_name: using server='UCS-7437.LTBTEST.INTRANET' IP=10.200.42.175 [2017/03/08 10:28:23.644976, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:254(ads_try_connect) ads_try_connect: sending CLDAP request to 10.200.42.175 (realm: LTBTEST.INTRANET) [2017/03/08 10:28:23.668893, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &response->data.nt5_ex: struct NETLOGON_SAM_LOGON_RESPONSE_EX command : LOGON_SAM_LOGON_RESPONSE_EX (23) sbz : 0x0000 (0) server_type : 0x000013fd (5117) 1: NBT_SERVER_PDC 1: NBT_SERVER_GC 1: NBT_SERVER_LDAP 1: NBT_SERVER_DS 1: NBT_SERVER_KDC 1: NBT_SERVER_TIMESERV 1: NBT_SERVER_CLOSEST 1: NBT_SERVER_WRITABLE 1: NBT_SERVER_GOOD_TIMESERV 0: NBT_SERVER_NDNC 0: NBT_SERVER_SELECT_SECRET_DOMAIN_6 1: NBT_SERVER_FULL_SECRET_DOMAIN_6 0: NBT_SERVER_ADS_WEB_SERVICE 0: NBT_SERVER_DS_8 0: NBT_SERVER_HAS_DNS_NAME 0: NBT_SERVER_IS_DEFAULT_NC 0: NBT_SERVER_FOREST_ROOT domain_uuid : 1bdd7e2a-525c-41e9-9166-65df8812f632 forest : 'ltbtest.intranet' dns_domain : 'ltbtest.intranet' pdc_dns_name : 'ucs-7437.ltbtest.intranet' domain_name : 'LTBTEST' pdc_name : 'UCS-7437' user_name : '' server_site : 'Default-First-Site-Name' client_site : 'Default-First-Site-Name' sockaddr_size : 0x00 (0) sockaddr: struct nbt_sockaddr sockaddr_family : 0x00000000 (0) pdc_ip : (null) remaining : DATA_BLOB length=0 next_closest_site : NULL nt_version : 0x00000005 (5) 1: NETLOGON_NT_VERSION_1 0: NETLOGON_NT_VERSION_5 1: NETLOGON_NT_VERSION_5EX 0: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2017/03/08 10:28:23.669253, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:70(sitename_store) sitename_store: realm = [LTBTEST], sitename = [Default-First-Site-Name], expire = [2085923199] [2017/03/08 10:28:23.669300, 10, pid=21494, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:301(gencache_set_data_blob) Did not store value for AD_SITENAME/DOMAIN/LTBTEST, we already got it [2017/03/08 10:28:23.669323, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:70(sitename_store) sitename_store: realm = [ltbtest.intranet], sitename = [Default-First-Site-Name], expire = [2085923199] [2017/03/08 10:28:23.669350, 10, pid=21494, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:301(gencache_set_data_blob) Did not store value for AD_SITENAME/DOMAIN/LTBTEST.INTRANET, we already got it [2017/03/08 10:28:23.669376, 3, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:618(ads_connect) Successfully contacted LDAP server 10.200.42.175 [2017/03/08 10:28:23.669398, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:73(ldap_open_with_timeout) Opening connection to LDAP server '10.200.42.175:389', timeout 15 seconds [2017/03/08 10:28:23.670145, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:108(ldap_open_with_timeout) Initialized connection for LDAP server 'ldap://10.200.42.175:389' [2017/03/08 10:28:23.670183, 3, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:661(ads_connect) Connected to LDAP server ucs-7437.ltbtest.intranet [2017/03/08 10:28:23.670201, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:212(ads_closest_dc) ads_closest_dc: NBT_SERVER_CLOSEST flag set [2017/03/08 10:28:23.670228, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:88(saf_store) saf_store: domain = [LTBTEST], server = [ucs-7437.ltbtest.intranet], expire = [1488966203] [2017/03/08 10:28:23.670270, 10, pid=21494, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:326(gencache_set_data_blob) Adding cache entry with key=[SAF/DOMAIN/LTBTEST] and timeout=[Mi Mär 8 10:43:23 2017 CET] (900 seconds ahead) [2017/03/08 10:28:23.670326, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:88(saf_store) saf_store: domain = [LTBTEST.INTRANET], server = [ucs-7437.ltbtest.intranet], expire = [1488966203] [2017/03/08 10:28:23.670366, 10, pid=21494, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:326(gencache_set_data_blob) Adding cache entry with key=[SAF/DOMAIN/LTBTEST.INTRANET] and timeout=[Mi Mär 8 10:43:23 2017 CET] (900 seconds ahead) [2017/03/08 10:28:23.877758, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:2976(ads_current_time) KDC time offset is 0 seconds [2017/03/08 10:28:23.878924, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/sasl.c:1094(ads_sasl_bind) Found SASL mechanism GSS-SPNEGO [2017/03/08 10:28:24.054987, 3, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/sasl.c:733(ads_sasl_spnego_bind) ads_sasl_spnego_bind: got OID=1.2.840.48018.1.2.2 [2017/03/08 10:28:24.055031, 3, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/sasl.c:733(ads_sasl_spnego_bind) ads_sasl_spnego_bind: got OID=1.2.840.113554.1.2.2 [2017/03/08 10:28:24.055050, 3, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/sasl.c:733(ads_sasl_spnego_bind) ads_sasl_spnego_bind: got OID=1.3.6.1.4.1.311.2.2.10 [2017/03/08 10:28:24.055882, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/libads/kerberos.c:228(kerberos_kinit_password_ext) kerberos_kinit_password: as UCS-1950$@LTBTEST.INTRANET using [MEMORY:prtpub_cache] as ccache and config [/var/run/samba/smb_krb5/krb5.conf.LTBTEST] [2017/03/08 10:28:24.152433, 3, pid=21494, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'gssapi_spnego' registered [2017/03/08 10:28:24.152503, 3, pid=21494, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'gssapi_krb5' registered [2017/03/08 10:28:24.152520, 3, pid=21494, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'gssapi_krb5_sasl' registered [2017/03/08 10:28:24.152535, 3, pid=21494, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'spnego' registered [2017/03/08 10:28:24.152550, 3, pid=21494, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'schannel' registered [2017/03/08 10:28:24.152564, 3, pid=21494, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'naclrpc_as_system' registered [2017/03/08 10:28:24.152579, 3, pid=21494, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'sasl-EXTERNAL' registered [2017/03/08 10:28:24.152593, 3, pid=21494, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'ntlmssp' registered [2017/03/08 10:28:24.152608, 3, pid=21494, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'ntlmssp_resume_ccache' registered [2017/03/08 10:28:24.152623, 3, pid=21494, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'http_basic' registered [2017/03/08 10:28:24.152637, 3, pid=21494, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'http_ntlm' registered [2017/03/08 10:28:24.152653, 3, pid=21494, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'krb5' registered [2017/03/08 10:28:24.152668, 3, pid=21494, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'fake_gssapi_krb5' registered [2017/03/08 10:28:24.152967, 5, pid=21494, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC mechanism spnego [2017/03/08 10:28:24.153029, 5, pid=21494, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC submechanism gse_krb5 [2017/03/08 10:28:24.404206, 4, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:203(make_internal_rpc_pipe_p) Create pipe requested winreg [2017/03/08 10:28:24.404293, 10, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:223(init_pipe_handles) init_pipe_handle_list: created handle list for pipe winreg [2017/03/08 10:28:24.404318, 10, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:240(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe winreg [2017/03/08 10:28:24.404365, 4, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:243(make_internal_rpc_pipe_p) Created internal pipe winreg [2017/03/08 10:28:24.404439, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2017/03/08 10:28:24.404543, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2017/03/08 10:28:24.404579, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:28:24.404602, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:28:24.404621, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:28:24.404639, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:28:24.404657, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:28:24.404817, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:28:24.404852, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:885(regdb_open) regdb_open: registry db opened. refcount reset (1) [2017/03/08 10:28:24.404875, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2017/03/08 10:28:24.404894, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2017/03/08 10:28:24.404913, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:24.404929, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM] [2017/03/08 10:28:24.404987, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 BF 58 B8 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:24.405047, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000d-0000-0000-bf58-b8cef6530000 result : WERR_OK [2017/03/08 10:28:24.405180, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000d-0000-0000-bf58-b8cef6530000 keyname: struct winreg_String name_len : 0x008a (138) name_size : 0x008a (138) name : * name : 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\printers' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2017/03/08 10:28:24.405362, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 BF 58 B8 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:24.405417, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SOFTWARE] [2017/03/08 10:28:24.405437, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (1->2) [2017/03/08 10:28:24.405458, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE] [2017/03/08 10:28:24.405476, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SOFTWARE] [2017/03/08 10:28:24.405504, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:24.405522, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SOFTWARE] [2017/03/08 10:28:24.405635, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Microsoft] [2017/03/08 10:28:24.405664, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (2->3) [2017/03/08 10:28:24.405685, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft] [2017/03/08 10:28:24.405703, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft] [2017/03/08 10:28:24.405723, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:24.405739, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SOFTWARE\Microsoft] [2017/03/08 10:28:24.405790, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT] [2017/03/08 10:28:24.405820, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2017/03/08 10:28:24.405842, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT] [2017/03/08 10:28:24.405860, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT] [2017/03/08 10:28:24.405879, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:24.405896, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SOFTWARE\Microsoft\Windows NT] [2017/03/08 10:28:24.405932, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentVersion] [2017/03/08 10:28:24.405955, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2017/03/08 10:28:24.405975, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] [2017/03/08 10:28:24.405993, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] [2017/03/08 10:28:24.406013, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:24.406029, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e1842b60 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] [2017/03/08 10:28:24.406082, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2017/03/08 10:28:24.406107, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (5->6) [2017/03/08 10:28:24.406127, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print] [2017/03/08 10:28:24.406146, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print] [2017/03/08 10:28:24.406168, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:24.406185, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e1842b60 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print] [2017/03/08 10:28:24.406221, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Printers] [2017/03/08 10:28:24.406244, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (6->7) [2017/03/08 10:28:24.406273, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2017/03/08 10:28:24.406299, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2017/03/08 10:28:24.406322, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:24.406338, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2017/03/08 10:28:24.406372, 7, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [printers] [2017/03/08 10:28:24.406394, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (7->8) [2017/03/08 10:28:24.406414, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\printers] [2017/03/08 10:28:24.406433, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\printers] [2017/03/08 10:28:24.406455, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2017/03/08 10:28:24.406471, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f75e0cf2020 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\printers] [2017/03/08 10:28:24.406498, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1739(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\printers] not found [2017/03/08 10:28:24.406520, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (8->7) [2017/03/08 10:28:24.406539, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (7->6) [2017/03/08 10:28:24.406559, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (6->5) [2017/03/08 10:28:24.406580, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2017/03/08 10:28:24.406599, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2017/03/08 10:28:24.406617, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (3->2) [2017/03/08 10:28:24.406636, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (2->1) [2017/03/08 10:28:24.406670, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2017/03/08 10:28:24.406841, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000d-0000-0000-bf58-b8cef6530000 [2017/03/08 10:28:24.406907, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 BF 58 B8 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:24.406960, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 BF 58 B8 CE ........ .....X.. [0010] F6 53 00 00 .S.. [2017/03/08 10:28:24.407008, 6, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2017/03/08 10:28:24.407027, 10, pid=21494, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (1->0) [2017/03/08 10:28:24.407072, 1, pid=21494, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2017/03/08 10:28:24.407154, 2, pid=21494, effective(0, 0), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:1377(winreg_get_printer) winreg_get_printer: Could not open key SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\printers: WERR_BADFILE [2017/03/08 10:28:24.407183, 10, pid=21494, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:418(close_policy_by_pipe) Deleted handle list for RPC connection winreg [2017/03/08 10:28:24.407653, 3, pid=21494, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:328(start_background_queue) start_background_queue: Starting background LPQ thread [2017/03/08 10:28:24.409059, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) bind succeeded on port 445 [2017/03/08 10:28:24.409139, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2017/03/08 10:28:24.409248, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2017/03/08 10:28:24.409405, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) bind succeeded on port 139 [2017/03/08 10:28:24.409439, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2017/03/08 10:28:24.409552, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2017/03/08 10:28:24.409734, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) bind succeeded on port 445 [2017/03/08 10:28:24.409764, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2017/03/08 10:28:24.409845, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2017/03/08 10:28:24.409953, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) bind succeeded on port 139 [2017/03/08 10:28:24.409980, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2017/03/08 10:28:24.410060, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2017/03/08 10:28:24.410166, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) bind succeeded on port 445 [2017/03/08 10:28:24.410192, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2017/03/08 10:28:24.410273, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2017/03/08 10:28:24.410384, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) bind succeeded on port 139 [2017/03/08 10:28:24.410410, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2017/03/08 10:28:24.410488, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2017/03/08 10:28:24.410582, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:28:24.410611, 10, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/run/samba/serverid.tdb 3: [2017/03/08 10:28:24.410634, 10, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key F653000000000000FFFF [2017/03/08 10:28:24.410739, 10, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x56311860fe00 [2017/03/08 10:28:24.410820, 10, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key F653000000000000FFFF [2017/03/08 10:28:24.410839, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:28:24.410855, 10, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:28:24.410871, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 13 - private_data=(nil) [2017/03/08 10:28:24.410899, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 33 - private_data=0x5631185f14d0 [2017/03/08 10:28:24.410918, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 783 - private_data=(nil) [2017/03/08 10:28:24.410933, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2017/03/08 10:28:24.410947, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:371(messaging_register) Overriding messaging pointer for type 1 - private_data=(nil) [2017/03/08 10:28:24.410961, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 770 - private_data=(nil) [2017/03/08 10:28:24.410981, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 790 - private_data=(nil) [2017/03/08 10:28:24.411007, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 791 - private_data=(nil) [2017/03/08 10:28:24.411023, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2017/03/08 10:28:24.411038, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 16 - private_data=(nil) [2017/03/08 10:28:24.411053, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 799 - private_data=(nil) [2017/03/08 10:28:24.411092, 1, pid=21494, effective(0, 0), real(0, 0)] ../source3/printing/printer_list.c:234(printer_list_get_last_refresh) Failed to fetch record! [2017/03/08 10:28:24.411144, 2, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1382(smbd_parent_loop) waiting for connections [2017/03/08 10:28:24.411210, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0x31f len 0 (num_fds:0) from 21497 [2017/03/08 10:28:24.411268, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:28:24.411291, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:28:24.411385, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:28:24.411405, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:28:24.411419, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:28:24.411456, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 21498 [2017/03/08 10:28:24.411539, 10, pid=21498, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0x31f len 0 (num_fds:0) from 21494 [2017/03/08 10:28:24.411591, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:28:24.411628, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:28:24.411646, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:28:24.411661, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:28:24.411675, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:28:24.411689, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:28:24.411710, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 21497 [2017/03/08 10:28:24.411765, 10, pid=21497, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0x31f len 0 (num_fds:0) from 21494 [2017/03/08 10:28:24.411816, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:28:24.411913, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:364(start_background_queue) start_background_queue: background LPQ thread started [2017/03/08 10:28:24.412203, 10, pid=21516, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2017/03/08 10:28:24.412410, 10, pid=21516, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Erfolg [2017/03/08 10:28:24.412465, 10, pid=21516, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 5947610665803497052 [2017/03/08 10:28:24.412532, 10, pid=21516, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(print_queue_housekeeping) 0x56311860b420 [2017/03/08 10:28:24.412561, 5, pid=21516, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:28:24.412583, 10, pid=21516, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/run/samba/serverid.tdb 3: [2017/03/08 10:28:24.412609, 10, pid=21516, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0C54000000000000FFFF [2017/03/08 10:28:24.412636, 10, pid=21516, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x56311860cd30 [2017/03/08 10:28:24.412663, 10, pid=21516, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0C54000000000000FFFF [2017/03/08 10:28:24.412680, 5, pid=21516, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:28:24.412695, 10, pid=21516, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:28:24.412717, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 33 - private_data=0x56311860aee0 [2017/03/08 10:28:24.412736, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 517 - private_data=(nil) [2017/03/08 10:28:24.412795, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 515 - private_data=(nil) [2017/03/08 10:28:24.412824, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 515 - private_data=(nil) [2017/03/08 10:28:24.412848, 3, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:140(pcap_cache_reload) reloading printcap cache [2017/03/08 10:28:24.412872, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:450(cups_pcap_load_async) cups_pcap_load_async: asynchronously loading cups printers [2017/03/08 10:28:24.413983, 10, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:467(cups_pcap_load_async) cups_pcap_load_async: child pid = 21517 [2017/03/08 10:28:24.414050, 10, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:588(cups_cache_reload) cups_cache_reload: async read on fd 15 [2017/03/08 10:28:24.414095, 3, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:189(pcap_cache_reload) reload status: ok [2017/03/08 10:28:24.414115, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:424(start_background_queue) start_background_queue: background LPQ thread waiting for messages [2017/03/08 10:28:24.414353, 10, pid=21517, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2017/03/08 10:28:24.414597, 10, pid=21517, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Erfolg [2017/03/08 10:28:24.414637, 10, pid=21517, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 9883298044363797939 [2017/03/08 10:28:24.414736, 5, pid=21517, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:319(cups_cache_reload_async) reloading cups printcap cache [2017/03/08 10:28:24.415154, 10, pid=21517, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:131(cups_connect) connecting to cups server localhost:631 [2017/03/08 10:28:24.417104, 3, pid=21517, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:152(cups_connect) Unable to connect to CUPS server localhost:631 - Verbindungsaufbau abgelehnt [2017/03/08 10:28:24.417178, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:514(cups_async_callback) cups_async_callback: callback received for printer data. fd = 15 [2017/03/08 10:28:24.417219, 10, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:197(recv_pcap_blob) successfully recvd blob of len 12 [2017/03/08 10:28:24.417254, 3, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:530(cups_async_callback) failed to retrieve printer list: NT_STATUS_UNSUCCESSFUL [2017/03/08 10:28:24.417294, 2, pid=21516, effective(0, 0), real(0, 0), class=tevent] ../lib/util/tevent_debug.c:66(samba_tevent_debug) samba_tevent: EPOLL_CTL_DEL EBADF for fde[0x56311860fe00] mpx_fde[(nil)] fd[15] - disabling [2017/03/08 10:28:24.417322, 10, pid=21517, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:172(send_pcap_blob) successfully sent blob of len 12 [2017/03/08 10:28:24.417357, 10, pid=21517, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2017/03/08 10:28:24.418343, 6, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:265(bq_sig_chld_handler) Bq child process 21517 terminated with 0 [2017/03/08 10:28:50.547377, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:28:50.547434, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:28:50.547451, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:28:50.547482, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:28:50.547500, 1, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1438(smbd_parent_sig_hup_handler) parent: Reloading services after SIGHUP [2017/03/08 10:28:50.547566, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1337(free_service) free_service: Freeing service homes [2017/03/08 10:28:50.547607, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1337(free_service) free_service: Freeing service printers [2017/03/08 10:28:50.547633, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1337(free_service) free_service: Freeing service print$ [2017/03/08 10:28:50.547658, 3, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3739(lp_load_ex) lp_load_ex: refreshing parameters [2017/03/08 10:28:50.547676, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1312(free_param_opts) Freeing parametrics: [2017/03/08 10:28:50.547785, 3, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:543(init_globals) Initialising global parameters [2017/03/08 10:28:50.547926, 3, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2668(lp_do_section) Processing section "[global]" doing parameter debug level = 10 [2017/03/08 10:28:50.547973, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/util/debug.c:642(debug_dump_status) INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10 passdb: 10 sam: 10 auth: 10 winbind: 10 vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 scavenger: 10 dns: 10 ldb: 10 tevent: 10 doing parameter logging = file doing parameter max log size = 0 doing parameter max open files = 32808 doing parameter server string = %h univention corporate server doing parameter ntlm auth = yes doing parameter machine password timeout = 0 doing parameter acl allow execute always = True doing parameter bind interfaces only = yes doing parameter interfaces = lo eth0 doing parameter netbios name = ucs-1950 doing parameter ldap suffix = dc=ltbtest,dc=intranet doing parameter ldap admin dn = "cn=ucs-1950,cn=memberserver,cn=computers,dc=ltbtest,dc=intranet" doing parameter ldap ssl = start tls doing parameter passdb expand explicit = no doing parameter ldap idmap suffix = cn=idmap,cn=univention doing parameter idmap config * : backend = ldap doing parameter idmap config * : range = 55000-64000 doing parameter idmap config * : ldap_url = ldap://ucs-7437.ltbtest.intranet:7389 doing parameter idmap config * : ldap_user_dn = cn=ucs-1950,cn=memberserver,cn=computers,dc=ltbtest,dc=intranet doing parameter idmap config LTBTEST : backend = nss doing parameter idmap config LTBTEST : range = 1000-54999 doing parameter winbind max clients = 500 doing parameter winbind nested groups = no doing parameter winbind enum users = yes doing parameter winbind enum groups = yes doing parameter winbind separator = + doing parameter template shell = /bin/bash doing parameter template homedir = /home/%D-%U doing parameter pam password change = no doing parameter unix password sync = no doing parameter passwd chat = *New*password* %n\n *Re-enter*new*password* %n\n *password*changed* doing parameter passwd chat timeout = 60 doing parameter client use spnego = yes doing parameter obey pam restrictions = yes doing parameter encrypt passwords = yes doing parameter spoolss: architecture = Windows x64 doing parameter security = ads doing parameter realm = LTBTEST.INTRANET doing parameter domain logons = no doing parameter domain master = no doing parameter preferred master = no doing parameter local master = no doing parameter os level = 65 doing parameter wins support = no doing parameter workgroup = LTBTEST doing parameter oplocks = yes doing parameter kernel oplocks = yes doing parameter large readwrite = yes doing parameter deadtime = 15 doing parameter read raw = yes doing parameter write raw = yes doing parameter max xmit = 65535 doing parameter getwd cache = yes doing parameter wide links = no doing parameter store dos attributes = yes doing parameter preserve case = yes doing parameter short preserve case = yes doing parameter time server = yes doing parameter host msdfs = no doing parameter msdfs root = no doing parameter guest account = nobody doing parameter map to guest = Bad User doing parameter admin users = administrator join-backup doing parameter set quota command = /usr/sbin/univention-setquota doing parameter check password script = /usr/share/univention-samba/password_check %u doing parameter usershare max shares = 0 doing parameter include = /etc/samba/base.conf [2017/03/08 10:28:50.548972, 2, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[homes]" [2017/03/08 10:28:50.549012, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1428(add_a_service) add_a_service: Creating snum = 0 for homes [2017/03/08 10:28:50.549028, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1478(hash_a_service) hash_a_service: hashing index 0 for service name homes doing parameter comment = Heimatverzeichnisse doing parameter browsable = no doing parameter read only = no doing parameter create mask = 0700 doing parameter directory mask = 0700 doing parameter vfs objects = acl_xattr [2017/03/08 10:28:50.549138, 2, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[printers]" [2017/03/08 10:28:50.549168, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1428(add_a_service) add_a_service: Creating snum = 1 for printers [2017/03/08 10:28:50.549183, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1478(hash_a_service) hash_a_service: hashing index 1 for service name printers doing parameter comment = Drucker doing parameter browseable = no doing parameter path = /tmp doing parameter printable = yes doing parameter public = no doing parameter writable = no doing parameter create mode = 0700 [2017/03/08 10:28:50.549298, 2, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[print$]" [2017/03/08 10:28:50.549329, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1428(add_a_service) add_a_service: Creating snum = 2 for print$ [2017/03/08 10:28:50.549344, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1478(hash_a_service) hash_a_service: hashing index 2 for service name print$ doing parameter comment = Printer Drivers doing parameter path = /var/lib/samba/drivers doing parameter browseable = yes doing parameter guest ok = no doing parameter read only = no doing parameter write list = root, Administrator, @Printer-Admins doing parameter include = /etc/samba/shares.conf doing parameter include = /etc/samba/shares.conf.d/test_forceuser [2017/03/08 10:28:50.549530, 2, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[test_forceuser]" [2017/03/08 10:28:50.549563, 8, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1428(add_a_service) add_a_service: Creating snum = 4 for test_forceuser [2017/03/08 10:28:50.549579, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1478(hash_a_service) hash_a_service: hashing index 4 for service name test_forceuser doing parameter path = /mnt/shares/bmm/test1 doing parameter vfs objects = acl_xattr doing parameter msdfs root = no doing parameter writeable = yes doing parameter browseable = yes doing parameter public = no doing parameter dos filemode = no doing parameter hide unreadable = no doing parameter create mode = 0744 doing parameter directory mode = 0755 doing parameter force create mode = 00 doing parameter force directory mode = 00 doing parameter locking = 1 doing parameter blocking locks = 1 doing parameter strict locking = Auto doing parameter oplocks = 1 doing parameter level2 oplocks = 1 doing parameter fake oplocks = 0 doing parameter csc policy = manual doing parameter force user = sruda doing parameter force group = bmm doing parameter nt acl support = 1 doing parameter inherit acls = 1 doing parameter inherit owner = no doing parameter inherit permissions = no doing parameter include = /etc/samba/local.conf [2017/03/08 10:28:50.549956, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3780(lp_load_ex) pm_process() returned Yes [2017/03/08 10:28:50.549992, 3, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1585(lp_add_ipc) adding IPC service [2017/03/08 10:28:50.550038, 6, pid=21494, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/local.conf -> /etc/samba/local.conf last mod_time: Wed Mar 8 08:59:21 2017 file /etc/samba/shares.conf.d/test_forceuser -> /etc/samba/shares.conf.d/test_forceuser last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/base.conf -> /etc/samba/base.conf last mod_time: Wed Mar 8 09:02:11 2017 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Mar 8 10:28:18 2017 [2017/03/08 10:28:50.550344, 2, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) added interface lo ip=::1 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff [2017/03/08 10:28:50.550387, 2, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) added interface lo ip=127.0.0.1 bcast=127.255.255.255 netmask=255.0.0.0 [2017/03/08 10:28:50.550407, 2, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) added interface eth0 ip=10.200.42.176 bcast=10.200.42.255 netmask=255.255.255.0 [2017/03/08 10:28:50.550461, 1, pid=21494, effective(0, 0), real(0, 0)] ../source3/printing/printer_list.c:234(printer_list_get_last_refresh) Failed to fetch record! [2017/03/08 10:28:50.550530, 4, pid=21516, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:28:50.550570, 5, pid=21516, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:28:50.550588, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:28:50.550629, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:28:50.550652, 1, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:236(bq_sig_hup_handler) Reloading pcap cache after SIGHUP [2017/03/08 10:28:50.550673, 3, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:140(pcap_cache_reload) reloading printcap cache [2017/03/08 10:28:50.550690, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:450(cups_pcap_load_async) cups_pcap_load_async: asynchronously loading cups printers [2017/03/08 10:28:50.551989, 10, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:467(cups_pcap_load_async) cups_pcap_load_async: child pid = 21522 [2017/03/08 10:28:50.552072, 10, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:588(cups_cache_reload) cups_cache_reload: async read on fd 15 [2017/03/08 10:28:50.552117, 3, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:189(pcap_cache_reload) reload status: ok [2017/03/08 10:28:50.552171, 10, pid=21516, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(print_queue_housekeeping) 0x56311860e630 [2017/03/08 10:28:50.560112, 10, pid=21522, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2017/03/08 10:28:50.560450, 10, pid=21522, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Erfolg [2017/03/08 10:28:50.560483, 10, pid=21522, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 2054171607067524134 [2017/03/08 10:28:50.560508, 5, pid=21522, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:319(cups_cache_reload_async) reloading cups printcap cache [2017/03/08 10:28:50.561044, 10, pid=21522, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:131(cups_connect) connecting to cups server localhost:631 [2017/03/08 10:28:50.564885, 3, pid=21522, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:152(cups_connect) Unable to connect to CUPS server localhost:631 - Verbindungsaufbau abgelehnt [2017/03/08 10:28:50.564976, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:514(cups_async_callback) cups_async_callback: callback received for printer data. fd = 15 [2017/03/08 10:28:50.565038, 10, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:197(recv_pcap_blob) successfully recvd blob of len 12 [2017/03/08 10:28:50.565071, 3, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:530(cups_async_callback) failed to retrieve printer list: NT_STATUS_UNSUCCESSFUL [2017/03/08 10:28:50.565103, 2, pid=21516, effective(0, 0), real(0, 0), class=tevent] ../lib/util/tevent_debug.c:66(samba_tevent_debug) samba_tevent: EPOLL_CTL_DEL EBADF for fde[0x5631185f3140] mpx_fde[(nil)] fd[15] - disabling [2017/03/08 10:28:50.565131, 10, pid=21522, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:172(send_pcap_blob) successfully sent blob of len 12 [2017/03/08 10:28:50.565166, 10, pid=21522, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2017/03/08 10:28:50.566580, 6, pid=21516, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:265(bq_sig_chld_handler) Bq child process 21522 terminated with 0 [2017/03/08 10:29:25.146488, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2017/03/08 10:29:25.147113, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Erfolg [2017/03/08 10:29:25.147321, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 309207622901757354 [2017/03/08 10:29:25.147669, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:533(smbXsrv_client_create) [2017/03/08 10:29:25.147762, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:541(smbXsrv_client_create) smbXsrv_client_create: client_guid[00000000-0000-0000-0000-000000000000] stored [2017/03/08 10:29:25.147932, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &client_blob: struct smbXsrv_clientB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_clientU(case 0) info0 : * info0: struct smbXsrv_client table : * ev_ctx : * msg_ctx : * global : * global: struct smbXsrv_client_global0 db_rec : NULL server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) local_address : NULL remote_address : NULL remote_name : NULL initial_connect_time : Mi Mär 8 10:29:25 2017 CET client_guid : 00000000-0000-0000-0000-000000000000 stored : 0x00 (0) sconn : NULL session_table : NULL last_session_id : 0x0000000000000000 (0) tcon_table : NULL open_table : NULL connections : NULL server_multi_channel_enabled: 0x00 (0) [2017/03/08 10:29:25.150760, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:29:25.150892, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/run/samba/serverid.tdb 3: [2017/03/08 10:29:25.151000, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 2D54000000000000FFFF [2017/03/08 10:29:25.151113, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5631185f12c0 [2017/03/08 10:29:25.151231, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 2D54000000000000FFFF [2017/03/08 10:29:25.151347, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:29:25.151445, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.151585, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 87040 SO_RCVBUF = 374400 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2017/03/08 10:29:25.152604, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 87040 SO_RCVBUF = 374400 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2017/03/08 10:29:25.153806, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:25.153902, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:3837(smbd_add_connection) Connection allowed from ipv4:10.200.42.172:49213 to ipv4:10.200.42.176:445 [2017/03/08 10:29:25.154118, 6, pid=21549, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/local.conf -> /etc/samba/local.conf last mod_time: Wed Mar 8 08:59:21 2017 file /etc/samba/shares.conf.d/test_forceuser -> /etc/samba/shares.conf.d/test_forceuser last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/base.conf -> /etc/samba/base.conf last mod_time: Wed Mar 8 09:02:11 2017 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Mar 8 10:28:18 2017 [2017/03/08 10:29:25.154836, 3, pid=21549, effective(0, 0), real(0, 0), class=locking] ../source3/smbd/oplock.c:1322(init_oplocks) init_oplocks: initializing messages. [2017/03/08 10:29:25.154928, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 774 - private_data=0x5631185f9700 [2017/03/08 10:29:25.155015, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 778 - private_data=0x5631185f9700 [2017/03/08 10:29:25.155098, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 770 - private_data=0x5631185f9700 [2017/03/08 10:29:25.155181, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 787 - private_data=0x5631185f9700 [2017/03/08 10:29:25.155280, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 779 - private_data=0x5631185f9700 [2017/03/08 10:29:25.155366, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2017/03/08 10:29:25.155450, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:371(messaging_register) Overriding messaging pointer for type 15 - private_data=(nil) [2017/03/08 10:29:25.155533, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 16 - private_data=(nil) [2017/03/08 10:29:25.155618, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 16 - private_data=0x5631185f9700 [2017/03/08 10:29:25.155720, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 33 - private_data=0x5631185f14d0 [2017/03/08 10:29:25.155804, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 33 - private_data=0x5631185f9700 [2017/03/08 10:29:25.155888, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 790 - private_data=(nil) [2017/03/08 10:29:25.155973, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 790 - private_data=0x5631185f9700 [2017/03/08 10:29:25.156058, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 791 - private_data=(nil) [2017/03/08 10:29:25.156142, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2017/03/08 10:29:25.156305, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2017/03/08 10:29:25.156400, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(keepalive) 0x5631185f74d0 [2017/03/08 10:29:25.156488, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(deadtime) 0x5631185f7720 [2017/03/08 10:29:25.156583, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x5631185f7970 [2017/03/08 10:29:25.156973, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 155 [2017/03/08 10:29:25.157112, 6, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x9b [2017/03/08 10:29:25.157200, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 0 of length 159 (0 toread) [2017/03/08 10:29:25.157281, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/util.c:171(show_msg) [2017/03/08 10:29:25.157328, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/util.c:181(show_msg) size=155 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51283 smb_tid=65535 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=120 [2017/03/08 10:29:25.157742, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 [0020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for [0030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. [0040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM [0050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 [0060] 32 00 02 53 4D 42 20 32 2E 30 30 32 00 02 53 4D 2..SMB 2 .002..SM [0070] 42 20 32 2E 3F 3F 3F 00 B 2.???. [2017/03/08 10:29:25.158186, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBnegprot (pid 21549) conn 0x0 [2017/03/08 10:29:25.158288, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.158382, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.158516, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.158665, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:25.159764, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2017/03/08 10:29:25.159889, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [LANMAN1.0] [2017/03/08 10:29:25.159976, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [Windows for Workgroups 3.1a] [2017/03/08 10:29:25.160061, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [LM1.2X002] [2017/03/08 10:29:25.160146, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [LANMAN2.1] [2017/03/08 10:29:25.160310, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [NT LM 0.12] [2017/03/08 10:29:25.160396, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [SMB 2.002] [2017/03/08 10:29:25.160481, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [SMB 2.???] [2017/03/08 10:29:25.160567, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1325(set_remote_arch) set_remote_arch: Client arch is 'UNKNOWN' [2017/03/08 10:29:25.160682, 6, pid=21549, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/local.conf -> /etc/samba/local.conf last mod_time: Wed Mar 8 08:59:21 2017 file /etc/samba/shares.conf.d/test_forceuser -> /etc/samba/shares.conf.d/test_forceuser last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/base.conf -> /etc/samba/base.conf last mod_time: Wed Mar 8 09:02:11 2017 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Mar 8 10:28:18 2017 [2017/03/08 10:29:25.161259, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:29:25.161341, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/run/samba/serverid.tdb 3: [2017/03/08 10:29:25.161431, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 2D54000000000000FFFF [2017/03/08 10:29:25.161530, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118610f00 [2017/03/08 10:29:25.161634, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 2D54000000000000FFFF [2017/03/08 10:29:25.161738, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:29:25.161823, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.161926, 6, pid=21549, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/local.conf -> /etc/samba/local.conf last mod_time: Wed Mar 8 08:59:21 2017 file /etc/samba/shares.conf.d/test_forceuser -> /etc/samba/shares.conf.d/test_forceuser last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/base.conf -> /etc/samba/base.conf last mod_time: Wed Mar 8 09:02:11 2017 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Mar 8 10:28:18 2017 [2017/03/08 10:29:25.162619, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3463(smbd_smb2_process_negprot) smbd_smb2_first_negprot: packet length 102 [2017/03/08 10:29:25.162754, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 0 (position 0) from bitmap [2017/03/08 10:29:25.162863, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_NEGPROT] mid = 0 [2017/03/08 10:29:25.162965, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.163061, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.163155, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.163297, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:25.163406, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1325(set_remote_arch) set_remote_arch: Client arch is 'Vista' [2017/03/08 10:29:25.163519, 6, pid=21549, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/local.conf -> /etc/samba/local.conf last mod_time: Wed Mar 8 08:59:21 2017 file /etc/samba/shares.conf.d/test_forceuser -> /etc/samba/shares.conf.d/test_forceuser last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/base.conf -> /etc/samba/base.conf last mod_time: Wed Mar 8 09:02:11 2017 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Mar 8 10:28:18 2017 [2017/03/08 10:29:25.164075, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot) Selected protocol SMB2_FF [2017/03/08 10:29:25.164173, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:477(make_auth_context_subsystem) Making default auth method list for server role = 'domain member' [2017/03/08 10:29:25.164362, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend trustdomain [2017/03/08 10:29:25.164467, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'trustdomain' [2017/03/08 10:29:25.164563, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend ntdomain [2017/03/08 10:29:25.164669, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'ntdomain' [2017/03/08 10:29:25.165056, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend guest [2017/03/08 10:29:25.165157, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'guest' [2017/03/08 10:29:25.165250, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend sam [2017/03/08 10:29:25.165343, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'sam' [2017/03/08 10:29:25.165435, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2017/03/08 10:29:25.165528, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2017/03/08 10:29:25.165620, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend winbind [2017/03/08 10:29:25.165715, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'winbind' [2017/03/08 10:29:25.165806, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend unix [2017/03/08 10:29:25.165899, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'unix' [2017/03/08 10:29:25.165991, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend wbc [2017/03/08 10:29:25.166085, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'wbc' [2017/03/08 10:29:25.166177, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2017/03/08 10:29:25.166272, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2017/03/08 10:29:25.166367, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2017/03/08 10:29:25.166462, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2017/03/08 10:29:25.166557, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2017/03/08 10:29:25.166653, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match ntdomain [2017/03/08 10:29:25.166748, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method ntdomain has a valid init [2017/03/08 10:29:25.166841, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method winbind has a valid init [2017/03/08 10:29:25.167238, 5, pid=21549, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC mechanism spnego [2017/03/08 10:29:25.167391, 5, pid=21549, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC submechanism gse_krb5 [2017/03/08 10:29:25.193251, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/librpc/crypto/gse_krb5.c:312(fill_mem_keytab_from_secrets) ../source3/librpc/crypto/gse_krb5.c:312: no prev machine password [2017/03/08 10:29:25.194123, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[64] dyn[yes:96] at ../source3/smbd/smb2_negprot.c:702 [2017/03/08 10:29:25.194368, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 512/512, total granted/max/low/range 1/8192/1/1 [2017/03/08 10:29:25.194586, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:711(reply_negprot) Selected protocol SMB 2.??? [2017/03/08 10:29:25.194767, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:718(reply_negprot) negprot index=7 [2017/03/08 10:29:25.195479, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.195685, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 1 (position 1) from bitmap [2017/03/08 10:29:25.195870, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_NEGPROT] mid = 1 [2017/03/08 10:29:25.196071, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.196267, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.196464, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.196840, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:25.197015, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.197122, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:25.197219, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.197315, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.197409, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.197601, 10, pid=21549, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:326(gencache_set_data_blob) Adding cache entry with key=[RA/293d4bb5-03dd-11e7-b671-5254001e7776] and timeout=[Do Jan 1 01:00:00 1970 CET] (-1488965365 seconds in the past) [2017/03/08 10:29:25.197889, 10, pid=21549, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:326(gencache_set_data_blob) Adding cache entry with key=[RA/293d4bb5-03dd-11e7-b671-5254001e7776] and timeout=[Mi Mär 15 10:29:25 2017 CET] (604800 seconds ahead) [2017/03/08 10:29:25.198128, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.198328, 6, pid=21549, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/local.conf -> /etc/samba/local.conf last mod_time: Wed Mar 8 08:59:21 2017 file /etc/samba/shares.conf.d/test_forceuser -> /etc/samba/shares.conf.d/test_forceuser last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/base.conf -> /etc/samba/base.conf last mod_time: Wed Mar 8 09:02:11 2017 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Mar 8 10:28:18 2017 [2017/03/08 10:29:25.199028, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot) Selected protocol SMB2_10 [2017/03/08 10:29:25.199144, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:477(make_auth_context_subsystem) Making default auth method list for server role = 'domain member' [2017/03/08 10:29:25.199263, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2017/03/08 10:29:25.199380, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2017/03/08 10:29:25.199491, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2017/03/08 10:29:25.199605, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2017/03/08 10:29:25.199718, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2017/03/08 10:29:25.199833, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match ntdomain [2017/03/08 10:29:25.199945, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method ntdomain has a valid init [2017/03/08 10:29:25.200057, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method winbind has a valid init [2017/03/08 10:29:25.200221, 5, pid=21549, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC mechanism spnego [2017/03/08 10:29:25.200374, 5, pid=21549, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC submechanism gse_krb5 [2017/03/08 10:29:25.224673, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/librpc/crypto/gse_krb5.c:312(fill_mem_keytab_from_secrets) ../source3/librpc/crypto/gse_krb5.c:312: no prev machine password [2017/03/08 10:29:25.225163, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[64] dyn[yes:96] at ../source3/smbd/smb2_negprot.c:657 [2017/03/08 10:29:25.225347, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 512/512, total granted/max/low/range 1/8192/2/1 [2017/03/08 10:29:25.232327, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.232579, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 2 (position 2) from bitmap [2017/03/08 10:29:25.232835, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_SESSSETUP] mid = 2 [2017/03/08 10:29:25.233015, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.233162, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.233303, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.233531, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:25.233719, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:25.233876, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2: 3: [2017/03/08 10:29:25.234038, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key EBD97C80 [2017/03/08 10:29:25.234209, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118614b60 [2017/03/08 10:29:25.234507, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2017/03/08 10:29:25.234603, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'EBD97C80' stored [2017/03/08 10:29:25.234744, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xebd97c80 (3956898944) session_wire_id : 0x00000000ebd97c80 (3956898944) creation_time : Mi Mär 8 10:29:25 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49213' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2017/03/08 10:29:25.236423, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:25.236520, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.236618, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key EBD97C80 [2017/03/08 10:29:25.236715, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1310(smbXsrv_session_create) [2017/03/08 10:29:25.236856, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1318(smbXsrv_session_create) smbXsrv_session_create: global_id (0xebd97c80) stored [2017/03/08 10:29:25.236969, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0xebd97c80 (3956898944) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xebd97c80 (3956898944) session_wire_id : 0x00000000ebd97c80 (3956898944) creation_time : Mi Mär 8 10:29:25 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49213' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Mär 8 10:29:25 2017 CET nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : NULL [2017/03/08 10:29:25.239582, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:477(make_auth_context_subsystem) Making default auth method list for server role = 'domain member' [2017/03/08 10:29:25.239699, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2017/03/08 10:29:25.239810, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2017/03/08 10:29:25.239916, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2017/03/08 10:29:25.240024, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2017/03/08 10:29:25.240131, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2017/03/08 10:29:25.240239, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match ntdomain [2017/03/08 10:29:25.240346, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method ntdomain has a valid init [2017/03/08 10:29:25.240450, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method winbind has a valid init [2017/03/08 10:29:25.240617, 5, pid=21549, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC mechanism spnego [2017/03/08 10:29:25.240781, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:25.240902, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2: 3: [2017/03/08 10:29:25.241016, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key EBD97C80 [2017/03/08 10:29:25.241128, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x56311861ec40 [2017/03/08 10:29:25.241255, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2017/03/08 10:29:25.241324, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'EBD97C80' stored [2017/03/08 10:29:25.241433, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000002 (2) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xebd97c80 (3956898944) session_wire_id : 0x00000000ebd97c80 (3956898944) creation_time : Mi Mär 8 10:29:25 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49213' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2017/03/08 10:29:25.243377, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:25.243484, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.243593, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key EBD97C80 [2017/03/08 10:29:25.243701, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1405(smbXsrv_session_update) [2017/03/08 10:29:25.243765, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1413(smbXsrv_session_update) smbXsrv_session_update: global_id (0xebd97c80) stored [2017/03/08 10:29:25.243868, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0xebd97c80 (3956898944) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xebd97c80 (3956898944) session_wire_id : 0x00000000ebd97c80 (3956898944) creation_time : Mi Mär 8 10:29:25 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49213' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Mär 8 10:29:25 2017 CET nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : * pending_auth: struct smbXsrv_session_auth0 prev : * next : NULL session : * connection : * gensec : * preauth : NULL in_flags : 0x00 (0) in_security_mode : 0x01 (1) creation_time : Mi Mär 8 10:29:25 2017 CET idle_time : Mi Mär 8 10:29:25 2017 CET [2017/03/08 10:29:25.247078, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.247187, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:25.247291, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.247394, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.247495, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.247654, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 24 req->in.vector[4].iov_len = 74 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:29:25.248482, 5, pid=21549, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2017/03/08 10:29:25.248621, 3, pid=21549, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0xe2088297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY NTLMSSP_NEGOTIATE_VERSION NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2017/03/08 10:29:25.249270, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0xe2088297 (3792208535) 1: NTLMSSP_NEGOTIATE_UNICODE 1: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 1: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0000 (0) DomainNameMaxLen : 0x0000 (0) DomainName : NULL WorkstationLen : 0x0000 (0) WorkstationMaxLen : 0x0000 (0) Workstation : NULL Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (6) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1) ProductBuild : 0x1db1 (7601) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2017/03/08 10:29:25.251228, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x000e (14) TargetNameMaxLen : 0x000e (14) TargetName : * TargetName : 'LTBTEST' NegotiateFlags : 0xe2898215 (3800662549) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 1: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 ServerChallenge : e3c7cfc71dd6437d Reserved : 0000000000000000 TargetInfoLen : 0x0090 (144) TargetInfoMaxLen : 0x0090 (144) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000006 (6) pair: ARRAY(6) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x000e (14) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LTBTEST' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0010 (16) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'UCS-1950' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0020 (32) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'ltbtest.intranet' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x0032 (50) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'ucs-1950.ltbtest.intranet' pair: struct AV_PAIR AvId : MsvAvTimestamp (0x7) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x7) AvTimestamp : Mi Mär 8 10:29:25 2017 CET pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (0x6) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (0x1) ProductBuild : 0x0000 (0) Reserved : 000000 NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (0xF) [2017/03/08 10:29:25.254714, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.254816, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:25.254920, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.255014, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.255104, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.255243, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.255347, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_MORE_PROCESSING_REQUIRED] body[8] dyn[yes:245] at ../source3/smbd/smb2_sesssetup.c:171 [2017/03/08 10:29:25.255453, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 31, charge 1, granted 1, current possible/max 512/512, total granted/max/low/range 1/8192/3/1 [2017/03/08 10:29:25.256628, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.256812, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 3 (position 3) from bitmap [2017/03/08 10:29:25.256916, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_SESSSETUP] mid = 3 [2017/03/08 10:29:25.257015, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:25.257112, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2: 3: [2017/03/08 10:29:25.257213, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key EBD97C80 [2017/03/08 10:29:25.257313, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x56311861f1a0 [2017/03/08 10:29:25.257427, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2017/03/08 10:29:25.257489, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'EBD97C80' stored [2017/03/08 10:29:25.257588, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000003 (3) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xebd97c80 (3956898944) session_wire_id : 0x00000000ebd97c80 (3956898944) creation_time : Mi Mär 8 10:29:25 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49213' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2017/03/08 10:29:25.259421, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:25.259518, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.259615, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key EBD97C80 [2017/03/08 10:29:25.259710, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1405(smbXsrv_session_update) [2017/03/08 10:29:25.259769, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1413(smbXsrv_session_update) smbXsrv_session_update: global_id (0xebd97c80) stored [2017/03/08 10:29:25.259861, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0xebd97c80 (3956898944) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xebd97c80 (3956898944) session_wire_id : 0x00000000ebd97c80 (3956898944) creation_time : Mi Mär 8 10:29:25 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49213' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Mär 8 10:29:25 2017 CET nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : * pending_auth: struct smbXsrv_session_auth0 prev : * next : NULL session : * connection : * gensec : * preauth : NULL in_flags : 0x00 (0) in_security_mode : 0x01 (1) creation_time : Mi Mär 8 10:29:25 2017 CET idle_time : Mi Mär 8 10:29:25 2017 CET [2017/03/08 10:29:25.263066, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.263164, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.263256, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.263392, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:25.263493, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:25.263590, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2: 3: [2017/03/08 10:29:25.263689, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key EBD97C80 [2017/03/08 10:29:25.263787, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118623fe0 [2017/03/08 10:29:25.263902, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2017/03/08 10:29:25.263964, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'EBD97C80' stored [2017/03/08 10:29:25.264062, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000004 (4) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xebd97c80 (3956898944) session_wire_id : 0x00000000ebd97c80 (3956898944) creation_time : Mi Mär 8 10:29:25 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49213' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2017/03/08 10:29:25.265754, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:25.265850, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.266113, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key EBD97C80 [2017/03/08 10:29:25.266272, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1405(smbXsrv_session_update) [2017/03/08 10:29:25.266357, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1413(smbXsrv_session_update) smbXsrv_session_update: global_id (0xebd97c80) stored [2017/03/08 10:29:25.266508, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0xebd97c80 (3956898944) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xebd97c80 (3956898944) session_wire_id : 0x00000000ebd97c80 (3956898944) creation_time : Mi Mär 8 10:29:25 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49213' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Mär 8 10:29:25 2017 CET nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : * pending_auth: struct smbXsrv_session_auth0 prev : * next : NULL session : * connection : * gensec : * preauth : NULL in_flags : 0x00 (0) in_security_mode : 0x01 (1) creation_time : Mi Mär 8 10:29:25 2017 CET idle_time : Mi Mär 8 10:29:25 2017 CET [2017/03/08 10:29:25.269585, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.269682, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:25.269775, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.269867, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.269967, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.270107, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 24 req->in.vector[4].iov_len = 553 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:29:25.270678, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 000000000000000000000000000000000000000000000000 NtChallengeResponseLen : 0x013c (316) NtChallengeResponseMaxLen: 0x013c (316) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 316) v2: struct NTLMv2_RESPONSE Response : a70ad5c7bb2d6bbcd5e39b587cd1d782 Challenge: struct NTLMv2_CLIENT_CHALLENGE RespType : 0x01 (1) HiRespType : 0x01 (1) Reserved1 : 0x0000 (0) Reserved2 : 0x00000000 (0) TimeStamp : Mi Mär 8 10:29:25 2017 CET ChallengeFromClient : 7d30527f37a69433 Reserved3 : 0x00000000 (0) AvPairs: struct AV_PAIR_LIST count : 0x0000000a (10) pair: ARRAY(10) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x000e (14) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LTBTEST' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0010 (16) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'UCS-1950' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0020 (32) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'ltbtest.intranet' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x0032 (50) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'ucs-1950.ltbtest.intranet' pair: struct AV_PAIR AvId : MsvAvTimestamp (0x7) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x7) AvTimestamp : Mi Mär 8 10:29:25 2017 CET pair: struct AV_PAIR AvId : MsvAvFlags (0x6) AvLen : 0x0004 (4) Value : union ntlmssp_AvValue(case 0x6) AvFlags : 0x00000002 (2) 0: NTLMSSP_AVFLAG_CONSTRAINTED_ACCOUNT 1: NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE 0: NTLMSSP_AVFLAG_TARGET_SPN_FROM_UNTRUSTED_SOURCE pair: struct AV_PAIR AvId : MsvAvSingleHost (0x8) AvLen : 0x0030 (48) Value : union ntlmssp_AvValue(case 0x8) AvSingleHost: struct ntlmssp_SingleHostData Size : 0x00000030 (48) Z4 : 0x00000000 (0) token_info: struct LSAP_TOKEN_INFO_INTEGRITY Flags : 0x00000001 (1) TokenIL : 0x00002000 (8192) MachineId : 50cf6ea77cf3ef773f87760b8dd437bb64cca74f96bfdeba0dfc3ec6135246dc remaining : DATA_BLOB length=0 pair: struct AV_PAIR AvId : MsvChannelBindings (0xA) AvLen : 0x0010 (16) Value : union ntlmssp_AvValue(case 0xA) ChannelBindings : 00000000000000000000000000000000 pair: struct AV_PAIR AvId : MsvAvTargetName (0x9) AvLen : 0x0024 (36) Value : union ntlmssp_AvValue(case 0x9) AvTargetName : 'cifs/10.200.42.176' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) DomainNameLen : 0x001e (30) DomainNameMaxLen : 0x001e (30) DomainName : * DomainName : 'DESKTOP-U7U24GG' UserNameLen : 0x0008 (8) UserNameMaxLen : 0x0008 (8) UserName : * UserName : 'test' WorkstationLen : 0x001e (30) WorkstationMaxLen : 0x001e (30) Workstation : * Workstation : 'DESKTOP-U7U24GG' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [0000] 6C 10 DE 68 75 BE C8 FF D6 41 27 BD 71 C0 7D C9 l..hu... .A'.q.}. NegotiateFlags : 0xe2888215 (3800597013) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (6) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1) ProductBuild : 0x1db1 (7601) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2017/03/08 10:29:25.278895, 3, pid=21549, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:452(ntlmssp_server_preauth) Got user=[test] domain=[DESKTOP-U7U24GG] workstation=[DESKTOP-U7U24GG] len1=24 len2=316 [2017/03/08 10:29:25.279058, 10, pid=21549, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:483(ntlmssp_server_preauth) [2017/03/08 10:29:25.279122, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &v2_resp: struct NTLMv2_RESPONSE Response : a70ad5c7bb2d6bbcd5e39b587cd1d782 Challenge: struct NTLMv2_CLIENT_CHALLENGE RespType : 0x01 (1) HiRespType : 0x01 (1) Reserved1 : 0x0000 (0) Reserved2 : 0x00000000 (0) TimeStamp : Mi Mär 8 10:29:25 2017 CET ChallengeFromClient : 7d30527f37a69433 Reserved3 : 0x00000000 (0) AvPairs: struct AV_PAIR_LIST count : 0x0000000a (10) pair: ARRAY(10) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x000e (14) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LTBTEST' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0010 (16) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'UCS-1950' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0020 (32) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'ltbtest.intranet' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x0032 (50) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'ucs-1950.ltbtest.intranet' pair: struct AV_PAIR AvId : MsvAvTimestamp (0x7) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x7) AvTimestamp : Mi Mär 8 10:29:25 2017 CET pair: struct AV_PAIR AvId : MsvAvFlags (0x6) AvLen : 0x0004 (4) Value : union ntlmssp_AvValue(case 0x6) AvFlags : 0x00000002 (2) 0: NTLMSSP_AVFLAG_CONSTRAINTED_ACCOUNT 1: NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE 0: NTLMSSP_AVFLAG_TARGET_SPN_FROM_UNTRUSTED_SOURCE pair: struct AV_PAIR AvId : MsvAvSingleHost (0x8) AvLen : 0x0030 (48) Value : union ntlmssp_AvValue(case 0x8) AvSingleHost: struct ntlmssp_SingleHostData Size : 0x00000030 (48) Z4 : 0x00000000 (0) token_info: struct LSAP_TOKEN_INFO_INTEGRITY Flags : 0x00000001 (1) TokenIL : 0x00002000 (8192) MachineId : 50cf6ea77cf3ef773f87760b8dd437bb64cca74f96bfdeba0dfc3ec6135246dc remaining : DATA_BLOB length=0 pair: struct AV_PAIR AvId : MsvChannelBindings (0xA) AvLen : 0x0010 (16) Value : union ntlmssp_AvValue(case 0xA) ChannelBindings : 00000000000000000000000000000000 pair: struct AV_PAIR AvId : MsvAvTargetName (0x9) AvLen : 0x0024 (36) Value : union ntlmssp_AvValue(case 0x9) AvTargetName : 'cifs/10.200.42.176' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2017/03/08 10:29:25.283000, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3739(lp_load_ex) lp_load_ex: refreshing parameters [2017/03/08 10:29:25.283105, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1312(free_param_opts) Freeing parametrics: [2017/03/08 10:29:25.283318, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:543(init_globals) Initialising global parameters [2017/03/08 10:29:25.283555, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2668(lp_do_section) Processing section "[global]" doing parameter debug level = 10 [2017/03/08 10:29:25.283707, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/util/debug.c:642(debug_dump_status) INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10 passdb: 10 sam: 10 auth: 10 winbind: 10 vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 scavenger: 10 dns: 10 ldb: 10 tevent: 10 doing parameter logging = file doing parameter max log size = 0 doing parameter max open files = 32808 doing parameter server string = %h univention corporate server doing parameter ntlm auth = yes doing parameter machine password timeout = 0 doing parameter acl allow execute always = True doing parameter bind interfaces only = yes doing parameter interfaces = lo eth0 doing parameter netbios name = ucs-1950 doing parameter ldap suffix = dc=ltbtest,dc=intranet doing parameter ldap admin dn = "cn=ucs-1950,cn=memberserver,cn=computers,dc=ltbtest,dc=intranet" doing parameter ldap ssl = start tls doing parameter passdb expand explicit = no doing parameter ldap idmap suffix = cn=idmap,cn=univention doing parameter idmap config * : backend = ldap doing parameter idmap config * : range = 55000-64000 doing parameter idmap config * : ldap_url = ldap://ucs-7437.ltbtest.intranet:7389 doing parameter idmap config * : ldap_user_dn = cn=ucs-1950,cn=memberserver,cn=computers,dc=ltbtest,dc=intranet doing parameter idmap config LTBTEST : backend = nss doing parameter idmap config LTBTEST : range = 1000-54999 doing parameter winbind max clients = 500 doing parameter winbind nested groups = no doing parameter winbind enum users = yes doing parameter winbind enum groups = yes doing parameter winbind separator = + doing parameter template shell = /bin/bash doing parameter template homedir = /home/%D-%U doing parameter pam password change = no doing parameter unix password sync = no doing parameter passwd chat = *New*password* %n\n *Re-enter*new*password* %n\n *password*changed* doing parameter passwd chat timeout = 60 doing parameter client use spnego = yes doing parameter obey pam restrictions = yes doing parameter encrypt passwords = yes doing parameter spoolss: architecture = Windows x64 doing parameter security = ads doing parameter realm = LTBTEST.INTRANET doing parameter domain logons = no doing parameter domain master = no doing parameter preferred master = no doing parameter local master = no doing parameter os level = 65 doing parameter wins support = no doing parameter workgroup = LTBTEST doing parameter oplocks = yes doing parameter kernel oplocks = yes doing parameter large readwrite = yes doing parameter deadtime = 15 doing parameter read raw = yes doing parameter write raw = yes doing parameter max xmit = 65535 doing parameter getwd cache = yes doing parameter wide links = no doing parameter store dos attributes = yes doing parameter preserve case = yes doing parameter short preserve case = yes doing parameter time server = yes doing parameter host msdfs = no doing parameter msdfs root = no doing parameter guest account = nobody doing parameter map to guest = Bad User doing parameter admin users = administrator join-backup doing parameter set quota command = /usr/sbin/univention-setquota doing parameter check password script = /usr/share/univention-samba/password_check %u doing parameter usershare max shares = 0 doing parameter include = /etc/samba/base.conf [2017/03/08 10:29:25.288274, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[homes]" doing parameter comment = Heimatverzeichnisse doing parameter browsable = no doing parameter read only = no doing parameter create mask = 0700 doing parameter directory mask = 0700 doing parameter vfs objects = acl_xattr [2017/03/08 10:29:25.288723, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[printers]" doing parameter comment = Drucker doing parameter browseable = no doing parameter path = /tmp doing parameter printable = yes doing parameter public = no doing parameter writable = no doing parameter create mode = 0700 [2017/03/08 10:29:25.289289, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[print$]" doing parameter comment = Printer Drivers doing parameter path = /var/lib/samba/drivers doing parameter browseable = yes doing parameter guest ok = no doing parameter read only = no doing parameter write list = root, Administrator, @Printer-Admins doing parameter include = /etc/samba/shares.conf doing parameter include = /etc/samba/shares.conf.d/test_forceuser [2017/03/08 10:29:25.289915, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[test_forceuser]" doing parameter path = /mnt/shares/bmm/test1 doing parameter vfs objects = acl_xattr doing parameter msdfs root = no doing parameter writeable = yes doing parameter browseable = yes doing parameter public = no doing parameter dos filemode = no doing parameter hide unreadable = no doing parameter create mode = 0744 doing parameter directory mode = 0755 doing parameter force create mode = 00 doing parameter force directory mode = 00 doing parameter locking = 1 doing parameter blocking locks = 1 doing parameter strict locking = Auto doing parameter oplocks = 1 doing parameter level2 oplocks = 1 doing parameter fake oplocks = 0 doing parameter csc policy = manual doing parameter force user = sruda doing parameter force group = bmm doing parameter nt acl support = 1 doing parameter inherit acls = 1 doing parameter inherit owner = no doing parameter inherit permissions = no doing parameter include = /etc/samba/local.conf [2017/03/08 10:29:25.292312, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3780(lp_load_ex) pm_process() returned Yes [2017/03/08 10:29:25.292446, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1585(lp_add_ipc) adding IPC service [2017/03/08 10:29:25.292595, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:117(make_user_info_map) Mapping user [DESKTOP-U7U24GG]\[test] from workstation [DESKTOP-U7U24GG] [2017/03/08 10:29:25.293186, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:139(make_user_info_map) Mapped domain from [DESKTOP-U7U24GG] to [UCS-1950] for user [test] from workstation [DESKTOP-U7U24GG] [2017/03/08 10:29:25.293308, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:62(make_user_info) attempting to make a user_info for test (test) [2017/03/08 10:29:25.293403, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:70(make_user_info) making strings for test's user_info struct [2017/03/08 10:29:25.293500, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:108(make_user_info) making blobs for test's user_info struct [2017/03/08 10:29:25.293596, 10, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:159(make_user_info) made a user_info for test (test) [2017/03/08 10:29:25.293689, 3, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:178(auth_check_ntlm_password) check_ntlm_password: Checking password for unmapped user [DESKTOP-U7U24GG]\[test]@[DESKTOP-U7U24GG] with the new password interface [2017/03/08 10:29:25.293786, 3, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:181(auth_check_ntlm_password) check_ntlm_password: mapped user is: [UCS-1950]\[test]@[DESKTOP-U7U24GG] [2017/03/08 10:29:25.293879, 10, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:190(auth_check_ntlm_password) check_ntlm_password: auth_context challenge created by random [2017/03/08 10:29:25.293971, 10, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:192(auth_check_ntlm_password) challenge is: [2017/03/08 10:29:25.294062, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] E3 C7 CF C7 1D D6 43 7D ......C} [2017/03/08 10:29:25.294170, 10, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_builtin.c:41(check_guest_security) Check auth for: [test] [2017/03/08 10:29:25.294262, 10, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:233(auth_check_ntlm_password) check_ntlm_password: guest had nothing to say [2017/03/08 10:29:25.294372, 10, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:75(auth_samstrict_auth) Check auth for: [test] [2017/03/08 10:29:25.294466, 8, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1239(is_myname) is_myname("UCS-1950") returns 1 [2017/03/08 10:29:25.294568, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.294667, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:25.294760, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.294853, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.294944, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.295126, 5, pid=21549, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:600(tdbsam_getsampwnam) pdb_getsampwnam (TDB): error fetching database. Key: USER_test [2017/03/08 10:29:25.295269, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.295366, 3, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/check_samsec.c:400(check_sam_security) check_sam_security: Couldn't find user 'test' in passdb. [2017/03/08 10:29:25.295461, 5, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:252(auth_check_ntlm_password) check_ntlm_password: sam authentication for user [test] FAILED with error NT_STATUS_NO_SUCH_USER [2017/03/08 10:29:25.295561, 10, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_winbind.c:50(check_winbind_security) Check auth for: [test] [2017/03/08 10:29:25.295655, 3, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_winbind.c:60(check_winbind_security) check_winbind_security: Not using winbind, requested domain [UCS-1950] was for this SAM. [2017/03/08 10:29:25.295749, 10, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:233(auth_check_ntlm_password) check_ntlm_password: winbind had nothing to say [2017/03/08 10:29:25.295842, 2, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:315(auth_check_ntlm_password) check_ntlm_password: Authentication for user [test] -> [test] FAILED with error NT_STATUS_NO_SUCH_USER [2017/03/08 10:29:25.295943, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:188(auth3_check_password) Checking NTLMSSP password for DESKTOP-U7U24GG\test failed: NT_STATUS_NO_SUCH_USER [2017/03/08 10:29:25.296039, 3, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:1607(do_map_to_guest_server_info) No such user test [DESKTOP-U7U24GG] - using guest account [2017/03/08 10:29:25.296161, 10, pid=21549, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:874(ntlmssp_server_postauth) ntlmssp_server_auth: Failed to create unmodified session key. [2017/03/08 10:29:25.296260, 5, pid=21549, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:891(ntlmssp_server_postauth) server session key is invalid (len == 0), cannot do KEY_EXCH! [2017/03/08 10:29:25.296375, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.296475, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:25.296569, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.296671, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.296863, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.297011, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.297168, 6, pid=21549, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/local.conf -> /etc/samba/local.conf last mod_time: Wed Mar 8 08:59:21 2017 file /etc/samba/shares.conf.d/test_forceuser -> /etc/samba/shares.conf.d/test_forceuser last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/base.conf -> /etc/samba/base.conf last mod_time: Wed Mar 8 09:02:11 2017 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Mar 8 10:28:18 2017 [2017/03/08 10:29:25.297854, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:25.297953, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2: 3: [2017/03/08 10:29:25.298057, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key EBD97C80 [2017/03/08 10:29:25.298162, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118606ea0 [2017/03/08 10:29:25.298321, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2017/03/08 10:29:25.298386, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'EBD97C80' stored [2017/03/08 10:29:25.298484, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000005 (5) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xebd97c80 (3956898944) session_wire_id : 0x00000000ebd97c80 (3956898944) creation_time : Mi Mär 8 10:29:25 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : Mi Mär 8 10:29:25 2017 CET auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x00000009 (9) sids: ARRAY(9) sids : S-1-5-21-232158225-1150262950-2424647211-501 sids : S-1-5-21-232158225-1150262950-2424647211-514 sids : S-1-22-2-65534 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-32-546 sids : S-1-22-1-65534 sids : S-1-22-2-55000 sids : S-1-22-2-55001 privilege_mask : 0x0000000000000000 (0) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 0: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT 0: SEC_PRIV_BACKUP_BIT 0: SEC_PRIV_RESTORE_BIT 0: SEC_PRIV_TAKE_OWNERSHIP_BIT 0: SEC_PRIV_INCREASE_QUOTA_BIT 0: SEC_PRIV_SECURITY_BIT 0: SEC_PRIV_LOAD_DRIVER_BIT 0: SEC_PRIV_SYSTEM_PROFILE_BIT 0: SEC_PRIV_SYSTEMTIME_BIT 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 0: SEC_PRIV_CREATE_PAGEFILE_BIT 0: SEC_PRIV_SHUTDOWN_BIT 0: SEC_PRIV_DEBUG_BIT 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 0: SEC_PRIV_CHANGE_NOTIFY_BIT 0: SEC_PRIV_UNDOCK_BIT 0: SEC_PRIV_ENABLE_DELEGATION_BIT 0: SEC_PRIV_MANAGE_VOLUME_BIT 0: SEC_PRIV_IMPERSONATE_BIT 0: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x000000000000fffe (65534) gid : 0x000000000000fffe (65534) ngroups : 0x00000003 (3) groups: ARRAY(3) groups : 0x000000000000fffe (65534) groups : 0x000000000000d6d8 (55000) groups : 0x000000000000d6d9 (55001) info : * info: struct auth_user_info account_name : * account_name : 'nobody' user_principal_name : NULL user_principal_constructed: 0x00 (0) domain_name : * domain_name : 'UCS-1950' dns_domain_name : NULL full_name : NULL logon_script : NULL profile_path : NULL home_directory : NULL home_drive : NULL logon_server : NULL last_logon : NTTIME(0) last_logoff : NTTIME(0) acct_expiry : NTTIME(0) last_password_change : NTTIME(0) allow_password_change : NTTIME(0) force_password_change : NTTIME(0) logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000000 (0) authenticated : 0x00 (0) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'nobody' sanitized_username : * sanitized_username : 'test' torture : NULL credentials : NULL connection_dialect : 0x0210 (528) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49213' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000001 (1) connection : * encryption_cipher : 0x0000 (0) [2017/03/08 10:29:25.305000, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:25.305113, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.305215, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key EBD97C80 [2017/03/08 10:29:25.305330, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1405(smbXsrv_session_update) [2017/03/08 10:29:25.305394, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1413(smbXsrv_session_update) smbXsrv_session_update: global_id (0xebd97c80) stored [2017/03/08 10:29:25.305488, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0xebd97c80 (3956898944) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xebd97c80 (3956898944) session_wire_id : 0x00000000ebd97c80 (3956898944) creation_time : Mi Mär 8 10:29:25 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : Mi Mär 8 10:29:25 2017 CET auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x00000009 (9) sids: ARRAY(9) sids : S-1-5-21-232158225-1150262950-2424647211-501 sids : S-1-5-21-232158225-1150262950-2424647211-514 sids : S-1-22-2-65534 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-32-546 sids : S-1-22-1-65534 sids : S-1-22-2-55000 sids : S-1-22-2-55001 privilege_mask : 0x0000000000000000 (0) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 0: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT 0: SEC_PRIV_BACKUP_BIT 0: SEC_PRIV_RESTORE_BIT 0: SEC_PRIV_TAKE_OWNERSHIP_BIT 0: SEC_PRIV_INCREASE_QUOTA_BIT 0: SEC_PRIV_SECURITY_BIT 0: SEC_PRIV_LOAD_DRIVER_BIT 0: SEC_PRIV_SYSTEM_PROFILE_BIT 0: SEC_PRIV_SYSTEMTIME_BIT 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 0: SEC_PRIV_CREATE_PAGEFILE_BIT 0: SEC_PRIV_SHUTDOWN_BIT 0: SEC_PRIV_DEBUG_BIT 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 0: SEC_PRIV_CHANGE_NOTIFY_BIT 0: SEC_PRIV_UNDOCK_BIT 0: SEC_PRIV_ENABLE_DELEGATION_BIT 0: SEC_PRIV_MANAGE_VOLUME_BIT 0: SEC_PRIV_IMPERSONATE_BIT 0: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x000000000000fffe (65534) gid : 0x000000000000fffe (65534) ngroups : 0x00000003 (3) groups: ARRAY(3) groups : 0x000000000000fffe (65534) groups : 0x000000000000d6d8 (55000) groups : 0x000000000000d6d9 (55001) info : * info: struct auth_user_info account_name : * account_name : 'nobody' user_principal_name : NULL user_principal_constructed: 0x00 (0) domain_name : * domain_name : 'UCS-1950' dns_domain_name : NULL full_name : NULL logon_script : NULL profile_path : NULL home_directory : NULL home_drive : NULL logon_server : NULL last_logon : NTTIME(0) last_logoff : NTTIME(0) acct_expiry : NTTIME(0) last_password_change : NTTIME(0) allow_password_change : NTTIME(0) force_password_change : NTTIME(0) logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000000 (0) authenticated : 0x00 (0) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'nobody' sanitized_username : * sanitized_username : 'test' torture : NULL credentials : NULL connection_dialect : 0x0210 (528) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49213' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000001 (1) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_OK idle_time : Mi Mär 8 10:29:25 2017 CET nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : * tcon_table : * pending_auth : NULL [2017/03/08 10:29:25.312166, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[8] dyn[yes:9] at ../source3/smbd/smb2_sesssetup.c:171 [2017/03/08 10:29:25.312279, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 31, charge 1, granted 31, current possible/max 512/512, total granted/max/low/range 31/8192/4/31 [2017/03/08 10:29:25.313422, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.313589, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 4 (position 4) from bitmap [2017/03/08 10:29:25.313692, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 4 [2017/03/08 10:29:25.313810, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.313911, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.314005, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.314148, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:25.314277, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\IPC$] share[IPC$] [2017/03/08 10:29:25.314427, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:25.314530, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:25.314632, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 17CCD820 [2017/03/08 10:29:25.314746, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x56311860c250 [2017/03/08 10:29:25.314941, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:25.315101, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '17CCD820' stored [2017/03/08 10:29:25.315249, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x17ccd820 (399300640) tcon_wire_id : 0x17ccd820 (399300640) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:25 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:25.316420, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 17CCD820 [2017/03/08 10:29:25.316532, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:25.316629, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.316724, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:25.316913, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0x17ccd820) stored [2017/03/08 10:29:25.317010, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x17ccd820 (399300640) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x17ccd820 (399300640) tcon_wire_id : 0x17ccd820 (399300640) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:25 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:25 2017 CET compat : NULL [2017/03/08 10:29:25.318651, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:25.318836, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:164(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /tmp [2017/03/08 10:29:25.318950, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:661(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2017/03/08 10:29:25.319236, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:221(user_ok_token) user_ok_token: share IPC$ is ok for unix user nobody [2017/03/08 10:29:25.319425, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:268(is_share_read_only_for_token) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2017/03/08 10:29:25.319613, 10, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/access_check.c:337(se_file_access_check) se_file_access_check: MAX desired = 0x2000000 mapped to 0x1f01ff [2017/03/08 10:29:25.319776, 3, pid=21549, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:113(vfs_init_default) Initialising default vfs hooks [2017/03/08 10:29:25.319924, 10, pid=21549, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ [2017/03/08 10:29:25.320030, 5, pid=21549, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs) Successfully added vfs backend '/[Default VFS]/' [2017/03/08 10:29:25.320134, 10, pid=21549, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) vfs_find_backend_entry called for posixacl [2017/03/08 10:29:25.320231, 5, pid=21549, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs) Successfully added vfs backend 'posixacl' [2017/03/08 10:29:25.320324, 3, pid=21549, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:139(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2017/03/08 10:29:25.320419, 10, pid=21549, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ Successfully loaded vfs module [/[Default VFS]/] with the new modules system [2017/03/08 10:29:25.320646, 3, pid=21549, effective(0, 0), real(0, 0), class=locking] ../source3/smbd/oplock_linux.c:251(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2017/03/08 10:29:25.320847, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:164(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /tmp [2017/03/08 10:29:25.320965, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:221(user_ok_token) user_ok_token: share IPC$ is ok for unix user nobody [2017/03/08 10:29:25.321068, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:268(is_share_read_only_for_token) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2017/03/08 10:29:25.321185, 10, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/access_check.c:337(se_file_access_check) se_file_access_check: MAX desired = 0x2000000 mapped to 0x1f01ff [2017/03/08 10:29:25.321292, 3, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/dom_sid.c:209(dom_sid_parse_endp) string_to_sid: SID administrator is not in a valid format [2017/03/08 10:29:25.321408, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:77(lookup_name) lookup_name: UCS-1950\administrator => domain=[UCS-1950], name=[administrator] [2017/03/08 10:29:25.321504, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:78(lookup_name) lookup_name: flags = 0x073 [2017/03/08 10:29:25.321605, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.321703, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:25.321796, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.321889, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.321980, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.322134, 5, pid=21549, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:600(tdbsam_getsampwnam) pdb_getsampwnam (TDB): error fetching database. Key: USER_administrator [2017/03/08 10:29:25.322273, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.322392, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.322489, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:25.322582, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.322674, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.322765, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.322919, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.323024, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:77(lookup_name) lookup_name: Unix User\administrator => domain=[Unix User], name=[administrator] [2017/03/08 10:29:25.323118, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:78(lookup_name) lookup_name: flags = 0x073 [2017/03/08 10:29:25.323997, 3, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/dom_sid.c:209(dom_sid_parse_endp) string_to_sid: SID join-backup is not in a valid format [2017/03/08 10:29:25.324126, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:77(lookup_name) lookup_name: UCS-1950\join-backup => domain=[UCS-1950], name=[join-backup] [2017/03/08 10:29:25.324223, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:78(lookup_name) lookup_name: flags = 0x073 [2017/03/08 10:29:25.324321, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.324418, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:25.324510, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.324822, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.325226, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.325413, 5, pid=21549, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:600(tdbsam_getsampwnam) pdb_getsampwnam (TDB): error fetching database. Key: USER_join-backup [2017/03/08 10:29:25.325557, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.325661, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.325758, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:25.325851, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.325944, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.326035, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.326186, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.326313, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:77(lookup_name) lookup_name: Unix User\join-backup => domain=[Unix User], name=[join-backup] [2017/03/08 10:29:25.326407, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:78(lookup_name) lookup_name: flags = 0x073 [2017/03/08 10:29:25.327312, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.327433, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (9): SID[ 0]: S-1-5-21-232158225-1150262950-2424647211-501 SID[ 1]: S-1-5-21-232158225-1150262950-2424647211-514 SID[ 2]: S-1-22-2-65534 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-65534 SID[ 7]: S-1-22-2-55000 SID[ 8]: S-1-22-2-55001 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:29:25.327962, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 65534 Primary group is 65534 and contains 3 supplementary groups Group[ 0]: 65534 Group[ 1]: 55000 Group[ 2]: 55001 [2017/03/08 10:29:25.328215, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(65534,65534), gid=(0,65534) [2017/03/08 10:29:25.328321, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.328417, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.328508, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.328647, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:25.328868, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:164(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /tmp [2017/03/08 10:29:25.329227, 10, pid=21549, effective(0, 0), real(0, 0), class=vfs] ../source3/modules/vfs_default.c:185(vfswrap_fs_capabilities) vfswrap_fs_capabilities: timestamp resolution of sec available on share IPC$, directory /tmp [2017/03/08 10:29:25.329514, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:907(make_connection_snum) desktop-u7u24gg (ipv4:10.200.42.172:49213) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 21549) [2017/03/08 10:29:25.329739, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:25.329921, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:25.330114, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 17CCD820 [2017/03/08 10:29:25.330309, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118612c70 [2017/03/08 10:29:25.330518, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:25.330627, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '17CCD820' stored [2017/03/08 10:29:25.330810, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000002 (2) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x17ccd820 (399300640) tcon_wire_id : 0x17ccd820 (399300640) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:25 2017 CET share_name : 'IPC$' encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0xebd97c80 (3956898944) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:25.332373, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 17CCD820 [2017/03/08 10:29:25.332595, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:25.332877, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.333036, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:876(smbXsrv_tcon_update) [2017/03/08 10:29:25.333117, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:884(smbXsrv_tcon_update) smbXsrv_tcon_update: global_id (0x17ccd820) stored [2017/03/08 10:29:25.333222, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x17ccd820 (399300640) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x17ccd820 (399300640) tcon_wire_id : 0x17ccd820 (399300640) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:25 2017 CET share_name : 'IPC$' encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0xebd97c80 (3956898944) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_OK idle_time : Mi Mär 8 10:29:25 2017 CET compat : * [2017/03/08 10:29:25.334737, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[16] dyn[no:0] at ../source3/smbd/smb2_tcon.c:170 [2017/03/08 10:29:25.334845, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/5/31 [2017/03/08 10:29:25.343908, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.344157, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 5 (position 5) from bitmap [2017/03/08 10:29:25.344351, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_CREATE] mid = 5 [2017/03/08 10:29:25.344546, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.344683, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (9): SID[ 0]: S-1-5-21-232158225-1150262950-2424647211-501 SID[ 1]: S-1-5-21-232158225-1150262950-2424647211-514 SID[ 2]: S-1-22-2-65534 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-65534 SID[ 7]: S-1-22-2-55000 SID[ 8]: S-1-22-2-55001 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:29:25.345414, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 65534 Primary group is 65534 and contains 3 supplementary groups Group[ 0]: 65534 Group[ 1]: 55000 Group[ 2]: 55001 [2017/03/08 10:29:25.345721, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(65534,65534), gid=(0,65534) [2017/03/08 10:29:25.345844, 4, pid=21549, effective(65534, 65534), real(65534, 0), class=vfs] ../source3/smbd/vfs.c:874(vfs_ChDir) vfs_ChDir to /tmp [2017/03/08 10:29:25.345983, 4, pid=21549, effective(65534, 65534), real(65534, 0), class=vfs] ../source3/smbd/vfs.c:885(vfs_ChDir) vfs_ChDir got /tmp [2017/03/08 10:29:25.346102, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:25.346216, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:25.346335, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 17CCD820 [2017/03/08 10:29:25.346455, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118612c70 [2017/03/08 10:29:25.346591, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:25.346678, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '17CCD820' stored [2017/03/08 10:29:25.346796, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000003 (3) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x17ccd820 (399300640) tcon_wire_id : 0x17ccd820 (399300640) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:25 2017 CET share_name : 'IPC$' encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0xebd97c80 (3956898944) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:25.348682, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 17CCD820 [2017/03/08 10:29:25.348868, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:25.348987, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.349102, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smbXsrv_tcon.c:876(smbXsrv_tcon_update) [2017/03/08 10:29:25.349166, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smbXsrv_tcon.c:884(smbXsrv_tcon_update) smbXsrv_tcon_update: global_id (0x17ccd820) stored [2017/03/08 10:29:25.349277, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x17ccd820 (399300640) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x17ccd820 (399300640) tcon_wire_id : 0x17ccd820 (399300640) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:25 2017 CET share_name : 'IPC$' encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0xebd97c80 (3956898944) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_OK idle_time : Mi Mär 8 10:29:25 2017 CET compat : * [2017/03/08 10:29:25.351052, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_create.c:502(smbd_smb2_create_send) smbd_smb2_create: name[wkssvc] [2017/03/08 10:29:25.351317, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_open_global.tdb [2017/03/08 10:29:25.351499, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_open_global.tdb 2: 3: [2017/03/08 10:29:25.351660, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key C213918B [2017/03/08 10:29:25.351789, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118622d40 [2017/03/08 10:29:25.351909, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smbXsrv_open.c:624(smbXsrv_open_global_verify_record) smbXsrv_open_global_verify_record: empty value [2017/03/08 10:29:25.352143, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smbXsrv_open.c:743(smbXsrv_open_global_store) smbXsrv_open_global_store: key 'C213918B' stored [2017/03/08 10:29:25.352274, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) open_global_id : 0xc213918b (3256062347) open_persistent_id : 0x00000000c213918b (3256062347) open_volatile_id : 0x0000000063bbb5a1 (1673246113) open_owner : S-1-5-21-232158225-1150262950-2424647211-501 open_time : Mi Mär 8 10:29:25 2017 CET create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 293d4bb5-03dd-11e7-b671-5254001e7776 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 channel_sequence : 0x0000000000000000 (0) [2017/03/08 10:29:25.353672, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key C213918B [2017/03/08 10:29:25.353803, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_open_global.tdb [2017/03/08 10:29:25.353918, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.354032, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smbXsrv_open.c:910(smbXsrv_open_create) smbXsrv_open_create: global_id (0xc213918b) stored [2017/03/08 10:29:25.354144, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x63bbb5a1 (1673246113) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) open_global_id : 0xc213918b (3256062347) open_persistent_id : 0x00000000c213918b (3256062347) open_volatile_id : 0x0000000063bbb5a1 (1673246113) open_owner : S-1-5-21-232158225-1150262950-2424647211-501 open_time : Mi Mär 8 10:29:25 2017 CET create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 293d4bb5-03dd-11e7-b671-5254001e7776 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 channel_sequence : 0x0000000000000000 (0) status : NT_STATUS_OK idle_time : Mi Mär 8 10:29:25 2017 CET compat : NULL flags : 0x00 (0) 0: SMBXSRV_OPEN_NEED_REPLAY_CACHE 0: SMBXSRV_OPEN_HAVE_REPLAY_CACHE create_action : 0x00000000 (0) request_count : 0x0000000000000000 (0) pre_request_count : 0x0000000000000000 (0) [2017/03/08 10:29:25.356676, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/files.c:128(file_new) allocated file structure fnum 1673246113 (1 used) [2017/03/08 10:29:25.356880, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/files.c:756(file_name_hash) file_name_hash: /tmp/wkssvc hash 0x2b4dd005 [2017/03/08 10:29:25.357018, 4, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:89(make_internal_rpc_pipe_socketpair) Create of internal pipe wkssvc requested [2017/03/08 10:29:25.357215, 8, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: wkssvc [2017/03/08 10:29:25.357345, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_create.c:1393(smbd_smb2_create_send) smbd_smb2_create_send: wkssvc - fnum 1673246113 [2017/03/08 10:29:25.357456, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[88] dyn[yes:0] at ../source3/smbd/smb2_create.c:364 [2017/03/08 10:29:25.357561, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/6/31 [2017/03/08 10:29:25.359697, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.359886, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 6 (position 6) from bitmap [2017/03/08 10:29:25.360034, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_GETINFO] mid = 6 [2017/03/08 10:29:25.360182, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:25.360320, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 6, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:25.360423, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_getinfo.c:272(smbd_smb2_getinfo_send) smbd_smb2_getinfo_send: wkssvc - fnum 1673246113 [2017/03/08 10:29:25.360531, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[8] dyn[yes:24] at ../source3/smbd/smb2_getinfo.c:201 [2017/03/08 10:29:25.360635, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/7/31 [2017/03/08 10:29:25.361754, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.361895, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 7 (position 7) from bitmap [2017/03/08 10:29:25.361999, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_WRITE] mid = 7 [2017/03/08 10:29:25.362102, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:25.362204, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 7, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:25.362304, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_write.c:290(smbd_smb2_write_send) smbd_smb2_write: wkssvc - fnum 1673246113 [2017/03/08 10:29:25.362404, 6, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:172(np_write_send) np_write_send: len: 160 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 48 req->in.vector[4].iov_len = 160 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:29:25.362973, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[16] dyn[yes:0] at ../source3/smbd/smb2_write.c:164 [2017/03/08 10:29:25.363085, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/8/31 [2017/03/08 10:29:25.363253, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/rpc_server/rpc_server.c:441(named_pipe_packet_process) PDU is in Little Endian format! [2017/03/08 10:29:25.363364, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1685(process_complete_pdu) Processing packet type 11 [2017/03/08 10:29:25.363481, 3, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:728(api_pipe_bind_req) api_pipe_bind_req: wkssvc -> wkssvc rpc service [2017/03/08 10:29:25.363583, 5, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:761(api_pipe_bind_req) api_pipe_bind_req: make response. 761 [2017/03/08 10:29:25.363677, 3, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:356(check_bind_req) check_bind_req for wkssvc context_id=0 [2017/03/08 10:29:25.363784, 3, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:399(check_bind_req) check_bind_req: wkssvc -> wkssvc rpc service [2017/03/08 10:29:25.363882, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:223(init_pipe_handles) init_pipe_handle_list: created handle list for pipe wkssvc [2017/03/08 10:29:25.364013, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:240(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe wkssvc [2017/03/08 10:29:25.364143, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_BIND_ACK (12) pfc_flags : 0x03 (3) 1: DCERPC_PFC_FLAG_FIRST 1: DCERPC_PFC_FLAG_LAST 0: DCERPC_PFC_FLAG_PENDING_CANCEL_OR_HDR_SIGNING 0: DCERPC_PFC_FLAG_CONC_MPX 0: DCERPC_PFC_FLAG_DID_NOT_EXECUTE 0: DCERPC_PFC_FLAG_MAYBE 0: DCERPC_PFC_FLAG_OBJECT_UUID drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0044 (68) auth_length : 0x0000 (0) call_id : 0x00000002 (2) u : union dcerpc_payload(case 12) bind_ack: struct dcerpc_bind_ack max_xmit_frag : 0x10b8 (4280) max_recv_frag : 0x10b8 (4280) assoc_group_id : 0x000053f0 (21488) secondary_address_size : 0x000d (13) secondary_address : '\PIPE\wkssvc' _pad1 : DATA_BLOB length=0 num_results : 0x01 (1) ctx_list: ARRAY(1) ctx_list: struct dcerpc_ack_ctx result : DCERPC_BIND_ACK_RESULT_ACCEPTANCE (0) reason : union dcerpc_bind_ack_reason(case 0) value : DCERPC_BIND_ACK_REASON_NOT_SPECIFIED (0) syntax: struct ndr_syntax_id uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 if_version : 0x00000002 (2) auth_info : DATA_BLOB length=0 [2017/03/08 10:29:25.365813, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/rpc_server/rpc_server.c:509(named_pipe_packet_process) Sending 1 fragments in a total of 0 bytes [2017/03/08 10:29:25.365912, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/rpc_server/rpc_server.c:514(named_pipe_packet_process) Sending PDU number: 0, PDU Length: 68 [2017/03/08 10:29:25.366039, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.366145, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 8 (position 8) from bitmap [2017/03/08 10:29:25.366242, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_READ] mid = 8 [2017/03/08 10:29:25.366341, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:25.366441, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 8, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:25.366539, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_read.c:463(smbd_smb2_read_send) smbd_smb2_read: wkssvc - fnum 1673246113 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 48 req->in.vector[4].iov_len = 1 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:29:25.367105, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:417(np_read_recv) Received 68 bytes. There is no more data outstanding [2017/03/08 10:29:25.367214, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[16] dyn[yes:68] at ../source3/smbd/smb2_read.c:164 [2017/03/08 10:29:25.367317, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/9/31 [2017/03/08 10:29:25.368452, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.368582, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 9 (position 9) from bitmap [2017/03/08 10:29:25.368679, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 9 [2017/03/08 10:29:25.369156, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:25.369313, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 9, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:25.369477, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) smbd_smb2_ioctl: ctl_code[0x0011c017] wkssvc, fnum 1673246113 [2017/03/08 10:29:25.369657, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:61(smb2_ioctl_named_pipe) smbd_smb2_ioctl_send: np_write_send of size 76 [2017/03/08 10:29:25.369817, 6, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:172(np_write_send) np_write_send: len: 76 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 56 req->in.vector[4].iov_len = 76 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:29:25.370429, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:119(smbd_smb2_ioctl_pipe_write_done) smbd_smb2_ioctl_pipe_write_done: received 76 [2017/03/08 10:29:25.370542, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:140(smbd_smb2_ioctl_pipe_write_done) smbd_smb2_ioctl_pipe_write_done: issuing np_read_send of size 1024 [2017/03/08 10:29:25.370685, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/rpc_server/rpc_server.c:441(named_pipe_packet_process) PDU is in Little Endian format! [2017/03/08 10:29:25.370796, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1685(process_complete_pdu) Processing packet type 0 [2017/03/08 10:29:25.370896, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1554(dcesrv_auth_request) Checking request auth. [2017/03/08 10:29:25.371005, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.371113, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.371216, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (9): SID[ 0]: S-1-5-21-232158225-1150262950-2424647211-501 SID[ 1]: S-1-5-21-232158225-1150262950-2424647211-514 SID[ 2]: S-1-22-2-65534 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-65534 SID[ 7]: S-1-22-2-55000 SID[ 8]: S-1-22-2-55001 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:29:25.371769, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 65534 Primary group is 65534 and contains 3 supplementary groups Group[ 0]: 65534 Group[ 1]: 55000 Group[ 2]: 55001 [2017/03/08 10:29:25.372036, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:452(smbd_become_authenticated_pipe_user) Impersonated user: uid=(65534,65534), gid=(0,65534) [2017/03/08 10:29:25.372141, 5, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1404(api_pipe_request) Requested wkssvc rpc service [2017/03/08 10:29:25.372238, 4, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1429(api_rpcTNP) api_rpcTNP: wkssvc op 0x0 - api_rpcTNP: rpc command: WKSSVC_NETWKSTAGETINFO [2017/03/08 10:29:25.372342, 6, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1469(api_rpcTNP) api_rpc_cmds[0].fn == 0x7f75e13a81d0 [2017/03/08 10:29:25.372464, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) wkssvc_NetWkstaGetInfo: struct wkssvc_NetWkstaGetInfo in: struct wkssvc_NetWkstaGetInfo server_name : * server_name : '\\10.200.42.176' level : 0x00000064 (100) [2017/03/08 10:29:25.372877, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) wkssvc_NetWkstaGetInfo: struct wkssvc_NetWkstaGetInfo out: struct wkssvc_NetWkstaGetInfo info : * info : union wkssvc_NetWkstaInfo(case 100) info100 : * info100: struct wkssvc_NetWkstaInfo100 platform_id : PLATFORM_ID_NT (500) server_name : * server_name : 'UCS-1950' domain_name : * domain_name : 'LTBTEST' version_major : 0x00000006 (6) version_minor : 0x00000001 (1) result : WERR_OK [2017/03/08 10:29:25.373582, 5, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1496(api_rpcTNP) api_rpcTNP: called wkssvc successfully [2017/03/08 10:29:25.373702, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.373818, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) 1: DCERPC_PFC_FLAG_FIRST 1: DCERPC_PFC_FLAG_LAST 0: DCERPC_PFC_FLAG_PENDING_CANCEL_OR_HDR_SIGNING 0: DCERPC_PFC_FLAG_CONC_MPX 0: DCERPC_PFC_FLAG_DID_NOT_EXECUTE 0: DCERPC_PFC_FLAG_MAYBE 0: DCERPC_PFC_FLAG_OBJECT_UUID drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0074 (116) auth_length : 0x0000 (0) call_id : 0x00000002 (2) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x0000005c (92) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=92 [0000] 64 00 00 00 04 00 02 00 F4 01 00 00 08 00 02 00 d....... ........ [0010] 0C 00 02 00 06 00 00 00 01 00 00 00 09 00 00 00 ........ ........ [0020] 00 00 00 00 09 00 00 00 55 00 43 00 53 00 2D 00 ........ U.C.S.-. [0030] 31 00 39 00 35 00 30 00 00 00 00 00 08 00 00 00 1.9.5.0. ........ [0040] 00 00 00 00 08 00 00 00 4C 00 54 00 42 00 54 00 ........ L.T.B.T. [0050] 45 00 53 00 54 00 00 00 00 00 00 00 E.S.T... .... [2017/03/08 10:29:25.375408, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/rpc_server/rpc_server.c:509(named_pipe_packet_process) Sending 1 fragments in a total of 92 bytes [2017/03/08 10:29:25.375509, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/rpc_server/rpc_server.c:514(named_pipe_packet_process) Sending PDU number: 0, PDU Length: 116 [2017/03/08 10:29:25.375645, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1558(smbd_smb2_request_pending_timer) smbd_smb2_request_pending_queue: opcode[SMB2_OP_IOCTL] mid 9 going async [2017/03/08 10:29:25.375773, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/10/31 [2017/03/08 10:29:25.375880, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1656(smbd_smb2_request_pending_timer) state->vector[0/5].iov_len = 4 state->vector[1/5].iov_len = 0 state->vector[2/5].iov_len = 64 state->vector[3/5].iov_len = 8 state->vector[4/5].iov_len = 1 [2017/03/08 10:29:25.376193, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:417(np_read_recv) Received 116 bytes. There is no more data outstanding [2017/03/08 10:29:25.376311, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:169(smbd_smb2_ioctl_pipe_read_done) smbd_smb2_ioctl_pipe_read_done: np_read_recv nread = 116 is_data_outstanding = 0, status = NT_STATUS_OK [2017/03/08 10:29:25.376420, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 116 status NT_STATUS_OK [2017/03/08 10:29:25.376524, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[48] dyn[yes:116] at ../source3/smbd/smb2_ioctl.c:358 [2017/03/08 10:29:25.376630, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 0, current possible/max 481/512, total granted/max/low/range 31/8192/10/31 [2017/03/08 10:29:25.380264, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.380457, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 10 (position 10) from bitmap [2017/03/08 10:29:25.380611, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_CLOSE] mid = 10 [2017/03/08 10:29:25.380921, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:25.381107, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_close.c:227(smbd_smb2_close) smbd_smb2_close: wkssvc - fnum 1673246113 [2017/03/08 10:29:25.381289, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_open_global.tdb [2017/03/08 10:29:25.381444, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_open_global.tdb 2: 3: [2017/03/08 10:29:25.381598, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key C213918B [2017/03/08 10:29:25.381762, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5631186129b0 [2017/03/08 10:29:25.381927, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key C213918B [2017/03/08 10:29:25.382091, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_open_global.tdb [2017/03/08 10:29:25.382252, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.382443, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:418(close_policy_by_pipe) Deleted handle list for RPC connection wkssvc [2017/03/08 10:29:25.382608, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/files.c:565(file_free) freed files structure 1673246113 (0 used) [2017/03/08 10:29:25.382720, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[60] dyn[no:0] at ../source3/smbd/smb2_close.c:144 [2017/03/08 10:29:25.382830, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/11/31 [2017/03/08 10:29:25.384108, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.384241, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 11 (position 11) from bitmap [2017/03/08 10:29:25.384345, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_CREATE] mid = 11 [2017/03/08 10:29:25.384449, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:25.384649, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_create.c:502(smbd_smb2_create_send) smbd_smb2_create: name[srvsvc] [2017/03/08 10:29:25.384880, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_open_global.tdb [2017/03/08 10:29:25.385024, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_open_global.tdb 2: 3: [2017/03/08 10:29:25.385133, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53736029 [2017/03/08 10:29:25.385238, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5631185f6f90 [2017/03/08 10:29:25.385343, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smbXsrv_open.c:624(smbXsrv_open_global_verify_record) smbXsrv_open_global_verify_record: empty value [2017/03/08 10:29:25.385476, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smbXsrv_open.c:743(smbXsrv_open_global_store) smbXsrv_open_global_store: key '53736029' stored [2017/03/08 10:29:25.385589, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) open_global_id : 0x53736029 (1400070185) open_persistent_id : 0x0000000053736029 (1400070185) open_volatile_id : 0x00000000b6f218ba (3069319354) open_owner : S-1-5-21-232158225-1150262950-2424647211-501 open_time : Mi Mär 8 10:29:25 2017 CET create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 293d4bb5-03dd-11e7-b671-5254001e7776 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 channel_sequence : 0x0000000000000000 (0) [2017/03/08 10:29:25.386781, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53736029 [2017/03/08 10:29:25.386885, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_open_global.tdb [2017/03/08 10:29:25.386988, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.387088, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smbXsrv_open.c:910(smbXsrv_open_create) smbXsrv_open_create: global_id (0x53736029) stored [2017/03/08 10:29:25.387188, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0xb6f218ba (3069319354) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) open_global_id : 0x53736029 (1400070185) open_persistent_id : 0x0000000053736029 (1400070185) open_volatile_id : 0x00000000b6f218ba (3069319354) open_owner : S-1-5-21-232158225-1150262950-2424647211-501 open_time : Mi Mär 8 10:29:25 2017 CET create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 293d4bb5-03dd-11e7-b671-5254001e7776 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 channel_sequence : 0x0000000000000000 (0) status : NT_STATUS_OK idle_time : Mi Mär 8 10:29:25 2017 CET compat : NULL flags : 0x00 (0) 0: SMBXSRV_OPEN_NEED_REPLAY_CACHE 0: SMBXSRV_OPEN_HAVE_REPLAY_CACHE create_action : 0x00000000 (0) request_count : 0x0000000000000000 (0) pre_request_count : 0x0000000000000000 (0) [2017/03/08 10:29:25.389285, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/files.c:128(file_new) allocated file structure fnum 3069319354 (1 used) [2017/03/08 10:29:25.389447, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/files.c:756(file_name_hash) file_name_hash: /tmp/srvsvc hash 0x8e98a76a [2017/03/08 10:29:25.389612, 4, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:89(make_internal_rpc_pipe_socketpair) Create of internal pipe srvsvc requested [2017/03/08 10:29:25.389832, 8, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: srvsvc [2017/03/08 10:29:25.389996, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_create.c:1393(smbd_smb2_create_send) smbd_smb2_create_send: srvsvc - fnum 3069319354 [2017/03/08 10:29:25.390117, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[88] dyn[yes:0] at ../source3/smbd/smb2_create.c:364 [2017/03/08 10:29:25.390226, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/12/31 [2017/03/08 10:29:25.391172, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.391305, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 12 (position 12) from bitmap [2017/03/08 10:29:25.391409, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_GETINFO] mid = 12 [2017/03/08 10:29:25.391516, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:25.391620, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 12, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:25.391724, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_getinfo.c:272(smbd_smb2_getinfo_send) smbd_smb2_getinfo_send: srvsvc - fnum 3069319354 [2017/03/08 10:29:25.391837, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[8] dyn[yes:24] at ../source3/smbd/smb2_getinfo.c:201 [2017/03/08 10:29:25.391947, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/13/31 [2017/03/08 10:29:25.393005, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.393217, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 13 (position 13) from bitmap [2017/03/08 10:29:25.393410, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_WRITE] mid = 13 [2017/03/08 10:29:25.393602, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:25.393795, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 13, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:25.393939, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_write.c:290(smbd_smb2_write_send) smbd_smb2_write: srvsvc - fnum 3069319354 [2017/03/08 10:29:25.394068, 6, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:172(np_write_send) np_write_send: len: 160 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 48 req->in.vector[4].iov_len = 160 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:29:25.394754, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[16] dyn[yes:0] at ../source3/smbd/smb2_write.c:164 [2017/03/08 10:29:25.394893, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/14/31 [2017/03/08 10:29:25.395097, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/rpc_server/rpc_server.c:441(named_pipe_packet_process) PDU is in Little Endian format! [2017/03/08 10:29:25.395234, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1685(process_complete_pdu) Processing packet type 11 [2017/03/08 10:29:25.395367, 3, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:728(api_pipe_bind_req) api_pipe_bind_req: srvsvc -> srvsvc rpc service [2017/03/08 10:29:25.395493, 5, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:761(api_pipe_bind_req) api_pipe_bind_req: make response. 761 [2017/03/08 10:29:25.395611, 3, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:356(check_bind_req) check_bind_req for srvsvc context_id=0 [2017/03/08 10:29:25.395767, 3, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:399(check_bind_req) check_bind_req: srvsvc -> srvsvc rpc service [2017/03/08 10:29:25.395933, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:223(init_pipe_handles) init_pipe_handle_list: created handle list for pipe srvsvc [2017/03/08 10:29:25.396062, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:240(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe srvsvc [2017/03/08 10:29:25.396212, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_BIND_ACK (12) pfc_flags : 0x03 (3) 1: DCERPC_PFC_FLAG_FIRST 1: DCERPC_PFC_FLAG_LAST 0: DCERPC_PFC_FLAG_PENDING_CANCEL_OR_HDR_SIGNING 0: DCERPC_PFC_FLAG_CONC_MPX 0: DCERPC_PFC_FLAG_DID_NOT_EXECUTE 0: DCERPC_PFC_FLAG_MAYBE 0: DCERPC_PFC_FLAG_OBJECT_UUID drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0044 (68) auth_length : 0x0000 (0) call_id : 0x00000002 (2) u : union dcerpc_payload(case 12) bind_ack: struct dcerpc_bind_ack max_xmit_frag : 0x10b8 (4280) max_recv_frag : 0x10b8 (4280) assoc_group_id : 0x000053f0 (21488) secondary_address_size : 0x000d (13) secondary_address : '\PIPE\srvsvc' _pad1 : DATA_BLOB length=0 num_results : 0x01 (1) ctx_list: ARRAY(1) ctx_list: struct dcerpc_ack_ctx result : DCERPC_BIND_ACK_RESULT_ACCEPTANCE (0) reason : union dcerpc_bind_ack_reason(case 0) value : DCERPC_BIND_ACK_REASON_NOT_SPECIFIED (0) syntax: struct ndr_syntax_id uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 if_version : 0x00000002 (2) auth_info : DATA_BLOB length=0 [2017/03/08 10:29:25.398554, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/rpc_server/rpc_server.c:509(named_pipe_packet_process) Sending 1 fragments in a total of 0 bytes [2017/03/08 10:29:25.398682, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/rpc_server/rpc_server.c:514(named_pipe_packet_process) Sending PDU number: 0, PDU Length: 68 [2017/03/08 10:29:25.398844, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.398977, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 14 (position 14) from bitmap [2017/03/08 10:29:25.399101, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_READ] mid = 14 [2017/03/08 10:29:25.399228, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:25.399354, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 14, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:25.399479, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_read.c:463(smbd_smb2_read_send) smbd_smb2_read: srvsvc - fnum 3069319354 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 48 req->in.vector[4].iov_len = 1 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:29:25.400213, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:417(np_read_recv) Received 68 bytes. There is no more data outstanding [2017/03/08 10:29:25.400352, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[16] dyn[yes:68] at ../source3/smbd/smb2_read.c:164 [2017/03/08 10:29:25.400484, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/15/31 [2017/03/08 10:29:25.401521, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.401719, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 15 (position 15) from bitmap [2017/03/08 10:29:25.401866, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 15 [2017/03/08 10:29:25.401996, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:25.402123, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 15, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:25.402251, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) smbd_smb2_ioctl: ctl_code[0x0011c017] srvsvc, fnum 3069319354 [2017/03/08 10:29:25.402381, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:61(smb2_ioctl_named_pipe) smbd_smb2_ioctl_send: np_write_send of size 76 [2017/03/08 10:29:25.402672, 6, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:172(np_write_send) np_write_send: len: 76 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 56 req->in.vector[4].iov_len = 76 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:29:25.403872, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:119(smbd_smb2_ioctl_pipe_write_done) smbd_smb2_ioctl_pipe_write_done: received 76 [2017/03/08 10:29:25.404085, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:140(smbd_smb2_ioctl_pipe_write_done) smbd_smb2_ioctl_pipe_write_done: issuing np_read_send of size 1024 [2017/03/08 10:29:25.404337, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/rpc_server/rpc_server.c:441(named_pipe_packet_process) PDU is in Little Endian format! [2017/03/08 10:29:25.404492, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1685(process_complete_pdu) Processing packet type 0 [2017/03/08 10:29:25.404616, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1554(dcesrv_auth_request) Checking request auth. [2017/03/08 10:29:25.404823, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.404952, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.405051, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (9): SID[ 0]: S-1-5-21-232158225-1150262950-2424647211-501 SID[ 1]: S-1-5-21-232158225-1150262950-2424647211-514 SID[ 2]: S-1-22-2-65534 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-65534 SID[ 7]: S-1-22-2-55000 SID[ 8]: S-1-22-2-55001 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:29:25.405577, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 65534 Primary group is 65534 and contains 3 supplementary groups Group[ 0]: 65534 Group[ 1]: 55000 Group[ 2]: 55001 [2017/03/08 10:29:25.405833, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:452(smbd_become_authenticated_pipe_user) Impersonated user: uid=(65534,65534), gid=(0,65534) [2017/03/08 10:29:25.405955, 5, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1404(api_pipe_request) Requested srvsvc rpc service [2017/03/08 10:29:25.406048, 4, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1429(api_rpcTNP) api_rpcTNP: srvsvc op 0x15 - api_rpcTNP: rpc command: SRVSVC_NETSRVGETINFO [2017/03/08 10:29:25.406149, 6, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1469(api_rpcTNP) api_rpc_cmds[21].fn == 0x7f75e14bd0c0 [2017/03/08 10:29:25.406267, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) srvsvc_NetSrvGetInfo: struct srvsvc_NetSrvGetInfo in: struct srvsvc_NetSrvGetInfo server_unc : * server_unc : '\\10.200.42.176' level : 0x00000065 (101) [2017/03/08 10:29:25.407842, 5, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:1313(_srvsvc_NetSrvGetInfo) _srvsvc_NetSrvGetInfo: 1313 [2017/03/08 10:29:25.407989, 5, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:1391(_srvsvc_NetSrvGetInfo) _srvsvc_NetSrvGetInfo: 1391 [2017/03/08 10:29:25.408090, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) srvsvc_NetSrvGetInfo: struct srvsvc_NetSrvGetInfo out: struct srvsvc_NetSrvGetInfo info : * info : union srvsvc_NetSrvInfo(case 101) info101 : * info101: struct srvsvc_NetSrvInfo101 platform_id : PLATFORM_ID_NT (500) server_name : * server_name : 'UCS-1950' version_major : 0x00000006 (6) version_minor : 0x00000001 (1) server_type : 0x00009b23 (39715) 1: SV_TYPE_WORKSTATION 1: SV_TYPE_SERVER 0: SV_TYPE_SQLSERVER 0: SV_TYPE_DOMAIN_CTRL 0: SV_TYPE_DOMAIN_BAKCTRL 1: SV_TYPE_TIME_SOURCE 0: SV_TYPE_AFP 0: SV_TYPE_NOVELL 1: SV_TYPE_DOMAIN_MEMBER 1: SV_TYPE_PRINTQ_SERVER 0: SV_TYPE_DIALIN_SERVER 1: SV_TYPE_SERVER_UNIX 1: SV_TYPE_NT 0: SV_TYPE_WFW 0: SV_TYPE_SERVER_MFPN 1: SV_TYPE_SERVER_NT 0: SV_TYPE_POTENTIAL_BROWSER 0: SV_TYPE_BACKUP_BROWSER 0: SV_TYPE_MASTER_BROWSER 0: SV_TYPE_DOMAIN_MASTER 0: SV_TYPE_SERVER_OSF 0: SV_TYPE_SERVER_VMS 0: SV_TYPE_WIN95_PLUS 0: SV_TYPE_DFS_SERVER 0: SV_TYPE_ALTERNATE_XPORT 0: SV_TYPE_LOCAL_LIST_ONLY 0: SV_TYPE_DOMAIN_ENUM comment : * comment : 'ucs-1950 univention corporate server' result : WERR_OK [2017/03/08 10:29:25.410067, 5, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1496(api_rpcTNP) api_rpcTNP: called srvsvc successfully [2017/03/08 10:29:25.410199, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.410695, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) 1: DCERPC_PFC_FLAG_FIRST 1: DCERPC_PFC_FLAG_LAST 0: DCERPC_PFC_FLAG_PENDING_CANCEL_OR_HDR_SIGNING 0: DCERPC_PFC_FLAG_CONC_MPX 0: DCERPC_PFC_FLAG_DID_NOT_EXECUTE 0: DCERPC_PFC_FLAG_MAYBE 0: DCERPC_PFC_FLAG_OBJECT_UUID drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x00b4 (180) auth_length : 0x0000 (0) call_id : 0x00000002 (2) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x0000009c (156) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=156 [0000] 65 00 00 00 04 00 02 00 F4 01 00 00 08 00 02 00 e....... ........ [0010] 06 00 00 00 01 00 00 00 23 9B 00 00 0C 00 02 00 ........ #....... [0020] 09 00 00 00 00 00 00 00 09 00 00 00 55 00 43 00 ........ ....U.C. [0030] 53 00 2D 00 31 00 39 00 35 00 30 00 00 00 00 00 S.-.1.9. 5.0..... [0040] 25 00 00 00 00 00 00 00 25 00 00 00 75 00 63 00 %....... %...u.c. [0050] 73 00 2D 00 31 00 39 00 35 00 30 00 20 00 75 00 s.-.1.9. 5.0. .u. [0060] 6E 00 69 00 76 00 65 00 6E 00 74 00 69 00 6F 00 n.i.v.e. n.t.i.o. [0070] 6E 00 20 00 63 00 6F 00 72 00 70 00 6F 00 72 00 n. .c.o. r.p.o.r. [0080] 61 00 74 00 65 00 20 00 73 00 65 00 72 00 76 00 a.t.e. . s.e.r.v. [0090] 65 00 72 00 00 00 00 00 00 00 00 00 e.r..... .... [2017/03/08 10:29:25.412458, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/rpc_server/rpc_server.c:509(named_pipe_packet_process) Sending 1 fragments in a total of 156 bytes [2017/03/08 10:29:25.412557, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/rpc_server/rpc_server.c:514(named_pipe_packet_process) Sending PDU number: 0, PDU Length: 180 [2017/03/08 10:29:25.412708, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1558(smbd_smb2_request_pending_timer) smbd_smb2_request_pending_queue: opcode[SMB2_OP_IOCTL] mid 15 going async [2017/03/08 10:29:25.412896, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/16/31 [2017/03/08 10:29:25.413000, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1656(smbd_smb2_request_pending_timer) state->vector[0/5].iov_len = 4 state->vector[1/5].iov_len = 0 state->vector[2/5].iov_len = 64 state->vector[3/5].iov_len = 8 state->vector[4/5].iov_len = 1 [2017/03/08 10:29:25.413331, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:417(np_read_recv) Received 180 bytes. There is no more data outstanding [2017/03/08 10:29:25.413474, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:169(smbd_smb2_ioctl_pipe_read_done) smbd_smb2_ioctl_pipe_read_done: np_read_recv nread = 180 is_data_outstanding = 0, status = NT_STATUS_OK [2017/03/08 10:29:25.413582, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 180 status NT_STATUS_OK [2017/03/08 10:29:25.413683, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[48] dyn[yes:180] at ../source3/smbd/smb2_ioctl.c:358 [2017/03/08 10:29:25.413785, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 0, current possible/max 481/512, total granted/max/low/range 31/8192/16/31 [2017/03/08 10:29:25.417799, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.417982, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 16 (position 16) from bitmap [2017/03/08 10:29:25.418245, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_CLOSE] mid = 16 [2017/03/08 10:29:25.418378, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:25.418510, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_close.c:227(smbd_smb2_close) smbd_smb2_close: srvsvc - fnum 3069319354 [2017/03/08 10:29:25.418649, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_open_global.tdb [2017/03/08 10:29:25.418775, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_open_global.tdb 2: 3: [2017/03/08 10:29:25.418902, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53736029 [2017/03/08 10:29:25.419038, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x56311861f080 [2017/03/08 10:29:25.419177, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53736029 [2017/03/08 10:29:25.419304, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_open_global.tdb [2017/03/08 10:29:25.419427, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.419590, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:418(close_policy_by_pipe) Deleted handle list for RPC connection srvsvc [2017/03/08 10:29:25.419752, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/files.c:565(file_free) freed files structure 3069319354 (0 used) [2017/03/08 10:29:25.419887, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[60] dyn[no:0] at ../source3/smbd/smb2_close.c:144 [2017/03/08 10:29:25.420023, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/17/31 [2017/03/08 10:29:25.438071, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.438286, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 17 (position 17) from bitmap [2017/03/08 10:29:25.438469, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_CREATE] mid = 17 [2017/03/08 10:29:25.438653, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:25.438841, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_create.c:502(smbd_smb2_create_send) smbd_smb2_create: name[srvsvc] [2017/03/08 10:29:25.439045, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_open_global.tdb [2017/03/08 10:29:25.439238, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_open_global.tdb 2: 3: [2017/03/08 10:29:25.439433, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 7666340E [2017/03/08 10:29:25.439626, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118620050 [2017/03/08 10:29:25.439819, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smbXsrv_open.c:624(smbXsrv_open_global_verify_record) smbXsrv_open_global_verify_record: empty value [2017/03/08 10:29:25.440053, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smbXsrv_open.c:743(smbXsrv_open_global_store) smbXsrv_open_global_store: key '7666340E' stored [2017/03/08 10:29:25.440251, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) open_global_id : 0x7666340e (1986409486) open_persistent_id : 0x000000007666340e (1986409486) open_volatile_id : 0x000000001e2f8436 (506430518) open_owner : S-1-5-21-232158225-1150262950-2424647211-501 open_time : Mi Mär 8 10:29:25 2017 CET create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 293d4bb5-03dd-11e7-b671-5254001e7776 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 channel_sequence : 0x0000000000000000 (0) [2017/03/08 10:29:25.442149, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 7666340E [2017/03/08 10:29:25.442269, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_open_global.tdb [2017/03/08 10:29:25.442384, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.442498, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smbXsrv_open.c:910(smbXsrv_open_create) smbXsrv_open_create: global_id (0x7666340e) stored [2017/03/08 10:29:25.442609, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x1e2f8436 (506430518) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) open_global_id : 0x7666340e (1986409486) open_persistent_id : 0x000000007666340e (1986409486) open_volatile_id : 0x000000001e2f8436 (506430518) open_owner : S-1-5-21-232158225-1150262950-2424647211-501 open_time : Mi Mär 8 10:29:25 2017 CET create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 293d4bb5-03dd-11e7-b671-5254001e7776 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 channel_sequence : 0x0000000000000000 (0) status : NT_STATUS_OK idle_time : Mi Mär 8 10:29:25 2017 CET compat : NULL flags : 0x00 (0) 0: SMBXSRV_OPEN_NEED_REPLAY_CACHE 0: SMBXSRV_OPEN_HAVE_REPLAY_CACHE create_action : 0x00000000 (0) request_count : 0x0000000000000000 (0) pre_request_count : 0x0000000000000000 (0) [2017/03/08 10:29:25.444626, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/files.c:128(file_new) allocated file structure fnum 506430518 (1 used) [2017/03/08 10:29:25.444793, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/files.c:756(file_name_hash) file_name_hash: /tmp/srvsvc hash 0x8e98a76a [2017/03/08 10:29:25.444936, 4, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:89(make_internal_rpc_pipe_socketpair) Create of internal pipe srvsvc requested [2017/03/08 10:29:25.445136, 8, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: srvsvc [2017/03/08 10:29:25.445278, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_create.c:1393(smbd_smb2_create_send) smbd_smb2_create_send: srvsvc - fnum 506430518 [2017/03/08 10:29:25.445405, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[88] dyn[yes:0] at ../source3/smbd/smb2_create.c:364 [2017/03/08 10:29:25.445527, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/18/31 [2017/03/08 10:29:25.446468, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.446616, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 18 (position 18) from bitmap [2017/03/08 10:29:25.446735, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_GETINFO] mid = 18 [2017/03/08 10:29:25.446854, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:25.446973, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 18, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:25.447092, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_getinfo.c:272(smbd_smb2_getinfo_send) smbd_smb2_getinfo_send: srvsvc - fnum 506430518 [2017/03/08 10:29:25.447216, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[8] dyn[yes:24] at ../source3/smbd/smb2_getinfo.c:201 [2017/03/08 10:29:25.447339, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/19/31 [2017/03/08 10:29:25.457104, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.457316, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 19 (position 19) from bitmap [2017/03/08 10:29:25.457500, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_WRITE] mid = 19 [2017/03/08 10:29:25.457684, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:25.457868, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 19, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:25.458050, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_write.c:290(smbd_smb2_write_send) smbd_smb2_write: srvsvc - fnum 506430518 [2017/03/08 10:29:25.458233, 6, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:172(np_write_send) np_write_send: len: 160 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 48 req->in.vector[4].iov_len = 160 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:29:25.459242, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[16] dyn[yes:0] at ../source3/smbd/smb2_write.c:164 [2017/03/08 10:29:25.459413, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/20/31 [2017/03/08 10:29:25.459664, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/rpc_server/rpc_server.c:441(named_pipe_packet_process) PDU is in Little Endian format! [2017/03/08 10:29:25.459899, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1685(process_complete_pdu) Processing packet type 11 [2017/03/08 10:29:25.460083, 3, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:728(api_pipe_bind_req) api_pipe_bind_req: srvsvc -> srvsvc rpc service [2017/03/08 10:29:25.460298, 5, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:761(api_pipe_bind_req) api_pipe_bind_req: make response. 761 [2017/03/08 10:29:25.460455, 3, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:356(check_bind_req) check_bind_req for srvsvc context_id=0 [2017/03/08 10:29:25.460577, 3, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:399(check_bind_req) check_bind_req: srvsvc -> srvsvc rpc service [2017/03/08 10:29:25.460693, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:223(init_pipe_handles) init_pipe_handle_list: created handle list for pipe srvsvc [2017/03/08 10:29:25.460892, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:240(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe srvsvc [2017/03/08 10:29:25.461037, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_BIND_ACK (12) pfc_flags : 0x03 (3) 1: DCERPC_PFC_FLAG_FIRST 1: DCERPC_PFC_FLAG_LAST 0: DCERPC_PFC_FLAG_PENDING_CANCEL_OR_HDR_SIGNING 0: DCERPC_PFC_FLAG_CONC_MPX 0: DCERPC_PFC_FLAG_DID_NOT_EXECUTE 0: DCERPC_PFC_FLAG_MAYBE 0: DCERPC_PFC_FLAG_OBJECT_UUID drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0044 (68) auth_length : 0x0000 (0) call_id : 0x00000002 (2) u : union dcerpc_payload(case 12) bind_ack: struct dcerpc_bind_ack max_xmit_frag : 0x10b8 (4280) max_recv_frag : 0x10b8 (4280) assoc_group_id : 0x000053f0 (21488) secondary_address_size : 0x000d (13) secondary_address : '\PIPE\srvsvc' _pad1 : DATA_BLOB length=0 num_results : 0x01 (1) ctx_list: ARRAY(1) ctx_list: struct dcerpc_ack_ctx result : DCERPC_BIND_ACK_RESULT_ACCEPTANCE (0) reason : union dcerpc_bind_ack_reason(case 0) value : DCERPC_BIND_ACK_REASON_NOT_SPECIFIED (0) syntax: struct ndr_syntax_id uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 if_version : 0x00000002 (2) auth_info : DATA_BLOB length=0 [2017/03/08 10:29:25.462942, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/rpc_server/rpc_server.c:509(named_pipe_packet_process) Sending 1 fragments in a total of 0 bytes [2017/03/08 10:29:25.463057, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/rpc_server/rpc_server.c:514(named_pipe_packet_process) Sending PDU number: 0, PDU Length: 68 [2017/03/08 10:29:25.463207, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.463331, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 20 (position 20) from bitmap [2017/03/08 10:29:25.463446, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_READ] mid = 20 [2017/03/08 10:29:25.463564, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:25.463681, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 20, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:25.463797, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_read.c:463(smbd_smb2_read_send) smbd_smb2_read: srvsvc - fnum 506430518 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 48 req->in.vector[4].iov_len = 1 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:29:25.464457, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:417(np_read_recv) Received 68 bytes. There is no more data outstanding [2017/03/08 10:29:25.464587, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[16] dyn[yes:68] at ../source3/smbd/smb2_read.c:164 [2017/03/08 10:29:25.464710, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/21/31 [2017/03/08 10:29:25.465721, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.465864, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 21 (position 21) from bitmap [2017/03/08 10:29:25.465966, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 21 [2017/03/08 10:29:25.466067, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:25.466167, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 21, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:25.466278, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) smbd_smb2_ioctl: ctl_code[0x0011c017] srvsvc, fnum 506430518 [2017/03/08 10:29:25.466381, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:61(smb2_ioctl_named_pipe) smbd_smb2_ioctl_send: np_write_send of size 100 [2017/03/08 10:29:25.466552, 6, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:172(np_write_send) np_write_send: len: 100 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 56 req->in.vector[4].iov_len = 100 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:29:25.467216, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:119(smbd_smb2_ioctl_pipe_write_done) smbd_smb2_ioctl_pipe_write_done: received 100 [2017/03/08 10:29:25.467324, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:140(smbd_smb2_ioctl_pipe_write_done) smbd_smb2_ioctl_pipe_write_done: issuing np_read_send of size 1024 [2017/03/08 10:29:25.467460, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/rpc_server/rpc_server.c:441(named_pipe_packet_process) PDU is in Little Endian format! [2017/03/08 10:29:25.467565, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1685(process_complete_pdu) Processing packet type 0 [2017/03/08 10:29:25.467660, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1554(dcesrv_auth_request) Checking request auth. [2017/03/08 10:29:25.467764, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.467869, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.467966, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (9): SID[ 0]: S-1-5-21-232158225-1150262950-2424647211-501 SID[ 1]: S-1-5-21-232158225-1150262950-2424647211-514 SID[ 2]: S-1-22-2-65534 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-65534 SID[ 7]: S-1-22-2-55000 SID[ 8]: S-1-22-2-55001 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:29:25.468495, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 65534 Primary group is 65534 and contains 3 supplementary groups Group[ 0]: 65534 Group[ 1]: 55000 Group[ 2]: 55001 [2017/03/08 10:29:25.468787, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:452(smbd_become_authenticated_pipe_user) Impersonated user: uid=(65534,65534), gid=(0,65534) [2017/03/08 10:29:25.468899, 5, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1404(api_pipe_request) Requested srvsvc rpc service [2017/03/08 10:29:25.468992, 4, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1429(api_rpcTNP) api_rpcTNP: srvsvc op 0xf - api_rpcTNP: rpc command: SRVSVC_NETSHAREENUMALL [2017/03/08 10:29:25.469093, 6, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1469(api_rpcTNP) api_rpc_cmds[15].fn == 0x7f75e14be000 [2017/03/08 10:29:25.469209, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) srvsvc_NetShareEnumAll: struct srvsvc_NetShareEnumAll in: struct srvsvc_NetShareEnumAll server_unc : * server_unc : '\\10.200.42.176' info_ctr : * info_ctr: struct srvsvc_NetShareInfoCtr level : 0x00000001 (1) ctr : union srvsvc_NetShareCtr(case 1) ctr1 : * ctr1: struct srvsvc_NetShareCtr1 count : 0x00000000 (0) array : NULL max_buffer : 0xffffffff (4294967295) resume_handle : NULL [2017/03/08 10:29:25.470356, 5, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:1567(_srvsvc_NetShareEnumAll) _srvsvc_NetShareEnumAll: 1567 [2017/03/08 10:29:25.470503, 5, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:560(init_srv_share_info_ctr) init_srv_share_info_ctr [2017/03/08 10:29:25.470644, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 2 [2017/03/08 10:29:25.470779, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(3956898944) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:25.470880, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2017/03/08 10:29:25.470975, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.471067, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.471234, 1, pid=21549, effective(0, 0), real(0, 0)] ../source3/printing/printer_list.c:234(printer_list_get_last_refresh) Failed to fetch record! [2017/03/08 10:29:25.471334, 1, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/server_reload.c:69(delete_and_reload_printers) pcap cache not loaded [2017/03/08 10:29:25.471428, 8, pid=21549, effective(0, 0), real(0, 0)] ../source3/param/service.c:55(load_registry_shares) load_registry_shares() [2017/03/08 10:29:25.471526, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:25.471625, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:584(init_srv_share_info_ctr) NOT counting service homes [2017/03/08 10:29:25.471732, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:584(init_srv_share_info_ctr) NOT counting service printers [2017/03/08 10:29:25.471834, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:579(init_srv_share_info_ctr) counting service print$ [2017/03/08 10:29:25.471934, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:579(init_srv_share_info_ctr) counting service IPC$ [2017/03/08 10:29:25.472033, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:579(init_srv_share_info_ctr) counting service test_forceuser [2017/03/08 10:29:25.472155, 5, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:1581(_srvsvc_NetShareEnumAll) _srvsvc_NetShareEnumAll: 1581 [2017/03/08 10:29:25.472266, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) srvsvc_NetShareEnumAll: struct srvsvc_NetShareEnumAll out: struct srvsvc_NetShareEnumAll info_ctr : * info_ctr: struct srvsvc_NetShareInfoCtr level : 0x00000001 (1) ctr : union srvsvc_NetShareCtr(case 1) ctr1 : * ctr1: struct srvsvc_NetShareCtr1 count : 0x00000003 (3) array : * array: ARRAY(3) array: struct srvsvc_NetShareInfo1 name : * name : 'print$' type : STYPE_DISKTREE (0x0) comment : * comment : 'Printer Drivers' array: struct srvsvc_NetShareInfo1 name : * name : 'IPC$' type : STYPE_IPC_HIDDEN (0x80000003) comment : * comment : 'IPC Service (ucs-1950 univention corporate server)' array: struct srvsvc_NetShareInfo1 name : * name : 'test_forceuser' type : STYPE_DISKTREE (0x0) comment : * comment : '' totalentries : * totalentries : 0x00000003 (3) resume_handle : NULL result : WERR_OK [2017/03/08 10:29:25.473755, 5, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1496(api_rpcTNP) api_rpcTNP: called srvsvc successfully [2017/03/08 10:29:25.473873, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.473985, 1, pid=21549, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) 1: DCERPC_PFC_FLAG_FIRST 1: DCERPC_PFC_FLAG_LAST 0: DCERPC_PFC_FLAG_PENDING_CANCEL_OR_HDR_SIGNING 0: DCERPC_PFC_FLAG_CONC_MPX 0: DCERPC_PFC_FLAG_DID_NOT_EXECUTE 0: DCERPC_PFC_FLAG_MAYBE 0: DCERPC_PFC_FLAG_OBJECT_UUID drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0170 (368) auth_length : 0x0000 (0) call_id : 0x00000002 (2) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000158 (344) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=344 [0000] 01 00 00 00 01 00 00 00 08 00 02 00 03 00 00 00 ........ ........ [0010] 0C 00 02 00 03 00 00 00 10 00 02 00 00 00 00 00 ........ ........ [0020] 14 00 02 00 18 00 02 00 03 00 00 80 1C 00 02 00 ........ ........ [0030] 20 00 02 00 00 00 00 00 24 00 02 00 07 00 00 00 ....... $....... [0040] 00 00 00 00 07 00 00 00 70 00 72 00 69 00 6E 00 ........ p.r.i.n. [0050] 74 00 24 00 00 00 00 00 10 00 00 00 00 00 00 00 t.$..... ........ [0060] 10 00 00 00 50 00 72 00 69 00 6E 00 74 00 65 00 ....P.r. i.n.t.e. [0070] 72 00 20 00 44 00 72 00 69 00 76 00 65 00 72 00 r. .D.r. i.v.e.r. [0080] 73 00 00 00 05 00 00 00 00 00 00 00 05 00 00 00 s....... ........ [0090] 49 00 50 00 43 00 24 00 00 00 00 00 33 00 00 00 I.P.C.$. ....3... [00A0] 00 00 00 00 33 00 00 00 49 00 50 00 43 00 20 00 ....3... I.P.C. . [00B0] 53 00 65 00 72 00 76 00 69 00 63 00 65 00 20 00 S.e.r.v. i.c.e. . [00C0] 28 00 75 00 63 00 73 00 2D 00 31 00 39 00 35 00 (.u.c.s. -.1.9.5. [00D0] 30 00 20 00 75 00 6E 00 69 00 76 00 65 00 6E 00 0. .u.n. i.v.e.n. [00E0] 74 00 69 00 6F 00 6E 00 20 00 63 00 6F 00 72 00 t.i.o.n. .c.o.r. [00F0] 70 00 6F 00 72 00 61 00 74 00 65 00 20 00 73 00 p.o.r.a. t.e. .s. [0100] 65 00 72 00 76 00 65 00 72 00 29 00 00 00 00 00 e.r.v.e. r.)..... [0110] 0F 00 00 00 00 00 00 00 0F 00 00 00 74 00 65 00 ........ ....t.e. [0120] 73 00 74 00 5F 00 66 00 6F 00 72 00 63 00 65 00 s.t._.f. o.r.c.e. [0130] 75 00 73 00 65 00 72 00 00 00 00 00 01 00 00 00 u.s.e.r. ........ [0140] 00 00 00 00 01 00 00 00 00 00 00 00 03 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 ........ [2017/03/08 10:29:25.476609, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/rpc_server/rpc_server.c:509(named_pipe_packet_process) Sending 1 fragments in a total of 344 bytes [2017/03/08 10:29:25.476709, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/rpc_server/rpc_server.c:514(named_pipe_packet_process) Sending PDU number: 0, PDU Length: 368 [2017/03/08 10:29:25.476901, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1558(smbd_smb2_request_pending_timer) smbd_smb2_request_pending_queue: opcode[SMB2_OP_IOCTL] mid 21 going async [2017/03/08 10:29:25.477013, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/22/31 [2017/03/08 10:29:25.477115, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1656(smbd_smb2_request_pending_timer) state->vector[0/5].iov_len = 4 state->vector[1/5].iov_len = 0 state->vector[2/5].iov_len = 64 state->vector[3/5].iov_len = 8 state->vector[4/5].iov_len = 1 [2017/03/08 10:29:25.477412, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:417(np_read_recv) Received 368 bytes. There is no more data outstanding [2017/03/08 10:29:25.477523, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:169(smbd_smb2_ioctl_pipe_read_done) smbd_smb2_ioctl_pipe_read_done: np_read_recv nread = 368 is_data_outstanding = 0, status = NT_STATUS_OK [2017/03/08 10:29:25.477624, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 368 status NT_STATUS_OK [2017/03/08 10:29:25.477723, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[48] dyn[yes:368] at ../source3/smbd/smb2_ioctl.c:358 [2017/03/08 10:29:25.477835, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 0, current possible/max 481/512, total granted/max/low/range 31/8192/22/31 [2017/03/08 10:29:25.478917, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.479054, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 22 (position 22) from bitmap [2017/03/08 10:29:25.479154, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_CLOSE] mid = 22 [2017/03/08 10:29:25.479254, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:25.479356, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_close.c:227(smbd_smb2_close) smbd_smb2_close: srvsvc - fnum 506430518 [2017/03/08 10:29:25.479463, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_open_global.tdb [2017/03/08 10:29:25.479561, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_open_global.tdb 2: 3: [2017/03/08 10:29:25.479660, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 7666340E [2017/03/08 10:29:25.479761, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x56311861f080 [2017/03/08 10:29:25.479870, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 7666340E [2017/03/08 10:29:25.479970, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_open_global.tdb [2017/03/08 10:29:25.480213, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.480399, 10, pid=21549, effective(65534, 65534), real(65534, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:418(close_policy_by_pipe) Deleted handle list for RPC connection srvsvc [2017/03/08 10:29:25.480581, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/files.c:565(file_free) freed files structure 506430518 (0 used) [2017/03/08 10:29:25.480835, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[60] dyn[no:0] at ../source3/smbd/smb2_close.c:144 [2017/03/08 10:29:25.481006, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/23/31 [2017/03/08 10:29:25.610457, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.610840, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 23 (position 23) from bitmap [2017/03/08 10:29:25.611031, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 23 [2017/03/08 10:29:25.611251, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:25.611465, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 23, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:25.611662, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) smbd_smb2_ioctl: ctl_code[0x00060194] , fnum [fsp is NULL] [2017/03/08 10:29:25.611871, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 0 status NT_STATUS_FS_DRIVER_REQUIRED [2017/03/08 10:29:25.612097, 3, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] || at ../source3/smbd/smb2_ioctl.c:309 [2017/03/08 10:29:25.612299, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:25.612498, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/24/31 [2017/03/08 10:29:25.624982, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.625209, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 24 (position 24) from bitmap [2017/03/08 10:29:25.625393, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 24 [2017/03/08 10:29:25.625579, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.625771, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.625960, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.626273, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:25.626464, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\test_forceuser] share[test_forceuser] [2017/03/08 10:29:25.626696, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:25.626878, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:25.627071, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 612B333D [2017/03/08 10:29:25.627268, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118620050 [2017/03/08 10:29:25.627493, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:25.627604, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '612B333D' stored [2017/03/08 10:29:25.627812, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x612b333d (1630221117) tcon_wire_id : 0x612b333d (1630221117) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:26 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:25.629633, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 612B333D [2017/03/08 10:29:25.629759, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:25.629882, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.630002, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:25.630071, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0x612b333d) stored [2017/03/08 10:29:25.630188, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x612b333d (1630221117) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x612b333d (1630221117) tcon_wire_id : 0x612b333d (1630221117) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:26 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:26 2017 CET compat : NULL [2017/03/08 10:29:25.632148, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:25.632278, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:416(create_connection_session_info) guest user (from session setup) not permitted to access this share (test_forceuser) [2017/03/08 10:29:25.632411, 1, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:599(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED [2017/03/08 10:29:25.632535, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:25.632655, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:25.632863, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 612B333D [2017/03/08 10:29:25.632971, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118622480 [2017/03/08 10:29:25.633084, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 612B333D [2017/03/08 10:29:25.633187, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:25.633288, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.633397, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_tcon.c:135 [2017/03/08 10:29:25.633508, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:25.633615, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/25/31 [2017/03/08 10:29:25.640546, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:25.640844, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 25 (position 25) from bitmap [2017/03/08 10:29:25.641010, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 25 [2017/03/08 10:29:25.641169, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:25.641345, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:25.641493, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:25.641754, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:25.641942, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\test_forceuser] share[test_forceuser] [2017/03/08 10:29:25.642124, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:25.642277, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:25.642430, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key C49C6E8D [2017/03/08 10:29:25.642584, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118620050 [2017/03/08 10:29:25.642760, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:25.642853, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key 'C49C6E8D' stored [2017/03/08 10:29:25.642967, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0xc49c6e8d (3298586253) tcon_wire_id : 0xc49c6e8d (3298586253) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:26 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:25.644181, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key C49C6E8D [2017/03/08 10:29:25.644285, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:25.644386, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.644487, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:25.644554, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0xc49c6e8d) stored [2017/03/08 10:29:25.644652, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0xc49c6e8d (3298586253) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0xc49c6e8d (3298586253) tcon_wire_id : 0xc49c6e8d (3298586253) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:26 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:26 2017 CET compat : NULL [2017/03/08 10:29:25.646621, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:25.646736, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:416(create_connection_session_info) guest user (from session setup) not permitted to access this share (test_forceuser) [2017/03/08 10:29:25.646852, 1, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:599(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED [2017/03/08 10:29:25.646960, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:25.647066, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:25.647175, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key C49C6E8D [2017/03/08 10:29:25.647283, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118622480 [2017/03/08 10:29:25.647402, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key C49C6E8D [2017/03/08 10:29:25.647511, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:25.647630, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:25.647744, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_tcon.c:135 [2017/03/08 10:29:25.647860, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:25.647970, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/26/31 [2017/03/08 10:29:30.945893, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:30.946024, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 26 (position 26) from bitmap [2017/03/08 10:29:30.946053, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 26 [2017/03/08 10:29:30.946104, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:30.946131, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (9): SID[ 0]: S-1-5-21-232158225-1150262950-2424647211-501 SID[ 1]: S-1-5-21-232158225-1150262950-2424647211-514 SID[ 2]: S-1-22-2-65534 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-65534 SID[ 7]: S-1-22-2-55000 SID[ 8]: S-1-22-2-55001 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:29:30.946227, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 65534 Primary group is 65534 and contains 3 supplementary groups Group[ 0]: 65534 Group[ 1]: 55000 Group[ 2]: 55001 [2017/03/08 10:29:30.946291, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(65534,65534), gid=(0,65534) [2017/03/08 10:29:30.946327, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 26, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:30.946351, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) smbd_smb2_ioctl: ctl_code[0x00060194] , fnum [fsp is NULL] [2017/03/08 10:29:30.946384, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 0 status NT_STATUS_FS_DRIVER_REQUIRED [2017/03/08 10:29:30.946412, 3, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] || at ../source3/smbd/smb2_ioctl.c:309 [2017/03/08 10:29:30.946437, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:30.946462, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/27/31 [2017/03/08 10:29:30.960996, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:30.961065, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 27 (position 27) from bitmap [2017/03/08 10:29:30.961092, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 27 [2017/03/08 10:29:30.961119, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:30.961142, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:30.961161, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:30.961199, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:30.961233, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\test_forceuser] share[test_forceuser] [2017/03/08 10:29:30.961478, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:30.961677, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:30.961862, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 2006B99D [2017/03/08 10:29:30.962060, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118620050 [2017/03/08 10:29:30.962235, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:30.962313, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '2006B99D' stored [2017/03/08 10:29:30.962438, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x2006b99d (537311645) tcon_wire_id : 0x2006b99d (537311645) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:30.963926, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 2006B99D [2017/03/08 10:29:30.964050, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:30.964172, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:30.964292, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:30.964360, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0x2006b99d) stored [2017/03/08 10:29:30.964478, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x2006b99d (537311645) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x2006b99d (537311645) tcon_wire_id : 0x2006b99d (537311645) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:31 2017 CET compat : NULL [2017/03/08 10:29:30.966479, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:30.966602, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:416(create_connection_session_info) guest user (from session setup) not permitted to access this share (test_forceuser) [2017/03/08 10:29:30.966725, 1, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:599(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED [2017/03/08 10:29:30.966845, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:30.966978, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:30.967101, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 2006B99D [2017/03/08 10:29:30.967223, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118622480 [2017/03/08 10:29:30.967356, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 2006B99D [2017/03/08 10:29:30.967479, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:30.967598, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:30.967726, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_tcon.c:135 [2017/03/08 10:29:30.967856, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:30.967980, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/28/31 [2017/03/08 10:29:30.978101, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:30.978307, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 28 (position 28) from bitmap [2017/03/08 10:29:30.978547, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 28 [2017/03/08 10:29:30.978722, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:30.978891, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:30.979053, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:30.979312, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:30.979491, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\test_forceuser] share[test_forceuser] [2017/03/08 10:29:30.979694, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:30.979876, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:30.980048, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 2B223302 [2017/03/08 10:29:30.980230, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118620050 [2017/03/08 10:29:30.980447, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:30.980527, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '2B223302' stored [2017/03/08 10:29:30.980645, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x2b223302 (723661570) tcon_wire_id : 0x2b223302 (723661570) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:30.982130, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 2B223302 [2017/03/08 10:29:30.982242, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:30.982350, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:30.982457, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:30.982517, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0x2b223302) stored [2017/03/08 10:29:30.982621, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x2b223302 (723661570) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x2b223302 (723661570) tcon_wire_id : 0x2b223302 (723661570) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:31 2017 CET compat : NULL [2017/03/08 10:29:30.984294, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:30.984407, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:416(create_connection_session_info) guest user (from session setup) not permitted to access this share (test_forceuser) [2017/03/08 10:29:30.984522, 1, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:599(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED [2017/03/08 10:29:30.984629, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:30.984813, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:30.984917, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 2B223302 [2017/03/08 10:29:30.985014, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118622480 [2017/03/08 10:29:30.985121, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 2B223302 [2017/03/08 10:29:30.985219, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:30.985318, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:30.985420, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_tcon.c:135 [2017/03/08 10:29:30.985526, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:30.985625, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/29/31 [2017/03/08 10:29:30.997080, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:30.997319, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 29 (position 29) from bitmap [2017/03/08 10:29:30.997514, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 29 [2017/03/08 10:29:30.997735, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:30.997932, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (9): SID[ 0]: S-1-5-21-232158225-1150262950-2424647211-501 SID[ 1]: S-1-5-21-232158225-1150262950-2424647211-514 SID[ 2]: S-1-22-2-65534 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-65534 SID[ 7]: S-1-22-2-55000 SID[ 8]: S-1-22-2-55001 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:29:30.999038, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 65534 Primary group is 65534 and contains 3 supplementary groups Group[ 0]: 65534 Group[ 1]: 55000 Group[ 2]: 55001 [2017/03/08 10:29:30.999530, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(65534,65534), gid=(0,65534) [2017/03/08 10:29:30.999734, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 29, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:30.999918, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) smbd_smb2_ioctl: ctl_code[0x00060194] , fnum [fsp is NULL] [2017/03/08 10:29:31.000062, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 0 status NT_STATUS_FS_DRIVER_REQUIRED [2017/03/08 10:29:31.000196, 3, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] || at ../source3/smbd/smb2_ioctl.c:309 [2017/03/08 10:29:31.000327, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:31.000458, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/30/31 [2017/03/08 10:29:31.001490, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:31.001647, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 30 (position 30) from bitmap [2017/03/08 10:29:31.001775, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 30 [2017/03/08 10:29:31.001903, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:31.002026, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:31.002144, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:31.002321, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:31.002467, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\test_forceuser] share[test_forceuser] [2017/03/08 10:29:31.002620, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.002747, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.002874, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key C0E6EA70 [2017/03/08 10:29:31.003001, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118620050 [2017/03/08 10:29:31.003151, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:31.003229, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key 'C0E6EA70' stored [2017/03/08 10:29:31.003354, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0xc0e6ea70 (3236358768) tcon_wire_id : 0xc0e6ea70 (3236358768) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:31.004935, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key C0E6EA70 [2017/03/08 10:29:31.005243, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.005426, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.005615, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:31.005718, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0xc0e6ea70) stored [2017/03/08 10:29:31.005905, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0xc0e6ea70 (3236358768) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0xc0e6ea70 (3236358768) tcon_wire_id : 0xc0e6ea70 (3236358768) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:31 2017 CET compat : NULL [2017/03/08 10:29:31.007797, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:31.007925, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:416(create_connection_session_info) guest user (from session setup) not permitted to access this share (test_forceuser) [2017/03/08 10:29:31.008054, 1, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:599(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED [2017/03/08 10:29:31.008177, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.008298, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.008422, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key C0E6EA70 [2017/03/08 10:29:31.008545, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118622480 [2017/03/08 10:29:31.008721, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key C0E6EA70 [2017/03/08 10:29:31.008879, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.008977, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.009079, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_tcon.c:135 [2017/03/08 10:29:31.009183, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:31.009296, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/31/31 [2017/03/08 10:29:31.010174, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:31.010313, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 31 (position 31) from bitmap [2017/03/08 10:29:31.010411, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 31 [2017/03/08 10:29:31.010509, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:31.010606, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:31.010697, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:31.010831, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:31.010933, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\test_forceuser] share[test_forceuser] [2017/03/08 10:29:31.011050, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.011151, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.011250, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0C9B5A89 [2017/03/08 10:29:31.011348, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118620050 [2017/03/08 10:29:31.011464, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:31.011609, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '0C9B5A89' stored [2017/03/08 10:29:31.011718, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x0c9b5a89 (211507849) tcon_wire_id : 0x0c9b5a89 (211507849) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:31.013057, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0C9B5A89 [2017/03/08 10:29:31.013159, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.013255, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.013516, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:31.013625, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0x0c9b5a89) stored [2017/03/08 10:29:31.013837, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x0c9b5a89 (211507849) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x0c9b5a89 (211507849) tcon_wire_id : 0x0c9b5a89 (211507849) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:31 2017 CET compat : NULL [2017/03/08 10:29:31.015578, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:31.015678, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:416(create_connection_session_info) guest user (from session setup) not permitted to access this share (test_forceuser) [2017/03/08 10:29:31.015780, 1, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:599(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED [2017/03/08 10:29:31.015889, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.015985, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.016081, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0C9B5A89 [2017/03/08 10:29:31.016177, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118622480 [2017/03/08 10:29:31.016284, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0C9B5A89 [2017/03/08 10:29:31.016382, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.016477, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.016577, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_tcon.c:135 [2017/03/08 10:29:31.016695, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:31.016837, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/32/31 [2017/03/08 10:29:31.196972, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:31.197250, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 32 (position 32) from bitmap [2017/03/08 10:29:31.197401, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 32 [2017/03/08 10:29:31.197569, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:31.197730, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (9): SID[ 0]: S-1-5-21-232158225-1150262950-2424647211-501 SID[ 1]: S-1-5-21-232158225-1150262950-2424647211-514 SID[ 2]: S-1-22-2-65534 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-65534 SID[ 7]: S-1-22-2-55000 SID[ 8]: S-1-22-2-55001 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:29:31.198305, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 65534 Primary group is 65534 and contains 3 supplementary groups Group[ 0]: 65534 Group[ 1]: 55000 Group[ 2]: 55001 [2017/03/08 10:29:31.198550, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(65534,65534), gid=(0,65534) [2017/03/08 10:29:31.198677, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 32, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:31.198849, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) smbd_smb2_ioctl: ctl_code[0x00060194] , fnum [fsp is NULL] [2017/03/08 10:29:31.198994, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 0 status NT_STATUS_FS_DRIVER_REQUIRED [2017/03/08 10:29:31.199112, 3, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] || at ../source3/smbd/smb2_ioctl.c:309 [2017/03/08 10:29:31.199260, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:31.199372, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/33/31 [2017/03/08 10:29:31.200483, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:31.200707, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 33 (position 33) from bitmap [2017/03/08 10:29:31.200866, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 33 [2017/03/08 10:29:31.200982, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:31.201093, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:31.201197, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:31.201330, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:31.201441, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\test_forceuser] share[test_forceuser] [2017/03/08 10:29:31.201576, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.201677, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.201776, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 43E14A34 [2017/03/08 10:29:31.201883, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118620050 [2017/03/08 10:29:31.202012, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:31.202075, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '43E14A34' stored [2017/03/08 10:29:31.202173, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x43e14a34 (1138838068) tcon_wire_id : 0x43e14a34 (1138838068) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:31.203340, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 43E14A34 [2017/03/08 10:29:31.203439, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.203535, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.203630, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:31.203684, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0x43e14a34) stored [2017/03/08 10:29:31.203777, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x43e14a34 (1138838068) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x43e14a34 (1138838068) tcon_wire_id : 0x43e14a34 (1138838068) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:31 2017 CET compat : NULL [2017/03/08 10:29:31.205324, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:31.205427, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:416(create_connection_session_info) guest user (from session setup) not permitted to access this share (test_forceuser) [2017/03/08 10:29:31.205531, 1, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:599(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED [2017/03/08 10:29:31.205629, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.205724, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.205822, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 43E14A34 [2017/03/08 10:29:31.205919, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118622480 [2017/03/08 10:29:31.206027, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 43E14A34 [2017/03/08 10:29:31.206125, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.206220, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.206321, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_tcon.c:135 [2017/03/08 10:29:31.206425, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:31.206525, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/34/31 [2017/03/08 10:29:31.207598, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:31.207738, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 34 (position 34) from bitmap [2017/03/08 10:29:31.207837, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 34 [2017/03/08 10:29:31.207935, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:31.208032, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:31.208123, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:31.208269, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:31.208371, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\test_forceuser] share[test_forceuser] [2017/03/08 10:29:31.208487, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.208588, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.208710, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key B13DA149 [2017/03/08 10:29:31.208853, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118620050 [2017/03/08 10:29:31.208971, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:31.209034, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key 'B13DA149' stored [2017/03/08 10:29:31.209131, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0xb13da149 (2973606217) tcon_wire_id : 0xb13da149 (2973606217) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:31.210205, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key B13DA149 [2017/03/08 10:29:31.210291, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.210375, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.210458, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:31.210506, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0xb13da149) stored [2017/03/08 10:29:31.210586, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0xb13da149 (2973606217) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0xb13da149 (2973606217) tcon_wire_id : 0xb13da149 (2973606217) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:31 2017 CET compat : NULL [2017/03/08 10:29:31.212162, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:31.212264, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:416(create_connection_session_info) guest user (from session setup) not permitted to access this share (test_forceuser) [2017/03/08 10:29:31.212367, 1, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:599(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED [2017/03/08 10:29:31.212463, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.212558, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.212681, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key B13DA149 [2017/03/08 10:29:31.212858, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118622480 [2017/03/08 10:29:31.212974, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key B13DA149 [2017/03/08 10:29:31.213073, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.213169, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.213270, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_tcon.c:135 [2017/03/08 10:29:31.213383, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:31.213483, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/35/31 [2017/03/08 10:29:31.237360, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:31.237558, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 35 (position 35) from bitmap [2017/03/08 10:29:31.237706, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 35 [2017/03/08 10:29:31.237868, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:31.238027, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (9): SID[ 0]: S-1-5-21-232158225-1150262950-2424647211-501 SID[ 1]: S-1-5-21-232158225-1150262950-2424647211-514 SID[ 2]: S-1-22-2-65534 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-65534 SID[ 7]: S-1-22-2-55000 SID[ 8]: S-1-22-2-55001 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:29:31.238795, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 65534 Primary group is 65534 and contains 3 supplementary groups Group[ 0]: 65534 Group[ 1]: 55000 Group[ 2]: 55001 [2017/03/08 10:29:31.239053, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(65534,65534), gid=(0,65534) [2017/03/08 10:29:31.239159, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 35, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:31.239258, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) smbd_smb2_ioctl: ctl_code[0x00060194] , fnum [fsp is NULL] [2017/03/08 10:29:31.239362, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 0 status NT_STATUS_FS_DRIVER_REQUIRED [2017/03/08 10:29:31.239466, 3, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] || at ../source3/smbd/smb2_ioctl.c:309 [2017/03/08 10:29:31.239568, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:31.239670, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/36/31 [2017/03/08 10:29:31.242857, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:31.243122, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 36 (position 36) from bitmap [2017/03/08 10:29:31.243285, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 36 [2017/03/08 10:29:31.243454, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2017/03/08 10:29:31.243615, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 36, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:31.243776, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) smbd_smb2_ioctl: ctl_code[0x00060194] , fnum [fsp is NULL] [2017/03/08 10:29:31.243930, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 0 status NT_STATUS_FS_DRIVER_REQUIRED [2017/03/08 10:29:31.244049, 3, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] || at ../source3/smbd/smb2_ioctl.c:309 [2017/03/08 10:29:31.244166, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:31.244280, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/37/31 [2017/03/08 10:29:31.244439, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:31.244562, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 37 (position 37) from bitmap [2017/03/08 10:29:31.244733, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 37 [2017/03/08 10:29:31.244918, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:31.245044, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:31.245161, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:31.245339, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:31.245471, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\test_forceuser] share[test_forceuser] [2017/03/08 10:29:31.245628, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.245757, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.245897, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 6545C4D6 [2017/03/08 10:29:31.246027, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118620050 [2017/03/08 10:29:31.246179, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:31.246257, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '6545C4D6' stored [2017/03/08 10:29:31.246558, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x6545c4d6 (1699071190) tcon_wire_id : 0x6545c4d6 (1699071190) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:31.248302, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 6545C4D6 [2017/03/08 10:29:31.248427, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.248550, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.248712, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:31.248824, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0x6545c4d6) stored [2017/03/08 10:29:31.248923, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x6545c4d6 (1699071190) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x6545c4d6 (1699071190) tcon_wire_id : 0x6545c4d6 (1699071190) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:31 2017 CET compat : NULL [2017/03/08 10:29:31.250443, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:31.250546, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:416(create_connection_session_info) guest user (from session setup) not permitted to access this share (test_forceuser) [2017/03/08 10:29:31.250651, 1, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:599(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED [2017/03/08 10:29:31.250749, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.250844, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.250941, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 6545C4D6 [2017/03/08 10:29:31.251039, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118622480 [2017/03/08 10:29:31.251145, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 6545C4D6 [2017/03/08 10:29:31.251244, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.251339, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.251490, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_tcon.c:135 [2017/03/08 10:29:31.251603, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:31.251704, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/38/31 [2017/03/08 10:29:31.252732, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:31.252939, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 38 (position 38) from bitmap [2017/03/08 10:29:31.253061, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 38 [2017/03/08 10:29:31.253161, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:31.253258, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:31.253351, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:31.253487, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:31.253589, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\test_forceuser] share[test_forceuser] [2017/03/08 10:29:31.253707, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.253808, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.253908, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key A6F9E525 [2017/03/08 10:29:31.254006, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118620050 [2017/03/08 10:29:31.254122, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:31.254184, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key 'A6F9E525' stored [2017/03/08 10:29:31.254281, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0xa6f9e525 (2801394981) tcon_wire_id : 0xa6f9e525 (2801394981) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:31.255418, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key A6F9E525 [2017/03/08 10:29:31.255527, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.255623, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.255906, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:31.256020, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0xa6f9e525) stored [2017/03/08 10:29:31.256218, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0xa6f9e525 (2801394981) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0xa6f9e525 (2801394981) tcon_wire_id : 0xa6f9e525 (2801394981) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:31 2017 CET compat : NULL [2017/03/08 10:29:31.258001, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:31.258103, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:416(create_connection_session_info) guest user (from session setup) not permitted to access this share (test_forceuser) [2017/03/08 10:29:31.258205, 1, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:599(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED [2017/03/08 10:29:31.258302, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.258397, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.258592, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key A6F9E525 [2017/03/08 10:29:31.258763, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118622480 [2017/03/08 10:29:31.258929, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key A6F9E525 [2017/03/08 10:29:31.259078, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.259182, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.259287, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_tcon.c:135 [2017/03/08 10:29:31.259392, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:31.259492, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/39/31 [2017/03/08 10:29:31.281763, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:31.281959, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 39 (position 39) from bitmap [2017/03/08 10:29:31.282107, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 39 [2017/03/08 10:29:31.282274, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:31.282425, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (9): SID[ 0]: S-1-5-21-232158225-1150262950-2424647211-501 SID[ 1]: S-1-5-21-232158225-1150262950-2424647211-514 SID[ 2]: S-1-22-2-65534 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-65534 SID[ 7]: S-1-22-2-55000 SID[ 8]: S-1-22-2-55001 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:29:31.283272, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 65534 Primary group is 65534 and contains 3 supplementary groups Group[ 0]: 65534 Group[ 1]: 55000 Group[ 2]: 55001 [2017/03/08 10:29:31.283681, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(65534,65534), gid=(0,65534) [2017/03/08 10:29:31.283835, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 39, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:31.283990, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) smbd_smb2_ioctl: ctl_code[0x00060194] , fnum [fsp is NULL] [2017/03/08 10:29:31.284105, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 0 status NT_STATUS_FS_DRIVER_REQUIRED [2017/03/08 10:29:31.284210, 3, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] || at ../source3/smbd/smb2_ioctl.c:309 [2017/03/08 10:29:31.284325, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:31.284429, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/40/31 [2017/03/08 10:29:31.285530, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:31.285674, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 40 (position 40) from bitmap [2017/03/08 10:29:31.285775, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 40 [2017/03/08 10:29:31.285877, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:31.285975, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:31.286067, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:31.286206, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:31.286310, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\test_forceuser] share[test_forceuser] [2017/03/08 10:29:31.286438, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.286540, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.286639, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 1542FA28 [2017/03/08 10:29:31.286742, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118620050 [2017/03/08 10:29:31.286867, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:31.286929, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '1542FA28' stored [2017/03/08 10:29:31.287027, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x1542fa28 (356710952) tcon_wire_id : 0x1542fa28 (356710952) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:31.288247, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 1542FA28 [2017/03/08 10:29:31.288347, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.288445, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.288542, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:31.288597, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0x1542fa28) stored [2017/03/08 10:29:31.288741, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x1542fa28 (356710952) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x1542fa28 (356710952) tcon_wire_id : 0x1542fa28 (356710952) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:31 2017 CET compat : NULL [2017/03/08 10:29:31.290411, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:31.290535, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:416(create_connection_session_info) guest user (from session setup) not permitted to access this share (test_forceuser) [2017/03/08 10:29:31.290646, 1, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:599(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED [2017/03/08 10:29:31.290748, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.290849, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.290952, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 1542FA28 [2017/03/08 10:29:31.291055, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118622480 [2017/03/08 10:29:31.291168, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 1542FA28 [2017/03/08 10:29:31.291272, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.291372, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.291478, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_tcon.c:135 [2017/03/08 10:29:31.291587, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:31.291691, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/41/31 [2017/03/08 10:29:31.292569, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:31.292723, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 41 (position 41) from bitmap [2017/03/08 10:29:31.292870, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 41 [2017/03/08 10:29:31.292976, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:31.293078, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:31.293176, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:31.293319, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:31.293426, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\test_forceuser] share[test_forceuser] [2017/03/08 10:29:31.293549, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.293666, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.293771, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key C42B3C45 [2017/03/08 10:29:31.293875, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118620050 [2017/03/08 10:29:31.293999, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:31.294064, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key 'C42B3C45' stored [2017/03/08 10:29:31.294167, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0xc42b3c45 (3291167813) tcon_wire_id : 0xc42b3c45 (3291167813) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:31.295840, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key C42B3C45 [2017/03/08 10:29:31.295946, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.296048, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.296149, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:31.296206, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0xc42b3c45) stored [2017/03/08 10:29:31.296304, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0xc42b3c45 (3291167813) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0xc42b3c45 (3291167813) tcon_wire_id : 0xc42b3c45 (3291167813) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:31 2017 CET compat : NULL [2017/03/08 10:29:31.297916, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:31.298016, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:416(create_connection_session_info) guest user (from session setup) not permitted to access this share (test_forceuser) [2017/03/08 10:29:31.298119, 1, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:599(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED [2017/03/08 10:29:31.298216, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.298311, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.298408, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key C42B3C45 [2017/03/08 10:29:31.298505, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118622480 [2017/03/08 10:29:31.298611, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key C42B3C45 [2017/03/08 10:29:31.298710, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.298805, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.298906, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_tcon.c:135 [2017/03/08 10:29:31.299009, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:31.299108, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/42/31 [2017/03/08 10:29:31.316010, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:31.316202, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 42 (position 42) from bitmap [2017/03/08 10:29:31.316305, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 42 [2017/03/08 10:29:31.316413, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:31.316516, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (9): SID[ 0]: S-1-5-21-232158225-1150262950-2424647211-501 SID[ 1]: S-1-5-21-232158225-1150262950-2424647211-514 SID[ 2]: S-1-22-2-65534 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-65534 SID[ 7]: S-1-22-2-55000 SID[ 8]: S-1-22-2-55001 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:29:31.317141, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 65534 Primary group is 65534 and contains 3 supplementary groups Group[ 0]: 65534 Group[ 1]: 55000 Group[ 2]: 55001 [2017/03/08 10:29:31.317398, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(65534,65534), gid=(0,65534) [2017/03/08 10:29:31.317504, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 42, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:31.317602, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) smbd_smb2_ioctl: ctl_code[0x00060194] , fnum [fsp is NULL] [2017/03/08 10:29:31.317705, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 0 status NT_STATUS_FS_DRIVER_REQUIRED [2017/03/08 10:29:31.317808, 3, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] || at ../source3/smbd/smb2_ioctl.c:309 [2017/03/08 10:29:31.317911, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:31.318013, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/43/31 [2017/03/08 10:29:31.319072, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:31.319265, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 43 (position 43) from bitmap [2017/03/08 10:29:31.319422, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 43 [2017/03/08 10:29:31.319580, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:31.319749, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:31.319899, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:31.320125, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:31.320290, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\test_forceuser] share[test_forceuser] [2017/03/08 10:29:31.320453, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.320558, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.320702, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 7735BB0A [2017/03/08 10:29:31.320863, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118620050 [2017/03/08 10:29:31.320992, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:31.321058, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '7735BB0A' stored [2017/03/08 10:29:31.321162, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x7735bb0a (2000009994) tcon_wire_id : 0x7735bb0a (2000009994) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:31.322361, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 7735BB0A [2017/03/08 10:29:31.322463, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.322564, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.322665, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:31.322732, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0x7735bb0a) stored [2017/03/08 10:29:31.322832, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x7735bb0a (2000009994) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x7735bb0a (2000009994) tcon_wire_id : 0x7735bb0a (2000009994) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:31 2017 CET compat : NULL [2017/03/08 10:29:31.324718, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:31.324868, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:416(create_connection_session_info) guest user (from session setup) not permitted to access this share (test_forceuser) [2017/03/08 10:29:31.324980, 1, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:599(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED [2017/03/08 10:29:31.325082, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.325184, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.325287, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 7735BB0A [2017/03/08 10:29:31.325390, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118622480 [2017/03/08 10:29:31.325503, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 7735BB0A [2017/03/08 10:29:31.325606, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.325719, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.325826, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_tcon.c:135 [2017/03/08 10:29:31.325936, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:31.326041, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/44/31 [2017/03/08 10:29:31.326929, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:31.327062, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 44 (position 44) from bitmap [2017/03/08 10:29:31.327165, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 44 [2017/03/08 10:29:31.327268, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:31.327370, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:31.327465, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:31.327606, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:31.327713, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\test_forceuser] share[test_forceuser] [2017/03/08 10:29:31.327835, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.327941, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.328046, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 1939085D [2017/03/08 10:29:31.328149, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118620050 [2017/03/08 10:29:31.328270, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:31.328335, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '1939085D' stored [2017/03/08 10:29:31.328437, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x1939085d (423168093) tcon_wire_id : 0x1939085d (423168093) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:31.329719, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 1939085D [2017/03/08 10:29:31.329822, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.329923, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.330024, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:31.330080, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0x1939085d) stored [2017/03/08 10:29:31.330177, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x1939085d (423168093) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x1939085d (423168093) tcon_wire_id : 0x1939085d (423168093) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:31 2017 CET compat : NULL [2017/03/08 10:29:31.331741, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:31.331848, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:416(create_connection_session_info) guest user (from session setup) not permitted to access this share (test_forceuser) [2017/03/08 10:29:31.331955, 1, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:599(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED [2017/03/08 10:29:31.332056, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.332157, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.332259, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 1939085D [2017/03/08 10:29:31.332362, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118622480 [2017/03/08 10:29:31.332490, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 1939085D [2017/03/08 10:29:31.332605, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.332780, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.332894, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_tcon.c:135 [2017/03/08 10:29:31.332999, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:31.333099, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/45/31 [2017/03/08 10:29:31.341100, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:31.341294, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 45 (position 45) from bitmap [2017/03/08 10:29:31.341452, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 45 [2017/03/08 10:29:31.341615, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:31.341773, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (9): SID[ 0]: S-1-5-21-232158225-1150262950-2424647211-501 SID[ 1]: S-1-5-21-232158225-1150262950-2424647211-514 SID[ 2]: S-1-22-2-65534 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-65534 SID[ 7]: S-1-22-2-55000 SID[ 8]: S-1-22-2-55001 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:29:31.342800, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 65534 Primary group is 65534 and contains 3 supplementary groups Group[ 0]: 65534 Group[ 1]: 55000 Group[ 2]: 55001 [2017/03/08 10:29:31.343222, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(65534,65534), gid=(0,65534) [2017/03/08 10:29:31.343374, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 45, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:31.343510, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) smbd_smb2_ioctl: ctl_code[0x00060194] , fnum [fsp is NULL] [2017/03/08 10:29:31.343616, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 0 status NT_STATUS_FS_DRIVER_REQUIRED [2017/03/08 10:29:31.343721, 3, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] || at ../source3/smbd/smb2_ioctl.c:309 [2017/03/08 10:29:31.343825, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:31.343928, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/46/31 [2017/03/08 10:29:31.345384, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:31.345635, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 46 (position 46) from bitmap [2017/03/08 10:29:31.345795, 10, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 46 [2017/03/08 10:29:31.345909, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:31.346007, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:31.346100, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:31.346240, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:31.346344, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\test_forceuser] share[test_forceuser] [2017/03/08 10:29:31.346467, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.346567, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.346667, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key D10E7A71 [2017/03/08 10:29:31.346768, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118620050 [2017/03/08 10:29:31.346888, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:31.346960, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key 'D10E7A71' stored [2017/03/08 10:29:31.347059, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0xd10e7a71 (3507386993) tcon_wire_id : 0xd10e7a71 (3507386993) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:31.348192, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key D10E7A71 [2017/03/08 10:29:31.348289, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.348384, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.348478, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:31.348532, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0xd10e7a71) stored [2017/03/08 10:29:31.348624, 1, pid=21549, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0xd10e7a71 (3507386993) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0xd10e7a71 (3507386993) tcon_wire_id : 0xd10e7a71 (3507386993) server_id: struct server_id pid : 0x000000000000542d (21549) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x044a86b1dce6f5aa (309207622901757354) creation_time : Mi Mär 8 10:29:31 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:31 2017 CET compat : NULL [2017/03/08 10:29:31.351192, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:31.351306, 2, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:416(create_connection_session_info) guest user (from session setup) not permitted to access this share (test_forceuser) [2017/03/08 10:29:31.351422, 1, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:599(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED [2017/03/08 10:29:31.351531, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.351637, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:31.351747, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key D10E7A71 [2017/03/08 10:29:31.351856, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118622480 [2017/03/08 10:29:31.351975, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key D10E7A71 [2017/03/08 10:29:31.352084, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:31.352190, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:31.352302, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_tcon.c:135 [2017/03/08 10:29:31.352417, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:31.352528, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/47/31 [2017/03/08 10:29:43.768423, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:43.768611, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 47 (position 47) from bitmap [2017/03/08 10:29:43.768644, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TDIS] mid = 47 [2017/03/08 10:29:43.768730, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:43.768795, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (9): SID[ 0]: S-1-5-21-232158225-1150262950-2424647211-501 SID[ 1]: S-1-5-21-232158225-1150262950-2424647211-514 SID[ 2]: S-1-22-2-65534 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-65534 SID[ 7]: S-1-22-2-55000 SID[ 8]: S-1-22-2-55001 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:29:43.768900, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 65534 Primary group is 65534 and contains 3 supplementary groups Group[ 0]: 65534 Group[ 1]: 55000 Group[ 2]: 55001 [2017/03/08 10:29:43.768970, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(65534,65534), gid=(0,65534) [2017/03/08 10:29:43.769005, 4, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:43.769025, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:43.769044, 5, pid=21549, effective(65534, 65534), real(65534, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:43.769074, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 4 req->in.vector[4].iov_len = 0 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:29:43.769204, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:43.769231, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:43.769250, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:43.769278, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:43.769302, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:43.769323, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:43.769348, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 17CCD820 [2017/03/08 10:29:43.769390, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118612c70 [2017/03/08 10:29:43.769424, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 17CCD820 [2017/03/08 10:29:43.769448, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:43.769483, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:43.769511, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:43.769532, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:43.769550, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:43.769577, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:43.769598, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:1183(close_cnum) desktop-u7u24gg (ipv4:10.200.42.172:49213) closed connection to service IPC$ [2017/03/08 10:29:43.769632, 4, pid=21549, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:874(vfs_ChDir) vfs_ChDir to / [2017/03/08 10:29:43.769682, 4, pid=21549, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:885(vfs_ChDir) vfs_ChDir got / [2017/03/08 10:29:43.769707, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:43.769727, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:43.769745, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:43.769771, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:43.769810, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[4] dyn[no:0] at ../source3/smbd/smb2_tcon.c:521 [2017/03/08 10:29:43.769840, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/48/31 [2017/03/08 10:29:43.769954, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:43.769986, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 48 (position 48) from bitmap [2017/03/08 10:29:43.770007, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_LOGOFF] mid = 48 [2017/03/08 10:29:43.770029, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:43.770049, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:43.770067, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:43.770096, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 4 req->in.vector[4].iov_len = 0 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:29:43.770206, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:43.770232, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:43.770251, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:43.770269, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:43.770287, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:43.770316, 10, pid=21549, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:403(gencache_del) Deleting cache entry (key=[RA/293d4bb5-03dd-11e7-b671-5254001e7776]) [2017/03/08 10:29:43.770356, 10, pid=21549, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:326(gencache_set_data_blob) Adding cache entry with key=[RA/293d4bb5-03dd-11e7-b671-5254001e7776] and timeout=[Do Jan 1 01:00:00 1970 CET] (-1488965383 seconds in the past) [2017/03/08 10:29:43.770428, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:43.770453, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:43.770472, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:43.770490, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:43.770516, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:43.770538, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:43.770557, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2: 3: [2017/03/08 10:29:43.770583, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key EBD97C80 [2017/03/08 10:29:43.770610, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x56311861f000 [2017/03/08 10:29:43.770641, 5, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:43.770663, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:43.770685, 10, pid=21549, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key EBD97C80 [2017/03/08 10:29:43.770716, 4, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:483(smb_pam_start) smb_pam_start: PAM: Init user: nobody [2017/03/08 10:29:43.777762, 4, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:492(smb_pam_start) smb_pam_start: PAM: setting rhost to: 10.200.42.172 [2017/03/08 10:29:43.777927, 4, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:501(smb_pam_start) smb_pam_start: PAM: setting tty [2017/03/08 10:29:43.778039, 4, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:509(smb_pam_start) smb_pam_start: PAM: Init passed for user: nobody [2017/03/08 10:29:43.778134, 4, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:646(smb_internal_pam_session) smb_internal_pam_session: PAM: tty set to: smb/3956898944 [2017/03/08 10:29:43.780714, 4, pid=21549, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:465(smb_pam_end) smb_pam_end: PAM: PAM_END OK. [2017/03/08 10:29:43.780901, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[4] dyn[no:0] at ../source3/smbd/smb2_sesssetup.c:1262 [2017/03/08 10:29:43.781012, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/49/31 [2017/03/08 10:29:43.781995, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:1069(smbd_server_connection_terminate_ex) smbd_server_connection_terminate_ex: conn[ipv4:10.200.42.172:49213] reason[NT_STATUS_CONNECTION_RESET] at ../source3/smbd/smb2_server.c:3900 [2017/03/08 10:29:43.782158, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:43.782262, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:43.782355, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:43.782497, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:43.782595, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:43.782757, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:43.782852, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:43.782986, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:43.783084, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:43.783178, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:43.783269, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:43.783404, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:43.783502, 4, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:43.783597, 5, pid=21549, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:43.783689, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:43.783835, 5, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:43.783965, 10, pid=21549, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2017/03/08 10:29:43.784229, 3, pid=21549, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:246(exit_server_common) Server exit (NT_STATUS_CONNECTION_RESET) [2017/03/08 10:29:43.792692, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:43.792819, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:43.792845, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:43.792865, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:43.792885, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:43.792921, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 21498 [2017/03/08 10:29:43.792970, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:43.793100, 10, pid=21498, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0x314 len 0 (num_fds:0) from 21494 [2017/03/08 10:29:43.795671, 3, pid=21498, effective(0, 0), real(0, 0)] ../source3/lib/util_procid.c:54(pid_to_procid) pid_to_procid: messaging_dgm_get_unique failed: Datei oder Verzeichnis nicht gefunden [2017/03/08 10:29:43.795831, 5, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:29:43.795870, 10, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/run/samba/serverid.tdb 3: [2017/03/08 10:29:43.795908, 10, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 2D54000000000000FFFF [2017/03/08 10:29:43.795937, 10, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5631185fe8e0 [2017/03/08 10:29:43.795972, 10, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 2D54000000000000FFFF [2017/03/08 10:29:43.795996, 5, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:29:43.796016, 10, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:43.796037, 10, pid=21498, effective(0, 0), real(0, 0)] ../source3/smbd/smbd_cleanupd.c:211(smbd_cleanupd_process_exited) smbd_cleanupd_process_exited: cleaned up pid 21549 [2017/03/08 10:29:52.765442, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2017/03/08 10:29:52.767041, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Erfolg [2017/03/08 10:29:52.767303, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 2267023967885999078 [2017/03/08 10:29:52.767738, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:533(smbXsrv_client_create) [2017/03/08 10:29:52.767864, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:541(smbXsrv_client_create) smbXsrv_client_create: client_guid[00000000-0000-0000-0000-000000000000] stored [2017/03/08 10:29:52.768090, 1, pid=21551, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &client_blob: struct smbXsrv_clientB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_clientU(case 0) info0 : * info0: struct smbXsrv_client table : * ev_ctx : * msg_ctx : * global : * global: struct smbXsrv_client_global0 db_rec : NULL server_id: struct server_id pid : 0x000000000000542f (21551) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x1f7616499f243be6 (2267023967885999078) local_address : NULL remote_address : NULL remote_name : NULL initial_connect_time : Mi Mär 8 10:29:53 2017 CET client_guid : 00000000-0000-0000-0000-000000000000 stored : 0x00 (0) sconn : NULL session_table : NULL last_session_id : 0x0000000000000000 (0) tcon_table : NULL open_table : NULL connections : NULL server_multi_channel_enabled: 0x00 (0) [2017/03/08 10:29:52.770054, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:29:52.770194, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/run/samba/serverid.tdb 3: [2017/03/08 10:29:52.770329, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 2F54000000000000FFFF [2017/03/08 10:29:52.770464, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5631185eed90 [2017/03/08 10:29:52.770608, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 2F54000000000000FFFF [2017/03/08 10:29:52.770735, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:29:52.770857, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:52.771002, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 87040 SO_RCVBUF = 374400 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2017/03/08 10:29:52.772013, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 87040 SO_RCVBUF = 374400 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2017/03/08 10:29:52.773184, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:52.773315, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:3837(smbd_add_connection) Connection allowed from ipv4:10.200.42.172:49217 to ipv4:10.200.42.176:445 [2017/03/08 10:29:52.773587, 6, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/local.conf -> /etc/samba/local.conf last mod_time: Wed Mar 8 08:59:21 2017 file /etc/samba/shares.conf.d/test_forceuser -> /etc/samba/shares.conf.d/test_forceuser last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/base.conf -> /etc/samba/base.conf last mod_time: Wed Mar 8 09:02:11 2017 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Mar 8 10:28:18 2017 [2017/03/08 10:29:52.774348, 3, pid=21551, effective(0, 0), real(0, 0), class=locking] ../source3/smbd/oplock.c:1322(init_oplocks) init_oplocks: initializing messages. [2017/03/08 10:29:52.774476, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 774 - private_data=0x5631185f9700 [2017/03/08 10:29:52.774599, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 778 - private_data=0x5631185f9700 [2017/03/08 10:29:52.774720, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 770 - private_data=0x5631185f9700 [2017/03/08 10:29:52.774840, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 787 - private_data=0x5631185f9700 [2017/03/08 10:29:52.774961, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 779 - private_data=0x5631185f9700 [2017/03/08 10:29:52.775082, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2017/03/08 10:29:52.775203, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:371(messaging_register) Overriding messaging pointer for type 15 - private_data=(nil) [2017/03/08 10:29:52.775324, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 16 - private_data=(nil) [2017/03/08 10:29:52.775446, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 16 - private_data=0x5631185f9700 [2017/03/08 10:29:52.775567, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 33 - private_data=0x5631185f14d0 [2017/03/08 10:29:52.775687, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 33 - private_data=0x5631185f9700 [2017/03/08 10:29:52.775808, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 790 - private_data=(nil) [2017/03/08 10:29:52.775929, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 790 - private_data=0x5631185f9700 [2017/03/08 10:29:52.776050, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 791 - private_data=(nil) [2017/03/08 10:29:52.776186, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2017/03/08 10:29:52.776310, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2017/03/08 10:29:52.776491, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(keepalive) 0x5631185f78e0 [2017/03/08 10:29:52.776595, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(deadtime) 0x563118613d90 [2017/03/08 10:29:52.776699, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x563118613fe0 [2017/03/08 10:29:52.776859, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 155 [2017/03/08 10:29:52.776968, 6, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x9b [2017/03/08 10:29:52.777064, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 0 of length 159 (0 toread) [2017/03/08 10:29:52.777158, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/util.c:171(show_msg) [2017/03/08 10:29:52.777211, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/util.c:181(show_msg) size=155 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51283 smb_tid=65535 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=120 [2017/03/08 10:29:52.777700, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 [0020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for [0030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. [0040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM [0050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 [0060] 32 00 02 53 4D 42 20 32 2E 30 30 32 00 02 53 4D 2..SMB 2 .002..SM [0070] 42 20 32 2E 3F 3F 3F 00 B 2.???. [2017/03/08 10:29:52.778177, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBnegprot (pid 21551) conn 0x0 [2017/03/08 10:29:52.778286, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:52.778389, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:52.778491, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:52.778647, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:52.779737, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2017/03/08 10:29:52.779920, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [LANMAN1.0] [2017/03/08 10:29:52.780086, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [Windows for Workgroups 3.1a] [2017/03/08 10:29:52.780244, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [LM1.2X002] [2017/03/08 10:29:52.780555, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [LANMAN2.1] [2017/03/08 10:29:52.780663, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [NT LM 0.12] [2017/03/08 10:29:52.780792, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [SMB 2.002] [2017/03/08 10:29:52.780899, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [SMB 2.???] [2017/03/08 10:29:52.780999, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1325(set_remote_arch) set_remote_arch: Client arch is 'UNKNOWN' [2017/03/08 10:29:52.781112, 6, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/local.conf -> /etc/samba/local.conf last mod_time: Wed Mar 8 08:59:21 2017 file /etc/samba/shares.conf.d/test_forceuser -> /etc/samba/shares.conf.d/test_forceuser last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/base.conf -> /etc/samba/base.conf last mod_time: Wed Mar 8 09:02:11 2017 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Mar 8 10:28:18 2017 [2017/03/08 10:29:52.781675, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:29:52.781768, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/run/samba/serverid.tdb 3: [2017/03/08 10:29:52.781867, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 2F54000000000000FFFF [2017/03/08 10:29:52.781968, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118610f00 [2017/03/08 10:29:52.782143, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 2F54000000000000FFFF [2017/03/08 10:29:52.782247, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:29:52.782344, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:52.782457, 6, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/local.conf -> /etc/samba/local.conf last mod_time: Wed Mar 8 08:59:21 2017 file /etc/samba/shares.conf.d/test_forceuser -> /etc/samba/shares.conf.d/test_forceuser last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/base.conf -> /etc/samba/base.conf last mod_time: Wed Mar 8 09:02:11 2017 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Mar 8 10:28:18 2017 [2017/03/08 10:29:52.783018, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3463(smbd_smb2_process_negprot) smbd_smb2_first_negprot: packet length 102 [2017/03/08 10:29:52.783141, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 0 (position 0) from bitmap [2017/03/08 10:29:52.783250, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_NEGPROT] mid = 0 [2017/03/08 10:29:52.783350, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:52.783457, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:52.783550, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:52.783688, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:52.783793, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1325(set_remote_arch) set_remote_arch: Client arch is 'Vista' [2017/03/08 10:29:52.783906, 6, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/local.conf -> /etc/samba/local.conf last mod_time: Wed Mar 8 08:59:21 2017 file /etc/samba/shares.conf.d/test_forceuser -> /etc/samba/shares.conf.d/test_forceuser last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/base.conf -> /etc/samba/base.conf last mod_time: Wed Mar 8 09:02:11 2017 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Mar 8 10:28:18 2017 [2017/03/08 10:29:52.784480, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot) Selected protocol SMB2_FF [2017/03/08 10:29:52.784577, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:477(make_auth_context_subsystem) Making default auth method list for server role = 'domain member' [2017/03/08 10:29:52.784690, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend trustdomain [2017/03/08 10:29:52.784835, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'trustdomain' [2017/03/08 10:29:52.784933, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend ntdomain [2017/03/08 10:29:52.785028, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'ntdomain' [2017/03/08 10:29:52.785120, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend guest [2017/03/08 10:29:52.785213, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'guest' [2017/03/08 10:29:52.785305, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend sam [2017/03/08 10:29:52.785398, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'sam' [2017/03/08 10:29:52.785490, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2017/03/08 10:29:52.785584, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2017/03/08 10:29:52.785676, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend winbind [2017/03/08 10:29:52.785770, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'winbind' [2017/03/08 10:29:52.785862, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend unix [2017/03/08 10:29:52.785964, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'unix' [2017/03/08 10:29:52.786057, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend wbc [2017/03/08 10:29:52.786150, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'wbc' [2017/03/08 10:29:52.786242, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2017/03/08 10:29:52.786336, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2017/03/08 10:29:52.786431, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2017/03/08 10:29:52.786526, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2017/03/08 10:29:52.786621, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2017/03/08 10:29:52.786718, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match ntdomain [2017/03/08 10:29:52.786813, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method ntdomain has a valid init [2017/03/08 10:29:52.786907, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method winbind has a valid init [2017/03/08 10:29:52.787258, 5, pid=21551, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC mechanism spnego [2017/03/08 10:29:52.787403, 5, pid=21551, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC submechanism gse_krb5 [2017/03/08 10:29:52.811262, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/librpc/crypto/gse_krb5.c:312(fill_mem_keytab_from_secrets) ../source3/librpc/crypto/gse_krb5.c:312: no prev machine password [2017/03/08 10:29:52.811685, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[64] dyn[yes:96] at ../source3/smbd/smb2_negprot.c:702 [2017/03/08 10:29:52.811875, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 512/512, total granted/max/low/range 1/8192/1/1 [2017/03/08 10:29:52.812041, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:711(reply_negprot) Selected protocol SMB 2.??? [2017/03/08 10:29:52.812183, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:718(reply_negprot) negprot index=7 [2017/03/08 10:29:52.815776, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:52.815956, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 1 (position 1) from bitmap [2017/03/08 10:29:52.816104, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_NEGPROT] mid = 1 [2017/03/08 10:29:52.816262, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:52.816444, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:52.816587, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:52.816846, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:52.817014, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.817161, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:52.817315, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.817456, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:52.817586, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:52.817761, 10, pid=21551, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:326(gencache_set_data_blob) Adding cache entry with key=[RA/293d4bb6-03dd-11e7-b671-5254001e7776] and timeout=[Do Jan 1 01:00:00 1970 CET] (-1488965392 seconds in the past) [2017/03/08 10:29:52.817913, 10, pid=21551, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:326(gencache_set_data_blob) Adding cache entry with key=[RA/293d4bb6-03dd-11e7-b671-5254001e7776] and timeout=[Mi Mär 15 10:29:52 2017 CET] (604800 seconds ahead) [2017/03/08 10:29:52.818054, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:52.818176, 6, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/local.conf -> /etc/samba/local.conf last mod_time: Wed Mar 8 08:59:21 2017 file /etc/samba/shares.conf.d/test_forceuser -> /etc/samba/shares.conf.d/test_forceuser last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/base.conf -> /etc/samba/base.conf last mod_time: Wed Mar 8 09:02:11 2017 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Mar 8 10:28:18 2017 [2017/03/08 10:29:52.818738, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot) Selected protocol SMB2_10 [2017/03/08 10:29:52.818833, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:477(make_auth_context_subsystem) Making default auth method list for server role = 'domain member' [2017/03/08 10:29:52.818932, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2017/03/08 10:29:52.819029, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2017/03/08 10:29:52.819125, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2017/03/08 10:29:52.819221, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2017/03/08 10:29:52.819317, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2017/03/08 10:29:52.819424, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match ntdomain [2017/03/08 10:29:52.819520, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method ntdomain has a valid init [2017/03/08 10:29:52.819614, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method winbind has a valid init [2017/03/08 10:29:52.819738, 5, pid=21551, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC mechanism spnego [2017/03/08 10:29:52.819864, 5, pid=21551, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC submechanism gse_krb5 [2017/03/08 10:29:52.843973, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/librpc/crypto/gse_krb5.c:312(fill_mem_keytab_from_secrets) ../source3/librpc/crypto/gse_krb5.c:312: no prev machine password [2017/03/08 10:29:52.844342, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[64] dyn[yes:96] at ../source3/smbd/smb2_negprot.c:657 [2017/03/08 10:29:52.844476, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 512/512, total granted/max/low/range 1/8192/2/1 [2017/03/08 10:29:52.846260, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:52.846391, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 2 (position 2) from bitmap [2017/03/08 10:29:52.846490, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_SESSSETUP] mid = 2 [2017/03/08 10:29:52.846590, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:52.846685, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:52.846777, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:52.846914, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:52.847033, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:52.847132, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2: 3: [2017/03/08 10:29:52.847235, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key BA47A230 [2017/03/08 10:29:52.847341, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118612bc0 [2017/03/08 10:29:52.847530, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2017/03/08 10:29:52.847597, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'BA47A230' stored [2017/03/08 10:29:52.847695, 1, pid=21551, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xba47a230 (3125256752) session_wire_id : 0x00000000ba47a230 (3125256752) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542f (21551) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x1f7616499f243be6 (2267023967885999078) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49217' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2017/03/08 10:29:52.849511, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:52.849613, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:52.849716, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key BA47A230 [2017/03/08 10:29:52.849819, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1310(smbXsrv_session_create) [2017/03/08 10:29:52.850016, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1318(smbXsrv_session_create) smbXsrv_session_create: global_id (0xba47a230) stored [2017/03/08 10:29:52.850220, 1, pid=21551, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0xba47a230 (3125256752) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xba47a230 (3125256752) session_wire_id : 0x00000000ba47a230 (3125256752) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542f (21551) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x1f7616499f243be6 (2267023967885999078) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49217' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Mär 8 10:29:53 2017 CET nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : NULL [2017/03/08 10:29:52.853258, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:477(make_auth_context_subsystem) Making default auth method list for server role = 'domain member' [2017/03/08 10:29:52.853367, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2017/03/08 10:29:52.853470, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2017/03/08 10:29:52.853569, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2017/03/08 10:29:52.853670, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2017/03/08 10:29:52.853770, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2017/03/08 10:29:52.853872, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match ntdomain [2017/03/08 10:29:52.853983, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method ntdomain has a valid init [2017/03/08 10:29:52.854081, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method winbind has a valid init [2017/03/08 10:29:52.854227, 5, pid=21551, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC mechanism spnego [2017/03/08 10:29:52.854341, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:52.854442, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2: 3: [2017/03/08 10:29:52.854548, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key BA47A230 [2017/03/08 10:29:52.854651, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x56311861ef30 [2017/03/08 10:29:52.854770, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2017/03/08 10:29:52.854834, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'BA47A230' stored [2017/03/08 10:29:52.854937, 1, pid=21551, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000002 (2) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xba47a230 (3125256752) session_wire_id : 0x00000000ba47a230 (3125256752) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542f (21551) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x1f7616499f243be6 (2267023967885999078) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49217' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2017/03/08 10:29:52.856697, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:52.856842, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:52.856948, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key BA47A230 [2017/03/08 10:29:52.857052, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1405(smbXsrv_session_update) [2017/03/08 10:29:52.857111, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1413(smbXsrv_session_update) smbXsrv_session_update: global_id (0xba47a230) stored [2017/03/08 10:29:52.857209, 1, pid=21551, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0xba47a230 (3125256752) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xba47a230 (3125256752) session_wire_id : 0x00000000ba47a230 (3125256752) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542f (21551) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x1f7616499f243be6 (2267023967885999078) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49217' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Mär 8 10:29:53 2017 CET nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : * pending_auth: struct smbXsrv_session_auth0 prev : * next : NULL session : * connection : * gensec : * preauth : NULL in_flags : 0x00 (0) in_security_mode : 0x01 (1) creation_time : Mi Mär 8 10:29:53 2017 CET idle_time : Mi Mär 8 10:29:53 2017 CET [2017/03/08 10:29:52.860134, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.860236, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:52.860335, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.860474, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:52.860568, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:52.860711, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 24 req->in.vector[4].iov_len = 74 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:29:52.861379, 5, pid=21551, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2017/03/08 10:29:52.861504, 3, pid=21551, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0xe2088297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY NTLMSSP_NEGOTIATE_VERSION NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2017/03/08 10:29:52.862055, 1, pid=21551, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0xe2088297 (3792208535) 1: NTLMSSP_NEGOTIATE_UNICODE 1: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 1: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0000 (0) DomainNameMaxLen : 0x0000 (0) DomainName : NULL WorkstationLen : 0x0000 (0) WorkstationMaxLen : 0x0000 (0) Workstation : NULL Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (6) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1) ProductBuild : 0x1db1 (7601) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2017/03/08 10:29:52.864020, 1, pid=21551, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x000e (14) TargetNameMaxLen : 0x000e (14) TargetName : * TargetName : 'LTBTEST' NegotiateFlags : 0xe2898215 (3800662549) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 1: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 ServerChallenge : 9e766d2775236895 Reserved : 0000000000000000 TargetInfoLen : 0x0090 (144) TargetInfoMaxLen : 0x0090 (144) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000006 (6) pair: ARRAY(6) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x000e (14) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LTBTEST' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0010 (16) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'UCS-1950' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0020 (32) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'ltbtest.intranet' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x0032 (50) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'ucs-1950.ltbtest.intranet' pair: struct AV_PAIR AvId : MsvAvTimestamp (0x7) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x7) AvTimestamp : Mi Mär 8 10:29:53 2017 CET pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (0x6) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (0x1) ProductBuild : 0x0000 (0) Reserved : 000000 NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (0xF) [2017/03/08 10:29:52.867884, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.867987, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:52.868080, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.868227, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:52.868321, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:52.868484, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:52.868591, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_MORE_PROCESSING_REQUIRED] body[8] dyn[yes:245] at ../source3/smbd/smb2_sesssetup.c:171 [2017/03/08 10:29:52.868696, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 31, charge 1, granted 1, current possible/max 512/512, total granted/max/low/range 1/8192/3/1 [2017/03/08 10:29:52.869881, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:52.870016, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 3 (position 3) from bitmap [2017/03/08 10:29:52.870116, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_SESSSETUP] mid = 3 [2017/03/08 10:29:52.870227, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:52.870325, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2: 3: [2017/03/08 10:29:52.870428, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key BA47A230 [2017/03/08 10:29:52.870529, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x56311861dc50 [2017/03/08 10:29:52.870644, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2017/03/08 10:29:52.870707, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'BA47A230' stored [2017/03/08 10:29:52.870805, 1, pid=21551, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000003 (3) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xba47a230 (3125256752) session_wire_id : 0x00000000ba47a230 (3125256752) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542f (21551) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x1f7616499f243be6 (2267023967885999078) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49217' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2017/03/08 10:29:52.872494, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:52.872591, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:52.872689, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key BA47A230 [2017/03/08 10:29:52.872827, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1405(smbXsrv_session_update) [2017/03/08 10:29:52.872898, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1413(smbXsrv_session_update) smbXsrv_session_update: global_id (0xba47a230) stored [2017/03/08 10:29:52.872994, 1, pid=21551, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0xba47a230 (3125256752) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xba47a230 (3125256752) session_wire_id : 0x00000000ba47a230 (3125256752) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542f (21551) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x1f7616499f243be6 (2267023967885999078) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49217' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Mär 8 10:29:53 2017 CET nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : * pending_auth: struct smbXsrv_session_auth0 prev : * next : NULL session : * connection : * gensec : * preauth : NULL in_flags : 0x00 (0) in_security_mode : 0x01 (1) creation_time : Mi Mär 8 10:29:53 2017 CET idle_time : Mi Mär 8 10:29:53 2017 CET [2017/03/08 10:29:52.875941, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:52.876084, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:52.876183, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:52.876322, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:52.876444, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:52.876543, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2: 3: [2017/03/08 10:29:52.876642, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key BA47A230 [2017/03/08 10:29:52.876742, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118624440 [2017/03/08 10:29:52.876899, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2017/03/08 10:29:52.876963, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'BA47A230' stored [2017/03/08 10:29:52.877061, 1, pid=21551, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000004 (4) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xba47a230 (3125256752) session_wire_id : 0x00000000ba47a230 (3125256752) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542f (21551) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x1f7616499f243be6 (2267023967885999078) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49217' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2017/03/08 10:29:52.878695, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:52.878790, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:52.878887, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key BA47A230 [2017/03/08 10:29:52.878983, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1405(smbXsrv_session_update) [2017/03/08 10:29:52.879039, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1413(smbXsrv_session_update) smbXsrv_session_update: global_id (0xba47a230) stored [2017/03/08 10:29:52.879131, 1, pid=21551, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0xba47a230 (3125256752) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xba47a230 (3125256752) session_wire_id : 0x00000000ba47a230 (3125256752) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542f (21551) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x1f7616499f243be6 (2267023967885999078) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49217' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Mär 8 10:29:53 2017 CET nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : * pending_auth: struct smbXsrv_session_auth0 prev : * next : NULL session : * connection : * gensec : * preauth : NULL in_flags : 0x00 (0) in_security_mode : 0x01 (1) creation_time : Mi Mär 8 10:29:53 2017 CET idle_time : Mi Mär 8 10:29:53 2017 CET [2017/03/08 10:29:52.882295, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.882391, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:52.882485, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.882578, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:52.882668, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:52.882810, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 24 req->in.vector[4].iov_len = 557 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:29:52.883376, 1, pid=21551, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 000000000000000000000000000000000000000000000000 NtChallengeResponseLen : 0x013c (316) NtChallengeResponseMaxLen: 0x013c (316) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 316) v2: struct NTLMv2_RESPONSE Response : 508371378183eab2857c0695f1fab872 Challenge: struct NTLMv2_CLIENT_CHALLENGE RespType : 0x01 (1) HiRespType : 0x01 (1) Reserved1 : 0x0000 (0) Reserved2 : 0x00000000 (0) TimeStamp : Mi Mär 8 10:29:53 2017 CET ChallengeFromClient : 2a665386c5a623f0 Reserved3 : 0x00000000 (0) AvPairs: struct AV_PAIR_LIST count : 0x0000000a (10) pair: ARRAY(10) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x000e (14) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LTBTEST' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0010 (16) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'UCS-1950' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0020 (32) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'ltbtest.intranet' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x0032 (50) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'ucs-1950.ltbtest.intranet' pair: struct AV_PAIR AvId : MsvAvTimestamp (0x7) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x7) AvTimestamp : Mi Mär 8 10:29:53 2017 CET pair: struct AV_PAIR AvId : MsvAvFlags (0x6) AvLen : 0x0004 (4) Value : union ntlmssp_AvValue(case 0x6) AvFlags : 0x00000002 (2) 0: NTLMSSP_AVFLAG_CONSTRAINTED_ACCOUNT 1: NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE 0: NTLMSSP_AVFLAG_TARGET_SPN_FROM_UNTRUSTED_SOURCE pair: struct AV_PAIR AvId : MsvAvSingleHost (0x8) AvLen : 0x0030 (48) Value : union ntlmssp_AvValue(case 0x8) AvSingleHost: struct ntlmssp_SingleHostData Size : 0x00000030 (48) Z4 : 0x00000000 (0) token_info: struct LSAP_TOKEN_INFO_INTEGRITY Flags : 0x00000001 (1) TokenIL : 0x00002000 (8192) MachineId : 50cf6ea77cf3ef773f87760b8dd437bb64cca74f96bfdeba0dfc3ec6135246dc remaining : DATA_BLOB length=0 pair: struct AV_PAIR AvId : MsvChannelBindings (0xA) AvLen : 0x0010 (16) Value : union ntlmssp_AvValue(case 0xA) ChannelBindings : 00000000000000000000000000000000 pair: struct AV_PAIR AvId : MsvAvTargetName (0x9) AvLen : 0x0024 (36) Value : union ntlmssp_AvValue(case 0x9) AvTargetName : 'cifs/10.200.42.176' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) DomainNameLen : 0x0020 (32) DomainNameMaxLen : 0x0020 (32) DomainName : * DomainName : 'ltbtest.intranet' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'sruda' WorkstationLen : 0x001e (30) WorkstationMaxLen : 0x001e (30) Workstation : * Workstation : 'DESKTOP-U7U24GG' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [0000] 34 68 16 7D E6 36 5F 1F AC E0 02 15 1A B2 86 89 4h.}.6_. ........ NegotiateFlags : 0xe2888215 (3800597013) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (6) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1) ProductBuild : 0x1db1 (7601) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2017/03/08 10:29:52.890044, 3, pid=21551, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:452(ntlmssp_server_preauth) Got user=[sruda] domain=[ltbtest.intranet] workstation=[DESKTOP-U7U24GG] len1=24 len2=316 [2017/03/08 10:29:52.890171, 10, pid=21551, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:483(ntlmssp_server_preauth) [2017/03/08 10:29:52.890231, 1, pid=21551, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &v2_resp: struct NTLMv2_RESPONSE Response : 508371378183eab2857c0695f1fab872 Challenge: struct NTLMv2_CLIENT_CHALLENGE RespType : 0x01 (1) HiRespType : 0x01 (1) Reserved1 : 0x0000 (0) Reserved2 : 0x00000000 (0) TimeStamp : Mi Mär 8 10:29:53 2017 CET ChallengeFromClient : 2a665386c5a623f0 Reserved3 : 0x00000000 (0) AvPairs: struct AV_PAIR_LIST count : 0x0000000a (10) pair: ARRAY(10) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x000e (14) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LTBTEST' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0010 (16) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'UCS-1950' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0020 (32) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'ltbtest.intranet' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x0032 (50) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'ucs-1950.ltbtest.intranet' pair: struct AV_PAIR AvId : MsvAvTimestamp (0x7) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x7) AvTimestamp : Mi Mär 8 10:29:53 2017 CET pair: struct AV_PAIR AvId : MsvAvFlags (0x6) AvLen : 0x0004 (4) Value : union ntlmssp_AvValue(case 0x6) AvFlags : 0x00000002 (2) 0: NTLMSSP_AVFLAG_CONSTRAINTED_ACCOUNT 1: NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE 0: NTLMSSP_AVFLAG_TARGET_SPN_FROM_UNTRUSTED_SOURCE pair: struct AV_PAIR AvId : MsvAvSingleHost (0x8) AvLen : 0x0030 (48) Value : union ntlmssp_AvValue(case 0x8) AvSingleHost: struct ntlmssp_SingleHostData Size : 0x00000030 (48) Z4 : 0x00000000 (0) token_info: struct LSAP_TOKEN_INFO_INTEGRITY Flags : 0x00000001 (1) TokenIL : 0x00002000 (8192) MachineId : 50cf6ea77cf3ef773f87760b8dd437bb64cca74f96bfdeba0dfc3ec6135246dc remaining : DATA_BLOB length=0 pair: struct AV_PAIR AvId : MsvChannelBindings (0xA) AvLen : 0x0010 (16) Value : union ntlmssp_AvValue(case 0xA) ChannelBindings : 00000000000000000000000000000000 pair: struct AV_PAIR AvId : MsvAvTargetName (0x9) AvLen : 0x0024 (36) Value : union ntlmssp_AvValue(case 0x9) AvTargetName : 'cifs/10.200.42.176' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2017/03/08 10:29:52.893965, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3739(lp_load_ex) lp_load_ex: refreshing parameters [2017/03/08 10:29:52.894068, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1312(free_param_opts) Freeing parametrics: [2017/03/08 10:29:52.894249, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:543(init_globals) Initialising global parameters [2017/03/08 10:29:52.894466, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2668(lp_do_section) Processing section "[global]" doing parameter debug level = 10 [2017/03/08 10:29:52.894616, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/util/debug.c:642(debug_dump_status) INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10 passdb: 10 sam: 10 auth: 10 winbind: 10 vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 scavenger: 10 dns: 10 ldb: 10 tevent: 10 doing parameter logging = file doing parameter max log size = 0 doing parameter max open files = 32808 doing parameter server string = %h univention corporate server doing parameter ntlm auth = yes doing parameter machine password timeout = 0 doing parameter acl allow execute always = True doing parameter bind interfaces only = yes doing parameter interfaces = lo eth0 doing parameter netbios name = ucs-1950 doing parameter ldap suffix = dc=ltbtest,dc=intranet doing parameter ldap admin dn = "cn=ucs-1950,cn=memberserver,cn=computers,dc=ltbtest,dc=intranet" doing parameter ldap ssl = start tls doing parameter passdb expand explicit = no doing parameter ldap idmap suffix = cn=idmap,cn=univention doing parameter idmap config * : backend = ldap doing parameter idmap config * : range = 55000-64000 doing parameter idmap config * : ldap_url = ldap://ucs-7437.ltbtest.intranet:7389 doing parameter idmap config * : ldap_user_dn = cn=ucs-1950,cn=memberserver,cn=computers,dc=ltbtest,dc=intranet doing parameter idmap config LTBTEST : backend = nss doing parameter idmap config LTBTEST : range = 1000-54999 doing parameter winbind max clients = 500 doing parameter winbind nested groups = no doing parameter winbind enum users = yes doing parameter winbind enum groups = yes doing parameter winbind separator = + doing parameter template shell = /bin/bash doing parameter template homedir = /home/%D-%U doing parameter pam password change = no doing parameter unix password sync = no doing parameter passwd chat = *New*password* %n\n *Re-enter*new*password* %n\n *password*changed* doing parameter passwd chat timeout = 60 doing parameter client use spnego = yes doing parameter obey pam restrictions = yes doing parameter encrypt passwords = yes doing parameter spoolss: architecture = Windows x64 doing parameter security = ads doing parameter realm = LTBTEST.INTRANET doing parameter domain logons = no doing parameter domain master = no doing parameter preferred master = no doing parameter local master = no doing parameter os level = 65 doing parameter wins support = no doing parameter workgroup = LTBTEST doing parameter oplocks = yes doing parameter kernel oplocks = yes doing parameter large readwrite = yes doing parameter deadtime = 15 doing parameter read raw = yes doing parameter write raw = yes doing parameter max xmit = 65535 doing parameter getwd cache = yes doing parameter wide links = no doing parameter store dos attributes = yes doing parameter preserve case = yes doing parameter short preserve case = yes doing parameter time server = yes doing parameter host msdfs = no doing parameter msdfs root = no doing parameter guest account = nobody doing parameter map to guest = Bad User doing parameter admin users = administrator join-backup doing parameter set quota command = /usr/sbin/univention-setquota doing parameter check password script = /usr/share/univention-samba/password_check %u doing parameter usershare max shares = 0 doing parameter include = /etc/samba/base.conf [2017/03/08 10:29:52.899242, 2, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[homes]" doing parameter comment = Heimatverzeichnisse doing parameter browsable = no doing parameter read only = no doing parameter create mask = 0700 doing parameter directory mask = 0700 doing parameter vfs objects = acl_xattr [2017/03/08 10:29:52.899673, 2, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[printers]" doing parameter comment = Drucker doing parameter browseable = no doing parameter path = /tmp doing parameter printable = yes doing parameter public = no doing parameter writable = no doing parameter create mode = 0700 [2017/03/08 10:29:52.900624, 2, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[print$]" doing parameter comment = Printer Drivers doing parameter path = /var/lib/samba/drivers doing parameter browseable = yes doing parameter guest ok = no doing parameter read only = no doing parameter write list = root, Administrator, @Printer-Admins doing parameter include = /etc/samba/shares.conf doing parameter include = /etc/samba/shares.conf.d/test_forceuser [2017/03/08 10:29:52.901520, 2, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[test_forceuser]" doing parameter path = /mnt/shares/bmm/test1 doing parameter vfs objects = acl_xattr doing parameter msdfs root = no doing parameter writeable = yes doing parameter browseable = yes doing parameter public = no doing parameter dos filemode = no doing parameter hide unreadable = no doing parameter create mode = 0744 doing parameter directory mode = 0755 doing parameter force create mode = 00 doing parameter force directory mode = 00 doing parameter locking = 1 doing parameter blocking locks = 1 doing parameter strict locking = Auto doing parameter oplocks = 1 doing parameter level2 oplocks = 1 doing parameter fake oplocks = 0 doing parameter csc policy = manual doing parameter force user = sruda doing parameter force group = bmm doing parameter nt acl support = 1 doing parameter inherit acls = 1 doing parameter inherit owner = no doing parameter inherit permissions = no doing parameter include = /etc/samba/local.conf [2017/03/08 10:29:52.903074, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3780(lp_load_ex) pm_process() returned Yes [2017/03/08 10:29:52.903194, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1585(lp_add_ipc) adding IPC service [2017/03/08 10:29:52.903330, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:117(make_user_info_map) Mapping user [ltbtest.intranet]\[sruda] from workstation [DESKTOP-U7U24GG] [2017/03/08 10:29:52.903813, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:62(make_user_info) attempting to make a user_info for sruda (sruda) [2017/03/08 10:29:52.903922, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:70(make_user_info) making strings for sruda's user_info struct [2017/03/08 10:29:52.904020, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:108(make_user_info) making blobs for sruda's user_info struct [2017/03/08 10:29:52.904190, 10, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:159(make_user_info) made a user_info for sruda (sruda) [2017/03/08 10:29:52.904341, 3, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:178(auth_check_ntlm_password) check_ntlm_password: Checking password for unmapped user [ltbtest.intranet]\[sruda]@[DESKTOP-U7U24GG] with the new password interface [2017/03/08 10:29:52.904462, 3, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:181(auth_check_ntlm_password) check_ntlm_password: mapped user is: [ltbtest.intranet]\[sruda]@[DESKTOP-U7U24GG] [2017/03/08 10:29:52.904557, 10, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:190(auth_check_ntlm_password) check_ntlm_password: auth_context challenge created by random [2017/03/08 10:29:52.904651, 10, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:192(auth_check_ntlm_password) challenge is: [2017/03/08 10:29:52.904742, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 9E 76 6D 27 75 23 68 95 .vm'u#h. [2017/03/08 10:29:52.904890, 10, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_builtin.c:41(check_guest_security) Check auth for: [sruda] [2017/03/08 10:29:52.904984, 10, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:233(auth_check_ntlm_password) check_ntlm_password: guest had nothing to say [2017/03/08 10:29:52.905081, 10, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:75(auth_samstrict_auth) Check auth for: [sruda] [2017/03/08 10:29:52.905175, 8, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1239(is_myname) is_myname("ltbtest.intranet") returns 0 [2017/03/08 10:29:52.905270, 6, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:88(auth_samstrict_auth) check_samstrict_security: ltbtest.intranet is not one of my local names (ROLE_DOMAIN_MEMBER) [2017/03/08 10:29:52.905366, 10, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:233(auth_check_ntlm_password) check_ntlm_password: sam had nothing to say [2017/03/08 10:29:52.905462, 10, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_winbind.c:50(check_winbind_security) Check auth for: [sruda] [2017/03/08 10:29:52.905558, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.905653, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:52.905746, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.905838, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:52.905928, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:52.923086, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:52.923282, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user LTBTEST+sruda [2017/03/08 10:29:52.923449, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is ltbtest+sruda [2017/03/08 10:29:52.925197, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/username.c:128(Get_Pwnam_internals) Trying _Get_Pwnam(), username as given is LTBTEST+sruda [2017/03/08 10:29:52.926513, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/username.c:141(Get_Pwnam_internals) Trying _Get_Pwnam(), username as uppercase is LTBTEST+SRUDA [2017/03/08 10:29:52.927779, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/username.c:153(Get_Pwnam_internals) Checking combinations of 0 uppercase letters in ltbtest+sruda [2017/03/08 10:29:52.927960, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals didn't find user [LTBTEST+sruda]! [2017/03/08 10:29:52.928117, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user sruda [2017/03/08 10:29:52.928268, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is sruda [2017/03/08 10:29:52.928531, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [sruda]! [2017/03/08 10:29:52.928699, 3, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:249(auth_check_ntlm_password) check_ntlm_password: winbind authentication for user [sruda] succeeded [2017/03/08 10:29:52.928904, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.929057, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:52.929209, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.929359, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:52.929506, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:52.929708, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:483(smb_pam_start) smb_pam_start: PAM: Init user: sruda [2017/03/08 10:29:52.934950, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:492(smb_pam_start) smb_pam_start: PAM: setting rhost to: 10.200.42.172 [2017/03/08 10:29:52.935126, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:501(smb_pam_start) smb_pam_start: PAM: setting tty [2017/03/08 10:29:52.935224, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:509(smb_pam_start) smb_pam_start: PAM: Init passed for user: sruda [2017/03/08 10:29:52.935318, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:567(smb_pam_account) smb_pam_account: PAM: Account Management for User: sruda [2017/03/08 10:29:52.971107, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:586(smb_pam_account) smb_pam_account: PAM: Account OK for User: sruda [2017/03/08 10:29:52.972094, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:465(smb_pam_end) smb_pam_end: PAM: PAM_END OK. [2017/03/08 10:29:52.972293, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:52.972508, 5, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:292(auth_check_ntlm_password) check_ntlm_password: PAM Account for user [sruda] succeeded [2017/03/08 10:29:52.972693, 2, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:305(auth_check_ntlm_password) check_ntlm_password: authentication for user [sruda] -> [sruda] -> [sruda] succeeded [2017/03/08 10:29:52.972906, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:215(auth3_check_password) Got NT session key of length 16 [2017/03/08 10:29:52.973072, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:222(auth3_check_password) Got LM session key of length 8 [2017/03/08 10:29:52.973340, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:224(create_local_nt_token_from_info3) Create local NT token for sruda [2017/03/08 10:29:52.973525, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1631624753-2720948390-2531171318-1114]: value=[2010:U] [2017/03/08 10:29:52.973648, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1631624753-2720948390-2531171318-1114]: id=[2010], endptr=[:U] [2017/03/08 10:29:52.973768, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1468(sid_to_uid) sid S-1-5-21-1631624753-2720948390-2531171318-1114 -> uid 2010 [2017/03/08 10:29:52.974038, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist) sys_getgrouplist: user [sruda] [2017/03/08 10:29:52.974322, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid) gid 5001 -> sid S-1-5-21-1631624753-2720948390-2531171318-513 [2017/03/08 10:29:52.974476, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid) gid 5052 -> sid S-1-22-2-5052 [2017/03/08 10:29:52.974619, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid) gid 5073 -> sid S-1-5-21-1631624753-2720948390-2531171318-1113 [2017/03/08 10:29:52.974784, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.974907, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:52.975020, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.975131, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:52.975240, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:52.975436, 10, pid=21551, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1563(pdb_default_sid_to_id) Could not find map for sid S-1-5-32-544 [2017/03/08 10:29:52.975562, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/passdb/pdb_util.c:157(create_builtin_administrators) create_builtin_administrators: Failed to create Administrators [2017/03/08 10:29:52.975680, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:52.975811, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.975928, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:52.976039, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.976149, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:52.976268, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:52.976681, 10, pid=21551, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1563(pdb_default_sid_to_id) Could not find map for sid S-1-5-32-545 [2017/03/08 10:29:52.976913, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/passdb/pdb_util.c:128(create_builtin_users) create_builtin_users: Failed to create Users [2017/03/08 10:29:52.977096, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:52.977288, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1631624753-2720948390-2531171318-1114] [2017/03/08 10:29:52.977487, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1631624753-2720948390-2531171318-513] [2017/03/08 10:29:52.977674, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1631624753-2720948390-2531171318-1113] [2017/03/08 10:29:52.977868, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-22-2-5052] [2017/03/08 10:29:52.978062, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-1-0 Privilege set: 0x0 [2017/03/08 10:29:52.978241, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-2] [2017/03/08 10:29:52.978370, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-11] [2017/03/08 10:29:52.978509, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1631624753-2720948390-2531171318-1114]: value=[2010:U] [2017/03/08 10:29:52.978629, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1631624753-2720948390-2531171318-1114]: id=[2010], endptr=[:U] [2017/03/08 10:29:52.978770, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1631624753-2720948390-2531171318-513]: value=[5001:G] [2017/03/08 10:29:52.978889, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1631624753-2720948390-2531171318-513]: id=[5001], endptr=[:G] [2017/03/08 10:29:52.979029, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1631624753-2720948390-2531171318-1113]: value=[5073:G] [2017/03/08 10:29:52.979147, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1631624753-2720948390-2531171318-1113]: id=[5073], endptr=[:G] [2017/03/08 10:29:52.979286, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-1-0]: value=[55000:G] [2017/03/08 10:29:52.979403, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-1-0]: id=[55000], endptr=[:G] [2017/03/08 10:29:52.979556, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-2]: value=[55001:G] [2017/03/08 10:29:52.979674, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-2]: id=[55001], endptr=[:G] [2017/03/08 10:29:52.979809, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-11]: value=[55002:G] [2017/03/08 10:29:52.979927, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-11]: id=[55002], endptr=[:G] [2017/03/08 10:29:52.980050, 10, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (13): SID[ 0]: S-1-5-21-1631624753-2720948390-2531171318-1114 SID[ 1]: S-1-5-21-1631624753-2720948390-2531171318-513 SID[ 2]: S-1-5-21-1631624753-2720948390-2531171318-1113 SID[ 3]: S-1-22-2-5052 SID[ 4]: S-1-1-0 SID[ 5]: S-1-5-2 SID[ 6]: S-1-5-11 SID[ 7]: S-1-22-1-2010 SID[ 8]: S-1-22-2-5001 SID[ 9]: S-1-22-2-5073 SID[ 10]: S-1-22-2-55000 SID[ 11]: S-1-22-2-55001 SID[ 12]: S-1-22-2-55002 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:29:52.980913, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 2010 Primary group is 5001 and contains 6 supplementary groups Group[ 0]: 5001 Group[ 1]: 5073 Group[ 2]: 5052 Group[ 3]: 55000 Group[ 4]: 55001 Group[ 5]: 55002 [2017/03/08 10:29:52.981352, 10, pid=21551, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:858(ntlmssp_server_postauth) ntlmssp_server_auth: Using unmodified nt session key. [2017/03/08 10:29:52.981657, 3, pid=21551, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_sign.c:509(ntlmssp_sign_reset) NTLMSSP Sign/Seal - Initialising with flags: [2017/03/08 10:29:52.981762, 3, pid=21551, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0xe2088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY NTLMSSP_NEGOTIATE_VERSION NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2017/03/08 10:29:52.982230, 10, pid=21551, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_sign.c:255(ntlmssp_check_packet) ntlmssp_check_packet: NTLMSSP signature OK ! [2017/03/08 10:29:52.982342, 3, pid=21551, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_sign.c:509(ntlmssp_sign_reset) NTLMSSP Sign/Seal - Initialising with flags: [2017/03/08 10:29:52.982438, 3, pid=21551, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0xe2088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY NTLMSSP_NEGOTIATE_VERSION NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2017/03/08 10:29:52.982900, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.982997, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:52.983089, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.983180, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:52.983282, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:52.983423, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:52.983589, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:224(create_local_nt_token_from_info3) Create local NT token for sruda [2017/03/08 10:29:52.983715, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1631624753-2720948390-2531171318-1114]: value=[2010:U] [2017/03/08 10:29:52.983818, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1631624753-2720948390-2531171318-1114]: id=[2010], endptr=[:U] [2017/03/08 10:29:52.983918, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1468(sid_to_uid) sid S-1-5-21-1631624753-2720948390-2531171318-1114 -> uid 2010 [2017/03/08 10:29:52.984100, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist) sys_getgrouplist: user [sruda] [2017/03/08 10:29:52.984310, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid) gid 5001 -> sid S-1-5-21-1631624753-2720948390-2531171318-513 [2017/03/08 10:29:52.984452, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid) gid 5052 -> sid S-1-22-2-5052 [2017/03/08 10:29:52.984570, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid) gid 5073 -> sid S-1-5-21-1631624753-2720948390-2531171318-1113 [2017/03/08 10:29:52.984692, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.984834, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:52.984930, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.985023, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:52.985295, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:52.985534, 10, pid=21551, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1563(pdb_default_sid_to_id) Could not find map for sid S-1-5-32-544 [2017/03/08 10:29:52.985686, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/passdb/pdb_util.c:157(create_builtin_administrators) create_builtin_administrators: Failed to create Administrators [2017/03/08 10:29:52.985829, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:52.985987, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.986131, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:52.986269, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:52.986409, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:52.986545, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:52.986751, 10, pid=21551, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1563(pdb_default_sid_to_id) Could not find map for sid S-1-5-32-545 [2017/03/08 10:29:52.986859, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/passdb/pdb_util.c:128(create_builtin_users) create_builtin_users: Failed to create Users [2017/03/08 10:29:52.986959, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:52.987067, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1631624753-2720948390-2531171318-1114] [2017/03/08 10:29:52.987179, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1631624753-2720948390-2531171318-513] [2017/03/08 10:29:52.987290, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1631624753-2720948390-2531171318-1113] [2017/03/08 10:29:52.987401, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-22-2-5052] [2017/03/08 10:29:52.987511, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-1-0 Privilege set: 0x0 [2017/03/08 10:29:52.987653, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-2] [2017/03/08 10:29:52.987762, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-11] [2017/03/08 10:29:52.987879, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1631624753-2720948390-2531171318-1114]: value=[2010:U] [2017/03/08 10:29:52.987981, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1631624753-2720948390-2531171318-1114]: id=[2010], endptr=[:U] [2017/03/08 10:29:52.988095, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1631624753-2720948390-2531171318-513]: value=[5001:G] [2017/03/08 10:29:52.988195, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1631624753-2720948390-2531171318-513]: id=[5001], endptr=[:G] [2017/03/08 10:29:52.988309, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1631624753-2720948390-2531171318-1113]: value=[5073:G] [2017/03/08 10:29:52.988491, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1631624753-2720948390-2531171318-1113]: id=[5073], endptr=[:G] [2017/03/08 10:29:52.988607, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-1-0]: value=[55000:G] [2017/03/08 10:29:52.988707, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-1-0]: id=[55000], endptr=[:G] [2017/03/08 10:29:52.988862, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-2]: value=[55001:G] [2017/03/08 10:29:52.988968, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-2]: id=[55001], endptr=[:G] [2017/03/08 10:29:52.989083, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-11]: value=[55002:G] [2017/03/08 10:29:52.989182, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-11]: id=[55002], endptr=[:G] [2017/03/08 10:29:52.989286, 10, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (13): SID[ 0]: S-1-5-21-1631624753-2720948390-2531171318-1114 SID[ 1]: S-1-5-21-1631624753-2720948390-2531171318-513 SID[ 2]: S-1-5-21-1631624753-2720948390-2531171318-1113 SID[ 3]: S-1-22-2-5052 SID[ 4]: S-1-1-0 SID[ 5]: S-1-5-2 SID[ 6]: S-1-5-11 SID[ 7]: S-1-22-1-2010 SID[ 8]: S-1-22-2-5001 SID[ 9]: S-1-22-2-5073 SID[ 10]: S-1-22-2-55000 SID[ 11]: S-1-22-2-55001 SID[ 12]: S-1-22-2-55002 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:29:52.990113, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 2010 Primary group is 5001 and contains 6 supplementary groups Group[ 0]: 5001 Group[ 1]: 5073 Group[ 2]: 5052 Group[ 3]: 55000 Group[ 4]: 55001 Group[ 5]: 55002 [2017/03/08 10:29:52.990495, 7, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4096(lp_servicenumber) lp_servicenumber: couldn't find sruda [2017/03/08 10:29:52.990597, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user sruda [2017/03/08 10:29:52.990689, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is sruda [2017/03/08 10:29:52.990788, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [sruda]! [2017/03/08 10:29:52.990883, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/password.c:144(register_homes_share) Adding homes service for user 'sruda' using home directory: '/home/sruda' [2017/03/08 10:29:52.991019, 8, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1428(add_a_service) add_a_service: Creating snum = 5 for sruda [2017/03/08 10:29:52.991122, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1478(hash_a_service) hash_a_service: hashing index 5 for service name sruda [2017/03/08 10:29:52.991224, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1536(lp_add_home) adding home's share [sruda] for user 'sruda' at '/home/sruda' [2017/03/08 10:29:52.991358, 6, pid=21551, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/local.conf -> /etc/samba/local.conf last mod_time: Wed Mar 8 08:59:21 2017 file /etc/samba/shares.conf.d/test_forceuser -> /etc/samba/shares.conf.d/test_forceuser last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/base.conf -> /etc/samba/base.conf last mod_time: Wed Mar 8 09:02:11 2017 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Mar 8 10:28:18 2017 [2017/03/08 10:29:52.991936, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:483(smb_pam_start) smb_pam_start: PAM: Init user: sruda [2017/03/08 10:29:52.996952, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:492(smb_pam_start) smb_pam_start: PAM: setting rhost to: 10.200.42.172 [2017/03/08 10:29:52.997142, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:501(smb_pam_start) smb_pam_start: PAM: setting tty [2017/03/08 10:29:52.997307, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:509(smb_pam_start) smb_pam_start: PAM: Init passed for user: sruda [2017/03/08 10:29:52.997447, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:646(smb_internal_pam_session) smb_internal_pam_session: PAM: tty set to: smb/3125256752 [2017/03/08 10:29:53.212134, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:465(smb_pam_end) smb_pam_end: PAM: PAM_END OK. [2017/03/08 10:29:53.212250, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:53.212277, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2: 3: [2017/03/08 10:29:53.212307, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key BA47A230 [2017/03/08 10:29:53.212344, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118672350 [2017/03/08 10:29:53.212460, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2017/03/08 10:29:53.212479, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'BA47A230' stored [2017/03/08 10:29:53.212497, 1, pid=21551, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000005 (5) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xba47a230 (3125256752) session_wire_id : 0x00000000ba47a230 (3125256752) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : Mi Mär 8 10:29:53 2017 CET auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x0000000d (13) sids: ARRAY(13) sids : S-1-5-21-1631624753-2720948390-2531171318-1114 sids : S-1-5-21-1631624753-2720948390-2531171318-513 sids : S-1-5-21-1631624753-2720948390-2531171318-1113 sids : S-1-22-2-5052 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-22-1-2010 sids : S-1-22-2-5001 sids : S-1-22-2-5073 sids : S-1-22-2-55000 sids : S-1-22-2-55001 sids : S-1-22-2-55002 privilege_mask : 0x0000000000000000 (0) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 0: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT 0: SEC_PRIV_BACKUP_BIT 0: SEC_PRIV_RESTORE_BIT 0: SEC_PRIV_TAKE_OWNERSHIP_BIT 0: SEC_PRIV_INCREASE_QUOTA_BIT 0: SEC_PRIV_SECURITY_BIT 0: SEC_PRIV_LOAD_DRIVER_BIT 0: SEC_PRIV_SYSTEM_PROFILE_BIT 0: SEC_PRIV_SYSTEMTIME_BIT 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 0: SEC_PRIV_CREATE_PAGEFILE_BIT 0: SEC_PRIV_SHUTDOWN_BIT 0: SEC_PRIV_DEBUG_BIT 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 0: SEC_PRIV_CHANGE_NOTIFY_BIT 0: SEC_PRIV_UNDOCK_BIT 0: SEC_PRIV_ENABLE_DELEGATION_BIT 0: SEC_PRIV_MANAGE_VOLUME_BIT 0: SEC_PRIV_IMPERSONATE_BIT 0: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x00000000000007da (2010) gid : 0x0000000000001389 (5001) ngroups : 0x00000006 (6) groups: ARRAY(6) groups : 0x0000000000001389 (5001) groups : 0x00000000000013d1 (5073) groups : 0x00000000000013bc (5052) groups : 0x000000000000d6d8 (55000) groups : 0x000000000000d6d9 (55001) groups : 0x000000000000d6da (55002) info : * info: struct auth_user_info account_name : * account_name : 'sruda' user_principal_name : NULL user_principal_constructed: 0x00 (0) domain_name : * domain_name : 'LTBTEST' dns_domain_name : NULL full_name : * full_name : 'sruda sruda' logon_script : * logon_script : '' profile_path : * profile_path : '' home_directory : * home_directory : '' home_drive : * home_drive : '' logon_server : * logon_server : 'UCS-7437' last_logon : NTTIME(0) last_logoff : Do Sep 14 04:48:05 30828 CEST acct_expiry : Do Sep 14 04:48:05 30828 CEST last_password_change : Mi Mär 8 09:46:08 2017 CET allow_password_change : Mi Mär 8 09:46:08 2017 CET force_password_change : Do Sep 14 04:48:05 30828 CEST logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000010 (16) authenticated : 0x01 (1) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'sruda' sanitized_username : * sanitized_username : 'sruda' torture : NULL credentials : NULL connection_dialect : 0x0210 (528) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542f (21551) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x1f7616499f243be6 (2267023967885999078) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49217' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000001 (1) connection : * encryption_cipher : 0x0000 (0) [2017/03/08 10:29:53.218495, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:53.218603, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:53.218708, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key BA47A230 [2017/03/08 10:29:53.218811, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1405(smbXsrv_session_update) [2017/03/08 10:29:53.218868, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1413(smbXsrv_session_update) smbXsrv_session_update: global_id (0xba47a230) stored [2017/03/08 10:29:53.218961, 1, pid=21551, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0xba47a230 (3125256752) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xba47a230 (3125256752) session_wire_id : 0x00000000ba47a230 (3125256752) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : Mi Mär 8 10:29:53 2017 CET auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x0000000d (13) sids: ARRAY(13) sids : S-1-5-21-1631624753-2720948390-2531171318-1114 sids : S-1-5-21-1631624753-2720948390-2531171318-513 sids : S-1-5-21-1631624753-2720948390-2531171318-1113 sids : S-1-22-2-5052 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-22-1-2010 sids : S-1-22-2-5001 sids : S-1-22-2-5073 sids : S-1-22-2-55000 sids : S-1-22-2-55001 sids : S-1-22-2-55002 privilege_mask : 0x0000000000000000 (0) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 0: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT 0: SEC_PRIV_BACKUP_BIT 0: SEC_PRIV_RESTORE_BIT 0: SEC_PRIV_TAKE_OWNERSHIP_BIT 0: SEC_PRIV_INCREASE_QUOTA_BIT 0: SEC_PRIV_SECURITY_BIT 0: SEC_PRIV_LOAD_DRIVER_BIT 0: SEC_PRIV_SYSTEM_PROFILE_BIT 0: SEC_PRIV_SYSTEMTIME_BIT 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 0: SEC_PRIV_CREATE_PAGEFILE_BIT 0: SEC_PRIV_SHUTDOWN_BIT 0: SEC_PRIV_DEBUG_BIT 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 0: SEC_PRIV_CHANGE_NOTIFY_BIT 0: SEC_PRIV_UNDOCK_BIT 0: SEC_PRIV_ENABLE_DELEGATION_BIT 0: SEC_PRIV_MANAGE_VOLUME_BIT 0: SEC_PRIV_IMPERSONATE_BIT 0: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x00000000000007da (2010) gid : 0x0000000000001389 (5001) ngroups : 0x00000006 (6) groups: ARRAY(6) groups : 0x0000000000001389 (5001) groups : 0x00000000000013d1 (5073) groups : 0x00000000000013bc (5052) groups : 0x000000000000d6d8 (55000) groups : 0x000000000000d6d9 (55001) groups : 0x000000000000d6da (55002) info : * info: struct auth_user_info account_name : * account_name : 'sruda' user_principal_name : NULL user_principal_constructed: 0x00 (0) domain_name : * domain_name : 'LTBTEST' dns_domain_name : NULL full_name : * full_name : 'sruda sruda' logon_script : * logon_script : '' profile_path : * profile_path : '' home_directory : * home_directory : '' home_drive : * home_drive : '' logon_server : * logon_server : 'UCS-7437' last_logon : NTTIME(0) last_logoff : Do Sep 14 04:48:05 30828 CEST acct_expiry : Do Sep 14 04:48:05 30828 CEST last_password_change : Mi Mär 8 09:46:08 2017 CET allow_password_change : Mi Mär 8 09:46:08 2017 CET force_password_change : Do Sep 14 04:48:05 30828 CEST logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000010 (16) authenticated : 0x01 (1) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'sruda' sanitized_username : * sanitized_username : 'sruda' torture : NULL credentials : NULL connection_dialect : 0x0210 (528) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000542f (21551) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x1f7616499f243be6 (2267023967885999078) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49217' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000001 (1) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_OK idle_time : Mi Mär 8 10:29:53 2017 CET nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : * tcon_table : * pending_auth : NULL [2017/03/08 10:29:53.226825, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[8] dyn[yes:29] at ../source3/smbd/smb2_sesssetup.c:171 [2017/03/08 10:29:53.226943, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 31, charge 1, granted 31, current possible/max 512/512, total granted/max/low/range 31/8192/4/31 [2017/03/08 10:29:53.227058, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) signed SMB2 message [2017/03/08 10:29:53.228273, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:53.228417, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 4 (position 4) from bitmap [2017/03/08 10:29:53.228518, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 4 [2017/03/08 10:29:53.228636, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.228736, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.228901, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.229050, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:53.229174, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\test_forceuser] share[test_forceuser] [2017/03/08 10:29:53.229318, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:53.229420, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:53.229520, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key B00E53DE [2017/03/08 10:29:53.229624, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118623b30 [2017/03/08 10:29:53.229769, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:53.229834, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key 'B00E53DE' stored [2017/03/08 10:29:53.229944, 1, pid=21551, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0xb00e53de (2953728990) tcon_wire_id : 0xb00e53de (2953728990) server_id: struct server_id pid : 0x000000000000542f (21551) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x1f7616499f243be6 (2267023967885999078) creation_time : Mi Mär 8 10:29:53 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:53.231087, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key B00E53DE [2017/03/08 10:29:53.231184, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:53.231281, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:53.231376, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:53.231430, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0xb00e53de) stored [2017/03/08 10:29:53.231523, 1, pid=21551, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0xb00e53de (2953728990) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0xb00e53de (2953728990) tcon_wire_id : 0xb00e53de (2953728990) server_id: struct server_id pid : 0x000000000000542f (21551) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x1f7616499f243be6 (2267023967885999078) creation_time : Mi Mär 8 10:29:53 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:53 2017 CET compat : NULL [2017/03/08 10:29:53.233219, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:53.233326, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:221(user_ok_token) user_ok_token: share test_forceuser is ok for unix user sruda [2017/03/08 10:29:53.233493, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user sruda [2017/03/08 10:29:53.233600, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is sruda [2017/03/08 10:29:53.233698, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [sruda]! [2017/03/08 10:29:53.233807, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:77(lookup_name) lookup_name: UCS-1950\sruda => domain=[UCS-1950], name=[sruda] [2017/03/08 10:29:53.233904, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:78(lookup_name) lookup_name: flags = 0x073 [2017/03/08 10:29:53.234005, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.234102, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:53.234196, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.234289, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.234379, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.234537, 5, pid=21551, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:600(tdbsam_getsampwnam) pdb_getsampwnam (TDB): error fetching database. Key: USER_sruda [2017/03/08 10:29:53.234679, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.234781, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.234877, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:53.234970, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.235063, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.235154, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.235307, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.235423, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:77(lookup_name) lookup_name: Unix User\sruda => domain=[Unix User], name=[sruda] [2017/03/08 10:29:53.235517, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:78(lookup_name) lookup_name: flags = 0x073 [2017/03/08 10:29:53.236405, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid) gid 5001 -> sid S-1-5-21-1631624753-2720948390-2531171318-513 [2017/03/08 10:29:53.236534, 10, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/server_info.c:378(SamInfo3_handle_sids) Unix User found. Rid marked as special and sid (S-1-22-1-2010) saved as extra sid [2017/03/08 10:29:53.236640, 1, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/server_info.c:414(SamInfo3_handle_sids) The primary group domain sid(S-1-5-21-1631624753-2720948390-2531171318-513) does not match the domain sid(S-1-5-21-232158225-1150262950-2424647211) for sruda(S-1-22-1-2010) [2017/03/08 10:29:53.236789, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:53.236935, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:53.237038, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key B00E53DE [2017/03/08 10:29:53.237138, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5631186730a0 [2017/03/08 10:29:53.237248, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key B00E53DE [2017/03/08 10:29:53.237347, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:53.237662, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:53.237833, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_INVALID_SID] || at ../source3/smbd/smb2_tcon.c:135 [2017/03/08 10:29:53.237995, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_INVALID_SID] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:53.238153, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/5/31 [2017/03/08 10:29:53.239132, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:53.239311, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 5 (position 5) from bitmap [2017/03/08 10:29:53.239464, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_LOGOFF] mid = 5 [2017/03/08 10:29:53.239619, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.239724, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.239828, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.239964, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 4 req->in.vector[4].iov_len = 0 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:29:53.240524, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.240626, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:53.240721, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.240856, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.240951, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.241087, 10, pid=21551, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:403(gencache_del) Deleting cache entry (key=[RA/293d4bb6-03dd-11e7-b671-5254001e7776]) [2017/03/08 10:29:53.241198, 10, pid=21551, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:326(gencache_set_data_blob) Adding cache entry with key=[RA/293d4bb6-03dd-11e7-b671-5254001e7776] and timeout=[Do Jan 1 01:00:00 1970 CET] (-1488965393 seconds in the past) [2017/03/08 10:29:53.241343, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.241445, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.241653, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.241810, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.242002, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:53.242102, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:53.242197, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2: 3: [2017/03/08 10:29:53.242298, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key BA47A230 [2017/03/08 10:29:53.242398, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5631186230f0 [2017/03/08 10:29:53.242506, 5, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:53.242605, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:53.242702, 10, pid=21551, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key BA47A230 [2017/03/08 10:29:53.242819, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:483(smb_pam_start) smb_pam_start: PAM: Init user: sruda [2017/03/08 10:29:53.247862, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:492(smb_pam_start) smb_pam_start: PAM: setting rhost to: 10.200.42.172 [2017/03/08 10:29:53.248043, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:501(smb_pam_start) smb_pam_start: PAM: setting tty [2017/03/08 10:29:53.248186, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:509(smb_pam_start) smb_pam_start: PAM: Init passed for user: sruda [2017/03/08 10:29:53.248326, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:646(smb_internal_pam_session) smb_internal_pam_session: PAM: tty set to: smb/3125256752 [2017/03/08 10:29:53.249164, 4, pid=21551, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:465(smb_pam_end) smb_pam_end: PAM: PAM_END OK. [2017/03/08 10:29:53.249333, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[4] dyn[no:0] at ../source3/smbd/smb2_sesssetup.c:1262 [2017/03/08 10:29:53.249491, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/6/31 [2017/03/08 10:29:53.267161, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:1069(smbd_server_connection_terminate_ex) smbd_server_connection_terminate_ex: conn[ipv4:10.200.42.172:49217] reason[NT_STATUS_CONNECTION_RESET] at ../source3/smbd/smb2_server.c:3900 [2017/03/08 10:29:53.267385, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.267536, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.267674, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.267885, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:53.268032, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.268171, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.268318, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.268578, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:53.268732, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.268920, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.269070, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.269215, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:53.269327, 4, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.269423, 5, pid=21551, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.269514, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.269725, 5, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:53.269916, 10, pid=21551, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2017/03/08 10:29:53.270205, 3, pid=21551, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:246(exit_server_common) Server exit (NT_STATUS_CONNECTION_RESET) [2017/03/08 10:29:53.273686, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.273758, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:53.273775, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.273791, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.273806, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.273839, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 21498 [2017/03/08 10:29:53.273878, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.273983, 10, pid=21498, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0x314 len 0 (num_fds:0) from 21494 [2017/03/08 10:29:53.274062, 3, pid=21498, effective(0, 0), real(0, 0)] ../source3/lib/util_procid.c:54(pid_to_procid) pid_to_procid: messaging_dgm_get_unique failed: Datei oder Verzeichnis nicht gefunden [2017/03/08 10:29:53.274097, 5, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:29:53.274114, 10, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/run/samba/serverid.tdb 3: [2017/03/08 10:29:53.274135, 10, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 2F54000000000000FFFF [2017/03/08 10:29:53.274156, 10, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5631185fe940 [2017/03/08 10:29:53.274182, 10, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 2F54000000000000FFFF [2017/03/08 10:29:53.274199, 5, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:29:53.274294, 10, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:53.274320, 10, pid=21498, effective(0, 0), real(0, 0)] ../source3/smbd/smbd_cleanupd.c:211(smbd_cleanupd_process_exited) smbd_cleanupd_process_exited: cleaned up pid 21551 [2017/03/08 10:29:53.303196, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2017/03/08 10:29:53.303673, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Erfolg [2017/03/08 10:29:53.303866, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 9188705631817034252 [2017/03/08 10:29:53.304147, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:533(smbXsrv_client_create) [2017/03/08 10:29:53.304240, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:541(smbXsrv_client_create) smbXsrv_client_create: client_guid[00000000-0000-0000-0000-000000000000] stored [2017/03/08 10:29:53.304490, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &client_blob: struct smbXsrv_clientB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_clientU(case 0) info0 : * info0: struct smbXsrv_client table : * ev_ctx : * msg_ctx : * global : * global: struct smbXsrv_client_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) local_address : NULL remote_address : NULL remote_name : NULL initial_connect_time : Mi Mär 8 10:29:53 2017 CET client_guid : 00000000-0000-0000-0000-000000000000 stored : 0x00 (0) sconn : NULL session_table : NULL last_session_id : 0x0000000000000000 (0) tcon_table : NULL open_table : NULL connections : NULL server_multi_channel_enabled: 0x00 (0) [2017/03/08 10:29:53.306866, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:29:53.306996, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/run/samba/serverid.tdb 3: [2017/03/08 10:29:53.307122, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 3454000000000000FFFF [2017/03/08 10:29:53.307320, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5631185eed90 [2017/03/08 10:29:53.307458, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 3454000000000000FFFF [2017/03/08 10:29:53.307578, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:29:53.307692, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:53.307828, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 87040 SO_RCVBUF = 374400 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2017/03/08 10:29:53.308863, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 87040 SO_RCVBUF = 374400 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2017/03/08 10:29:53.309864, 3, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:53.309986, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:3837(smbd_add_connection) Connection allowed from ipv4:10.200.42.172:49218 to ipv4:10.200.42.176:445 [2017/03/08 10:29:53.310170, 6, pid=21556, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/local.conf -> /etc/samba/local.conf last mod_time: Wed Mar 8 08:59:21 2017 file /etc/samba/shares.conf.d/test_forceuser -> /etc/samba/shares.conf.d/test_forceuser last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/base.conf -> /etc/samba/base.conf last mod_time: Wed Mar 8 09:02:11 2017 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Mar 8 10:28:18 2017 [2017/03/08 10:29:53.310876, 3, pid=21556, effective(0, 0), real(0, 0), class=locking] ../source3/smbd/oplock.c:1322(init_oplocks) init_oplocks: initializing messages. [2017/03/08 10:29:53.310996, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 774 - private_data=0x5631185f9700 [2017/03/08 10:29:53.311110, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 778 - private_data=0x5631185f9700 [2017/03/08 10:29:53.311223, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 770 - private_data=0x5631185f9700 [2017/03/08 10:29:53.311336, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 787 - private_data=0x5631185f9700 [2017/03/08 10:29:53.311450, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 779 - private_data=0x5631185f9700 [2017/03/08 10:29:53.311562, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2017/03/08 10:29:53.311675, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:371(messaging_register) Overriding messaging pointer for type 15 - private_data=(nil) [2017/03/08 10:29:53.311787, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 16 - private_data=(nil) [2017/03/08 10:29:53.311901, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 16 - private_data=0x5631185f9700 [2017/03/08 10:29:53.312014, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 33 - private_data=0x5631185f14d0 [2017/03/08 10:29:53.312126, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 33 - private_data=0x5631185f9700 [2017/03/08 10:29:53.312250, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 790 - private_data=(nil) [2017/03/08 10:29:53.312383, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 790 - private_data=0x5631185f9700 [2017/03/08 10:29:53.312503, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 791 - private_data=(nil) [2017/03/08 10:29:53.312618, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2017/03/08 10:29:53.312733, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2017/03/08 10:29:53.312901, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(keepalive) 0x5631185f78e0 [2017/03/08 10:29:53.313021, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(deadtime) 0x563118613d90 [2017/03/08 10:29:53.313143, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x563118613fe0 [2017/03/08 10:29:53.313278, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 104 [2017/03/08 10:29:53.313404, 6, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x68 [2017/03/08 10:29:53.313618, 3, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 0 of length 108 (0 toread) [2017/03/08 10:29:53.313898, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3463(smbd_smb2_process_negprot) smbd_smb2_first_negprot: packet length 104 [2017/03/08 10:29:53.314187, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 0 (position 0) from bitmap [2017/03/08 10:29:53.314384, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_NEGPROT] mid = 0 [2017/03/08 10:29:53.314575, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.314760, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.314938, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.315196, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:53.315337, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.315453, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:53.315563, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.315673, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.315781, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.315990, 10, pid=21556, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:326(gencache_set_data_blob) Adding cache entry with key=[RA/293d4bb6-03dd-11e7-b671-5254001e7776] and timeout=[Do Jan 1 01:00:00 1970 CET] (-1488965393 seconds in the past) [2017/03/08 10:29:53.316181, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.316302, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1325(set_remote_arch) set_remote_arch: Client arch is 'Vista' [2017/03/08 10:29:53.316486, 6, pid=21556, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/local.conf -> /etc/samba/local.conf last mod_time: Wed Mar 8 08:59:21 2017 file /etc/samba/shares.conf.d/test_forceuser -> /etc/samba/shares.conf.d/test_forceuser last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/base.conf -> /etc/samba/base.conf last mod_time: Wed Mar 8 09:02:11 2017 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Mar 8 10:28:18 2017 [2017/03/08 10:29:53.317095, 3, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot) Selected protocol SMB2_10 [2017/03/08 10:29:53.317205, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:477(make_auth_context_subsystem) Making default auth method list for server role = 'domain member' [2017/03/08 10:29:53.317308, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend trustdomain [2017/03/08 10:29:53.317412, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'trustdomain' [2017/03/08 10:29:53.317509, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend ntdomain [2017/03/08 10:29:53.317603, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'ntdomain' [2017/03/08 10:29:53.317695, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend guest [2017/03/08 10:29:53.317788, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'guest' [2017/03/08 10:29:53.318001, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend sam [2017/03/08 10:29:53.318143, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'sam' [2017/03/08 10:29:53.318243, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2017/03/08 10:29:53.318338, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2017/03/08 10:29:53.318431, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend winbind [2017/03/08 10:29:53.318526, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'winbind' [2017/03/08 10:29:53.318620, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend unix [2017/03/08 10:29:53.318724, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'unix' [2017/03/08 10:29:53.318819, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend wbc [2017/03/08 10:29:53.318913, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'wbc' [2017/03/08 10:29:53.319005, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2017/03/08 10:29:53.319100, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2017/03/08 10:29:53.319196, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2017/03/08 10:29:53.319292, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2017/03/08 10:29:53.319388, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2017/03/08 10:29:53.319493, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match ntdomain [2017/03/08 10:29:53.319592, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method ntdomain has a valid init [2017/03/08 10:29:53.319686, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method winbind has a valid init [2017/03/08 10:29:53.320037, 5, pid=21556, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC mechanism spnego [2017/03/08 10:29:53.320184, 5, pid=21556, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC submechanism gse_krb5 [2017/03/08 10:29:53.344390, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/librpc/crypto/gse_krb5.c:312(fill_mem_keytab_from_secrets) ../source3/librpc/crypto/gse_krb5.c:312: no prev machine password [2017/03/08 10:29:53.344875, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[64] dyn[yes:96] at ../source3/smbd/smb2_negprot.c:657 [2017/03/08 10:29:53.345068, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 31, charge 1, granted 1, current possible/max 512/512, total granted/max/low/range 1/8192/1/1 [2017/03/08 10:29:53.347978, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:53.348148, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 1 (position 1) from bitmap [2017/03/08 10:29:53.348292, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_SESSSETUP] mid = 1 [2017/03/08 10:29:53.348461, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.348604, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.348742, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.349041, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:53.349215, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:53.349371, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2: 3: [2017/03/08 10:29:53.349530, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0E1F79A3 [2017/03/08 10:29:53.349693, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5631185f6040 [2017/03/08 10:29:53.349929, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2017/03/08 10:29:53.350023, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key '0E1F79A3' stored [2017/03/08 10:29:53.350160, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x0e1f79a3 (236943779) session_wire_id : 0x000000000e1f79a3 (236943779) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49218' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2017/03/08 10:29:53.351809, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:53.351904, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:53.352012, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0E1F79A3 [2017/03/08 10:29:53.352110, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1310(smbXsrv_session_create) [2017/03/08 10:29:53.352167, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1318(smbXsrv_session_create) smbXsrv_session_create: global_id (0x0e1f79a3) stored [2017/03/08 10:29:53.352261, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x0e1f79a3 (236943779) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x0e1f79a3 (236943779) session_wire_id : 0x000000000e1f79a3 (236943779) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49218' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Mär 8 10:29:53 2017 CET nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : NULL [2017/03/08 10:29:53.354861, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:477(make_auth_context_subsystem) Making default auth method list for server role = 'domain member' [2017/03/08 10:29:53.354969, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2017/03/08 10:29:53.355073, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2017/03/08 10:29:53.355174, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2017/03/08 10:29:53.355275, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2017/03/08 10:29:53.355375, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2017/03/08 10:29:53.355476, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match ntdomain [2017/03/08 10:29:53.355577, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method ntdomain has a valid init [2017/03/08 10:29:53.355675, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method winbind has a valid init [2017/03/08 10:29:53.355827, 5, pid=21556, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC mechanism spnego [2017/03/08 10:29:53.355944, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:53.356046, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2: 3: [2017/03/08 10:29:53.356153, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0E1F79A3 [2017/03/08 10:29:53.356258, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118616260 [2017/03/08 10:29:53.356394, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2017/03/08 10:29:53.356462, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key '0E1F79A3' stored [2017/03/08 10:29:53.356566, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000002 (2) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x0e1f79a3 (236943779) session_wire_id : 0x000000000e1f79a3 (236943779) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49218' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2017/03/08 10:29:53.358840, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:53.358942, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:53.359045, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0E1F79A3 [2017/03/08 10:29:53.359148, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1405(smbXsrv_session_update) [2017/03/08 10:29:53.359208, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1413(smbXsrv_session_update) smbXsrv_session_update: global_id (0x0e1f79a3) stored [2017/03/08 10:29:53.359307, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x0e1f79a3 (236943779) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x0e1f79a3 (236943779) session_wire_id : 0x000000000e1f79a3 (236943779) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49218' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Mär 8 10:29:53 2017 CET nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : * pending_auth: struct smbXsrv_session_auth0 prev : * next : NULL session : * connection : * gensec : * preauth : NULL in_flags : 0x00 (0) in_security_mode : 0x01 (1) creation_time : Mi Mär 8 10:29:53 2017 CET idle_time : Mi Mär 8 10:29:53 2017 CET [2017/03/08 10:29:53.362293, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.362397, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:53.362495, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.362593, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.362688, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.362836, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 24 req->in.vector[4].iov_len = 74 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:29:53.363605, 5, pid=21556, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2017/03/08 10:29:53.363751, 3, pid=21556, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0xe2088297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY NTLMSSP_NEGOTIATE_VERSION NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2017/03/08 10:29:53.364844, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0xe2088297 (3792208535) 1: NTLMSSP_NEGOTIATE_UNICODE 1: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 1: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0000 (0) DomainNameMaxLen : 0x0000 (0) DomainName : NULL WorkstationLen : 0x0000 (0) WorkstationMaxLen : 0x0000 (0) Workstation : NULL Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (6) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1) ProductBuild : 0x1db1 (7601) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2017/03/08 10:29:53.366883, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x000e (14) TargetNameMaxLen : 0x000e (14) TargetName : * TargetName : 'LTBTEST' NegotiateFlags : 0xe2898215 (3800662549) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 1: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 ServerChallenge : c9cd7930006cb5c0 Reserved : 0000000000000000 TargetInfoLen : 0x0090 (144) TargetInfoMaxLen : 0x0090 (144) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000006 (6) pair: ARRAY(6) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x000e (14) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LTBTEST' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0010 (16) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'UCS-1950' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0020 (32) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'ltbtest.intranet' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x0032 (50) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'ucs-1950.ltbtest.intranet' pair: struct AV_PAIR AvId : MsvAvTimestamp (0x7) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x7) AvTimestamp : Mi Mär 8 10:29:53 2017 CET pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (0x6) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (0x1) ProductBuild : 0x0000 (0) Reserved : 000000 NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (0xF) [2017/03/08 10:29:53.370202, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.370304, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:53.370397, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.370490, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.370581, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.370730, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.370834, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_MORE_PROCESSING_REQUIRED] body[8] dyn[yes:245] at ../source3/smbd/smb2_sesssetup.c:171 [2017/03/08 10:29:53.370939, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 31, charge 1, granted 1, current possible/max 512/512, total granted/max/low/range 1/8192/2/1 [2017/03/08 10:29:53.372013, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:53.372198, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 2 (position 2) from bitmap [2017/03/08 10:29:53.372362, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_SESSSETUP] mid = 2 [2017/03/08 10:29:53.372521, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:53.372655, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2: 3: [2017/03/08 10:29:53.372790, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0E1F79A3 [2017/03/08 10:29:53.372901, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118617460 [2017/03/08 10:29:53.373016, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2017/03/08 10:29:53.373079, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key '0E1F79A3' stored [2017/03/08 10:29:53.373177, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000003 (3) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x0e1f79a3 (236943779) session_wire_id : 0x000000000e1f79a3 (236943779) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49218' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2017/03/08 10:29:53.375155, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:53.375309, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:53.375417, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0E1F79A3 [2017/03/08 10:29:53.375515, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1405(smbXsrv_session_update) [2017/03/08 10:29:53.375571, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1413(smbXsrv_session_update) smbXsrv_session_update: global_id (0x0e1f79a3) stored [2017/03/08 10:29:53.375665, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x0e1f79a3 (236943779) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x0e1f79a3 (236943779) session_wire_id : 0x000000000e1f79a3 (236943779) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49218' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Mär 8 10:29:53 2017 CET nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : * pending_auth: struct smbXsrv_session_auth0 prev : * next : NULL session : * connection : * gensec : * preauth : NULL in_flags : 0x00 (0) in_security_mode : 0x01 (1) creation_time : Mi Mär 8 10:29:53 2017 CET idle_time : Mi Mär 8 10:29:53 2017 CET [2017/03/08 10:29:53.378645, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.378744, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.378836, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.378972, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:53.379074, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:53.379171, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2: 3: [2017/03/08 10:29:53.379314, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0E1F79A3 [2017/03/08 10:29:53.379414, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118624490 [2017/03/08 10:29:53.379532, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2017/03/08 10:29:53.379595, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key '0E1F79A3' stored [2017/03/08 10:29:53.379693, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000004 (4) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x0e1f79a3 (236943779) session_wire_id : 0x000000000e1f79a3 (236943779) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49218' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2017/03/08 10:29:53.381849, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:53.381948, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:53.382046, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0E1F79A3 [2017/03/08 10:29:53.382144, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1405(smbXsrv_session_update) [2017/03/08 10:29:53.382201, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1413(smbXsrv_session_update) smbXsrv_session_update: global_id (0x0e1f79a3) stored [2017/03/08 10:29:53.382294, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x0e1f79a3 (236943779) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x0e1f79a3 (236943779) session_wire_id : 0x000000000e1f79a3 (236943779) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0210 (528) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49218' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Mär 8 10:29:53 2017 CET nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : * pending_auth: struct smbXsrv_session_auth0 prev : * next : NULL session : * connection : * gensec : * preauth : NULL in_flags : 0x00 (0) in_security_mode : 0x01 (1) creation_time : Mi Mär 8 10:29:53 2017 CET idle_time : Mi Mär 8 10:29:53 2017 CET [2017/03/08 10:29:53.385609, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.385707, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:53.385801, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.385895, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.385986, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.386128, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 24 req->in.vector[4].iov_len = 553 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:29:53.386714, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 000000000000000000000000000000000000000000000000 NtChallengeResponseLen : 0x013c (316) NtChallengeResponseMaxLen: 0x013c (316) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 316) v2: struct NTLMv2_RESPONSE Response : ec7020cdfec6a3b8d8c326fdfb0a19ff Challenge: struct NTLMv2_CLIENT_CHALLENGE RespType : 0x01 (1) HiRespType : 0x01 (1) Reserved1 : 0x0000 (0) Reserved2 : 0x00000000 (0) TimeStamp : Mi Mär 8 10:29:53 2017 CET ChallengeFromClient : 142fe1302f84d8f8 Reserved3 : 0x00000000 (0) AvPairs: struct AV_PAIR_LIST count : 0x0000000a (10) pair: ARRAY(10) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x000e (14) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LTBTEST' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0010 (16) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'UCS-1950' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0020 (32) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'ltbtest.intranet' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x0032 (50) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'ucs-1950.ltbtest.intranet' pair: struct AV_PAIR AvId : MsvAvTimestamp (0x7) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x7) AvTimestamp : Mi Mär 8 10:29:53 2017 CET pair: struct AV_PAIR AvId : MsvAvFlags (0x6) AvLen : 0x0004 (4) Value : union ntlmssp_AvValue(case 0x6) AvFlags : 0x00000002 (2) 0: NTLMSSP_AVFLAG_CONSTRAINTED_ACCOUNT 1: NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE 0: NTLMSSP_AVFLAG_TARGET_SPN_FROM_UNTRUSTED_SOURCE pair: struct AV_PAIR AvId : MsvAvSingleHost (0x8) AvLen : 0x0030 (48) Value : union ntlmssp_AvValue(case 0x8) AvSingleHost: struct ntlmssp_SingleHostData Size : 0x00000030 (48) Z4 : 0x00000000 (0) token_info: struct LSAP_TOKEN_INFO_INTEGRITY Flags : 0x00000001 (1) TokenIL : 0x00002000 (8192) MachineId : 50cf6ea77cf3ef773f87760b8dd437bb64cca74f96bfdeba0dfc3ec6135246dc remaining : DATA_BLOB length=0 pair: struct AV_PAIR AvId : MsvChannelBindings (0xA) AvLen : 0x0010 (16) Value : union ntlmssp_AvValue(case 0xA) ChannelBindings : 00000000000000000000000000000000 pair: struct AV_PAIR AvId : MsvAvTargetName (0x9) AvLen : 0x0024 (36) Value : union ntlmssp_AvValue(case 0x9) AvTargetName : 'cifs/10.200.42.176' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) DomainNameLen : 0x001e (30) DomainNameMaxLen : 0x001e (30) DomainName : * DomainName : 'DESKTOP-U7U24GG' UserNameLen : 0x0008 (8) UserNameMaxLen : 0x0008 (8) UserName : * UserName : 'test' WorkstationLen : 0x001e (30) WorkstationMaxLen : 0x001e (30) Workstation : * Workstation : 'DESKTOP-U7U24GG' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [0000] 9B CE 9A 5E 87 10 C7 6C EE 0C FC 55 83 68 38 52 ...^...l ...U.h8R NegotiateFlags : 0xe2888215 (3800597013) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (6) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1) ProductBuild : 0x1db1 (7601) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2017/03/08 10:29:53.393219, 3, pid=21556, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:452(ntlmssp_server_preauth) Got user=[test] domain=[DESKTOP-U7U24GG] workstation=[DESKTOP-U7U24GG] len1=24 len2=316 [2017/03/08 10:29:53.393337, 10, pid=21556, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:483(ntlmssp_server_preauth) [2017/03/08 10:29:53.393397, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &v2_resp: struct NTLMv2_RESPONSE Response : ec7020cdfec6a3b8d8c326fdfb0a19ff Challenge: struct NTLMv2_CLIENT_CHALLENGE RespType : 0x01 (1) HiRespType : 0x01 (1) Reserved1 : 0x0000 (0) Reserved2 : 0x00000000 (0) TimeStamp : Mi Mär 8 10:29:53 2017 CET ChallengeFromClient : 142fe1302f84d8f8 Reserved3 : 0x00000000 (0) AvPairs: struct AV_PAIR_LIST count : 0x0000000a (10) pair: ARRAY(10) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x000e (14) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LTBTEST' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0010 (16) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'UCS-1950' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0020 (32) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'ltbtest.intranet' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x0032 (50) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'ucs-1950.ltbtest.intranet' pair: struct AV_PAIR AvId : MsvAvTimestamp (0x7) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x7) AvTimestamp : Mi Mär 8 10:29:53 2017 CET pair: struct AV_PAIR AvId : MsvAvFlags (0x6) AvLen : 0x0004 (4) Value : union ntlmssp_AvValue(case 0x6) AvFlags : 0x00000002 (2) 0: NTLMSSP_AVFLAG_CONSTRAINTED_ACCOUNT 1: NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE 0: NTLMSSP_AVFLAG_TARGET_SPN_FROM_UNTRUSTED_SOURCE pair: struct AV_PAIR AvId : MsvAvSingleHost (0x8) AvLen : 0x0030 (48) Value : union ntlmssp_AvValue(case 0x8) AvSingleHost: struct ntlmssp_SingleHostData Size : 0x00000030 (48) Z4 : 0x00000000 (0) token_info: struct LSAP_TOKEN_INFO_INTEGRITY Flags : 0x00000001 (1) TokenIL : 0x00002000 (8192) MachineId : 50cf6ea77cf3ef773f87760b8dd437bb64cca74f96bfdeba0dfc3ec6135246dc remaining : DATA_BLOB length=0 pair: struct AV_PAIR AvId : MsvChannelBindings (0xA) AvLen : 0x0010 (16) Value : union ntlmssp_AvValue(case 0xA) ChannelBindings : 00000000000000000000000000000000 pair: struct AV_PAIR AvId : MsvAvTargetName (0x9) AvLen : 0x0024 (36) Value : union ntlmssp_AvValue(case 0x9) AvTargetName : 'cifs/10.200.42.176' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2017/03/08 10:29:53.396515, 3, pid=21556, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3739(lp_load_ex) lp_load_ex: refreshing parameters [2017/03/08 10:29:53.396617, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1312(free_param_opts) Freeing parametrics: [2017/03/08 10:29:53.396832, 3, pid=21556, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:543(init_globals) Initialising global parameters [2017/03/08 10:29:53.397061, 3, pid=21556, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2668(lp_do_section) Processing section "[global]" doing parameter debug level = 10 [2017/03/08 10:29:53.397212, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/util/debug.c:642(debug_dump_status) INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10 passdb: 10 sam: 10 auth: 10 winbind: 10 vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 scavenger: 10 dns: 10 ldb: 10 tevent: 10 doing parameter logging = file doing parameter max log size = 0 doing parameter max open files = 32808 doing parameter server string = %h univention corporate server doing parameter ntlm auth = yes doing parameter machine password timeout = 0 doing parameter acl allow execute always = True doing parameter bind interfaces only = yes doing parameter interfaces = lo eth0 doing parameter netbios name = ucs-1950 doing parameter ldap suffix = dc=ltbtest,dc=intranet doing parameter ldap admin dn = "cn=ucs-1950,cn=memberserver,cn=computers,dc=ltbtest,dc=intranet" doing parameter ldap ssl = start tls doing parameter passdb expand explicit = no doing parameter ldap idmap suffix = cn=idmap,cn=univention doing parameter idmap config * : backend = ldap doing parameter idmap config * : range = 55000-64000 doing parameter idmap config * : ldap_url = ldap://ucs-7437.ltbtest.intranet:7389 doing parameter idmap config * : ldap_user_dn = cn=ucs-1950,cn=memberserver,cn=computers,dc=ltbtest,dc=intranet doing parameter idmap config LTBTEST : backend = nss doing parameter idmap config LTBTEST : range = 1000-54999 doing parameter winbind max clients = 500 doing parameter winbind nested groups = no doing parameter winbind enum users = yes doing parameter winbind enum groups = yes doing parameter winbind separator = + doing parameter template shell = /bin/bash doing parameter template homedir = /home/%D-%U doing parameter pam password change = no doing parameter unix password sync = no doing parameter passwd chat = *New*password* %n\n *Re-enter*new*password* %n\n *password*changed* doing parameter passwd chat timeout = 60 doing parameter client use spnego = yes doing parameter obey pam restrictions = yes doing parameter encrypt passwords = yes doing parameter spoolss: architecture = Windows x64 doing parameter security = ads doing parameter realm = LTBTEST.INTRANET doing parameter domain logons = no doing parameter domain master = no doing parameter preferred master = no doing parameter local master = no doing parameter os level = 65 doing parameter wins support = no doing parameter workgroup = LTBTEST doing parameter oplocks = yes doing parameter kernel oplocks = yes doing parameter large readwrite = yes doing parameter deadtime = 15 doing parameter read raw = yes doing parameter write raw = yes doing parameter max xmit = 65535 doing parameter getwd cache = yes doing parameter wide links = no doing parameter store dos attributes = yes doing parameter preserve case = yes doing parameter short preserve case = yes doing parameter time server = yes doing parameter host msdfs = no doing parameter msdfs root = no doing parameter guest account = nobody doing parameter map to guest = Bad User doing parameter admin users = administrator join-backup doing parameter set quota command = /usr/sbin/univention-setquota doing parameter check password script = /usr/share/univention-samba/password_check %u doing parameter usershare max shares = 0 doing parameter include = /etc/samba/base.conf [2017/03/08 10:29:53.402059, 2, pid=21556, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[homes]" doing parameter comment = Heimatverzeichnisse doing parameter browsable = no doing parameter read only = no doing parameter create mask = 0700 doing parameter directory mask = 0700 doing parameter vfs objects = acl_xattr [2017/03/08 10:29:53.402697, 2, pid=21556, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[printers]" doing parameter comment = Drucker doing parameter browseable = no doing parameter path = /tmp doing parameter printable = yes doing parameter public = no doing parameter writable = no doing parameter create mode = 0700 [2017/03/08 10:29:53.403154, 2, pid=21556, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[print$]" doing parameter comment = Printer Drivers doing parameter path = /var/lib/samba/drivers doing parameter browseable = yes doing parameter guest ok = no doing parameter read only = no doing parameter write list = root, Administrator, @Printer-Admins doing parameter include = /etc/samba/shares.conf doing parameter include = /etc/samba/shares.conf.d/test_forceuser [2017/03/08 10:29:53.403755, 2, pid=21556, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[test_forceuser]" doing parameter path = /mnt/shares/bmm/test1 doing parameter vfs objects = acl_xattr doing parameter msdfs root = no doing parameter writeable = yes doing parameter browseable = yes doing parameter public = no doing parameter dos filemode = no doing parameter hide unreadable = no doing parameter create mode = 0744 doing parameter directory mode = 0755 doing parameter force create mode = 00 doing parameter force directory mode = 00 doing parameter locking = 1 doing parameter blocking locks = 1 doing parameter strict locking = Auto doing parameter oplocks = 1 doing parameter level2 oplocks = 1 doing parameter fake oplocks = 0 doing parameter csc policy = manual doing parameter force user = sruda doing parameter force group = bmm doing parameter nt acl support = 1 doing parameter inherit acls = 1 doing parameter inherit owner = no doing parameter inherit permissions = no doing parameter include = /etc/samba/local.conf [2017/03/08 10:29:53.405334, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3780(lp_load_ex) pm_process() returned Yes [2017/03/08 10:29:53.405602, 3, pid=21556, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1585(lp_add_ipc) adding IPC service [2017/03/08 10:29:53.405794, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:117(make_user_info_map) Mapping user [DESKTOP-U7U24GG]\[test] from workstation [DESKTOP-U7U24GG] [2017/03/08 10:29:53.406266, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:139(make_user_info_map) Mapped domain from [DESKTOP-U7U24GG] to [UCS-1950] for user [test] from workstation [DESKTOP-U7U24GG] [2017/03/08 10:29:53.406379, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:62(make_user_info) attempting to make a user_info for test (test) [2017/03/08 10:29:53.406473, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:70(make_user_info) making strings for test's user_info struct [2017/03/08 10:29:53.406569, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:108(make_user_info) making blobs for test's user_info struct [2017/03/08 10:29:53.406664, 10, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:159(make_user_info) made a user_info for test (test) [2017/03/08 10:29:53.406758, 3, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:178(auth_check_ntlm_password) check_ntlm_password: Checking password for unmapped user [DESKTOP-U7U24GG]\[test]@[DESKTOP-U7U24GG] with the new password interface [2017/03/08 10:29:53.406854, 3, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:181(auth_check_ntlm_password) check_ntlm_password: mapped user is: [UCS-1950]\[test]@[DESKTOP-U7U24GG] [2017/03/08 10:29:53.406947, 10, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:190(auth_check_ntlm_password) check_ntlm_password: auth_context challenge created by random [2017/03/08 10:29:53.407038, 10, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:192(auth_check_ntlm_password) challenge is: [2017/03/08 10:29:53.407128, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] C9 CD 79 30 00 6C B5 C0 ..y0.l.. [2017/03/08 10:29:53.407236, 10, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_builtin.c:41(check_guest_security) Check auth for: [test] [2017/03/08 10:29:53.407328, 10, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:233(auth_check_ntlm_password) check_ntlm_password: guest had nothing to say [2017/03/08 10:29:53.407424, 10, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:75(auth_samstrict_auth) Check auth for: [test] [2017/03/08 10:29:53.407517, 8, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1239(is_myname) is_myname("UCS-1950") returns 1 [2017/03/08 10:29:53.407617, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.407724, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:53.407817, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.407910, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.408000, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.408168, 5, pid=21556, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:600(tdbsam_getsampwnam) pdb_getsampwnam (TDB): error fetching database. Key: USER_test [2017/03/08 10:29:53.408310, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.408426, 3, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/check_samsec.c:400(check_sam_security) check_sam_security: Couldn't find user 'test' in passdb. [2017/03/08 10:29:53.408522, 5, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:252(auth_check_ntlm_password) check_ntlm_password: sam authentication for user [test] FAILED with error NT_STATUS_NO_SUCH_USER [2017/03/08 10:29:53.408622, 10, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_winbind.c:50(check_winbind_security) Check auth for: [test] [2017/03/08 10:29:53.408717, 3, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_winbind.c:60(check_winbind_security) check_winbind_security: Not using winbind, requested domain [UCS-1950] was for this SAM. [2017/03/08 10:29:53.408879, 10, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:233(auth_check_ntlm_password) check_ntlm_password: winbind had nothing to say [2017/03/08 10:29:53.408976, 2, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:315(auth_check_ntlm_password) check_ntlm_password: Authentication for user [test] -> [test] FAILED with error NT_STATUS_NO_SUCH_USER [2017/03/08 10:29:53.409073, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:188(auth3_check_password) Checking NTLMSSP password for DESKTOP-U7U24GG\test failed: NT_STATUS_NO_SUCH_USER [2017/03/08 10:29:53.409169, 3, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:1607(do_map_to_guest_server_info) No such user test [DESKTOP-U7U24GG] - using guest account [2017/03/08 10:29:53.409379, 10, pid=21556, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:874(ntlmssp_server_postauth) ntlmssp_server_auth: Failed to create unmodified session key. [2017/03/08 10:29:53.409481, 5, pid=21556, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:891(ntlmssp_server_postauth) server session key is invalid (len == 0), cannot do KEY_EXCH! [2017/03/08 10:29:53.409589, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.409689, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:53.409782, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.409874, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.409966, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.410118, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.410262, 6, pid=21556, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/local.conf -> /etc/samba/local.conf last mod_time: Wed Mar 8 08:59:21 2017 file /etc/samba/shares.conf.d/test_forceuser -> /etc/samba/shares.conf.d/test_forceuser last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Wed Mar 8 10:28:35 2017 file /etc/samba/base.conf -> /etc/samba/base.conf last mod_time: Wed Mar 8 09:02:11 2017 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Mar 8 10:28:18 2017 [2017/03/08 10:29:53.410844, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:53.410941, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2: 3: [2017/03/08 10:29:53.411043, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0E1F79A3 [2017/03/08 10:29:53.411143, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118616500 [2017/03/08 10:29:53.411285, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2017/03/08 10:29:53.411349, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key '0E1F79A3' stored [2017/03/08 10:29:53.411448, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000005 (5) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x0e1f79a3 (236943779) session_wire_id : 0x000000000e1f79a3 (236943779) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : Mi Mär 8 10:29:53 2017 CET auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x00000009 (9) sids: ARRAY(9) sids : S-1-5-21-232158225-1150262950-2424647211-501 sids : S-1-5-21-232158225-1150262950-2424647211-514 sids : S-1-22-2-65534 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-32-546 sids : S-1-22-1-65534 sids : S-1-22-2-55000 sids : S-1-22-2-55001 privilege_mask : 0x0000000000000000 (0) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 0: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT 0: SEC_PRIV_BACKUP_BIT 0: SEC_PRIV_RESTORE_BIT 0: SEC_PRIV_TAKE_OWNERSHIP_BIT 0: SEC_PRIV_INCREASE_QUOTA_BIT 0: SEC_PRIV_SECURITY_BIT 0: SEC_PRIV_LOAD_DRIVER_BIT 0: SEC_PRIV_SYSTEM_PROFILE_BIT 0: SEC_PRIV_SYSTEMTIME_BIT 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 0: SEC_PRIV_CREATE_PAGEFILE_BIT 0: SEC_PRIV_SHUTDOWN_BIT 0: SEC_PRIV_DEBUG_BIT 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 0: SEC_PRIV_CHANGE_NOTIFY_BIT 0: SEC_PRIV_UNDOCK_BIT 0: SEC_PRIV_ENABLE_DELEGATION_BIT 0: SEC_PRIV_MANAGE_VOLUME_BIT 0: SEC_PRIV_IMPERSONATE_BIT 0: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x000000000000fffe (65534) gid : 0x000000000000fffe (65534) ngroups : 0x00000003 (3) groups: ARRAY(3) groups : 0x000000000000fffe (65534) groups : 0x000000000000d6d8 (55000) groups : 0x000000000000d6d9 (55001) info : * info: struct auth_user_info account_name : * account_name : 'nobody' user_principal_name : NULL user_principal_constructed: 0x00 (0) domain_name : * domain_name : 'UCS-1950' dns_domain_name : NULL full_name : NULL logon_script : NULL profile_path : NULL home_directory : NULL home_drive : NULL logon_server : NULL last_logon : NTTIME(0) last_logoff : NTTIME(0) acct_expiry : NTTIME(0) last_password_change : NTTIME(0) allow_password_change : NTTIME(0) force_password_change : NTTIME(0) logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000000 (0) authenticated : 0x00 (0) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'nobody' sanitized_username : * sanitized_username : 'test' torture : NULL credentials : NULL connection_dialect : 0x0210 (528) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49218' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000001 (1) connection : * encryption_cipher : 0x0000 (0) [2017/03/08 10:29:53.417807, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:29:53.417906, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:53.418004, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0E1F79A3 [2017/03/08 10:29:53.418101, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1405(smbXsrv_session_update) [2017/03/08 10:29:53.418158, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1413(smbXsrv_session_update) smbXsrv_session_update: global_id (0x0e1f79a3) stored [2017/03/08 10:29:53.418251, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x0e1f79a3 (236943779) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x0e1f79a3 (236943779) session_wire_id : 0x000000000e1f79a3 (236943779) creation_time : Mi Mär 8 10:29:53 2017 CET expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : Mi Mär 8 10:29:53 2017 CET auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x00000009 (9) sids: ARRAY(9) sids : S-1-5-21-232158225-1150262950-2424647211-501 sids : S-1-5-21-232158225-1150262950-2424647211-514 sids : S-1-22-2-65534 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-32-546 sids : S-1-22-1-65534 sids : S-1-22-2-55000 sids : S-1-22-2-55001 privilege_mask : 0x0000000000000000 (0) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 0: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT 0: SEC_PRIV_BACKUP_BIT 0: SEC_PRIV_RESTORE_BIT 0: SEC_PRIV_TAKE_OWNERSHIP_BIT 0: SEC_PRIV_INCREASE_QUOTA_BIT 0: SEC_PRIV_SECURITY_BIT 0: SEC_PRIV_LOAD_DRIVER_BIT 0: SEC_PRIV_SYSTEM_PROFILE_BIT 0: SEC_PRIV_SYSTEMTIME_BIT 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 0: SEC_PRIV_CREATE_PAGEFILE_BIT 0: SEC_PRIV_SHUTDOWN_BIT 0: SEC_PRIV_DEBUG_BIT 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 0: SEC_PRIV_CHANGE_NOTIFY_BIT 0: SEC_PRIV_UNDOCK_BIT 0: SEC_PRIV_ENABLE_DELEGATION_BIT 0: SEC_PRIV_MANAGE_VOLUME_BIT 0: SEC_PRIV_IMPERSONATE_BIT 0: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x000000000000fffe (65534) gid : 0x000000000000fffe (65534) ngroups : 0x00000003 (3) groups: ARRAY(3) groups : 0x000000000000fffe (65534) groups : 0x000000000000d6d8 (55000) groups : 0x000000000000d6d9 (55001) info : * info: struct auth_user_info account_name : * account_name : 'nobody' user_principal_name : NULL user_principal_constructed: 0x00 (0) domain_name : * domain_name : 'UCS-1950' dns_domain_name : NULL full_name : NULL logon_script : NULL profile_path : NULL home_directory : NULL home_drive : NULL logon_server : NULL last_logon : NTTIME(0) last_logoff : NTTIME(0) acct_expiry : NTTIME(0) last_password_change : NTTIME(0) allow_password_change : NTTIME(0) force_password_change : NTTIME(0) logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000000 (0) authenticated : 0x00 (0) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'nobody' sanitized_username : * sanitized_username : 'test' torture : NULL credentials : NULL connection_dialect : 0x0210 (528) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) local_address : 'ipv4:10.200.42.176:445' remote_address : 'ipv4:10.200.42.172:49218' remote_name : '10.200.42.172' auth_session_info_seqnum : 0x00000001 (1) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_OK idle_time : Mi Mär 8 10:29:53 2017 CET nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : * tcon_table : * pending_auth : NULL [2017/03/08 10:29:53.425178, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[8] dyn[yes:9] at ../source3/smbd/smb2_sesssetup.c:171 [2017/03/08 10:29:53.425335, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 31, charge 1, granted 31, current possible/max 512/512, total granted/max/low/range 31/8192/3/31 [2017/03/08 10:29:53.426633, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:53.426808, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 3 (position 3) from bitmap [2017/03/08 10:29:53.426954, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 3 [2017/03/08 10:29:53.427107, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.427232, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.427325, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.427462, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:53.427586, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\IPC$] share[IPC$] [2017/03/08 10:29:53.427725, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:53.427828, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:53.427929, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 9916F436 [2017/03/08 10:29:53.428033, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x56311860b2e0 [2017/03/08 10:29:53.428174, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:53.428239, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '9916F436' stored [2017/03/08 10:29:53.428337, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x9916f436 (2568418358) tcon_wire_id : 0x9916f436 (2568418358) server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) creation_time : Mi Mär 8 10:29:53 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:53.429793, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 9916F436 [2017/03/08 10:29:53.429893, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:53.429991, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:53.430087, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:53.430151, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0x9916f436) stored [2017/03/08 10:29:53.430245, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x9916f436 (2568418358) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x9916f436 (2568418358) tcon_wire_id : 0x9916f436 (2568418358) server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) creation_time : Mi Mär 8 10:29:53 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:53 2017 CET compat : NULL [2017/03/08 10:29:53.431725, 3, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:53.431876, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:164(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /tmp [2017/03/08 10:29:53.431989, 3, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:661(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2017/03/08 10:29:53.432092, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:221(user_ok_token) user_ok_token: share IPC$ is ok for unix user nobody [2017/03/08 10:29:53.432193, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:268(is_share_read_only_for_token) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2017/03/08 10:29:53.432321, 10, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/access_check.c:337(se_file_access_check) se_file_access_check: MAX desired = 0x2000000 mapped to 0x1f01ff [2017/03/08 10:29:53.432442, 3, pid=21556, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:113(vfs_init_default) Initialising default vfs hooks [2017/03/08 10:29:53.432546, 10, pid=21556, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ [2017/03/08 10:29:53.432642, 5, pid=21556, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs) Successfully added vfs backend '/[Default VFS]/' [2017/03/08 10:29:53.432786, 10, pid=21556, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) vfs_find_backend_entry called for posixacl [2017/03/08 10:29:53.432894, 5, pid=21556, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs) Successfully added vfs backend 'posixacl' [2017/03/08 10:29:53.432987, 3, pid=21556, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:139(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2017/03/08 10:29:53.433284, 10, pid=21556, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ Successfully loaded vfs module [/[Default VFS]/] with the new modules system [2017/03/08 10:29:53.433647, 3, pid=21556, effective(0, 0), real(0, 0), class=locking] ../source3/smbd/oplock_linux.c:251(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2017/03/08 10:29:53.433816, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:164(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /tmp [2017/03/08 10:29:53.433969, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:221(user_ok_token) user_ok_token: share IPC$ is ok for unix user nobody [2017/03/08 10:29:53.434127, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:268(is_share_read_only_for_token) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2017/03/08 10:29:53.434301, 10, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/access_check.c:337(se_file_access_check) se_file_access_check: MAX desired = 0x2000000 mapped to 0x1f01ff [2017/03/08 10:29:53.434462, 3, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/dom_sid.c:209(dom_sid_parse_endp) string_to_sid: SID administrator is not in a valid format [2017/03/08 10:29:53.434582, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:77(lookup_name) lookup_name: UCS-1950\administrator => domain=[UCS-1950], name=[administrator] [2017/03/08 10:29:53.434680, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:78(lookup_name) lookup_name: flags = 0x073 [2017/03/08 10:29:53.434779, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.434876, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:53.434968, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.435061, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.435150, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.435295, 5, pid=21556, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:600(tdbsam_getsampwnam) pdb_getsampwnam (TDB): error fetching database. Key: USER_administrator [2017/03/08 10:29:53.435434, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.435533, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.435628, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:53.435720, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.435822, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.435913, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.436066, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.436171, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:77(lookup_name) lookup_name: Unix User\administrator => domain=[Unix User], name=[administrator] [2017/03/08 10:29:53.436265, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:78(lookup_name) lookup_name: flags = 0x073 [2017/03/08 10:29:53.437199, 3, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/dom_sid.c:209(dom_sid_parse_endp) string_to_sid: SID join-backup is not in a valid format [2017/03/08 10:29:53.437378, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:77(lookup_name) lookup_name: UCS-1950\join-backup => domain=[UCS-1950], name=[join-backup] [2017/03/08 10:29:53.437531, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:78(lookup_name) lookup_name: flags = 0x073 [2017/03/08 10:29:53.437687, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.437792, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:53.437887, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.437980, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.438071, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.438216, 5, pid=21556, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:600(tdbsam_getsampwnam) pdb_getsampwnam (TDB): error fetching database. Key: USER_join-backup [2017/03/08 10:29:53.438357, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.438457, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.438553, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:29:53.438646, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:29:53.438739, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.438830, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.438977, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.439082, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:77(lookup_name) lookup_name: Unix User\join-backup => domain=[Unix User], name=[join-backup] [2017/03/08 10:29:53.439177, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:78(lookup_name) lookup_name: flags = 0x073 [2017/03/08 10:29:53.439755, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.439883, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (9): SID[ 0]: S-1-5-21-232158225-1150262950-2424647211-501 SID[ 1]: S-1-5-21-232158225-1150262950-2424647211-514 SID[ 2]: S-1-22-2-65534 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-65534 SID[ 7]: S-1-22-2-55000 SID[ 8]: S-1-22-2-55001 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:29:53.440437, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 65534 Primary group is 65534 and contains 3 supplementary groups Group[ 0]: 65534 Group[ 1]: 55000 Group[ 2]: 55001 [2017/03/08 10:29:53.440697, 5, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(65534,65534), gid=(0,65534) [2017/03/08 10:29:53.440848, 4, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.440948, 5, pid=21556, effective(65534, 65534), real(65534, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.441042, 5, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.441183, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:53.441290, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:164(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /tmp [2017/03/08 10:29:53.441408, 10, pid=21556, effective(0, 0), real(0, 0), class=vfs] ../source3/modules/vfs_default.c:185(vfswrap_fs_capabilities) vfswrap_fs_capabilities: timestamp resolution of sec available on share IPC$, directory /tmp [2017/03/08 10:29:53.441512, 3, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:907(make_connection_snum) desktop-u7u24gg (ipv4:10.200.42.172:49218) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 21556) [2017/03/08 10:29:53.441630, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:53.441728, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:53.441827, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 9916F436 [2017/03/08 10:29:53.441925, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5631185f5f20 [2017/03/08 10:29:53.442034, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:53.442094, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '9916F436' stored [2017/03/08 10:29:53.442191, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000002 (2) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x9916f436 (2568418358) tcon_wire_id : 0x9916f436 (2568418358) server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) creation_time : Mi Mär 8 10:29:53 2017 CET share_name : 'IPC$' encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x0e1f79a3 (236943779) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:53.443354, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 9916F436 [2017/03/08 10:29:53.443452, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:53.443548, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:53.443642, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:876(smbXsrv_tcon_update) [2017/03/08 10:29:53.443696, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:884(smbXsrv_tcon_update) smbXsrv_tcon_update: global_id (0x9916f436) stored [2017/03/08 10:29:53.443789, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x9916f436 (2568418358) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x9916f436 (2568418358) tcon_wire_id : 0x9916f436 (2568418358) server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) creation_time : Mi Mär 8 10:29:53 2017 CET share_name : 'IPC$' encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x0e1f79a3 (236943779) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_OK idle_time : Mi Mär 8 10:29:53 2017 CET compat : * [2017/03/08 10:29:53.445828, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[16] dyn[no:0] at ../source3/smbd/smb2_tcon.c:170 [2017/03/08 10:29:53.445935, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/4/31 [2017/03/08 10:29:53.447047, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:53.447177, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 4 (position 4) from bitmap [2017/03/08 10:29:53.447274, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 4 [2017/03/08 10:29:53.447380, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.447481, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (9): SID[ 0]: S-1-5-21-232158225-1150262950-2424647211-501 SID[ 1]: S-1-5-21-232158225-1150262950-2424647211-514 SID[ 2]: S-1-22-2-65534 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-65534 SID[ 7]: S-1-22-2-55000 SID[ 8]: S-1-22-2-55001 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:29:53.448013, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 65534 Primary group is 65534 and contains 3 supplementary groups Group[ 0]: 65534 Group[ 1]: 55000 Group[ 2]: 55001 [2017/03/08 10:29:53.448264, 5, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(65534,65534), gid=(0,65534) [2017/03/08 10:29:53.448507, 4, pid=21556, effective(65534, 65534), real(65534, 0), class=vfs] ../source3/smbd/vfs.c:874(vfs_ChDir) vfs_ChDir to /tmp [2017/03/08 10:29:53.448684, 4, pid=21556, effective(65534, 65534), real(65534, 0), class=vfs] ../source3/smbd/vfs.c:885(vfs_ChDir) vfs_ChDir got /tmp [2017/03/08 10:29:53.448942, 5, pid=21556, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:53.449098, 10, pid=21556, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:53.449234, 10, pid=21556, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 9916F436 [2017/03/08 10:29:53.449338, 10, pid=21556, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5631185f5f20 [2017/03/08 10:29:53.449453, 10, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:53.449514, 10, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '9916F436' stored [2017/03/08 10:29:53.449613, 1, pid=21556, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000003 (3) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x9916f436 (2568418358) tcon_wire_id : 0x9916f436 (2568418358) server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) creation_time : Mi Mär 8 10:29:53 2017 CET share_name : 'IPC$' encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x0e1f79a3 (236943779) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:53.450774, 10, pid=21556, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 9916F436 [2017/03/08 10:29:53.450874, 5, pid=21556, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:53.450972, 10, pid=21556, effective(65534, 65534), real(65534, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:53.451068, 10, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smbXsrv_tcon.c:876(smbXsrv_tcon_update) [2017/03/08 10:29:53.451123, 10, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smbXsrv_tcon.c:884(smbXsrv_tcon_update) smbXsrv_tcon_update: global_id (0x9916f436) stored [2017/03/08 10:29:53.451218, 1, pid=21556, effective(65534, 65534), real(65534, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x9916f436 (2568418358) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x9916f436 (2568418358) tcon_wire_id : 0x9916f436 (2568418358) server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) creation_time : Mi Mär 8 10:29:53 2017 CET share_name : 'IPC$' encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x0e1f79a3 (236943779) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_OK idle_time : Mi Mär 8 10:29:53 2017 CET compat : * [2017/03/08 10:29:53.452729, 10, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:1942(smbd_smb2_request_verify_creditcharge) mid 4, CreditCharge: 1, NeededCharge: 1 [2017/03/08 10:29:53.452869, 10, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) smbd_smb2_ioctl: ctl_code[0x00060194] , fnum [fsp is NULL] [2017/03/08 10:29:53.452976, 10, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 0 status NT_STATUS_FS_DRIVER_REQUIRED [2017/03/08 10:29:53.453093, 3, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] || at ../source3/smbd/smb2_ioctl.c:309 [2017/03/08 10:29:53.453197, 10, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:53.453301, 10, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/5/31 [2017/03/08 10:29:53.454436, 10, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:53.454675, 10, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 5 (position 5) from bitmap [2017/03/08 10:29:53.454832, 10, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 5 [2017/03/08 10:29:53.454989, 4, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.455144, 5, pid=21556, effective(65534, 65534), real(65534, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.455293, 5, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.455506, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:53.455656, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\test_forceuser] share[test_forceuser] [2017/03/08 10:29:53.455787, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:53.455888, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:53.455987, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key E6B24AAF [2017/03/08 10:29:53.456095, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x56311861a940 [2017/03/08 10:29:53.456213, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:53.456275, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key 'E6B24AAF' stored [2017/03/08 10:29:53.456396, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0xe6b24aaf (3870444207) tcon_wire_id : 0xe6b24aaf (3870444207) server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) creation_time : Mi Mär 8 10:29:53 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:53.457809, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key E6B24AAF [2017/03/08 10:29:53.457946, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:53.458045, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:53.458142, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:53.458196, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0xe6b24aaf) stored [2017/03/08 10:29:53.458290, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0xe6b24aaf (3870444207) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0xe6b24aaf (3870444207) tcon_wire_id : 0xe6b24aaf (3870444207) server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) creation_time : Mi Mär 8 10:29:53 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:53 2017 CET compat : NULL [2017/03/08 10:29:53.459804, 3, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:53.459906, 2, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:416(create_connection_session_info) guest user (from session setup) not permitted to access this share (test_forceuser) [2017/03/08 10:29:53.460011, 1, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:599(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED [2017/03/08 10:29:53.460109, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:53.460204, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:53.460302, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key E6B24AAF [2017/03/08 10:29:53.460440, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118618060 [2017/03/08 10:29:53.460551, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key E6B24AAF [2017/03/08 10:29:53.460650, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:53.460746, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:53.460890, 3, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_tcon.c:135 [2017/03/08 10:29:53.460995, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:53.461095, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/6/31 [2017/03/08 10:29:53.462055, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:29:53.462200, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 6 (position 6) from bitmap [2017/03/08 10:29:53.462309, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 6 [2017/03/08 10:29:53.462408, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:29:53.462505, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:29:53.462596, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:29:53.462732, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:29:53.462833, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) smbd_smb2_tree_connect: path[\\10.200.42.176\test_forceuser] share[test_forceuser] [2017/03/08 10:29:53.462996, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:53.463267, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:53.463427, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key E49A3E3F [2017/03/08 10:29:53.463580, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5631185f5f90 [2017/03/08 10:29:53.463751, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2017/03/08 10:29:53.463841, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key 'E49A3E3F' stored [2017/03/08 10:29:53.463976, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0xe49a3e3f (3835313727) tcon_wire_id : 0xe49a3e3f (3835313727) server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) creation_time : Mi Mär 8 10:29:53 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2017/03/08 10:29:53.465189, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key E49A3E3F [2017/03/08 10:29:53.465289, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:53.465395, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:53.465491, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2017/03/08 10:29:53.465544, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0xe49a3e3f) stored [2017/03/08 10:29:53.465636, 1, pid=21556, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0xe49a3e3f (3835313727) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0xe49a3e3f (3835313727) tcon_wire_id : 0xe49a3e3f (3835313727) server_id: struct server_id pid : 0x0000000000005434 (21556) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x7f84d7169a15ea0c (9188705631817034252) creation_time : Mi Mär 8 10:29:53 2017 CET share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Mi Mär 8 10:29:53 2017 CET compat : NULL [2017/03/08 10:29:53.467232, 3, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.200.42.172 (10.200.42.172) [2017/03/08 10:29:53.467381, 2, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:416(create_connection_session_info) guest user (from session setup) not permitted to access this share (test_forceuser) [2017/03/08 10:29:53.467540, 1, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:599(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED [2017/03/08 10:29:53.467674, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:53.467772, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:29:53.467870, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key E49A3E3F [2017/03/08 10:29:53.467967, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118617fd0 [2017/03/08 10:29:53.468089, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key E49A3E3F [2017/03/08 10:29:53.468188, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:29:53.468283, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:29:53.468400, 3, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_tcon.c:135 [2017/03/08 10:29:53.468505, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3145 [2017/03/08 10:29:53.468604, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/7/31 [2017/03/08 10:30:07.773740, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:30:07.773864, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 7 (position 7) from bitmap [2017/03/08 10:30:07.773887, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_TDIS] mid = 7 [2017/03/08 10:30:07.773933, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:07.773955, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (9): SID[ 0]: S-1-5-21-232158225-1150262950-2424647211-501 SID[ 1]: S-1-5-21-232158225-1150262950-2424647211-514 SID[ 2]: S-1-22-2-65534 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-65534 SID[ 7]: S-1-22-2-55000 SID[ 8]: S-1-22-2-55001 Privileges (0x 0): Rights (0x 0): [2017/03/08 10:30:07.774030, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 65534 Primary group is 65534 and contains 3 supplementary groups Group[ 0]: 65534 Group[ 1]: 55000 Group[ 2]: 55001 [2017/03/08 10:30:07.774087, 5, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(65534,65534), gid=(0,65534) [2017/03/08 10:30:07.774113, 4, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:07.774129, 5, pid=21556, effective(65534, 65534), real(65534, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:07.774143, 5, pid=21556, effective(65534, 65534), real(65534, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:07.774168, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 4 req->in.vector[4].iov_len = 0 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:30:07.774299, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:07.774319, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:07.774332, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:07.774353, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:30:07.774370, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:30:07.774386, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_tcon_global.tdb 2: 3: [2017/03/08 10:30:07.774403, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 9916F436 [2017/03/08 10:30:07.774438, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5631185f5f20 [2017/03/08 10:30:07.774464, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 9916F436 [2017/03/08 10:30:07.774480, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_tcon_global.tdb [2017/03/08 10:30:07.774495, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:30:07.774514, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:07.774529, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:07.774542, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:07.774561, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:30:07.774576, 3, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:1183(close_cnum) desktop-u7u24gg (ipv4:10.200.42.172:49218) closed connection to service IPC$ [2017/03/08 10:30:07.774603, 4, pid=21556, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:874(vfs_ChDir) vfs_ChDir to / [2017/03/08 10:30:07.774643, 4, pid=21556, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:885(vfs_ChDir) vfs_ChDir got / [2017/03/08 10:30:07.774661, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:07.774676, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:07.774689, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:07.774708, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:30:07.774737, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[4] dyn[no:0] at ../source3/smbd/smb2_tcon.c:521 [2017/03/08 10:30:07.774769, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/8/31 [2017/03/08 10:30:07.774866, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3848(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2017/03/08 10:30:07.774890, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 8 (position 8) from bitmap [2017/03/08 10:30:07.774905, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2257(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_LOGOFF] mid = 8 [2017/03/08 10:30:07.774921, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:07.774935, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:07.774948, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:07.774970, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 4 req->in.vector[4].iov_len = 0 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2017/03/08 10:30:07.775042, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:30:07.775061, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:30:07.775075, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:30:07.775088, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:07.775101, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:07.775123, 10, pid=21556, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:403(gencache_del) Deleting cache entry (key=[RA/293d4bb6-03dd-11e7-b671-5254001e7776]) [2017/03/08 10:30:07.775158, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:07.775175, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_sesssetup.c:1323(smbd_smb2_logoff_shutdown_done) smbd_smb2_logoff_shutdown_done: Deletion from remote arch cache failed [2017/03/08 10:30:07.775189, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:07.775202, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:07.775215, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:07.775233, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:30:07.775258, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:30:07.775274, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/run/samba/smbXsrv_session_global.tdb 2: 3: [2017/03/08 10:30:07.775292, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0E1F79A3 [2017/03/08 10:30:07.775312, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x563118624490 [2017/03/08 10:30:07.775336, 5, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/run/samba/smbXsrv_session_global.tdb [2017/03/08 10:30:07.775351, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:30:07.775367, 10, pid=21556, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0E1F79A3 [2017/03/08 10:30:07.775391, 4, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:483(smb_pam_start) smb_pam_start: PAM: Init user: nobody [2017/03/08 10:30:07.780803, 4, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:492(smb_pam_start) smb_pam_start: PAM: setting rhost to: 10.200.42.172 [2017/03/08 10:30:07.780859, 4, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:501(smb_pam_start) smb_pam_start: PAM: setting tty [2017/03/08 10:30:07.780874, 4, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:509(smb_pam_start) smb_pam_start: PAM: Init passed for user: nobody [2017/03/08 10:30:07.780887, 4, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:646(smb_internal_pam_session) smb_internal_pam_session: PAM: tty set to: smb/236943779 [2017/03/08 10:30:07.781809, 4, pid=21556, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:465(smb_pam_end) smb_pam_end: PAM: PAM_END OK. [2017/03/08 10:30:07.781853, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2988(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[4] dyn[no:0] at ../source3/smbd/smb2_sesssetup.c:1262 [2017/03/08 10:30:07.781879, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 482/512, total granted/max/low/range 31/8192/9/31 [2017/03/08 10:30:07.782783, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:1069(smbd_server_connection_terminate_ex) smbd_server_connection_terminate_ex: conn[ipv4:10.200.42.172:49218] reason[NT_STATUS_CONNECTION_RESET] at ../source3/smbd/smb2_server.c:3900 [2017/03/08 10:30:07.782843, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:07.782863, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:07.782877, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:07.782905, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:30:07.782922, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:07.782950, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:07.782965, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:07.782984, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:30:07.783000, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:07.783013, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:07.783026, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:07.783044, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:30:07.783062, 4, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:07.783075, 5, pid=21556, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:07.783088, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:07.783106, 5, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:30:07.783151, 10, pid=21556, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2017/03/08 10:30:07.783330, 3, pid=21556, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:246(exit_server_common) Server exit (NT_STATUS_CONNECTION_RESET) [2017/03/08 10:30:07.787208, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2017/03/08 10:30:07.787294, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2017/03/08 10:30:07.787310, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2017/03/08 10:30:07.787326, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:07.787340, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:07.787376, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 21498 [2017/03/08 10:30:07.787426, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:07.787501, 10, pid=21498, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0x314 len 0 (num_fds:0) from 21494 [2017/03/08 10:30:07.787586, 3, pid=21498, effective(0, 0), real(0, 0)] ../source3/lib/util_procid.c:54(pid_to_procid) pid_to_procid: messaging_dgm_get_unique failed: Datei oder Verzeichnis nicht gefunden [2017/03/08 10:30:07.787621, 5, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:30:07.787657, 10, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/run/samba/serverid.tdb 3: [2017/03/08 10:30:07.787679, 10, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 3454000000000000FFFF [2017/03/08 10:30:07.787700, 10, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5631185fe940 [2017/03/08 10:30:07.787724, 10, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 3454000000000000FFFF [2017/03/08 10:30:07.787740, 5, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:30:07.787755, 10, pid=21498, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:30:07.787769, 10, pid=21498, effective(0, 0), real(0, 0)] ../source3/smbd/smbd_cleanupd.c:211(smbd_cleanupd_process_exited) smbd_cleanupd_process_exited: cleaned up pid 21556 [2017/03/08 10:30:14.653172, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:14.653258, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:14.653279, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:14.653317, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:30:14.653339, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:14.653357, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:14.653373, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:14.653397, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:30:14.653416, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:14.653434, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:14.653450, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:14.653474, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:30:14.653494, 4, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:14.653511, 5, pid=21494, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:14.653527, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:14.653551, 5, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:30:14.653579, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:30:14.653623, 10, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/run/samba/serverid.tdb 3: [2017/03/08 10:30:14.653661, 10, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key F653000000000000FFFF [2017/03/08 10:30:14.653710, 10, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x56311860c250 [2017/03/08 10:30:14.653746, 10, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key F653000000000000FFFF [2017/03/08 10:30:14.653768, 5, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/run/samba/serverid.tdb [2017/03/08 10:30:14.653787, 10, pid=21494, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2017/03/08 10:30:14.653849, 10, pid=21494, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2017/03/08 10:30:14.654174, 3, pid=21494, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:246(exit_server_common) Server exit (termination signal) [2017/03/08 10:30:14.654363, 4, pid=21516, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:14.654402, 5, pid=21516, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:14.654421, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:14.654459, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:30:14.654481, 4, pid=21516, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:14.654499, 5, pid=21516, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:14.654515, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:14.654540, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:30:14.654559, 4, pid=21516, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:14.654577, 5, pid=21516, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:14.654593, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:14.654617, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:30:14.654637, 4, pid=21516, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/03/08 10:30:14.654654, 5, pid=21516, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2017/03/08 10:30:14.654702, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2017/03/08 10:30:14.654742, 5, pid=21516, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2017/03/08 10:30:14.654791, 10, pid=21516, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2017/03/08 10:30:14.654973, 3, pid=21516, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:246(exit_server_common) Server exit (termination signal)