Attachment 4416 Details for Bug 27364 – log.smbd von XP logon+logoff von schueler1 gegen DC "single"

log.smbd von XP logon+logoff von schueler1 gegen DC "single"

log.smbd (text/plain), 651.15 KB, created by Arvid Requate on 2012-05-30 16:11:26 CEST

(hide)

Description:

Filename:

MIME Type:

Creator: Arvid Requate

Created: 2012-05-30 16:11:26 CEST

Size: 651.15 KB

patch

obsolete

>[2012/05/29 20:04:18,  0] smbd/server.c:1141(main)
>  smbd version 3.5.11 started.
>  Copyright Andrew Tridgell and the Samba Team 1992-2010
>  doing parameter syslog = 0
>  doing parameter max log size = 1000000
>  doing parameter max open files = 32808
>  doing parameter server string = %h univention corporate server
>  doing parameter netbios name = single
>[2012/05/29 20:04:18.365512,  4] param/loadparm.c:7238(handle_netbios_name)
>  handle_netbios_name: set global_myname to: SINGLE
>  doing parameter passdb backend = ldapsam:"ldap://single.s3i.school:7389"
>  doing parameter auth methods = guest sam winbind
>  doing parameter ldap suffix = dc=s3i,dc=school
>  doing parameter ldap admin dn = "cn=admin,dc=s3i,dc=school"
>  doing parameter ldap ssl = start tls
>  doing parameter passdb expand explicit = no
>  doing parameter idmap backend = ldap:ldap://single.s3i.school:7389
>  doing parameter ldap idmap suffix = cn=idmap,cn=univention
>  doing parameter idmap uid = 55000-64000
>  doing parameter idmap gid = 55000-64000
>  doing parameter idmap alloc backend = ldap
>  doing parameter idmap alloc config : ldap_user_dn = cn=admin,dc=s3i,dc=school
>  doing parameter idmap alloc config : ldap_url = ldap://single.s3i.school:7389
>  doing parameter idmap config S3I : backend = nss
>  doing parameter idmap config S3I : range = 1000-54999
>  doing parameter winbind nested groups = no
>  doing parameter winbind enum users = yes
>  doing parameter winbind enum groups = yes
>  doing parameter winbind separator = +
>  doing parameter template shell = /bin/bash
>  doing parameter template homedir = /home/%D-%U
>  doing parameter pam password change = no
>  doing parameter unix password sync = yes
>  doing parameter passwd program = /usr/share/univention-admin-tools/univention-passwd --binddn "cn=admin,dc=s3i,dc=school" --pwdfile "/etc/ldap.secret" --user "%u"
>  doing parameter passwd chat = *New*password* %n\n *Re-enter*new*password* %n\n *password*changed*
>  doing parameter passwd chat timeout = 60
>  doing parameter use spnego = yes
>  doing parameter client use spnego = yes
>  doing parameter obey pam restrictions = yes
>  doing parameter encrypt passwords = yes
>  doing parameter load printers = yes
>  doing parameter printing = cups
>  doing parameter printcap name = cups
>  doing parameter security = user
>  doing parameter domain logons = yes
>  doing parameter domain master = yes
>  doing parameter preferred master = yes
>  doing parameter local master = yes
>  doing parameter os level = 65
>  doing parameter wins support = yes
>  doing parameter workgroup = S3I
>  doing parameter oplocks = yes
>  doing parameter kernel oplocks = yes
>  doing parameter large readwrite = yes
>  doing parameter deadtime = 15
>  doing parameter read raw = yes
>  doing parameter write raw = yes
>  doing parameter max xmit = 65535
>  doing parameter getwd cache = yes
>  doing parameter wide links = no
>  doing parameter store dos attributes = yes
>  doing parameter logon home = \\single\%U
>  doing parameter logon drive = I:
>  doing parameter logon path = \\single\%U\windows-profiles\%a
>  doing parameter preserve case = yes
>  doing parameter short preserve case = yes
>  doing parameter time server = yes
>  doing parameter host msdfs = no
>  doing parameter msdfs root = no
>  doing parameter guest account = nobody
>  doing parameter map to guest = Bad User
>  doing parameter admin users = administrator join-backup
>  doing parameter set quota command = /usr/sbin/univention-setquota
>  doing parameter check password script = /usr/share/univention-samba/password_check %u
>  doing parameter add user script = /usr/share/univention-admin-tools/univention-adduser "%u"
>  doing parameter delete user script = /usr/share/univention-admin-tools/univention-deluser "%u"
>  doing parameter add group script = /usr/share/univention-admin-tools/univention-addgroup "%g"
>  doing parameter delete group script = /usr/share/univention-admin-tools/univention-delgroup "%g"
>  doing parameter add user to group script = /usr/share/univention-admin-tools/univention-adduser "%u" "%g"
>  doing parameter delete user from group script = /usr/share/univention-admin-tools/univention-deluser "%u" "%g"
>  doing parameter add machine script = /usr/share/univention-admin-tools/univention-addmachine "%u"
>  doing parameter set primary group script = /usr/share/univention-admin-tools/univention-setprimarygroup "%u" "%g"
>  doing parameter include = /etc/samba/base.conf
>[2012/05/29 20:04:18.366390,  3] ../lib/util/params.c:550(pm_process)
>  params.c:pm_process() - Processing configuration file "/etc/samba/base.conf"
>[2012/05/29 20:04:18.366422,  4] param/loadparm.c:9227(lp_load_ex)
>  pm_process() returned Yes
>[2012/05/29 20:04:18.366978,  2] lib/tallocmsg.c:106(register_msg_pool_usage)
>  Registered MSG_REQ_POOL_USAGE
>[2012/05/29 20:04:18.367042,  2] lib/dmallocmsg.c:77(register_dmalloc_msgs)
>  Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
>[2012/05/29 20:04:18.367067,  3] param/loadparm.c:9192(lp_load_ex)
>  lp_load_ex: refreshing parameters
>Initialising global parameters
>rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
>[2012/05/29 20:04:18.367132,  3] ../lib/util/params.c:550(pm_process)
>  params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
>[2012/05/29 20:04:18.367157,  3] param/loadparm.c:7876(do_section)
>  Processing section "[global]"
>  doing parameter debug level = 4
>  doing parameter syslog = 0
>  doing parameter max log size = 1000000
>  doing parameter max open files = 32808
>  doing parameter server string = %h univention corporate server
>  doing parameter netbios name = single
>[2012/05/29 20:04:18.367212,  4] param/loadparm.c:7238(handle_netbios_name)
>  handle_netbios_name: set global_myname to: SINGLE
>  doing parameter passdb backend = ldapsam:"ldap://single.s3i.school:7389"
>  doing parameter auth methods = guest sam winbind
>  doing parameter ldap suffix = dc=s3i,dc=school
>  doing parameter ldap admin dn = "cn=admin,dc=s3i,dc=school"
>  doing parameter ldap ssl = start tls
>  doing parameter passdb expand explicit = no
>  doing parameter idmap backend = ldap:ldap://single.s3i.school:7389
>  doing parameter ldap idmap suffix = cn=idmap,cn=univention
>  doing parameter idmap uid = 55000-64000
>  doing parameter idmap gid = 55000-64000
>  doing parameter idmap alloc backend = ldap
>  doing parameter idmap alloc config : ldap_user_dn = cn=admin,dc=s3i,dc=school
>  doing parameter idmap alloc config : ldap_url = ldap://single.s3i.school:7389
>  doing parameter idmap config S3I : backend = nss
>  doing parameter idmap config S3I : range = 1000-54999
>  doing parameter winbind nested groups = no
>  doing parameter winbind enum users = yes
>  doing parameter winbind enum groups = yes
>  doing parameter winbind separator = +
>  doing parameter template shell = /bin/bash
>  doing parameter template homedir = /home/%D-%U
>  doing parameter pam password change = no
>  doing parameter unix password sync = yes
>  doing parameter passwd program = /usr/share/univention-admin-tools/univention-passwd --binddn "cn=admin,dc=s3i,dc=school" --pwdfile "/etc/ldap.secret" --user "%u"
>  doing parameter passwd chat = *New*password* %n\n *Re-enter*new*password* %n\n *password*changed*
>  doing parameter passwd chat timeout = 60
>  doing parameter use spnego = yes
>  doing parameter client use spnego = yes
>  doing parameter obey pam restrictions = yes
>  doing parameter encrypt passwords = yes
>  doing parameter load printers = yes
>  doing parameter printing = cups
>  doing parameter printcap name = cups
>  doing parameter security = user
>  doing parameter domain logons = yes
>  doing parameter domain master = yes
>  doing parameter preferred master = yes
>  doing parameter local master = yes
>  doing parameter os level = 65
>  doing parameter wins support = yes
>  doing parameter workgroup = S3I
>  doing parameter oplocks = yes
>  doing parameter kernel oplocks = yes
>  doing parameter large readwrite = yes
>  doing parameter deadtime = 15
>  doing parameter read raw = yes
>  doing parameter write raw = yes
>  doing parameter max xmit = 65535
>  doing parameter getwd cache = yes
>  doing parameter wide links = no
>  doing parameter store dos attributes = yes
>  doing parameter logon home = \\single\%U
>  doing parameter logon drive = I:
>  doing parameter logon path = \\single\%U\windows-profiles\%a
>  doing parameter preserve case = yes
>  doing parameter short preserve case = yes
>  doing parameter time server = yes
>  doing parameter host msdfs = no
>  doing parameter msdfs root = no
>  doing parameter guest account = nobody
>  doing parameter map to guest = Bad User
>  doing parameter admin users = administrator join-backup
>  doing parameter set quota command = /usr/sbin/univention-setquota
>  doing parameter check password script = /usr/share/univention-samba/password_check %u
>  doing parameter add user script = /usr/share/univention-admin-tools/univention-adduser "%u"
>  doing parameter delete user script = /usr/share/univention-admin-tools/univention-deluser "%u"
>  doing parameter add group script = /usr/share/univention-admin-tools/univention-addgroup "%g"
>  doing parameter delete group script = /usr/share/univention-admin-tools/univention-delgroup "%g"
>  doing parameter add user to group script = /usr/share/univention-admin-tools/univention-adduser "%u" "%g"
>  doing parameter delete user from group script = /usr/share/univention-admin-tools/univention-deluser "%u" "%g"
>  doing parameter add machine script = /usr/share/univention-admin-tools/univention-addmachine "%u"
>  doing parameter set primary group script = /usr/share/univention-admin-tools/univention-setprimarygroup "%u" "%g"
>  doing parameter include = /etc/samba/base.conf
>[2012/05/29 20:04:18.368032,  3] ../lib/util/params.c:550(pm_process)
>  params.c:pm_process() - Processing configuration file "/etc/samba/base.conf"
>[2012/05/29 20:04:18.368051,  2] param/loadparm.c:7893(do_section)
>  Processing section "[homes]"
>  doing parameter comment = Heimatverzeichnisse
>  doing parameter browsable = no
>  doing parameter read only = no
>  doing parameter create mask = 0700
>  doing parameter directory mask = 0700
>  doing parameter vfs objects = acl_xattr
>[2012/05/29 20:04:18.368166,  2] param/loadparm.c:7893(do_section)
>  Processing section "[printers]"
>  doing parameter comment = Drucker
>  doing parameter browseable = no
>  doing parameter path = /tmp
>  doing parameter printable = yes
>  doing parameter public = no
>  doing parameter writable = no
>  doing parameter create mode = 0700
>[2012/05/29 20:04:18.368263,  2] param/loadparm.c:7893(do_section)
>  Processing section "[print$]"
>  doing parameter comment = Printer Drivers
>  doing parameter path = /var/lib/samba/drivers
>  doing parameter browseable = yes
>  doing parameter guest ok = no
>  doing parameter read only = no
>  doing parameter write list = root, Administrator, @Printer-Admins
>[2012/05/29 20:04:18.368344,  2] param/loadparm.c:7893(do_section)
>  Processing section "[netlogon]"
>  doing parameter comment = Domain logon service
>  doing parameter path = /var/lib/samba/netlogon
>  doing parameter public = no
>  doing parameter preserve case = yes
>  doing parameter case sensitive = no
>  doing parameter writable = yes
>  doing parameter include = /etc/samba/installs.conf
>[2012/05/29 20:04:18.368448,  2] param/loadparm.c:7330(handle_include)
>  Can't find include file /etc/samba/installs.conf
>  doing parameter include = /etc/samba/shares.conf
>[2012/05/29 20:04:18.368486,  3] ../lib/util/params.c:550(pm_process)
>  params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf"
>  doing parameter include = /etc/samba/shares.conf.d/Marktplatz
>[2012/05/29 20:04:18.368529,  3] ../lib/util/params.c:550(pm_process)
>  params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/Marktplatz"
>[2012/05/29 20:04:18.368543,  2] param/loadparm.c:7893(do_section)
>  Processing section "[Marktplatz]"
>  doing parameter path = /home/groups/Marktplatz
>  doing parameter vfs objects = acl_xattr
>  doing parameter msdfs root = no
>  doing parameter writeable = yes
>  doing parameter browseable = yes
>  doing parameter public = no
>  doing parameter dos filemode = no
>  doing parameter hide unreadable = no
>  doing parameter create mode = 0744
>  doing parameter directory mode = 0755
>  doing parameter force create mode = 0
>  doing parameter force directory mode = 0
>  doing parameter security mask = 0777
>  doing parameter directory security mask = 0777
>  doing parameter force security mode = 0
>  doing parameter force directory security mode = 0
>  doing parameter locking = 1
>  doing parameter blocking locks = 1
>  doing parameter strict locking = 0
>  doing parameter oplocks = 1
>  doing parameter level2 oplocks = 1
>  doing parameter fake oplocks = 0
>  doing parameter csc policy = manual
>  doing parameter nt acl support = 1
>  doing parameter inherit acls = 0
>  doing parameter inherit owner = no
>  doing parameter inherit permissions = no
>  doing parameter include = /etc/samba/shares.conf.d/pdfPrinterShare
>[2012/05/29 20:04:18.368893,  3] ../lib/util/params.c:550(pm_process)
>  params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/pdfPrinterShare"
>[2012/05/29 20:04:18.368910,  2] param/loadparm.c:7893(do_section)
>  Processing section "[pdfPrinterShare]"
>  doing parameter path = /var/cache/cups-pdf/%U
>  doing parameter vfs objects = acl_xattr
>  doing parameter msdfs root = no
>  doing parameter writeable = yes
>  doing parameter browseable = yes
>  doing parameter public = no
>  doing parameter dos filemode = no
>  doing parameter hide unreadable = no
>  doing parameter create mode = 0744
>  doing parameter directory mode = 0755
>  doing parameter force create mode = 0
>  doing parameter force directory mode = 0
>  doing parameter security mask = 0777
>  doing parameter directory security mask = 0777
>  doing parameter force security mode = 0
>  doing parameter force directory security mode = 0
>  doing parameter locking = 1
>  doing parameter blocking locks = 1
>  doing parameter strict locking = 0
>  doing parameter oplocks = 1
>  doing parameter level2 oplocks = 1
>  doing parameter fake oplocks = 0
>  doing parameter csc policy = manual
>  doing parameter nt acl support = 1
>  doing parameter inherit acls = 0
>  doing parameter inherit owner = no
>  doing parameter inherit permissions = no
>  doing parameter include = /etc/samba/shares.conf.d/SITE0-1A
>[2012/05/29 20:04:18.369237,  3] ../lib/util/params.c:550(pm_process)
>  params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/SITE0-1A"
>[2012/05/29 20:04:18.369253,  2] param/loadparm.c:7893(do_section)
>  Processing section "[SITE0-1A]"
>  doing parameter path = /home/groups/klassen/SITE0-1A
>  doing parameter vfs objects = acl_xattr
>  doing parameter msdfs root = no
>  doing parameter writeable = yes
>  doing parameter browseable = yes
>  doing parameter public = no
>  doing parameter dos filemode = no
>  doing parameter hide unreadable = no
>  doing parameter create mode = 0770
>  doing parameter directory mode = 0770
>  doing parameter force create mode = 0
>  doing parameter force directory mode = 0
>  doing parameter security mask = 0777
>  doing parameter directory security mask = 0777
>  doing parameter force security mode = 0
>  doing parameter force directory security mode = 0
>  doing parameter locking = 1
>  doing parameter blocking locks = 1
>  doing parameter strict locking = 0
>  doing parameter oplocks = 1
>  doing parameter level2 oplocks = 1
>  doing parameter fake oplocks = 0
>  doing parameter csc policy = manual
>  doing parameter force group = +SITE0-1A
>  doing parameter nt acl support = 1
>  doing parameter inherit acls = 0
>  doing parameter inherit owner = no
>  doing parameter inherit permissions = no
>  doing parameter include = /etc/samba/printers.conf
>[2012/05/29 20:04:18.369591,  3] ../lib/util/params.c:550(pm_process)
>  params.c:pm_process() - Processing configuration file "/etc/samba/printers.conf"
>  doing parameter include = /etc/samba/local.config.conf
>[2012/05/29 20:04:18.369631,  3] ../lib/util/params.c:550(pm_process)
>  params.c:pm_process() - Processing configuration file "/etc/samba/local.config.conf"
>  doing parameter include = /etc/samba/local.conf
>[2012/05/29 20:04:18.369669,  3] ../lib/util/params.c:550(pm_process)
>  params.c:pm_process() - Processing configuration file "/etc/samba/local.conf"
>[2012/05/29 20:04:18.369683,  4] param/loadparm.c:9227(lp_load_ex)
>  pm_process() returned Yes
>[2012/05/29 20:04:18.369734,  3] param/loadparm.c:6347(lp_add_ipc)
>  adding IPC service
>[2012/05/29 20:04:18.369828,  3] printing/pcap.c:137(pcap_cache_reload)
>  reloading printcap cache
>[2012/05/29 20:04:18.375652,  0] printing/print_cups.c:304(cups_cache_reload_async)
>  Unable to get printer list - client-error-forbidden
>[2012/05/29 20:04:18.375804,  0] printing/print_cups.c:468(cups_async_callback)
>  failed to retrieve printer list: NT_STATUS_UNSUCCESSFUL
>[2012/05/29 20:04:18.375849,  3] printing/pcap.c:249(pcap_cache_reload)
>  reload status: error
>[2012/05/29 20:04:18.376030,  2] lib/interface.c:340(add_interface)
>  added interface eth0 ip=2001:4dd0:ff00:8c42:ff08::10 bcast=2001:4dd0:ff00:8c42:ffff:ffff:ffff:ffff netmask=ffff:ffff:ffff:ffff::
>[2012/05/29 20:04:18.376087,  2] lib/interface.c:340(add_interface)
>  added interface eth0 ip=fe80::5054:ff:fe01:38cd%eth0 bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff::
>[2012/05/29 20:04:18.376170,  2] lib/interface.c:340(add_interface)
>  added interface eth0 ip=10.200.8.10 bcast=10.200.8.255 netmask=255.255.255.0
>[2012/05/29 20:04:18.376293,  3] smbd/server.c:1183(main)
>  loaded services
>[2012/05/29 20:04:18.376312,  3] smbd/server.c:1198(main)
>  Becoming a daemon.
>[2012/05/29 20:04:18.379892,  2] lib/smbldap_util.c:277(smbldap_search_domain_info)
>  smbldap_search_domain_info: Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=S3I))]
>[2012/05/29 20:04:18.396690,  3] lib/smbldap.c:735(smb_ldap_start_tls)
>  StartTLS issued: using a TLS connection
>[2012/05/29 20:04:18.396730,  2] lib/smbldap.c:950(smbldap_open_connection)
>  smbldap_open_connection: connection opened
>[2012/05/29 20:04:18.398248,  3] lib/smbldap.c:1168(smbldap_connect_system)
>  ldap_connect_system: successful connection to the LDAP server
>[2012/05/29 20:04:18.398285,  4] lib/smbldap.c:1247(smbldap_open)
>  The LDAP server is successfully connected
>[2012/05/29 20:04:19.410896,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:19.410955,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:19.410979,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:19.411202,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:19.411225,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:19.411237,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:19.411734,  4] passdb/pdb_ldap.c:1598(ldapsam_getsampwnam)
>  ldapsam_getsampwnam: Unable to locate user [root] count=0
>[2012/05/29 20:04:19.411771,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:19.411790,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:19.412886,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:19.412919,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:19.412932,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:19.413273,  4] passdb/pdb_ldap.c:2559(ldapsam_getgroup)
>  ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=0))
>[2012/05/29 20:04:19.413312,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:19.425456,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-22-1-0]
>[2012/05/29 20:04:19.425542,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-2]
>[2012/05/29 20:04:19.425561,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-11]
>[2012/05/29 20:04:19.464461,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:19.464517,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:19.464531,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:19.464740,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:19.468132,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:19.468173,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:19.468187,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:19.468609,  4] passdb/pdb_ldap.c:2559(ldapsam_getgroup)
>  ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=65534))
>[2012/05/29 20:04:19.468648,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:19.468689,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-21-3785813934-3866640808-4451219-501]
>[2012/05/29 20:04:19.468710,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-22-2-65534]
>[2012/05/29 20:04:19.468732,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-2]
>[2012/05/29 20:04:19.468749,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-32-546]
>[2012/05/29 20:04:19.468916,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:19.468943,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:19.468955,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:19.469444,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5022
>[2012/05/29 20:04:19.469506,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:19.469653,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:19.469679,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:19.469691,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:19.470044,  4] passdb/pdb_ldap.c:2559(ldapsam_getgroup)
>  ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))
>[2012/05/29 20:04:19.470083,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:19.481946,  3] printing/printing.c:1412(start_background_queue)
>  start_background_queue: Starting background LPQ thread
>[2012/05/29 20:04:19.482755,  2] lib/util_sock.c:880(open_socket_in)
>  bind failed on port 445 socket_addr = 0.0.0.0.
>  Error = Die Adresse wird bereits verwendet
>[2012/05/29 20:04:19.482824,  0] smbd/server.c:501(smbd_open_one_socket)
>  smbd_open_once_socket: open_socket_in: Die Adresse wird bereits verwendet
>[2012/05/29 20:04:19.482866,  2] lib/util_sock.c:880(open_socket_in)
>  bind failed on port 139 socket_addr = 0.0.0.0.
>  Error = Die Adresse wird bereits verwendet
>[2012/05/29 20:04:19.482892,  0] smbd/server.c:501(smbd_open_one_socket)
>  smbd_open_once_socket: open_socket_in: Die Adresse wird bereits verwendet
>[2012/05/29 20:04:19.483183,  2] smbd/server.c:745(smbd_parent_loop)
>  waiting for connections
>[2012/05/29 20:04:31.543349,  3] smbd/oplock.c:895(init_oplocks)
>  init_oplocks: initializing messages.
>[2012/05/29 20:04:31.543616,  3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks)
>  Linux kernel oplocks enabled
>[2012/05/29 20:04:31.543700,  3] smbd/process.c:1489(process_smb)
>  Transaction 0 of length 137 (0 toread)
>[2012/05/29 20:04:31.543726,  3] smbd/process.c:1298(switch_message)
>  switch message SMBnegprot (pid 32737) conn 0x0
>[2012/05/29 20:04:31.543743,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.543818,  3] smbd/negprot.c:587(reply_negprot)
>  Requested protocol [PC NETWORK PROGRAM 1.0]
>[2012/05/29 20:04:31.543838,  3] smbd/negprot.c:587(reply_negprot)
>  Requested protocol [LANMAN1.0]
>[2012/05/29 20:04:31.543851,  3] smbd/negprot.c:587(reply_negprot)
>  Requested protocol [Windows for Workgroups 3.1a]
>[2012/05/29 20:04:31.543863,  3] smbd/negprot.c:587(reply_negprot)
>  Requested protocol [LM1.2X002]
>[2012/05/29 20:04:31.543875,  3] smbd/negprot.c:587(reply_negprot)
>  Requested protocol [LANMAN2.1]
>[2012/05/29 20:04:31.543887,  3] smbd/negprot.c:587(reply_negprot)
>  Requested protocol [NT LM 0.12]
>[2012/05/29 20:04:31.544035,  3] smbd/negprot.c:405(reply_nt1)
>  using SPNEGO
>[2012/05/29 20:04:31.544078,  3] smbd/negprot.c:692(reply_negprot)
>  Selected protocol NT LM 0.12
>[2012/05/29 20:04:31.544969,  3] smbd/process.c:1489(process_smb)
>  Transaction 1 of length 240 (0 toread)
>[2012/05/29 20:04:31.545013,  3] smbd/process.c:1298(switch_message)
>  switch message SMBsesssetupX (pid 32737) conn 0x0
>[2012/05/29 20:04:31.545028,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.545059,  3] smbd/sesssetup.c:1458(reply_sesssetup_and_X)
>  wct=12 flg2=0xc807
>[2012/05/29 20:04:31.545080,  2] smbd/sesssetup.c:1413(setup_new_vc_session)
>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
>[2012/05/29 20:04:31.545097,  3] smbd/sesssetup.c:1212(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2012/05/29 20:04:31.545112,  3] smbd/sesssetup.c:1254(reply_sesssetup_and_X_spnego)
>  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2012/05/29 20:04:31.545158,  3] smbd/sesssetup.c:806(reply_spnego_negotiate)
>  reply_spnego_negotiate: Got secblob of size 40
>[2012/05/29 20:04:31.545220,  3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0xa2088207
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_NEGOTIATE_OEM
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_VERSION
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_56
>[2012/05/29 20:04:31.546232,  3] smbd/process.c:1489(process_smb)
>  Transaction 2 of length 268 (0 toread)
>[2012/05/29 20:04:31.546264,  3] smbd/process.c:1298(switch_message)
>  switch message SMBsesssetupX (pid 32737) conn 0x0
>[2012/05/29 20:04:31.546278,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.546297,  3] smbd/sesssetup.c:1458(reply_sesssetup_and_X)
>  wct=12 flg2=0xc807
>[2012/05/29 20:04:31.546310,  2] smbd/sesssetup.c:1413(setup_new_vc_session)
>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
>[2012/05/29 20:04:31.546322,  3] smbd/sesssetup.c:1212(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2012/05/29 20:04:31.546348,  3] smbd/sesssetup.c:1254(reply_sesssetup_and_X_spnego)
>  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2012/05/29 20:04:31.546373,  3] libsmb/ntlmssp.c:747(ntlmssp_server_auth)
>  Got user=[] domain=[] workstation=[WINXPSP3AR2] len1=1 len2=0
>[2012/05/29 20:04:31.546427,  3] auth/auth.c:216(check_ntlm_password)
>  check_ntlm_password:  Checking password for unmapped user []\[]@[WINXPSP3AR2] with the new password interface
>[2012/05/29 20:04:31.546446,  3] auth/auth.c:219(check_ntlm_password)
>  check_ntlm_password:  mapped user is: [S3I]\[]@[WINXPSP3AR2]
>[2012/05/29 20:04:31.550383,  3] lib/smbldap.c:735(smb_ldap_start_tls)
>  StartTLS issued: using a TLS connection
>[2012/05/29 20:04:31.550426,  2] lib/smbldap.c:950(smbldap_open_connection)
>  smbldap_open_connection: connection opened
>[2012/05/29 20:04:31.551417,  3] lib/smbldap.c:1168(smbldap_connect_system)
>  ldap_connect_system: successful connection to the LDAP server
>[2012/05/29 20:04:31.551450,  4] lib/smbldap.c:1247(smbldap_open)
>  The LDAP server is successfully connected
>[2012/05/29 20:04:31.551854,  4] passdb/pdb_ldap.c:2559(ldapsam_getgroup)
>  ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=65534))
>[2012/05/29 20:04:31.551897,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.551912,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.551926,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.552410,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.552476,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.552509,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.552521,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.552548,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.552590,  3] auth/auth.c:265(check_ntlm_password)
>  check_ntlm_password: guest authentication for user [] succeeded
>[2012/05/29 20:04:31.552613,  3] libsmb/ntlmssp_sign.c:343(ntlmssp_sign_init)
>  NTLMSSP Sign/Seal - Initialising with flags:
>[2012/05/29 20:04:31.552625,  3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0xa2088205
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_VERSION
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_56
>[2012/05/29 20:04:31.552678,  3] smbd/password.c:282(register_existing_vuid)
>  register_existing_vuid: User name: nobody	Real name: nobody
>[2012/05/29 20:04:31.552693,  3] smbd/password.c:292(register_existing_vuid)
>  register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 100
>[2012/05/29 20:04:31.555842,  3] smbd/process.c:1489(process_smb)
>  Transaction 3 of length 82 (0 toread)
>[2012/05/29 20:04:31.555874,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtconX (pid 32737) conn 0x0
>[2012/05/29 20:04:31.555887,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.555918,  4] smbd/reply.c:786(reply_tcon_and_X)
>  Client requested device type [?????] for share [IPC$]
>[2012/05/29 20:04:31.555963,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.555978,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.555990,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.556032,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.556064,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.556078,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.556089,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.556113,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.556146,  3] smbd/service.c:807(make_connection_snum)
>  Connect path is '/tmp' for service [IPC$]
>[2012/05/29 20:04:31.556186,  3] smbd/vfs.c:97(vfs_init_default)
>  Initialising default vfs hooks
>[2012/05/29 20:04:31.556221,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2012/05/29 20:04:31.556290,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid administrator does not start with 'S-'.
>[2012/05/29 20:04:31.556324,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.556337,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.556348,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.556949,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: Administrator
>[2012/05/29 20:04:31.557056,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.557073,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.557084,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.557113,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.557219,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.557237,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.557261,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.557666,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.557837,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.557860,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.557872,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.557897,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.557930,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.557944,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.557956,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.557979,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.557998,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.558019,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid join-backup does not start with 'S-'.
>[2012/05/29 20:04:31.558035,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.558047,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.558058,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.558589,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: join-backup
>[2012/05/29 20:04:31.558695,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.558711,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.558723,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.558753,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.558800,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.558813,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.558825,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.558848,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.558985,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.559043,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.559056,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.559078,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:31.559091,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.559103,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:31.559528,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11017] count=0
>[2012/05/29 20:04:31.559966,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5008
>[2012/05/29 20:04:31.560019,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.560039,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.560055,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.560067,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.560092,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.560120,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.560152,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.560166,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.560177,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.560202,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.560223,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.560246,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.560259,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.560271,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.560294,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.560320,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.560334,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.560345,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.560367,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.560390,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.560429,  3] smbd/service.c:1070(make_connection_snum)
>  winxpsp3ar2 (::ffff:10.200.8.230) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 32737)
>[2012/05/29 20:04:31.560449,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.560470,  3] smbd/reply.c:865(reply_tcon_and_X)
>  tconX service=IPC$ 
>[2012/05/29 20:04:31.561072,  3] smbd/process.c:1489(process_smb)
>  Transaction 4 of length 108 (0 toread)
>[2012/05/29 20:04:31.561101,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a84700
>[2012/05/29 20:04:31.561117,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.561145,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2012/05/29 20:04:31.561181,  4] smbd/nttrans.c:283(nt_open_pipe)
>  nt_open_pipe: Opening pipe \NETLOGON.
>[2012/05/29 20:04:31.561217,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \netlogon
>[2012/05/29 20:04:31.561263,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.561279,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.561290,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.561320,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.561350,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.561365,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.561377,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.561404,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.561422,  4] rpc_server/srv_pipe_hnd.c:162(make_internal_rpc_pipe_p)
>  Created internal pipe \netlogon (pipes_open=0)
>[2012/05/29 20:04:31.562039,  3] smbd/process.c:1489(process_smb)
>  Transaction 5 of length 185 (0 toread)
>[2012/05/29 20:04:31.562079,  3] smbd/process.c:1298(switch_message)
>  switch message SMBwriteX (pid 32737) conn 0x7f3751a84700
>[2012/05/29 20:04:31.562094,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:31.562137,  3] rpc_server/srv_pipe.c:1668(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\netlogon -> \PIPE\netlogon
>[2012/05/29 20:04:31.562190,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.562207,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.562219,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.562325,  3] ../libcli/auth/schannel_state_tdb.c:132(schannel_fetch_session_key_tdb)
>  schannel_fetch_session_key_tdb: restored schannel info key SECRETS/SCHANNEL/WINXPSP3AR2
>[2012/05/29 20:04:31.562364,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.562393,  3] rpc_server/srv_pipe.c:998(check_bind_req)
>  check_bind_req for \netlogon
>[2012/05/29 20:04:31.562438,  3] smbd/pipes.c:352(pipe_write_andx_done)
>  writeX-IPC nwritten=117
>[2012/05/29 20:04:31.562947,  3] smbd/process.c:1489(process_smb)
>  Transaction 6 of length 63 (0 toread)
>[2012/05/29 20:04:31.562976,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a84700
>[2012/05/29 20:04:31.562989,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:31.563058,  3] smbd/pipes.c:462(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=92
>[2012/05/29 20:04:31.563630,  3] smbd/process.c:1489(process_smb)
>  Transaction 7 of length 420 (0 toread)
>[2012/05/29 20:04:31.563659,  3] smbd/process.c:1298(switch_message)
>  switch message SMBwriteX (pid 32737) conn 0x7f3751a84700
>[2012/05/29 20:04:31.563672,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:31.563728,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 82
>[2012/05/29 20:04:31.563757,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \netlogon op 0x2 - api_rpcTNP: rpc command: NETR_LOGONSAMLOGON
>[2012/05/29 20:04:31.563815,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.563832,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.563844,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.563904,  3] ../libcli/auth/schannel_state_tdb.c:132(schannel_fetch_session_key_tdb)
>  schannel_fetch_session_key_tdb: restored schannel info key SECRETS/SCHANNEL/WINXPSP3AR2
>[2012/05/29 20:04:31.564008,  3] ../libcli/auth/schannel_state_tdb.c:68(schannel_store_session_key_tdb)
>  schannel_store_session_key_tdb: stored schannel info with key SECRETS/SCHANNEL/WINXPSP3AR2
>[2012/05/29 20:04:31.628953,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.629019,  3] rpc_server/srv_netlog_nt.c:1123(_netr_LogonSamLogon_base)
>  SAM Logon (Interactive). Domain:[S3I].  User:[schueler1@WINXPSP3AR2] Requested Domain:[S3I]
>[2012/05/29 20:04:31.629208,  3] auth/auth.c:216(check_ntlm_password)
>  check_ntlm_password:  Checking password for unmapped user [S3I]\[schueler1]@[WINXPSP3AR2] with the new password interface
>[2012/05/29 20:04:31.629228,  3] auth/auth.c:219(check_ntlm_password)
>  check_ntlm_password:  mapped user is: [S3I]\[schueler1]@[WINXPSP3AR2]
>[2012/05/29 20:04:31.629248,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.629264,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.629276,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.630220,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: schueler1
>[2012/05/29 20:04:31.630375,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.630393,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.630404,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.630441,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.630499,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.630512,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.630524,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.630548,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.630734,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.630757,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.630769,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.630788,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:31.630802,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.630813,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:31.631274,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11077] count=0
>[2012/05/29 20:04:31.631732,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5038
>[2012/05/29 20:04:31.631779,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.631798,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.631815,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.631827,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.631839,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.631864,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.631900,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.631915,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.631926,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.631952,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.631974,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.632000,  3] ../libcli/auth/ntlm_check.c:238(hash_password_check)
>  ntlm_password_check: Interactive logon: NT password check failed for user schueler1
>[2012/05/29 20:04:31.637256,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.637279,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.637291,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.637337,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.637355,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.637369,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.637381,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.637410,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.637423,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.637435,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.637904,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.637933,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.637947,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.637961,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.637973,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.638016,  4] passdb/pdb_ldap.c:2013(ldapsam_update_sam_account)
>  ldapsam_update_sam_account: user schueler1 to be modified has dn: uid=schueler1,cn=schueler,cn=users,ou=SITE0,dc=s3i,dc=school
>[2012/05/29 20:04:31.638038,  2] passdb/pdb_ldap.c:1201(init_ldap_from_sam)
>  init_ldap_from_sam: Setting entry for user: schueler1
>[2012/05/29 20:04:31.638055,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.638066,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.638078,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:31.638103,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:31.638118,  4] passdb/pdb_ldap.c:2027(ldapsam_update_sam_account)
>  ldapsam_update_sam_account: mods is empty: nothing to update for user: schueler1
>[2012/05/29 20:04:31.638133,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:31.638154,  3] auth/auth_winbind.c:54(check_winbind_security)
>  check_winbind_security: Not using winbind, requested domain [S3I] was for this SAM.
>[2012/05/29 20:04:31.638168,  2] auth/auth.c:314(check_ntlm_password)
>  check_ntlm_password:  Authentication for user [schueler1] -> [schueler1] FAILED with error NT_STATUS_WRONG_PASSWORD
>[2012/05/29 20:04:31.638235,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 1576
>[2012/05/29 20:04:31.638276,  3] smbd/pipes.c:352(pipe_write_andx_done)
>  writeX-IPC nwritten=352
>[2012/05/29 20:04:31.639277,  3] smbd/process.c:1489(process_smb)
>  Transaction 8 of length 63 (0 toread)
>[2012/05/29 20:04:31.639318,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a84700
>[2012/05/29 20:04:31.639333,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:31.639402,  3] smbd/pipes.c:462(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=304
>[2012/05/29 20:04:44.249924,  3] smbd/process.c:1489(process_smb)
>  Transaction 9 of length 404 (0 toread)
>[2012/05/29 20:04:44.250021,  3] smbd/process.c:1298(switch_message)
>  switch message SMBwriteX (pid 32737) conn 0x7f3751a84700
>[2012/05/29 20:04:44.250038,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:44.250113,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 30
>[2012/05/29 20:04:44.250136,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \netlogon op 0x2 - api_rpcTNP: rpc command: NETR_LOGONSAMLOGON
>[2012/05/29 20:04:44.250179,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.250198,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:44.250210,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.250324,  3] ../libcli/auth/schannel_state_tdb.c:132(schannel_fetch_session_key_tdb)
>  schannel_fetch_session_key_tdb: restored schannel info key SECRETS/SCHANNEL/WINXPSP3AR2
>[2012/05/29 20:04:44.250459,  3] ../libcli/auth/schannel_state_tdb.c:68(schannel_store_session_key_tdb)
>  schannel_store_session_key_tdb: stored schannel info with key SECRETS/SCHANNEL/WINXPSP3AR2
>[2012/05/29 20:04:44.407218,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:44.407297,  3] rpc_server/srv_netlog_nt.c:1123(_netr_LogonSamLogon_base)
>  SAM Logon (Interactive). Domain:[S3I].  User:[schueler1@WINXPSP3AR2] Requested Domain:[S3I]
>[2012/05/29 20:04:44.407466,  3] auth/auth.c:216(check_ntlm_password)
>  check_ntlm_password:  Checking password for unmapped user [S3I]\[schueler1]@[WINXPSP3AR2] with the new password interface
>[2012/05/29 20:04:44.407484,  3] auth/auth.c:219(check_ntlm_password)
>  check_ntlm_password:  mapped user is: [S3I]\[schueler1]@[WINXPSP3AR2]
>[2012/05/29 20:04:44.407505,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.407521,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:44.407533,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.408561,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: schueler1
>[2012/05/29 20:04:44.408715,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:44.408734,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.408746,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:44.408793,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.408855,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:44.408869,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.408880,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:44.408904,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.408938,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:44.409074,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.409090,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:44.409110,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:44.409124,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:04:44.409227,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:44.409827,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11077] count=0
>[2012/05/29 20:04:44.410284,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5038
>[2012/05/29 20:04:44.410332,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:44.410351,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.410369,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:44.410382,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.410393,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:44.410419,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.410455,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:44.410500,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.410513,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:44.410538,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.410564,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:44.410584,  4] auth/auth_sam.c:180(sam_account_ok)
>  sam_account_ok: Checking SMB password for user schueler1
>[2012/05/29 20:04:44.410666,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.410683,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:44.410695,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.410723,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:44.410738,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.410752,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:44.410763,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.411039,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:44.411066,  3] auth/auth.c:265(check_ntlm_password)
>  check_ntlm_password: sam authentication for user [schueler1] succeeded
>[2012/05/29 20:04:44.411080,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.411094,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:44.411106,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.411128,  4] auth/pampass.c:472(smb_pam_start)
>  smb_pam_start: PAM: Init user: schueler1
>[2012/05/29 20:04:44.414124,  4] auth/pampass.c:489(smb_pam_start)
>  smb_pam_start: PAM: setting rhost to: ::ffff:10.200.8.230
>[2012/05/29 20:04:44.414169,  4] auth/pampass.c:498(smb_pam_start)
>  smb_pam_start: PAM: setting tty
>[2012/05/29 20:04:44.414182,  4] auth/pampass.c:506(smb_pam_start)
>  smb_pam_start: PAM: Init passed for user: schueler1
>[2012/05/29 20:04:44.414193,  4] auth/pampass.c:564(smb_pam_account)
>  smb_pam_account: PAM: Account Management for User: schueler1
>[2012/05/29 20:04:44.431374,  4] auth/pampass.c:583(smb_pam_account)
>  smb_pam_account: PAM: Account OK for User: schueler1
>[2012/05/29 20:04:44.431760,  4] auth/pampass.c:450(smb_pam_end)
>  smb_pam_end: PAM: PAM_END OK.
>[2012/05/29 20:04:44.431798,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:44.431831,  2] auth/auth.c:304(check_ntlm_password)
>  check_ntlm_password:  authentication for user [schueler1] -> [schueler1] -> [schueler1] succeeded
>[2012/05/29 20:04:44.431872,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.431888,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:44.431901,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.432471,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:44.432499,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.432514,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:44.432526,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:44.432554,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:44.432623,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 1819
>[2012/05/29 20:04:44.432709,  3] smbd/pipes.c:352(pipe_write_andx_done)
>  writeX-IPC nwritten=336
>[2012/05/29 20:04:44.433485,  3] smbd/process.c:1489(process_smb)
>  Transaction 10 of length 63 (0 toread)
>[2012/05/29 20:04:44.433518,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a84700
>[2012/05/29 20:04:44.433533,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:44.433609,  3] smbd/pipes.c:462(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=696
>[2012/05/29 20:04:45.251102,  3] smbd/process.c:1489(process_smb)
>  Transaction 11 of length 240 (0 toread)
>[2012/05/29 20:04:45.251187,  3] smbd/process.c:1298(switch_message)
>  switch message SMBsesssetupX (pid 32737) conn 0x0
>[2012/05/29 20:04:45.251203,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.251236,  3] smbd/sesssetup.c:1458(reply_sesssetup_and_X)
>  wct=12 flg2=0xc807
>[2012/05/29 20:04:45.251254,  3] smbd/sesssetup.c:1212(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2012/05/29 20:04:45.251275,  3] smbd/sesssetup.c:1254(reply_sesssetup_and_X_spnego)
>  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2012/05/29 20:04:45.251311,  3] smbd/sesssetup.c:806(reply_spnego_negotiate)
>  reply_spnego_negotiate: Got secblob of size 40
>[2012/05/29 20:04:45.251349,  3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0xa2088207
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_NEGOTIATE_OEM
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_VERSION
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_56
>[2012/05/29 20:04:45.253321,  3] smbd/process.c:1489(process_smb)
>  Transaction 12 of length 268 (0 toread)
>[2012/05/29 20:04:45.253358,  3] smbd/process.c:1298(switch_message)
>  switch message SMBsesssetupX (pid 32737) conn 0x0
>[2012/05/29 20:04:45.253371,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.253390,  3] smbd/sesssetup.c:1458(reply_sesssetup_and_X)
>  wct=12 flg2=0xc807
>[2012/05/29 20:04:45.253403,  3] smbd/sesssetup.c:1212(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2012/05/29 20:04:45.253416,  3] smbd/sesssetup.c:1254(reply_sesssetup_and_X_spnego)
>  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2012/05/29 20:04:45.253438,  3] libsmb/ntlmssp.c:747(ntlmssp_server_auth)
>  Got user=[] domain=[] workstation=[WINXPSP3AR2] len1=1 len2=0
>[2012/05/29 20:04:45.253511,  3] auth/auth.c:216(check_ntlm_password)
>  check_ntlm_password:  Checking password for unmapped user []\[]@[WINXPSP3AR2] with the new password interface
>[2012/05/29 20:04:45.253530,  3] auth/auth.c:219(check_ntlm_password)
>  check_ntlm_password:  mapped user is: [S3I]\[]@[WINXPSP3AR2]
>[2012/05/29 20:04:45.253557,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.253571,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.253583,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.253633,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.253680,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.253694,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.253708,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.253732,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.253754,  3] auth/auth.c:265(check_ntlm_password)
>  check_ntlm_password: guest authentication for user [] succeeded
>[2012/05/29 20:04:45.253772,  3] libsmb/ntlmssp_sign.c:343(ntlmssp_sign_init)
>  NTLMSSP Sign/Seal - Initialising with flags:
>[2012/05/29 20:04:45.253811,  3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0xa2088205
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_VERSION
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_56
>[2012/05/29 20:04:45.253859,  3] smbd/password.c:282(register_existing_vuid)
>  register_existing_vuid: User name: nobody	Real name: nobody
>[2012/05/29 20:04:45.253871,  3] smbd/password.c:292(register_existing_vuid)
>  register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 101
>[2012/05/29 20:04:45.255459,  3] smbd/process.c:1489(process_smb)
>  Transaction 13 of length 240 (0 toread)
>[2012/05/29 20:04:45.255491,  3] smbd/process.c:1298(switch_message)
>  switch message SMBsesssetupX (pid 32737) conn 0x0
>[2012/05/29 20:04:45.255505,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.255523,  3] smbd/sesssetup.c:1458(reply_sesssetup_and_X)
>  wct=12 flg2=0xc807
>[2012/05/29 20:04:45.255536,  3] smbd/sesssetup.c:1212(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2012/05/29 20:04:45.255549,  3] smbd/sesssetup.c:1254(reply_sesssetup_and_X_spnego)
>  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2012/05/29 20:04:45.255594,  3] smbd/sesssetup.c:806(reply_spnego_negotiate)
>  reply_spnego_negotiate: Got secblob of size 40
>[2012/05/29 20:04:45.255618,  3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0xa2088207
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_NEGOTIATE_OEM
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_VERSION
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_56
>[2012/05/29 20:04:45.255851,  3] smbd/process.c:1489(process_smb)
>  Transaction 14 of length 82 (0 toread)
>[2012/05/29 20:04:45.255877,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtconX (pid 32737) conn 0x0
>[2012/05/29 20:04:45.255891,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.255918,  4] smbd/reply.c:786(reply_tcon_and_X)
>  Client requested device type [?????] for share [IPC$]
>[2012/05/29 20:04:45.255950,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.255965,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.255976,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.256003,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.256033,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.256047,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.256059,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.256082,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.256119,  3] smbd/service.c:807(make_connection_snum)
>  Connect path is '/tmp' for service [IPC$]
>[2012/05/29 20:04:45.256147,  3] smbd/vfs.c:97(vfs_init_default)
>  Initialising default vfs hooks
>[2012/05/29 20:04:45.256160,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2012/05/29 20:04:45.256319,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid administrator does not start with 'S-'.
>[2012/05/29 20:04:45.256347,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.256360,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.256371,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.257272,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: Administrator
>[2012/05/29 20:04:45.257381,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.257398,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.257409,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.257439,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.257493,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.257507,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.257518,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.257541,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.257561,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.257573,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.257584,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.257607,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.257638,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.257652,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.257664,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.257686,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.257708,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.257728,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid join-backup does not start with 'S-'.
>[2012/05/29 20:04:45.257746,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.257758,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.257769,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.258289,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: join-backup
>[2012/05/29 20:04:45.258394,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.258411,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.258423,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.258452,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.258498,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.258512,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.258524,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.258547,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.258574,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.258588,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.258599,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.258617,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:45.258630,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.258641,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:45.259093,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11017] count=0
>[2012/05/29 20:04:45.259535,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5008
>[2012/05/29 20:04:45.259599,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.259621,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.259637,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.259650,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.259661,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.259687,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.259719,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.259732,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.259744,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.259768,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.259790,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.259814,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.259827,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.259839,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.259862,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.259888,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.259902,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.259913,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.259935,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.259956,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.259988,  3] smbd/service.c:1070(make_connection_snum)
>  winxpsp3ar2 (::ffff:10.200.8.230) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 32737)
>[2012/05/29 20:04:45.260008,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.260029,  3] smbd/reply.c:865(reply_tcon_and_X)
>  tconX service=IPC$ 
>[2012/05/29 20:04:45.260180,  3] smbd/process.c:1489(process_smb)
>  Transaction 15 of length 344 (0 toread)
>[2012/05/29 20:04:45.260207,  3] smbd/process.c:1298(switch_message)
>  switch message SMBsesssetupX (pid 32737) conn 0x0
>[2012/05/29 20:04:45.260221,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.260237,  3] smbd/sesssetup.c:1458(reply_sesssetup_and_X)
>  wct=12 flg2=0xc807
>[2012/05/29 20:04:45.260249,  3] smbd/sesssetup.c:1212(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2012/05/29 20:04:45.260263,  3] smbd/sesssetup.c:1254(reply_sesssetup_and_X_spnego)
>  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2012/05/29 20:04:45.260285,  3] libsmb/ntlmssp.c:747(ntlmssp_server_auth)
>  Got user=[schueler1] domain=[S3I] workstation=[WINXPSP3AR2] len1=24 len2=24
>[2012/05/29 20:04:45.260338,  3] auth/auth.c:216(check_ntlm_password)
>  check_ntlm_password:  Checking password for unmapped user [S3I]\[schueler1]@[WINXPSP3AR2] with the new password interface
>[2012/05/29 20:04:45.260354,  3] auth/auth.c:219(check_ntlm_password)
>  check_ntlm_password:  mapped user is: [S3I]\[schueler1]@[WINXPSP3AR2]
>[2012/05/29 20:04:45.260385,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.260398,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.260410,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.261049,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: schueler1
>[2012/05/29 20:04:45.261158,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.261175,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.261186,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.261215,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.261264,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.261278,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.261289,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.261313,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.261338,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.261352,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.261363,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.261379,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:45.261392,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.261403,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:45.261787,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11077] count=0
>[2012/05/29 20:04:45.262214,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5038
>[2012/05/29 20:04:45.262259,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.262279,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.262295,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.262307,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.262318,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.262344,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.262375,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.262389,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.262400,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.262424,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.262447,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.262463,  4] ../libcli/auth/ntlm_check.c:399(ntlm_password_check)
>  ntlm_password_check: Checking NT MD4 password
>[2012/05/29 20:04:45.262528,  4] auth/auth_sam.c:180(sam_account_ok)
>  sam_account_ok: Checking SMB password for user schueler1
>[2012/05/29 20:04:45.262547,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.262559,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.262581,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.262606,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.262621,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.262633,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.262644,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.262826,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.262850,  3] auth/auth.c:265(check_ntlm_password)
>  check_ntlm_password: sam authentication for user [schueler1] succeeded
>[2012/05/29 20:04:45.262863,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.262875,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.262886,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.262902,  4] auth/pampass.c:472(smb_pam_start)
>  smb_pam_start: PAM: Init user: schueler1
>[2012/05/29 20:04:45.265642,  4] auth/pampass.c:489(smb_pam_start)
>  smb_pam_start: PAM: setting rhost to: ::ffff:10.200.8.230
>[2012/05/29 20:04:45.265677,  4] auth/pampass.c:498(smb_pam_start)
>  smb_pam_start: PAM: setting tty
>[2012/05/29 20:04:45.265689,  4] auth/pampass.c:506(smb_pam_start)
>  smb_pam_start: PAM: Init passed for user: schueler1
>[2012/05/29 20:04:45.265703,  4] auth/pampass.c:564(smb_pam_account)
>  smb_pam_account: PAM: Account Management for User: schueler1
>[2012/05/29 20:04:45.267211,  4] auth/pampass.c:583(smb_pam_account)
>  smb_pam_account: PAM: Account OK for User: schueler1
>[2012/05/29 20:04:45.267433,  4] auth/pampass.c:450(smb_pam_end)
>  smb_pam_end: PAM: PAM_END OK.
>[2012/05/29 20:04:45.267466,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.267481,  2] auth/auth.c:304(check_ntlm_password)
>  check_ntlm_password:  authentication for user [schueler1] -> [schueler1] -> [schueler1] succeeded
>[2012/05/29 20:04:45.267535,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-21-3785813934-3866640808-4451219-5020]
>[2012/05/29 20:04:45.267574,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-21-3785813934-3866640808-4451219-11077]
>[2012/05/29 20:04:45.267601,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-2]
>[2012/05/29 20:04:45.267617,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-11]
>[2012/05/29 20:04:45.267635,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-21-3785813934-3866640808-4451219-11069]
>[2012/05/29 20:04:45.267654,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-21-3785813934-3866640808-4451219-11075]
>[2012/05/29 20:04:45.268214,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.268242,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.268254,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.268646,  4] passdb/pdb_ldap.c:2559(ldapsam_getgroup)
>  ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))
>[2012/05/29 20:04:45.268683,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.268734,  3] libsmb/ntlmssp_sign.c:343(ntlmssp_sign_init)
>  NTLMSSP Sign/Seal - Initialising with flags:
>[2012/05/29 20:04:45.268750,  3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0xa2088205
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_VERSION
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_56
>[2012/05/29 20:04:45.268819,  3] smbd/password.c:282(register_existing_vuid)
>  register_existing_vuid: User name: schueler1	Real name: schueler1 univention
>[2012/05/29 20:04:45.268833,  3] smbd/password.c:292(register_existing_vuid)
>  register_existing_vuid: UNIX uid 2010 is UNIX user schueler1, and will be vuid 102
>[2012/05/29 20:04:45.268870,  4] auth/pampass.c:472(smb_pam_start)
>  smb_pam_start: PAM: Init user: schueler1
>[2012/05/29 20:04:45.271239,  4] auth/pampass.c:489(smb_pam_start)
>  smb_pam_start: PAM: setting rhost to: ::ffff:10.200.8.230
>[2012/05/29 20:04:45.271265,  4] auth/pampass.c:498(smb_pam_start)
>  smb_pam_start: PAM: setting tty
>[2012/05/29 20:04:45.271278,  4] auth/pampass.c:506(smb_pam_start)
>  smb_pam_start: PAM: Init passed for user: schueler1
>[2012/05/29 20:04:45.271289,  4] auth/pampass.c:643(smb_internal_pam_session)
>  smb_internal_pam_session: PAM: tty set to: smb/32737/102
>[2012/05/29 20:04:45.953517,  4] auth/pampass.c:450(smb_pam_end)
>  smb_pam_end: PAM: PAM_END OK.
>[2012/05/29 20:04:45.954051,  3] smbd/password.c:223(register_homes_share)
>  Adding homes service for user 'schueler1' using home directory: '/home/schueler1'
>[2012/05/29 20:04:45.954133,  3] param/loadparm.c:6299(lp_add_home)
>  adding home's share [schueler1] for user 'schueler1' at '/home/schueler1'
>[2012/05/29 20:04:45.954462,  3] smbd/process.c:1489(process_smb)
>  Transaction 16 of length 104 (0 toread)
>[2012/05/29 20:04:45.954494,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:45.954512,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.954552,  4] smbd/nttrans.c:283(nt_open_pipe)
>  nt_open_pipe: Opening pipe \lsarpc.
>[2012/05/29 20:04:45.954581,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \lsarpc
>[2012/05/29 20:04:45.954616,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.954632,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.954644,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.954680,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.954721,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.954737,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.954749,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.954775,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.954796,  4] rpc_server/srv_pipe_hnd.c:162(make_internal_rpc_pipe_p)
>  Created internal pipe \lsarpc (pipes_open=0)
>[2012/05/29 20:04:45.955225,  3] smbd/process.c:1489(process_smb)
>  Transaction 17 of length 90 (0 toread)
>[2012/05/29 20:04:45.955424,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtconX (pid 32737) conn 0x0
>[2012/05/29 20:04:45.955440,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.955473,  4] smbd/reply.c:786(reply_tcon_and_X)
>  Client requested device type [?????] for share [NETLOGON]
>[2012/05/29 20:04:45.955508,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.955522,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.955533,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.955573,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.955593,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.955618,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.955630,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.955655,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.955686,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.955700,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.955711,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.955735,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.955773,  3] smbd/service.c:807(make_connection_snum)
>  Connect path is '/var/lib/samba/netlogon' for service [netlogon]
>[2012/05/29 20:04:45.955804,  3] smbd/vfs.c:97(vfs_init_default)
>  Initialising default vfs hooks
>[2012/05/29 20:04:45.955819,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2012/05/29 20:04:45.956024,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid administrator does not start with 'S-'.
>[2012/05/29 20:04:45.956048,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.956061,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.956073,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.956985,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: Administrator
>[2012/05/29 20:04:45.957094,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.957110,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.957122,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.957152,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.957204,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.957217,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.957228,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.957252,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.957271,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.957283,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.957295,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.957317,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.957346,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.957361,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.957372,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.957395,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.957420,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.957439,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid join-backup does not start with 'S-'.
>[2012/05/29 20:04:45.957456,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.957468,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.957479,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.957991,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: join-backup
>[2012/05/29 20:04:45.958107,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.958125,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.958136,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.958164,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.958210,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.958224,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.958236,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.958259,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.958286,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.958299,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.958311,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.958328,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:45.958340,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.958351,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:45.958762,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11017] count=0
>[2012/05/29 20:04:45.959278,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5008
>[2012/05/29 20:04:45.959326,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.959346,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.959362,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.959374,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.959386,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.959412,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.959443,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.959457,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.959469,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:45.959493,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.959517,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.959540,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.959554,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.959580,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.959604,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.959619,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.959631,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.959643,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.959665,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.959692,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.959718,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.959730,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:45.959754,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.959776,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.959816,  1] smbd/service.c:1070(make_connection_snum)
>  winxpsp3ar2 (::ffff:10.200.8.230) connect to service netlogon initially as user schueler1 (uid=2010, gid=5038) (pid 32737)
>[2012/05/29 20:04:45.959836,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.959860,  3] smbd/reply.c:865(reply_tcon_and_X)
>  tconX service=NETLOGON 
>[2012/05/29 20:04:45.960009,  3] smbd/process.c:1489(process_smb)
>  Transaction 18 of length 140 (0 toread)
>[2012/05/29 20:04:45.960036,  3] smbd/process.c:1298(switch_message)
>  switch message SMBwriteX (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:45.960052,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.960091,  3] rpc_server/srv_pipe.c:1668(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsarpc
>[2012/05/29 20:04:45.960108,  3] rpc_server/srv_pipe.c:998(check_bind_req)
>  check_bind_req for \lsarpc
>[2012/05/29 20:04:45.960142,  3] smbd/pipes.c:352(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2012/05/29 20:04:45.960501,  3] smbd/process.c:1489(process_smb)
>  Transaction 19 of length 106 (0 toread)
>[2012/05/29 20:04:45.960534,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:45.960552,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.960576,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /var/lib/samba/netlogon
>[2012/05/29 20:04:45.960604,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:45.960820,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [ntconfig.pol] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:45.960858,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ntconfig.pol reduced to /var/lib/samba/netlogon/ntconfig.pol
>[2012/05/29 20:04:45.960878,  3] smbd/trans2.c:5209(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of ntconfig.pol failed (Datei oder Verzeichnis nicht gefunden)
>[2012/05/29 20:04:45.960931,  3] smbd/error.c:80(error_packet_set)
>  error packet at smbd/trans2.c(5211) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2012/05/29 20:04:45.961055,  3] smbd/process.c:1489(process_smb)
>  Transaction 20 of length 63 (0 toread)
>[2012/05/29 20:04:45.961082,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:45.961097,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:45.961120,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2012/05/29 20:04:45.961144,  3] smbd/pipes.c:462(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2012/05/29 20:04:46.247852,  3] smbd/process.c:1489(process_smb)
>  Transaction 21 of length 176 (0 toread)
>[2012/05/29 20:04:46.247941,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.247957,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.247991,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=88 params=0 setup=2
>[2012/05/29 20:04:46.248012,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.248026,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "lsarpc" (pnum 1a67)
>[2012/05/29 20:04:46.248053,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 80
>[2012/05/29 20:04:46.248105,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \lsarpc op 0x2c - api_rpcTNP: rpc command: LSA_OPENPOLICY2
>[2012/05/29 20:04:46.248155,  4] rpc_server/srv_samr_nt.c:230(access_check_object)
>  _lsa_OpenPolicy2: access GRANTED (requested: 0x00000001, granted: 0x00000001)
>[2012/05/29 20:04:46.248213,  4] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal)
>  Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.248259,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 1112
>[2012/05/29 20:04:46.248962,  3] smbd/process.c:1489(process_smb)
>  Transaction 22 of length 134 (0 toread)
>[2012/05/29 20:04:46.249008,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.249022,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.249045,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=46 params=0 setup=2
>[2012/05/29 20:04:46.249060,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.249073,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "lsarpc" (pnum 1a67)
>[2012/05/29 20:04:46.249092,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.249108,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \lsarpc op 0x7 - api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY
>[2012/05/29 20:04:46.249132,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.249173,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 100
>[2012/05/29 20:04:46.249782,  3] smbd/process.c:1489(process_smb)
>  Transaction 23 of length 132 (0 toread)
>[2012/05/29 20:04:46.249819,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.249833,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.249850,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2012/05/29 20:04:46.249865,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.249877,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "lsarpc" (pnum 1a67)
>[2012/05/29 20:04:46.249895,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.249910,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \lsarpc op 0x0 - api_rpcTNP: rpc command: LSA_CLOSE
>[2012/05/29 20:04:46.249935,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.249968,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.249998,  3] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd)
>  Closed policy
>[2012/05/29 20:04:46.250015,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.250690,  3] smbd/process.c:1489(process_smb)
>  Transaction 24 of length 45 (0 toread)
>[2012/05/29 20:04:46.250791,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.250848,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.250896,  3] smbd/reply.c:4653(reply_close)
>  close fd=-1 fnum=6759 (numopen=1)
>[2012/05/29 20:04:46.251892,  3] smbd/process.c:1489(process_smb)
>  Transaction 25 of length 100 (0 toread)
>[2012/05/29 20:04:46.251937,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.251951,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.251971,  4] smbd/nttrans.c:283(nt_open_pipe)
>  nt_open_pipe: Opening pipe \samr.
>[2012/05/29 20:04:46.252002,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \samr
>[2012/05/29 20:04:46.252039,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.252056,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.252069,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.252238,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.252322,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.252339,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.252390,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.252424,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.252489,  4] rpc_server/srv_pipe_hnd.c:162(make_internal_rpc_pipe_p)
>  Created internal pipe \samr (pipes_open=0)
>[2012/05/29 20:04:46.253318,  3] smbd/process.c:1489(process_smb)
>  Transaction 26 of length 140 (0 toread)
>[2012/05/29 20:04:46.253442,  3] smbd/process.c:1298(switch_message)
>  switch message SMBwriteX (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.253459,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.253490,  3] rpc_server/srv_pipe.c:1668(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\samr -> \PIPE\samr
>[2012/05/29 20:04:46.253506,  3] rpc_server/srv_pipe.c:998(check_bind_req)
>  check_bind_req for \samr
>[2012/05/29 20:04:46.253534,  3] smbd/pipes.c:352(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2012/05/29 20:04:46.254059,  3] smbd/process.c:1489(process_smb)
>  Transaction 27 of length 63 (0 toread)
>[2012/05/29 20:04:46.254090,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.254103,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.254185,  3] smbd/pipes.c:462(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2012/05/29 20:04:46.254733,  3] smbd/process.c:1489(process_smb)
>  Transaction 28 of length 168 (0 toread)
>[2012/05/29 20:04:46.254766,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.254780,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.254798,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=80 params=0 setup=2
>[2012/05/29 20:04:46.254814,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.254826,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a68)
>[2012/05/29 20:04:46.254846,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 78
>[2012/05/29 20:04:46.254863,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x40 - api_rpcTNP: rpc command: SAMR_CONNECT5
>[2012/05/29 20:04:46.254970,  4] rpc_server/srv_samr_nt.c:230(access_check_object)
>  _samr_Connect5: access GRANTED (requested: 0x00020031, granted: 0x00020031)
>[2012/05/29 20:04:46.255046,  4] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal)
>  Opened policy hnd[1] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.255111,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 1042
>[2012/05/29 20:04:46.255743,  3] smbd/process.c:1489(process_smb)
>  Transaction 29 of length 158 (0 toread)
>[2012/05/29 20:04:46.255776,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.255791,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.255807,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=70 params=0 setup=2
>[2012/05/29 20:04:46.255879,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.255902,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a68)
>[2012/05/29 20:04:46.255921,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:04:46.255936,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x5 - api_rpcTNP: rpc command: SAMR_LOOKUPDOMAIN
>[2012/05/29 20:04:46.256007,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.256096,  2] rpc_server/srv_samr_nt.c:4124(_samr_LookupDomain)
>  Returning domain sid for domain S3I -> S-1-5-21-3785813934-3866640808-4451219
>[2012/05/29 20:04:46.256176,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 94
>[2012/05/29 20:04:46.256815,  3] smbd/process.c:1489(process_smb)
>  Transaction 30 of length 164 (0 toread)
>[2012/05/29 20:04:46.256889,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.256906,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.256924,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=76 params=0 setup=2
>[2012/05/29 20:04:46.256938,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.256950,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a68)
>[2012/05/29 20:04:46.256969,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:04:46.256984,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x7 - api_rpcTNP: rpc command: SAMR_OPENDOMAIN
>[2012/05/29 20:04:46.257008,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.257049,  4] rpc_server/srv_samr_nt.c:230(access_check_object)
>  _samr_OpenDomain: access GRANTED (requested: 0x00020285, granted: 0x00020295)
>[2012/05/29 20:04:46.257065,  4] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal)
>  Opened policy hnd[2] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.257100,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 1042
>[2012/05/29 20:04:46.257694,  3] smbd/process.c:1489(process_smb)
>  Transaction 31 of length 186 (0 toread)
>[2012/05/29 20:04:46.257725,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.257738,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.257754,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=98 params=0 setup=2
>[2012/05/29 20:04:46.257768,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.257799,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a68)
>[2012/05/29 20:04:46.257819,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:04:46.257833,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x11 - api_rpcTNP: rpc command: SAMR_LOOKUPNAMES
>[2012/05/29 20:04:46.257870,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.257911,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.257927,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.257939,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.258782,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: schueler1
>[2012/05/29 20:04:46.258907,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.258924,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.258936,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.258973,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.259081,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.259096,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.259108,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.259132,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.259162,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.259176,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.259187,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.259205,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:46.259218,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.259229,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:46.259658,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11077] count=0
>[2012/05/29 20:04:46.260119,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5038
>[2012/05/29 20:04:46.260170,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.260189,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.260206,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.260218,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.260230,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.260257,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.260292,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.260306,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.260318,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.260340,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.260387,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.260427,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 34
>[2012/05/29 20:04:46.261168,  3] smbd/process.c:1489(process_smb)
>  Transaction 32 of length 140 (0 toread)
>[2012/05/29 20:04:46.261261,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.261279,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.261298,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=52 params=0 setup=2
>[2012/05/29 20:04:46.261313,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.261325,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a68)
>[2012/05/29 20:04:46.261398,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:04:46.261422,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x22 - api_rpcTNP: rpc command: SAMR_OPENUSER
>[2012/05/29 20:04:46.261462,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.261526,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.261544,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.261556,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.261582,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.261640,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.261652,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.261685,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.261703,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.261715,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.261726,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.261748,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.261803,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.261824,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.261836,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.261898,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.261926,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.261982,  4] rpc_server/srv_samr_nt.c:230(access_check_object)
>  _samr_OpenUser: access GRANTED (requested: 0x0002031a, granted: 0x000f07fe)
>[2012/05/29 20:04:46.262004,  4] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal)
>  Opened policy hnd[3] [0000] 00 00 00 00 04 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.262044,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 1274
>[2012/05/29 20:04:46.262696,  3] smbd/process.c:1489(process_smb)
>  Transaction 33 of length 134 (0 toread)
>[2012/05/29 20:04:46.262782,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.262805,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.262841,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=46 params=0 setup=2
>[2012/05/29 20:04:46.262894,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.262910,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a68)
>[2012/05/29 20:04:46.262929,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:04:46.262981,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x24 - api_rpcTNP: rpc command: SAMR_QUERYUSERINFO
>[2012/05/29 20:04:46.263175,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.263254,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.263273,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.263285,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.263309,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.263323,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.263334,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.263418,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.263437,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.263450,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.263461,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.263483,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.263515,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.263565,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.263604,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.263669,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.263734,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.263752,  3] rpc_server/srv_samr_nt.c:3064(_samr_QueryUserInfo)
>  User:[schueler1]
>[2012/05/29 20:04:46.263765,  3] rpc_server/srv_samr_nt.c:2810(get_user_info_20)
>  User:[schueler1] has [] (length: 0)
>[2012/05/29 20:04:46.263793,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 898
>[2012/05/29 20:04:46.264521,  3] smbd/process.c:1489(process_smb)
>  Transaction 34 of length 132 (0 toread)
>[2012/05/29 20:04:46.264556,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.264570,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.264586,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2012/05/29 20:04:46.264601,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.264613,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a68)
>[2012/05/29 20:04:46.264631,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:04:46.264646,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE
>[2012/05/29 20:04:46.264671,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.264773,  3] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd)
>  Closed policy
>[2012/05/29 20:04:46.264793,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:04:46.265351,  3] smbd/process.c:1489(process_smb)
>  Transaction 35 of length 132 (0 toread)
>[2012/05/29 20:04:46.265455,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.265482,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.265532,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2012/05/29 20:04:46.265549,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.265561,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a68)
>[2012/05/29 20:04:46.265579,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:04:46.265594,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE
>[2012/05/29 20:04:46.265611,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[1] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.265643,  3] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd)
>  Closed policy
>[2012/05/29 20:04:46.265801,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:04:46.266608,  3] smbd/process.c:1489(process_smb)
>  Transaction 36 of length 132 (0 toread)
>[2012/05/29 20:04:46.266652,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.266666,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.266683,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2012/05/29 20:04:46.266709,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.266788,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a68)
>[2012/05/29 20:04:46.266812,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:04:46.266828,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE
>[2012/05/29 20:04:46.266848,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.266881,  3] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd)
>  Closed policy
>[2012/05/29 20:04:46.266898,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:04:46.267604,  3] smbd/process.c:1489(process_smb)
>  Transaction 37 of length 45 (0 toread)
>[2012/05/29 20:04:46.267695,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.267712,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.267726,  3] smbd/reply.c:4653(reply_close)
>  close fd=-1 fnum=6760 (numopen=1)
>[2012/05/29 20:04:46.268575,  3] smbd/process.c:1489(process_smb)
>  Transaction 38 of length 104 (0 toread)
>[2012/05/29 20:04:46.268620,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.268634,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.268653,  4] smbd/nttrans.c:283(nt_open_pipe)
>  nt_open_pipe: Opening pipe \winreg.
>[2012/05/29 20:04:46.268709,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \winreg
>[2012/05/29 20:04:46.268754,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.268796,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.268812,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.268864,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.268906,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.268923,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.268935,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.269016,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.269042,  4] rpc_server/srv_pipe_hnd.c:162(make_internal_rpc_pipe_p)
>  Created internal pipe \winreg (pipes_open=0)
>[2012/05/29 20:04:46.269932,  3] smbd/process.c:1489(process_smb)
>  Transaction 39 of length 140 (0 toread)
>[2012/05/29 20:04:46.270020,  3] smbd/process.c:1298(switch_message)
>  switch message SMBwriteX (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.270035,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.270361,  3] rpc_server/srv_pipe.c:1668(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\winreg -> \PIPE\winreg
>[2012/05/29 20:04:46.270388,  3] rpc_server/srv_pipe.c:998(check_bind_req)
>  check_bind_req for \winreg
>[2012/05/29 20:04:46.270421,  3] smbd/pipes.c:352(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2012/05/29 20:04:46.271359,  3] smbd/process.c:1489(process_smb)
>  Transaction 40 of length 63 (0 toread)
>[2012/05/29 20:04:46.271483,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.271537,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.271571,  3] smbd/pipes.c:462(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2012/05/29 20:04:46.272268,  3] smbd/process.c:1489(process_smb)
>  Transaction 41 of length 124 (0 toread)
>[2012/05/29 20:04:46.272306,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.272359,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.272383,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=36 params=0 setup=2
>[2012/05/29 20:04:46.272421,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.272437,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.272493,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 80
>[2012/05/29 20:04:46.272517,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x2 - api_rpcTNP: rpc command: WINREG_OPENHKLM
>[2012/05/29 20:04:46.272563,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.272580,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.272643,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.272822,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.272937,  4] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal)
>  Opened policy hnd[1] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.273034,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.273747,  3] smbd/process.c:1489(process_smb)
>  Transaction 42 of length 308 (0 toread)
>[2012/05/29 20:04:46.273789,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.273803,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.273823,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=220 params=0 setup=2
>[2012/05/29 20:04:46.273838,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.273893,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.273973,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.273997,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0xf - api_rpcTNP: rpc command: WINREG_OPENKEY
>[2012/05/29 20:04:46.274035,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.274373,  4] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal)
>  Opened policy hnd[2] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.274429,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.275309,  3] smbd/process.c:1489(process_smb)
>  Transaction 43 of length 228 (0 toread)
>[2012/05/29 20:04:46.275348,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.275362,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.275380,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=140 params=0 setup=2
>[2012/05/29 20:04:46.275395,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.275407,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.275427,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.275442,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.275534,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.275642,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.276293,  3] smbd/process.c:1489(process_smb)
>  Transaction 44 of length 232 (0 toread)
>[2012/05/29 20:04:46.276402,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.276428,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.276445,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=144 params=0 setup=2
>[2012/05/29 20:04:46.276459,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.276471,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.276490,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.276504,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.276524,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.276673,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.277604,  3] smbd/process.c:1489(process_smb)
>  Transaction 45 of length 236 (0 toread)
>[2012/05/29 20:04:46.277641,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.277654,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.277670,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=148 params=0 setup=2
>[2012/05/29 20:04:46.277685,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.277697,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.277716,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.277730,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.277751,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.277788,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.278443,  3] smbd/process.c:1489(process_smb)
>  Transaction 46 of length 240 (0 toread)
>[2012/05/29 20:04:46.278483,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.278496,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.278512,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=152 params=0 setup=2
>[2012/05/29 20:04:46.278527,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.278538,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.278556,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.278570,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.278589,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.278626,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.279138,  3] smbd/process.c:1489(process_smb)
>  Transaction 47 of length 228 (0 toread)
>[2012/05/29 20:04:46.279168,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.279181,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.279197,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=140 params=0 setup=2
>[2012/05/29 20:04:46.279224,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.279237,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.279255,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.279270,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.279288,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.279352,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.279882,  3] smbd/process.c:1489(process_smb)
>  Transaction 48 of length 240 (0 toread)
>[2012/05/29 20:04:46.279913,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.279926,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.279958,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=152 params=0 setup=2
>[2012/05/29 20:04:46.279974,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.279985,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.280003,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.280017,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.280037,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.280073,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.280788,  3] smbd/process.c:1489(process_smb)
>  Transaction 49 of length 224 (0 toread)
>[2012/05/29 20:04:46.280819,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.280833,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.280848,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=136 params=0 setup=2
>[2012/05/29 20:04:46.280863,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.280875,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.280893,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.280907,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.280927,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.280964,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.280982,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.281524,  3] smbd/process.c:1489(process_smb)
>  Transaction 50 of length 240 (0 toread)
>[2012/05/29 20:04:46.281556,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.281574,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.281598,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=152 params=0 setup=2
>[2012/05/29 20:04:46.281615,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.281627,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.281644,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.281659,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.281678,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.281735,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.282414,  3] smbd/process.c:1489(process_smb)
>  Transaction 51 of length 252 (0 toread)
>[2012/05/29 20:04:46.282451,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.282465,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.282482,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=164 params=0 setup=2
>[2012/05/29 20:04:46.282497,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.282510,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.282528,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.282542,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.282563,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.282616,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.283128,  3] smbd/process.c:1489(process_smb)
>  Transaction 52 of length 232 (0 toread)
>[2012/05/29 20:04:46.283158,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.283171,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.283186,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=144 params=0 setup=2
>[2012/05/29 20:04:46.283200,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.283212,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.283229,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.283243,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.283262,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.283299,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.283841,  3] smbd/process.c:1489(process_smb)
>  Transaction 53 of length 232 (0 toread)
>[2012/05/29 20:04:46.283882,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.283896,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.283911,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=144 params=0 setup=2
>[2012/05/29 20:04:46.283926,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.283938,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.283955,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.283969,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.283989,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.284049,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.284576,  3] smbd/process.c:1489(process_smb)
>  Transaction 54 of length 228 (0 toread)
>[2012/05/29 20:04:46.284610,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.284623,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.284640,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=140 params=0 setup=2
>[2012/05/29 20:04:46.284654,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.284666,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.284685,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.284699,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.284719,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.284756,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.285254,  3] smbd/process.c:1489(process_smb)
>  Transaction 55 of length 232 (0 toread)
>[2012/05/29 20:04:46.285283,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.285296,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.285311,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=144 params=0 setup=2
>[2012/05/29 20:04:46.285325,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.285337,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.285354,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.285368,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.285386,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.285422,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.285923,  3] smbd/process.c:1489(process_smb)
>  Transaction 56 of length 232 (0 toread)
>[2012/05/29 20:04:46.285953,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.285966,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.285981,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=144 params=0 setup=2
>[2012/05/29 20:04:46.285995,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.286007,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.286024,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.286038,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.286056,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.286092,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.286634,  3] smbd/process.c:1489(process_smb)
>  Transaction 57 of length 220 (0 toread)
>[2012/05/29 20:04:46.286662,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.286675,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.286691,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=132 params=0 setup=2
>[2012/05/29 20:04:46.286705,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.286716,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.286734,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.286748,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.286766,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.286802,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.287321,  3] smbd/process.c:1489(process_smb)
>  Transaction 58 of length 224 (0 toread)
>[2012/05/29 20:04:46.287349,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.287362,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.287377,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=136 params=0 setup=2
>[2012/05/29 20:04:46.287391,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.287402,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.287420,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.287434,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.287452,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.287488,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.288018,  3] smbd/process.c:1489(process_smb)
>  Transaction 59 of length 224 (0 toread)
>[2012/05/29 20:04:46.288046,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.288059,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.288073,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=136 params=0 setup=2
>[2012/05/29 20:04:46.288088,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.288099,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.288116,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.288130,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.288148,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.288196,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.288744,  3] smbd/process.c:1489(process_smb)
>  Transaction 60 of length 228 (0 toread)
>[2012/05/29 20:04:46.288773,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.288786,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.288801,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=140 params=0 setup=2
>[2012/05/29 20:04:46.288815,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.288827,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.288844,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.288858,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.288876,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.288912,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.289494,  3] smbd/process.c:1489(process_smb)
>  Transaction 61 of length 224 (0 toread)
>[2012/05/29 20:04:46.289522,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.289535,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.289550,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=136 params=0 setup=2
>[2012/05/29 20:04:46.289564,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.289576,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.289593,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.289607,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.289625,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.289661,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.290191,  3] smbd/process.c:1489(process_smb)
>  Transaction 62 of length 232 (0 toread)
>[2012/05/29 20:04:46.290230,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.290244,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.290259,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=144 params=0 setup=2
>[2012/05/29 20:04:46.290273,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.290285,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.290302,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.290316,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.290335,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.290371,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.290891,  3] smbd/process.c:1489(process_smb)
>  Transaction 63 of length 232 (0 toread)
>[2012/05/29 20:04:46.290931,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.290945,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.290960,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=144 params=0 setup=2
>[2012/05/29 20:04:46.290974,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.291014,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.291037,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.291051,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.291070,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.291106,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.291643,  3] smbd/process.c:1489(process_smb)
>  Transaction 64 of length 236 (0 toread)
>[2012/05/29 20:04:46.291671,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.291684,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.291699,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=148 params=0 setup=2
>[2012/05/29 20:04:46.291713,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.291724,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.291741,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.291755,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.291773,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.291809,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.292324,  3] smbd/process.c:1489(process_smb)
>  Transaction 65 of length 224 (0 toread)
>[2012/05/29 20:04:46.292352,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.292365,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.292380,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=136 params=0 setup=2
>[2012/05/29 20:04:46.292395,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.292406,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.292424,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.292438,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.292456,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.292492,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.293024,  3] smbd/process.c:1489(process_smb)
>  Transaction 66 of length 216 (0 toread)
>[2012/05/29 20:04:46.293053,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.293078,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.293093,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=128 params=0 setup=2
>[2012/05/29 20:04:46.293108,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.293119,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.293137,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.293150,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.293169,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.293205,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.293734,  3] smbd/process.c:1489(process_smb)
>  Transaction 67 of length 216 (0 toread)
>[2012/05/29 20:04:46.293763,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.293776,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.293791,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=128 params=0 setup=2
>[2012/05/29 20:04:46.293805,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.293817,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.293834,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.293848,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.293866,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.293902,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.294414,  3] smbd/process.c:1489(process_smb)
>  Transaction 68 of length 216 (0 toread)
>[2012/05/29 20:04:46.294443,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.294456,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.294471,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=128 params=0 setup=2
>[2012/05/29 20:04:46.294485,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.294496,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.294513,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.294527,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.294546,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.294582,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.295126,  3] smbd/process.c:1489(process_smb)
>  Transaction 69 of length 216 (0 toread)
>[2012/05/29 20:04:46.295154,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.295177,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.295193,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=128 params=0 setup=2
>[2012/05/29 20:04:46.295208,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.295219,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.295236,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.295250,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.295269,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.295305,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.295823,  3] smbd/process.c:1489(process_smb)
>  Transaction 70 of length 220 (0 toread)
>[2012/05/29 20:04:46.295852,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.295865,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.295880,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=132 params=0 setup=2
>[2012/05/29 20:04:46.295894,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.295906,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.295923,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.295937,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.295956,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.295991,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.296515,  3] smbd/process.c:1489(process_smb)
>  Transaction 71 of length 216 (0 toread)
>[2012/05/29 20:04:46.296544,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.296556,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.296571,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=128 params=0 setup=2
>[2012/05/29 20:04:46.296586,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.296597,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.296614,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.296628,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.296647,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.296683,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.297173,  3] smbd/process.c:1489(process_smb)
>  Transaction 72 of length 216 (0 toread)
>[2012/05/29 20:04:46.297202,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.297214,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.297241,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=128 params=0 setup=2
>[2012/05/29 20:04:46.297256,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.297267,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.297284,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.297298,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.297317,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.297353,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.297871,  3] smbd/process.c:1489(process_smb)
>  Transaction 73 of length 212 (0 toread)
>[2012/05/29 20:04:46.297899,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.297912,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.297927,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=124 params=0 setup=2
>[2012/05/29 20:04:46.297941,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.297953,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.297970,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.297984,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.298002,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.298038,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.298550,  3] smbd/process.c:1489(process_smb)
>  Transaction 74 of length 208 (0 toread)
>[2012/05/29 20:04:46.298579,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.298591,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.298606,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=120 params=0 setup=2
>[2012/05/29 20:04:46.298620,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.298632,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.298649,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.298663,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.298681,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.298717,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.299216,  3] smbd/process.c:1489(process_smb)
>  Transaction 75 of length 212 (0 toread)
>[2012/05/29 20:04:46.299244,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.299257,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.299272,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=124 params=0 setup=2
>[2012/05/29 20:04:46.299298,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.299310,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.299328,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.299342,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.299360,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.299396,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.299898,  3] smbd/process.c:1489(process_smb)
>  Transaction 76 of length 220 (0 toread)
>[2012/05/29 20:04:46.299926,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.299939,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.299955,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=132 params=0 setup=2
>[2012/05/29 20:04:46.299969,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.299980,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.299998,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.300012,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.300030,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.300066,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.300627,  3] smbd/process.c:1489(process_smb)
>  Transaction 77 of length 224 (0 toread)
>[2012/05/29 20:04:46.300656,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.300669,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.300683,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=136 params=0 setup=2
>[2012/05/29 20:04:46.300698,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.300710,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.300727,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.300743,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.300762,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.300797,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.301297,  3] smbd/process.c:1489(process_smb)
>  Transaction 78 of length 224 (0 toread)
>[2012/05/29 20:04:46.301325,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.301338,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.301353,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=136 params=0 setup=2
>[2012/05/29 20:04:46.301390,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.301404,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.301422,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.301436,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.301454,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.301678,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.302177,  3] smbd/process.c:1489(process_smb)
>  Transaction 79 of length 212 (0 toread)
>[2012/05/29 20:04:46.302205,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.302218,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.302233,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=124 params=0 setup=2
>[2012/05/29 20:04:46.302247,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.302259,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.302277,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.302291,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.302309,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.302345,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.302840,  3] smbd/process.c:1489(process_smb)
>  Transaction 80 of length 208 (0 toread)
>[2012/05/29 20:04:46.302869,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.302882,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.302896,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=120 params=0 setup=2
>[2012/05/29 20:04:46.302911,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.302922,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.302939,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.302953,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.302972,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.303039,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.303542,  3] smbd/process.c:1489(process_smb)
>  Transaction 81 of length 228 (0 toread)
>[2012/05/29 20:04:46.303570,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.303583,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.303598,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=140 params=0 setup=2
>[2012/05/29 20:04:46.303613,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.303636,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.303655,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.303669,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.303688,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.303724,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.304237,  3] smbd/process.c:1489(process_smb)
>  Transaction 82 of length 236 (0 toread)
>[2012/05/29 20:04:46.304265,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.304278,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.304293,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=148 params=0 setup=2
>[2012/05/29 20:04:46.304307,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.304319,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.304337,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.304351,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.304369,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.304405,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.304903,  3] smbd/process.c:1489(process_smb)
>  Transaction 83 of length 216 (0 toread)
>[2012/05/29 20:04:46.304931,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.304944,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.304959,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=128 params=0 setup=2
>[2012/05/29 20:04:46.304973,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.304985,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.305002,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.305016,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.305034,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.305070,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.305588,  3] smbd/process.c:1489(process_smb)
>  Transaction 84 of length 224 (0 toread)
>[2012/05/29 20:04:46.305616,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.305629,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.305644,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=136 params=0 setup=2
>[2012/05/29 20:04:46.305658,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.305669,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.305698,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.305713,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.305732,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.305768,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.306285,  3] smbd/process.c:1489(process_smb)
>  Transaction 85 of length 232 (0 toread)
>[2012/05/29 20:04:46.306313,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.306326,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.306341,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=144 params=0 setup=2
>[2012/05/29 20:04:46.306355,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.306367,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.306384,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.306398,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.306416,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.306452,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.307009,  3] smbd/process.c:1489(process_smb)
>  Transaction 86 of length 232 (0 toread)
>[2012/05/29 20:04:46.307037,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.307050,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.307065,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=144 params=0 setup=2
>[2012/05/29 20:04:46.307080,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.307091,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.307108,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.307122,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0xf - api_rpcTNP: rpc command: WINREG_OPENKEY
>[2012/05/29 20:04:46.307141,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.307211,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.307713,  3] smbd/process.c:1489(process_smb)
>  Transaction 87 of length 220 (0 toread)
>[2012/05/29 20:04:46.307741,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.307754,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.307769,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=132 params=0 setup=2
>[2012/05/29 20:04:46.307783,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.307794,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.307823,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.307838,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.307857,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.307894,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.308382,  3] smbd/process.c:1489(process_smb)
>  Transaction 88 of length 220 (0 toread)
>[2012/05/29 20:04:46.308410,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.308423,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.308438,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=132 params=0 setup=2
>[2012/05/29 20:04:46.308453,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.308464,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.308481,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.308495,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.308513,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.308549,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.309087,  3] smbd/process.c:1489(process_smb)
>  Transaction 89 of length 212 (0 toread)
>[2012/05/29 20:04:46.309115,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.309128,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.309143,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=124 params=0 setup=2
>[2012/05/29 20:04:46.309158,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.309169,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.309186,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.309200,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.309218,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.309254,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.309799,  3] smbd/process.c:1489(process_smb)
>  Transaction 90 of length 224 (0 toread)
>[2012/05/29 20:04:46.309827,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.309840,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.309855,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=136 params=0 setup=2
>[2012/05/29 20:04:46.309869,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.309881,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.309898,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.309927,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.309946,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.309983,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.310517,  3] smbd/process.c:1489(process_smb)
>  Transaction 91 of length 216 (0 toread)
>[2012/05/29 20:04:46.310545,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.310558,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.310573,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=128 params=0 setup=2
>[2012/05/29 20:04:46.310588,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.310599,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.310616,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.310630,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x11 - api_rpcTNP: rpc command: WINREG_QUERYVALUE
>[2012/05/29 20:04:46.310649,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.310685,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.311201,  3] smbd/process.c:1489(process_smb)
>  Transaction 92 of length 132 (0 toread)
>[2012/05/29 20:04:46.311228,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.311241,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.311256,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2012/05/29 20:04:46.311271,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.311282,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.311299,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.311313,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x5 - api_rpcTNP: rpc command: WINREG_CLOSEKEY
>[2012/05/29 20:04:46.311331,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.311362,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.311391,  3] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd)
>  Closed policy
>[2012/05/29 20:04:46.311406,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.311940,  3] smbd/process.c:1489(process_smb)
>  Transaction 93 of length 132 (0 toread)
>[2012/05/29 20:04:46.311968,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.311981,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.311996,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2012/05/29 20:04:46.312011,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:46.312034,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "winreg" (pnum 1a69)
>[2012/05/29 20:04:46.312052,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.312066,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \winreg op 0x5 - api_rpcTNP: rpc command: WINREG_CLOSEKEY
>[2012/05/29 20:04:46.312082,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.312114,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 C5 4F BE 0F   ........ .....O..
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:04:46.312144,  3] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd)
>  Closed policy
>[2012/05/29 20:04:46.312197,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 28
>[2012/05/29 20:04:46.312757,  3] smbd/process.c:1489(process_smb)
>  Transaction 94 of length 45 (0 toread)
>[2012/05/29 20:04:46.312786,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:46.312799,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.312812,  3] smbd/reply.c:4653(reply_close)
>  close fd=-1 fnum=6761 (numopen=1)
>[2012/05/29 20:04:46.651027,  3] smbd/process.c:1489(process_smb)
>  Transaction 95 of length 92 (0 toread)
>[2012/05/29 20:04:46.651129,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtconX (pid 32737) conn 0x0
>[2012/05/29 20:04:46.651155,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.651208,  4] smbd/reply.c:786(reply_tcon_and_X)
>  Client requested device type [?????] for share [SCHUELER1]
>[2012/05/29 20:04:46.651253,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.651269,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.651281,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.651321,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.651340,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.651353,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.651364,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.651386,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.651427,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.651442,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.651454,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.651477,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.651517,  3] smbd/service.c:807(make_connection_snum)
>  Connect path is '/home/schueler1' for service [schueler1]
>[2012/05/29 20:04:46.651545,  3] smbd/vfs.c:97(vfs_init_default)
>  Initialising default vfs hooks
>[2012/05/29 20:04:46.651558,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2012/05/29 20:04:46.651572,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [acl_xattr]
>[2012/05/29 20:04:46.651796,  2] lib/module.c:64(do_smb_load_module)
>  Module '/usr/lib/samba/vfs/acl_xattr.so' loaded
>[2012/05/29 20:04:46.651890,  2] modules/vfs_acl_xattr.c:193(connect_acl_xattr)
>  connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service schueler1
>[2012/05/29 20:04:46.651995,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid administrator does not start with 'S-'.
>[2012/05/29 20:04:46.652016,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.652029,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.652040,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.652878,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: Administrator
>[2012/05/29 20:04:46.652996,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.653015,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.653027,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.653060,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.653114,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.653129,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.653140,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.653163,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.653184,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.653196,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.653208,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.653230,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.653261,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.653276,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.653287,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.653311,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.653335,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.653356,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid join-backup does not start with 'S-'.
>[2012/05/29 20:04:46.653372,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.653384,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.653395,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.653957,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: join-backup
>[2012/05/29 20:04:46.654067,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.654084,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.654095,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.654128,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.654175,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.654190,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.654202,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.654225,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.654268,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.654283,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.654295,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.654312,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:46.654325,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.654337,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:46.654765,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11017] count=0
>[2012/05/29 20:04:46.655256,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5008
>[2012/05/29 20:04:46.655309,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.655329,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.655346,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.655359,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.655370,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.655398,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.655432,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.655446,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.655458,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:46.655482,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.655506,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.655532,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.655545,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.655556,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.655579,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.655594,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.655606,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.655617,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.655638,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.655665,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.655679,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.655690,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:46.655713,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.655737,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.655778,  1] smbd/service.c:1070(make_connection_snum)
>  winxpsp3ar2 (::ffff:10.200.8.230) connect to service schueler1 initially as user schueler1 (uid=2010, gid=5038) (pid 32737)
>[2012/05/29 20:04:46.655798,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.655823,  3] smbd/reply.c:865(reply_tcon_and_X)
>  tconX service=SCHUELER1 
>[2012/05/29 20:04:46.699083,  3] smbd/process.c:1489(process_smb)
>  Transaction 96 of length 80 (0 toread)
>[2012/05/29 20:04:46.699202,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:46.699226,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.699269,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:04:46.699294,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:46.699320,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/schueler1]
>[2012/05/29 20:04:46.699342,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/schueler1
>[2012/05/29 20:04:46.699388,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:46.699453,  1] smbd/dosmode.c:255(get_ea_dos_attribute)
>  get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Die Operation wird nicht unterstÃ¼tzt
>[2012/05/29 20:04:46.802517,  3] smbd/process.c:1489(process_smb)
>  Transaction 97 of length 80 (0 toread)
>[2012/05/29 20:04:46.802600,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:46.802622,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.802661,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /var/lib/samba/netlogon
>[2012/05/29 20:04:46.802686,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:46.802713,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:46.802741,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /var/lib/samba/netlogon
>[2012/05/29 20:04:46.802769,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:46.802793,  1] smbd/dosmode.c:255(get_ea_dos_attribute)
>  get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Die Operation wird nicht unterstÃ¼tzt
>[2012/05/29 20:04:46.829440,  3] smbd/process.c:1489(process_smb)
>  Transaction 98 of length 80 (0 toread)
>[2012/05/29 20:04:46.829525,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:46.829541,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.829561,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1034
>[2012/05/29 20:04:46.829602,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:46.829639,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /var/lib/samba/netlogon
>[2012/05/29 20:04:46.829671,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1034 call=5 total_data=0
>[2012/05/29 20:04:46.921779,  3] smbd/process.c:1489(process_smb)
>  Transaction 99 of length 122 (0 toread)
>[2012/05/29 20:04:46.921861,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:46.921878,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:46.921897,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:46.921965,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [ucs-school-logon.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:46.922001,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ucs-school-logon.vbs reduced to /var/lib/samba/netlogon/ucs-school-logon.vbs
>[2012/05/29 20:04:46.922036,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo ucs-school-logon.vbs (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:46.922237,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.923071,  3] smbd/process.c:1489(process_smb)
>  Transaction 100 of length 122 (0 toread)
>[2012/05/29 20:04:46.923100,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:46.923117,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:46.923140,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:46.923162,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [ucs-school-logon.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:46.923184,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ucs-school-logon.vbs reduced to /var/lib/samba/netlogon/ucs-school-logon.vbs
>[2012/05/29 20:04:46.923202,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo ucs-school-logon.vbs (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.034334,  3] smbd/process.c:1489(process_smb)
>  Transaction 101 of length 110 (0 toread)
>[2012/05/29 20:04:47.034419,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.034441,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.034481,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:04:47.034505,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.034540,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.034569,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.034605,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.059260,  3] smbd/process.c:1489(process_smb)
>  Transaction 102 of length 110 (0 toread)
>[2012/05/29 20:04:47.059337,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.059352,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.059370,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.059405,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.059435,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.059462,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.070748,  3] smbd/process.c:1489(process_smb)
>  Transaction 103 of length 110 (0 toread)
>[2012/05/29 20:04:47.070835,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.070852,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.070871,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.070908,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.070939,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.070968,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.078783,  3] smbd/process.c:1489(process_smb)
>  Transaction 104 of length 110 (0 toread)
>[2012/05/29 20:04:47.078922,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.078942,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.078962,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.079033,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.079074,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.079107,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.086737,  3] smbd/process.c:1489(process_smb)
>  Transaction 105 of length 116 (0 toread)
>[2012/05/29 20:04:47.086813,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.086830,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.086871,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:47.086917,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.086946,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.086970,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [./] [/home/schueler1]
>[2012/05/29 20:04:47.089173,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ./ reduced to /home/schueler1
>[2012/05/29 20:04:47.089441,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.089468,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.089483,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.089526,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.089565,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.089582,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.089630,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2012/05/29 20:04:47.089647,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = Eigene Dateien, attr = 22
>[2012/05/29 20:04:47.089697,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[Eigene Dateien] found ./Eigene Dateien fname=Eigene Dateien (Eigene Dateien)
>[2012/05/29 20:04:47.089733,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:47.089882,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=Eigene Dateien directory=./ dirtype=22 numentries=1
>[2012/05/29 20:04:47.093636,  3] smbd/process.c:1489(process_smb)
>  Transaction 106 of length 116 (0 toread)
>[2012/05/29 20:04:47.093722,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.093738,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.093767,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:47.093809,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.093840,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.093855,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [./] [/home/schueler1]
>[2012/05/29 20:04:47.093893,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ./ reduced to /home/schueler1
>[2012/05/29 20:04:47.093955,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.093974,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.093987,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.094020,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.094041,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.094056,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.094083,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2012/05/29 20:04:47.094097,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = Eigene Dateien, attr = 22
>[2012/05/29 20:04:47.094143,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[Eigene Dateien] found ./Eigene Dateien fname=Eigene Dateien (Eigene Dateien)
>[2012/05/29 20:04:47.094172,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:47.094309,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=Eigene Dateien directory=./ dirtype=22 numentries=1
>[2012/05/29 20:04:47.173260,  3] smbd/process.c:1489(process_smb)
>  Transaction 107 of length 132 (0 toread)
>[2012/05/29 20:04:47.173388,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.173416,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.173458,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /var/lib/samba/netlogon
>[2012/05/29 20:04:47.173504,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [ucs-school-logon.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.173534,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ucs-school-logon.vbs reduced to /var/lib/samba/netlogon/ucs-school-logon.vbs
>[2012/05/29 20:04:47.173549,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [ucs-school-logon.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.173565,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ucs-school-logon.vbs reduced to /var/lib/samba/netlogon/ucs-school-logon.vbs
>[2012/05/29 20:04:47.173642,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(ucs-school-logon.vbs) returning 0744
>[2012/05/29 20:04:47.173665,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [ucs-school-logon.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.173684,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ucs-school-logon.vbs reduced to /var/lib/samba/netlogon/ucs-school-logon.vbs
>[2012/05/29 20:04:47.173738,  4] smbd/open.c:2000(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089
>[2012/05/29 20:04:47.173776,  2] smbd/open.c:657(open_file)
>  schueler1 opened file ucs-school-logon.vbs read=Yes write=No (numopen=1)
>[2012/05/29 20:04:47.173878,  3] smbd/oplock_linux.c:127(linux_set_kernel_oplock)
>  linux_set_kernel_oplock: got kernel oplock on file ucs-school-logon.vbs, file_id = fe00:19a418:0 gen_id = 5
>[2012/05/29 20:04:47.183890,  3] smbd/process.c:1489(process_smb)
>  Transaction 108 of length 76 (0 toread)
>[2012/05/29 20:04:47.184027,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.184048,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.184072,  3] smbd/trans2.c:5013(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006
>[2012/05/29 20:04:47.184118,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo ucs-school-logon.vbs (fnum = 6762) level=1006 call=7 total_data=0
>[2012/05/29 20:04:47.186300,  3] smbd/process.c:1489(process_smb)
>  Transaction 109 of length 63 (0 toread)
>[2012/05/29 20:04:47.186374,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.186390,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.186449,  3] smbd/reply.c:3591(send_file_readX)
>  send_file_readX fnum=6762 max=890 nread=890
>[2012/05/29 20:04:47.215517,  3] smbd/process.c:1489(process_smb)
>  Transaction 110 of length 122 (0 toread)
>[2012/05/29 20:04:47.215630,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.215649,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.215672,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.215712,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [ucs-school-logon.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.215744,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ucs-school-logon.vbs reduced to /var/lib/samba/netlogon/ucs-school-logon.vbs
>[2012/05/29 20:04:47.215778,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo ucs-school-logon.vbs (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.220238,  3] smbd/process.c:1489(process_smb)
>  Transaction 111 of length 122 (0 toread)
>[2012/05/29 20:04:47.220270,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.220283,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.220298,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.220329,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [ucs-school-logon.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.220353,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ucs-school-logon.vbs reduced to /var/lib/samba/netlogon/ucs-school-logon.vbs
>[2012/05/29 20:04:47.220373,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo ucs-school-logon.vbs (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.267303,  3] smbd/process.c:1489(process_smb)
>  Transaction 112 of length 132 (0 toread)
>[2012/05/29 20:04:47.267398,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.267415,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.267460,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [ucs-school-logon.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.267493,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ucs-school-logon.vbs reduced to /var/lib/samba/netlogon/ucs-school-logon.vbs
>[2012/05/29 20:04:47.267508,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [ucs-school-logon.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.267525,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ucs-school-logon.vbs reduced to /var/lib/samba/netlogon/ucs-school-logon.vbs
>[2012/05/29 20:04:47.267549,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(ucs-school-logon.vbs) returning 0744
>[2012/05/29 20:04:47.267579,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [ucs-school-logon.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.267599,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ucs-school-logon.vbs reduced to /var/lib/samba/netlogon/ucs-school-logon.vbs
>[2012/05/29 20:04:47.267825,  3] smbd/oplock.c:263(initial_break_processing)
>  initial_break_processing: called for fe00:19a418:0/5
>  Current oplocks_open (exclusive = 1, levelII = 0)
>[2012/05/29 20:04:47.270601,  3] smbd/process.c:1489(process_smb)
>  Transaction 113 of length 55 (0 toread)
>[2012/05/29 20:04:47.270669,  3] smbd/process.c:1298(switch_message)
>  switch message SMBlockingX (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.270684,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.270813,  3] smbd/process.c:1489(process_smb)
>  Transaction 114 of length 132 (0 toread)
>[2012/05/29 20:04:47.270837,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.270850,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.270872,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [ucs-school-logon.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.270894,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ucs-school-logon.vbs reduced to /var/lib/samba/netlogon/ucs-school-logon.vbs
>[2012/05/29 20:04:47.270907,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [ucs-school-logon.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.270923,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ucs-school-logon.vbs reduced to /var/lib/samba/netlogon/ucs-school-logon.vbs
>[2012/05/29 20:04:47.270939,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(ucs-school-logon.vbs) returning 0744
>[2012/05/29 20:04:47.270963,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [ucs-school-logon.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.270983,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ucs-school-logon.vbs reduced to /var/lib/samba/netlogon/ucs-school-logon.vbs
>[2012/05/29 20:04:47.271038,  4] smbd/open.c:2000(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089
>[2012/05/29 20:04:47.271063,  2] smbd/open.c:657(open_file)
>  schueler1 opened file ucs-school-logon.vbs read=Yes write=No (numopen=2)
>[2012/05/29 20:04:47.274978,  3] smbd/process.c:1489(process_smb)
>  Transaction 115 of length 63 (0 toread)
>[2012/05/29 20:04:47.275034,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.275049,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.275095,  3] lib/util.c:1849(fcntl_getlock)
>  fcntl_getlock: fd 35 is returned info 2 pid 0
>[2012/05/29 20:04:47.275117,  3] smbd/reply.c:3591(send_file_readX)
>  send_file_readX fnum=6764 max=512 nread=512
>[2012/05/29 20:04:47.275935,  3] smbd/process.c:1489(process_smb)
>  Transaction 116 of length 45 (0 toread)
>[2012/05/29 20:04:47.275965,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.275978,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.275991,  3] smbd/reply.c:4653(reply_close)
>  close fd=35 fnum=6764 (numopen=2)
>[2012/05/29 20:04:47.276034,  2] smbd/close.c:656(close_normal_file)
>  schueler1 closed file ucs-school-logon.vbs (numopen=1) NT_STATUS_OK
>[2012/05/29 20:04:47.278383,  3] smbd/process.c:1489(process_smb)
>  Transaction 117 of length 76 (0 toread)
>[2012/05/29 20:04:47.278422,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.278436,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.278452,  3] smbd/trans2.c:5013(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005
>[2012/05/29 20:04:47.278479,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo ucs-school-logon.vbs (fnum = 6762) level=1005 call=7 total_data=0
>[2012/05/29 20:04:47.279446,  3] smbd/process.c:1489(process_smb)
>  Transaction 118 of length 63 (0 toread)
>[2012/05/29 20:04:47.279475,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.279505,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.279533,  3] lib/util.c:1849(fcntl_getlock)
>  fcntl_getlock: fd 34 is returned info 2 pid 0
>[2012/05/29 20:04:47.279552,  3] smbd/reply.c:3591(send_file_readX)
>  send_file_readX fnum=6762 max=890 nread=890
>[2012/05/29 20:04:47.281300,  3] smbd/process.c:1489(process_smb)
>  Transaction 119 of length 76 (0 toread)
>[2012/05/29 20:04:47.281344,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.281359,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.281373,  3] smbd/trans2.c:5013(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005
>[2012/05/29 20:04:47.281395,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo ucs-school-logon.vbs (fnum = 6762) level=1005 call=7 total_data=0
>[2012/05/29 20:04:47.282017,  3] smbd/process.c:1489(process_smb)
>  Transaction 120 of length 76 (0 toread)
>[2012/05/29 20:04:47.282046,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.282059,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.282073,  3] smbd/trans2.c:5013(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005
>[2012/05/29 20:04:47.282094,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo ucs-school-logon.vbs (fnum = 6762) level=1005 call=7 total_data=0
>[2012/05/29 20:04:47.283352,  3] smbd/process.c:1489(process_smb)
>  Transaction 121 of length 45 (0 toread)
>[2012/05/29 20:04:47.283381,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.283394,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.283408,  3] smbd/reply.c:4653(reply_close)
>  close fd=34 fnum=6762 (numopen=1)
>[2012/05/29 20:04:47.283443,  2] smbd/close.c:656(close_normal_file)
>  schueler1 closed file ucs-school-logon.vbs (numopen=0) NT_STATUS_OK
>[2012/05/29 20:04:47.296538,  3] smbd/process.c:1489(process_smb)
>  Transaction 122 of length 106 (0 toread)
>[2012/05/29 20:04:47.296598,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.296618,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.296655,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:04:47.296685,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:47.296722,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [WSCRIPT"*] [/home/schueler1]
>[2012/05/29 20:04:47.296754,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: WSCRIPT"* reduced to /home/schueler1/WSCRIPT"*
>[2012/05/29 20:04:47.296770,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [./] [/home/schueler1]
>[2012/05/29 20:04:47.296784,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ./ reduced to /home/schueler1
>[2012/05/29 20:04:47.296844,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.296861,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.296874,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.296899,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.296920,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.296934,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.296959,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2012/05/29 20:04:47.296993,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = WSCRIPT"*, attr = 22
>[2012/05/29 20:04:47.297074,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:47.297098,  3] smbd/error.c:80(error_packet_set)
>  error packet at smbd/trans2.c(2484) cmd=50 (SMBtrans2) NT_STATUS_NO_SUCH_FILE
>[2012/05/29 20:04:47.313596,  3] smbd/process.c:1489(process_smb)
>  Transaction 123 of length 138 (0 toread)
>[2012/05/29 20:04:47.313676,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.313699,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.313722,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.313769,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:04:47.313807,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:04:47.313842,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.319683,  3] smbd/process.c:1489(process_smb)
>  Transaction 124 of length 106 (0 toread)
>[2012/05/29 20:04:47.319739,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.319753,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.319777,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:47.319822,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [WSCRIPT"*] [/home/schueler1]
>[2012/05/29 20:04:47.319856,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: WSCRIPT"* reduced to /home/schueler1/WSCRIPT"*
>[2012/05/29 20:04:47.319871,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [./] [/home/schueler1]
>[2012/05/29 20:04:47.319886,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ./ reduced to /home/schueler1
>[2012/05/29 20:04:47.319958,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.319980,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.319993,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.320028,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.320050,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.320064,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.320092,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2012/05/29 20:04:47.320208,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = WSCRIPT"*, attr = 22
>[2012/05/29 20:04:47.320276,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:47.320299,  3] smbd/error.c:80(error_packet_set)
>  error packet at smbd/trans2.c(2484) cmd=50 (SMBtrans2) NT_STATUS_NO_SUCH_FILE
>[2012/05/29 20:04:47.320432,  3] smbd/process.c:1489(process_smb)
>  Transaction 125 of length 138 (0 toread)
>[2012/05/29 20:04:47.320458,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.320471,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.320484,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.320532,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:04:47.320554,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:04:47.320577,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.330499,  3] smbd/process.c:1489(process_smb)
>  Transaction 126 of length 116 (0 toread)
>[2012/05/29 20:04:47.330555,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.330570,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.330590,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:47.330635,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.330661,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.330676,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [./] [/home/schueler1]
>[2012/05/29 20:04:47.330690,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ./ reduced to /home/schueler1
>[2012/05/29 20:04:47.330748,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.330766,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.330779,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.330818,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.330840,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.330854,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.330878,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2012/05/29 20:04:47.330891,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = Eigene Dateien, attr = 22
>[2012/05/29 20:04:47.330937,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[Eigene Dateien] found ./Eigene Dateien fname=Eigene Dateien (Eigene Dateien)
>[2012/05/29 20:04:47.330967,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:47.331154,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=Eigene Dateien directory=./ dirtype=22 numentries=1
>[2012/05/29 20:04:47.339366,  3] smbd/process.c:1489(process_smb)
>  Transaction 127 of length 110 (0 toread)
>[2012/05/29 20:04:47.339449,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.339465,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.339486,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.339525,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.339554,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.339600,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.350805,  3] smbd/process.c:1489(process_smb)
>  Transaction 128 of length 144 (0 toread)
>[2012/05/29 20:04:47.350843,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.350857,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.350902,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:47.350933,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:04:47.350956,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:04:47.350971,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.351014,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.351093,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.351115,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.351128,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.351160,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.351181,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.351195,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.351223,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien, expect_close = 1
>[2012/05/29 20:04:47.351237,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = Eigene Bilder, attr = 22
>[2012/05/29 20:04:47.351274,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[Eigene Bilder] found Eigene Dateien/Eigene Bilder fname=Eigene Bilder (Eigene Bilder)
>[2012/05/29 20:04:47.351305,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:47.351415,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=Eigene Bilder directory=Eigene Dateien dirtype=22 numentries=1
>[2012/05/29 20:04:47.374750,  3] smbd/process.c:1489(process_smb)
>  Transaction 129 of length 128 (0 toread)
>[2012/05/29 20:04:47.374794,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.374812,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.374839,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /var/lib/samba/netlogon
>[2012/05/29 20:04:47.374880,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [user/schueler1.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.374904,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: user/schueler1.vbs reduced to /var/lib/samba/netlogon/user/schueler1.vbs
>[2012/05/29 20:04:47.374918,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [user/schueler1.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.374936,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: user/schueler1.vbs reduced to /var/lib/samba/netlogon/user/schueler1.vbs
>[2012/05/29 20:04:47.374969,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(user/schueler1.vbs) returning 0744
>[2012/05/29 20:04:47.374985,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [user/schueler1.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.375032,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: user/schueler1.vbs reduced to /var/lib/samba/netlogon/user/schueler1.vbs
>[2012/05/29 20:04:47.375066,  4] smbd/open.c:2000(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089
>[2012/05/29 20:04:47.375090,  2] smbd/open.c:657(open_file)
>  schueler1 opened file user/schueler1.vbs read=Yes write=No (numopen=1)
>[2012/05/29 20:04:47.375128,  3] smbd/oplock_linux.c:127(linux_set_kernel_oplock)
>  linux_set_kernel_oplock: got kernel oplock on file user/schueler1.vbs, file_id = fe00:1a623d:0 gen_id = 8
>[2012/05/29 20:04:47.375815,  3] smbd/process.c:1489(process_smb)
>  Transaction 130 of length 136 (0 toread)
>[2012/05/29 20:04:47.375847,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.375862,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.375897,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:04:47.375919,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.376042,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik] [/home/schueler1]
>[2012/05/29 20:04:47.376073,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik reduced to /home/schueler1/Eigene Dateien/Eigene Musik
>[2012/05/29 20:04:47.376099,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Musik (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.376222,  3] smbd/process.c:1489(process_smb)
>  Transaction 131 of length 76 (0 toread)
>[2012/05/29 20:04:47.376248,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.376262,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.376284,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /var/lib/samba/netlogon
>[2012/05/29 20:04:47.376302,  3] smbd/trans2.c:5013(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006
>[2012/05/29 20:04:47.376324,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo user/schueler1.vbs (fnum = 6765) level=1006 call=7 total_data=0
>[2012/05/29 20:04:47.376873,  3] smbd/process.c:1489(process_smb)
>  Transaction 132 of length 136 (0 toread)
>[2012/05/29 20:04:47.376902,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.376916,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.376939,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:04:47.376956,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.376976,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik] [/home/schueler1]
>[2012/05/29 20:04:47.376997,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik reduced to /home/schueler1/Eigene Dateien/Eigene Musik
>[2012/05/29 20:04:47.377016,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Musik (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.377476,  3] smbd/process.c:1489(process_smb)
>  Transaction 133 of length 63 (0 toread)
>[2012/05/29 20:04:47.377511,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.377527,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.377552,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /var/lib/samba/netlogon
>[2012/05/29 20:04:47.377582,  3] smbd/reply.c:3591(send_file_readX)
>  send_file_readX fnum=6765 max=3552 nread=3552
>[2012/05/29 20:04:47.378617,  3] smbd/process.c:1489(process_smb)
>  Transaction 134 of length 116 (0 toread)
>[2012/05/29 20:04:47.378647,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.378662,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.378684,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:04:47.378706,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:47.378744,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.378763,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.378777,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [./] [/home/schueler1]
>[2012/05/29 20:04:47.378791,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ./ reduced to /home/schueler1
>[2012/05/29 20:04:47.378829,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.378846,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.378858,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.378882,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.378901,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.378915,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.378937,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2012/05/29 20:04:47.378950,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = Eigene Dateien, attr = 22
>[2012/05/29 20:04:47.378979,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[Eigene Dateien] found ./Eigene Dateien fname=Eigene Dateien (Eigene Dateien)
>[2012/05/29 20:04:47.379033,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:47.379144,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=Eigene Dateien directory=./ dirtype=22 numentries=1
>[2012/05/29 20:04:47.379814,  3] smbd/process.c:1489(process_smb)
>  Transaction 135 of length 118 (0 toread)
>[2012/05/29 20:04:47.379842,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.379857,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.379879,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /var/lib/samba/netlogon
>[2012/05/29 20:04:47.379897,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.379918,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [user/schueler1.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.379939,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: user/schueler1.vbs reduced to /var/lib/samba/netlogon/user/schueler1.vbs
>[2012/05/29 20:04:47.379959,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo user/schueler1.vbs (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.380747,  3] smbd/process.c:1489(process_smb)
>  Transaction 136 of length 110 (0 toread)
>[2012/05/29 20:04:47.380868,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.381083,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.381111,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:04:47.381128,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.381148,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.381168,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.381186,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.381307,  3] smbd/process.c:1489(process_smb)
>  Transaction 137 of length 118 (0 toread)
>[2012/05/29 20:04:47.381344,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.381359,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.381381,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /var/lib/samba/netlogon
>[2012/05/29 20:04:47.381398,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.381418,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [user/schueler1.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.381439,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: user/schueler1.vbs reduced to /var/lib/samba/netlogon/user/schueler1.vbs
>[2012/05/29 20:04:47.381457,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo user/schueler1.vbs (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.381662,  3] smbd/process.c:1489(process_smb)
>  Transaction 138 of length 142 (0 toread)
>[2012/05/29 20:04:47.381688,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.381703,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.381726,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:04:47.381745,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:47.381769,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik] [/home/schueler1]
>[2012/05/29 20:04:47.381789,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik reduced to /home/schueler1/Eigene Dateien/Eigene Musik
>[2012/05/29 20:04:47.381804,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.381819,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.381852,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.381869,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.381881,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.381904,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.381922,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.381935,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.381955,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien, expect_close = 1
>[2012/05/29 20:04:47.381968,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = Eigene Musik, attr = 22
>[2012/05/29 20:04:47.381996,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[Eigene Musik] found Eigene Dateien/Eigene Musik fname=Eigene Musik (Eigene Musik)
>[2012/05/29 20:04:47.382019,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:47.382126,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=Eigene Musik directory=Eigene Dateien dirtype=22 numentries=1
>[2012/05/29 20:04:47.382783,  3] smbd/process.c:1489(process_smb)
>  Transaction 139 of length 96 (0 toread)
>[2012/05/29 20:04:47.382810,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.382826,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.382849,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /var/lib/samba/netlogon
>[2012/05/29 20:04:47.382869,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:47.382904,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [user] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.382924,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: user reduced to /var/lib/samba/netlogon/user
>[2012/05/29 20:04:47.382938,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [./] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.382951,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ./ reduced to /var/lib/samba/netlogon
>[2012/05/29 20:04:47.382968,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2012/05/29 20:04:47.382980,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = user, attr = 22
>[2012/05/29 20:04:47.383045,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[user] found ./user fname=user (user)
>[2012/05/29 20:04:47.383071,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:47.383172,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=user directory=./ dirtype=22 numentries=1
>[2012/05/29 20:04:47.386872,  3] smbd/process.c:1489(process_smb)
>  Transaction 140 of length 106 (0 toread)
>[2012/05/29 20:04:47.386900,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.386915,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.386937,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:04:47.386955,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.386998,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.387016,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.387065,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.387092,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.387110,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.387123,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.387165,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [moricons.dll] [/home/schueler1]
>[2012/05/29 20:04:47.387191,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: moricons.dll reduced to /home/schueler1/moricons.dll
>[2012/05/29 20:04:47.387206,  3] smbd/trans2.c:5209(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of moricons.dll failed (Datei oder Verzeichnis nicht gefunden)
>[2012/05/29 20:04:47.387228,  3] smbd/error.c:80(error_packet_set)
>  error packet at smbd/trans2.c(5211) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2012/05/29 20:04:47.430021,  3] smbd/process.c:1489(process_smb)
>  Transaction 141 of length 106 (0 toread)
>[2012/05/29 20:04:47.430121,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.430139,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.430161,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.430259,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.430281,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.430294,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.430336,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.430385,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.430401,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.430455,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [moricons.dll] [/home/schueler1]
>[2012/05/29 20:04:47.430487,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: moricons.dll reduced to /home/schueler1/moricons.dll
>[2012/05/29 20:04:47.430503,  3] smbd/trans2.c:5209(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of moricons.dll failed (Datei oder Verzeichnis nicht gefunden)
>[2012/05/29 20:04:47.430527,  3] smbd/error.c:80(error_packet_set)
>  error packet at smbd/trans2.c(5211) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2012/05/29 20:04:47.436874,  3] smbd/process.c:1489(process_smb)
>  Transaction 142 of length 128 (0 toread)
>[2012/05/29 20:04:47.436943,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.436965,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.436998,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /var/lib/samba/netlogon
>[2012/05/29 20:04:47.437040,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [user/schueler1.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.437079,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: user/schueler1.vbs reduced to /var/lib/samba/netlogon/user/schueler1.vbs
>[2012/05/29 20:04:47.437097,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [user/schueler1.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.437116,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: user/schueler1.vbs reduced to /var/lib/samba/netlogon/user/schueler1.vbs
>[2012/05/29 20:04:47.437138,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(user/schueler1.vbs) returning 0744
>[2012/05/29 20:04:47.437152,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [user/schueler1.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.437170,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: user/schueler1.vbs reduced to /var/lib/samba/netlogon/user/schueler1.vbs
>[2012/05/29 20:04:47.437319,  3] smbd/oplock.c:263(initial_break_processing)
>  initial_break_processing: called for fe00:1a623d:0/8
>  Current oplocks_open (exclusive = 1, levelII = 0)
>[2012/05/29 20:04:47.437930,  3] smbd/process.c:1489(process_smb)
>  Transaction 143 of length 55 (0 toread)
>[2012/05/29 20:04:47.437959,  3] smbd/process.c:1298(switch_message)
>  switch message SMBlockingX (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.437972,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.438080,  3] smbd/process.c:1489(process_smb)
>  Transaction 144 of length 128 (0 toread)
>[2012/05/29 20:04:47.438103,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.438115,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.438136,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [user/schueler1.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.438158,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: user/schueler1.vbs reduced to /var/lib/samba/netlogon/user/schueler1.vbs
>[2012/05/29 20:04:47.438171,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [user/schueler1.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.438189,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: user/schueler1.vbs reduced to /var/lib/samba/netlogon/user/schueler1.vbs
>[2012/05/29 20:04:47.438205,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(user/schueler1.vbs) returning 0744
>[2012/05/29 20:04:47.438228,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [user/schueler1.vbs] [/var/lib/samba/netlogon]
>[2012/05/29 20:04:47.438249,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: user/schueler1.vbs reduced to /var/lib/samba/netlogon/user/schueler1.vbs
>[2012/05/29 20:04:47.438288,  4] smbd/open.c:2000(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089
>[2012/05/29 20:04:47.438312,  2] smbd/open.c:657(open_file)
>  schueler1 opened file user/schueler1.vbs read=Yes write=No (numopen=2)
>[2012/05/29 20:04:47.439184,  3] smbd/process.c:1489(process_smb)
>  Transaction 145 of length 63 (0 toread)
>[2012/05/29 20:04:47.439213,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.439226,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.439257,  3] lib/util.c:1849(fcntl_getlock)
>  fcntl_getlock: fd 35 is returned info 2 pid 0
>[2012/05/29 20:04:47.439278,  3] smbd/reply.c:3591(send_file_readX)
>  send_file_readX fnum=6767 max=512 nread=512
>[2012/05/29 20:04:47.439882,  3] smbd/process.c:1489(process_smb)
>  Transaction 146 of length 45 (0 toread)
>[2012/05/29 20:04:47.439912,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.439925,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.439938,  3] smbd/reply.c:4653(reply_close)
>  close fd=35 fnum=6767 (numopen=2)
>[2012/05/29 20:04:47.439975,  2] smbd/close.c:656(close_normal_file)
>  schueler1 closed file user/schueler1.vbs (numopen=1) NT_STATUS_OK
>[2012/05/29 20:04:47.442325,  3] smbd/process.c:1489(process_smb)
>  Transaction 147 of length 76 (0 toread)
>[2012/05/29 20:04:47.442372,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.442386,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.442403,  3] smbd/trans2.c:5013(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005
>[2012/05/29 20:04:47.442431,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo user/schueler1.vbs (fnum = 6765) level=1005 call=7 total_data=0
>[2012/05/29 20:04:47.443187,  3] smbd/process.c:1489(process_smb)
>  Transaction 148 of length 63 (0 toread)
>[2012/05/29 20:04:47.443215,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.443228,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.443256,  3] lib/util.c:1849(fcntl_getlock)
>  fcntl_getlock: fd 34 is returned info 2 pid 0
>[2012/05/29 20:04:47.443277,  3] smbd/reply.c:3591(send_file_readX)
>  send_file_readX fnum=6765 max=3552 nread=3552
>[2012/05/29 20:04:47.448774,  3] smbd/process.c:1489(process_smb)
>  Transaction 149 of length 76 (0 toread)
>[2012/05/29 20:04:47.448808,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.448821,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.448836,  3] smbd/trans2.c:5013(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005
>[2012/05/29 20:04:47.448860,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo user/schueler1.vbs (fnum = 6765) level=1005 call=7 total_data=0
>[2012/05/29 20:04:47.449558,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.453034,  3] smbd/process.c:1489(process_smb)
>  Transaction 150 of length 76 (0 toread)
>[2012/05/29 20:04:47.453096,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.453118,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.453151,  3] smbd/trans2.c:5013(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005
>[2012/05/29 20:04:47.453185,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo user/schueler1.vbs (fnum = 6765) level=1005 call=7 total_data=0
>[2012/05/29 20:04:47.453926,  3] smbd/process.c:1489(process_smb)
>  Transaction 151 of length 45 (0 toread)
>[2012/05/29 20:04:47.453958,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:04:47.453971,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.453984,  3] smbd/reply.c:4653(reply_close)
>  close fd=34 fnum=6765 (numopen=1)
>[2012/05/29 20:04:47.454027,  2] smbd/close.c:656(close_normal_file)
>  schueler1 closed file user/schueler1.vbs (numopen=0) NT_STATUS_OK
>[2012/05/29 20:04:47.484222,  3] smbd/process.c:1489(process_smb)
>  Transaction 152 of length 110 (0 toread)
>[2012/05/29 20:04:47.484321,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.484345,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.484389,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:04:47.484415,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.484451,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.484480,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.484510,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.485131,  3] smbd/process.c:1489(process_smb)
>  Transaction 153 of length 110 (0 toread)
>[2012/05/29 20:04:47.485163,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.485176,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.485191,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.485212,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.485232,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.485251,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.485878,  3] smbd/process.c:1489(process_smb)
>  Transaction 154 of length 116 (0 toread)
>[2012/05/29 20:04:47.485912,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.485926,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.485948,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:47.485987,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.486009,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.486024,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [./] [/home/schueler1]
>[2012/05/29 20:04:47.486039,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ./ reduced to /home/schueler1
>[2012/05/29 20:04:47.486102,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.486120,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.486133,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.486187,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.486210,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.486225,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.486251,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2012/05/29 20:04:47.486265,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = Eigene Dateien, attr = 22
>[2012/05/29 20:04:47.486305,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[Eigene Dateien] found ./Eigene Dateien fname=Eigene Dateien (Eigene Dateien)
>[2012/05/29 20:04:47.486335,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:47.486452,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=Eigene Dateien directory=./ dirtype=22 numentries=1
>[2012/05/29 20:04:47.493023,  3] smbd/process.c:1489(process_smb)
>  Transaction 155 of length 82 (0 toread)
>[2012/05/29 20:04:47.493109,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtconX (pid 32737) conn 0x0
>[2012/05/29 20:04:47.493132,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.493171,  4] smbd/reply.c:786(reply_tcon_and_X)
>  Client requested device type [?????] for share [IPC$]
>[2012/05/29 20:04:47.493213,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.493228,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.493242,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.493282,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.493301,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.493313,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.493324,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.493358,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.493407,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.493421,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.493432,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.493457,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.493498,  3] smbd/service.c:807(make_connection_snum)
>  Connect path is '/tmp' for service [IPC$]
>[2012/05/29 20:04:47.493527,  3] smbd/vfs.c:97(vfs_init_default)
>  Initialising default vfs hooks
>[2012/05/29 20:04:47.493540,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2012/05/29 20:04:47.493593,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid administrator does not start with 'S-'.
>[2012/05/29 20:04:47.493614,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.493627,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.493638,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.494631,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: Administrator
>[2012/05/29 20:04:47.494742,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.494759,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.494770,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.494800,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.494876,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.494890,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.494902,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.494925,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.494945,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.494958,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.494969,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.495023,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.495062,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.495077,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.495088,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.495111,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.495136,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.495157,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid join-backup does not start with 'S-'.
>[2012/05/29 20:04:47.495173,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.495185,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.495196,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.495737,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: join-backup
>[2012/05/29 20:04:47.495857,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.495876,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.495887,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.495918,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.495966,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.495980,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.495992,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.496016,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.496043,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.496057,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.496070,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.496088,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:47.496100,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.496112,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:47.496549,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11017] count=0
>[2012/05/29 20:04:47.497005,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5008
>[2012/05/29 20:04:47.497060,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.497081,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.497116,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.497130,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.497141,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.497172,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.497208,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.497223,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.497234,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.497258,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.497283,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.497308,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.497322,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.497333,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.497355,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.497370,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.497382,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.497392,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.497415,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.497443,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.497456,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.497468,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.497491,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.497514,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.497552,  3] smbd/service.c:1070(make_connection_snum)
>  winxpsp3ar2 (::ffff:10.200.8.230) connect to service IPC$ initially as user schueler1 (uid=2010, gid=5038) (pid 32737)
>[2012/05/29 20:04:47.497573,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.497597,  3] smbd/reply.c:865(reply_tcon_and_X)
>  tconX service=IPC$ 
>[2012/05/29 20:04:47.498227,  3] smbd/process.c:1489(process_smb)
>  Transaction 156 of length 104 (0 toread)
>[2012/05/29 20:04:47.498260,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.498276,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.498300,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2012/05/29 20:04:47.498323,  4] smbd/nttrans.c:283(nt_open_pipe)
>  nt_open_pipe: Opening pipe \srvsvc.
>[2012/05/29 20:04:47.498359,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \srvsvc
>[2012/05/29 20:04:47.498387,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.498402,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.498414,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.498446,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.498463,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.498490,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.498503,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.498529,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.498562,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.498578,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.498590,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.498617,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.498635,  4] rpc_server/srv_pipe_hnd.c:162(make_internal_rpc_pipe_p)
>  Created internal pipe \srvsvc (pipes_open=0)
>[2012/05/29 20:04:47.499184,  3] smbd/process.c:1489(process_smb)
>  Transaction 157 of length 140 (0 toread)
>[2012/05/29 20:04:47.499213,  3] smbd/process.c:1298(switch_message)
>  switch message SMBwriteX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.499228,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.499259,  3] rpc_server/srv_pipe.c:1668(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc
>[2012/05/29 20:04:47.499274,  3] rpc_server/srv_pipe.c:998(check_bind_req)
>  check_bind_req for \srvsvc
>[2012/05/29 20:04:47.499303,  3] smbd/pipes.c:352(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2012/05/29 20:04:47.499856,  3] smbd/process.c:1489(process_smb)
>  Transaction 158 of length 63 (0 toread)
>[2012/05/29 20:04:47.499896,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.499911,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.499934,  3] smbd/pipes.c:462(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2012/05/29 20:04:47.500374,  3] smbd/process.c:1489(process_smb)
>  Transaction 159 of length 184 (0 toread)
>[2012/05/29 20:04:47.500403,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.500416,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.500433,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=96 params=0 setup=2
>[2012/05/29 20:04:47.500448,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:47.500460,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "srvsvc" (pnum 1a70)
>[2012/05/29 20:04:47.500480,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 80
>[2012/05/29 20:04:47.500496,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \srvsvc op 0x10 - api_rpcTNP: rpc command: SRVSVC_NETSHAREGETINFO
>[2012/05/29 20:04:47.500554,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 92
>[2012/05/29 20:04:47.501252,  3] smbd/process.c:1489(process_smb)
>  Transaction 160 of length 45 (0 toread)
>[2012/05/29 20:04:47.501282,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.501295,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.501308,  3] smbd/reply.c:4653(reply_close)
>  close fd=-1 fnum=6768 (numopen=1)
>[2012/05/29 20:04:47.502562,  3] smbd/process.c:1489(process_smb)
>  Transaction 161 of length 74 (0 toread)
>[2012/05/29 20:04:47.502591,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.502606,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.502633,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:04:47.502672,  3] smbd/trans2.c:3464(call_trans2qfsinfo)
>  call_trans2qfsinfo: level = 258
>[2012/05/29 20:04:47.502692,  3] smbd/trans2.c:2906(smbd_do_qfsinfo)
>  smbd_do_qfsinfo: level = 258
>[2012/05/29 20:04:47.502800,  4] smbd/trans2.c:3480(call_trans2qfsinfo)
>  SMBtrans2 info_level = 258
>[2012/05/29 20:04:47.503215,  3] smbd/process.c:1489(process_smb)
>  Transaction 162 of length 80 (0 toread)
>[2012/05/29 20:04:47.503243,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.503256,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.503270,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1005
>[2012/05/29 20:04:47.503291,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/schueler1]
>[2012/05/29 20:04:47.503312,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/schueler1
>[2012/05/29 20:04:47.503340,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1005 call=5 total_data=0
>[2012/05/29 20:04:47.503921,  3] smbd/process.c:1489(process_smb)
>  Transaction 163 of length 80 (0 toread)
>[2012/05/29 20:04:47.503950,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.503963,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.503976,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1006
>[2012/05/29 20:04:47.503995,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/schueler1]
>[2012/05/29 20:04:47.504012,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/schueler1
>[2012/05/29 20:04:47.504030,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1006 call=5 total_data=0
>[2012/05/29 20:04:47.504554,  3] smbd/process.c:1489(process_smb)
>  Transaction 164 of length 80 (0 toread)
>[2012/05/29 20:04:47.504585,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.504598,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.504611,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1007
>[2012/05/29 20:04:47.504629,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/schueler1]
>[2012/05/29 20:04:47.504646,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/schueler1
>[2012/05/29 20:04:47.504665,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1007 call=5 total_data=0
>[2012/05/29 20:04:47.505193,  3] smbd/process.c:1489(process_smb)
>  Transaction 165 of length 92 (0 toread)
>[2012/05/29 20:04:47.505221,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.505234,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.505254,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/schueler1]
>[2012/05/29 20:04:47.505271,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/schueler1
>[2012/05/29 20:04:47.505301,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/schueler1]
>[2012/05/29 20:04:47.505317,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/schueler1
>[2012/05/29 20:04:47.505336,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.505350,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/schueler1]
>[2012/05/29 20:04:47.505364,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/schueler1
>[2012/05/29 20:04:47.505387,  4] smbd/open.c:2000(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0700, access_mask = 0x100080, open_access_mask = 0x100080
>[2012/05/29 20:04:47.505466,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.505485,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.505498,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.505524,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.505544,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.505557,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.505597,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.505615,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.505627,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.505649,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.505668,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.505681,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.506217,  3] smbd/process.c:1489(process_smb)
>  Transaction 166 of length 88 (0 toread)
>[2012/05/29 20:04:47.506246,  3] smbd/process.c:1298(switch_message)
>  switch message SMBnttrans (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.506259,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.506772,  3] smbd/process.c:1489(process_smb)
>  Transaction 167 of length 74 (0 toread)
>[2012/05/29 20:04:47.506800,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.506813,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.506827,  3] smbd/trans2.c:3464(call_trans2qfsinfo)
>  call_trans2qfsinfo: level = 1008
>[2012/05/29 20:04:47.506842,  3] smbd/trans2.c:2906(smbd_do_qfsinfo)
>  smbd_do_qfsinfo: level = 1008
>[2012/05/29 20:04:47.506944,  4] smbd/trans2.c:3480(call_trans2qfsinfo)
>  SMBtrans2 info_level = 1008
>[2012/05/29 20:04:47.507453,  3] smbd/process.c:1489(process_smb)
>  Transaction 168 of length 45 (0 toread)
>[2012/05/29 20:04:47.507480,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.507493,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.507506,  3] smbd/reply.c:4643(reply_close)
>  close directory fnum=6770
>[2012/05/29 20:04:47.510747,  3] smbd/process.c:1489(process_smb)
>  Transaction 169 of length 138 (0 toread)
>[2012/05/29 20:04:47.510776,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.510789,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.510803,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.510828,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:04:47.510850,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:04:47.510869,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.511404,  3] smbd/process.c:1489(process_smb)
>  Transaction 170 of length 138 (0 toread)
>[2012/05/29 20:04:47.511434,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.511459,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.511474,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.511496,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:04:47.511516,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:04:47.511535,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.512300,  3] smbd/process.c:1489(process_smb)
>  Transaction 171 of length 80 (0 toread)
>[2012/05/29 20:04:47.512346,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.512360,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.512375,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.512394,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/schueler1]
>[2012/05/29 20:04:47.512412,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/schueler1
>[2012/05/29 20:04:47.512432,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.512993,  3] smbd/process.c:1489(process_smb)
>  Transaction 172 of length 116 (0 toread)
>[2012/05/29 20:04:47.513022,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.513035,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.513053,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:47.513088,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.513110,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.513125,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [./] [/home/schueler1]
>[2012/05/29 20:04:47.513139,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ./ reduced to /home/schueler1
>[2012/05/29 20:04:47.513178,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.513195,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.513208,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.513242,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.513261,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.513275,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.513300,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2012/05/29 20:04:47.513313,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = Eigene Dateien, attr = 22
>[2012/05/29 20:04:47.513352,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[Eigene Dateien] found ./Eigene Dateien fname=Eigene Dateien (Eigene Dateien)
>[2012/05/29 20:04:47.513382,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:47.513494,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=Eigene Dateien directory=./ dirtype=22 numentries=1
>[2012/05/29 20:04:47.514022,  3] smbd/process.c:1489(process_smb)
>  Transaction 173 of length 110 (0 toread)
>[2012/05/29 20:04:47.514062,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.514076,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.514089,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.514110,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.514129,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.514147,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.514800,  3] smbd/process.c:1489(process_smb)
>  Transaction 174 of length 144 (0 toread)
>[2012/05/29 20:04:47.514829,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.514842,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.514858,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:47.514883,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:04:47.514917,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:04:47.514933,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.514948,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.514984,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.515033,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.515046,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.515070,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.515088,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.515102,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:47.515122,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien, expect_close = 1
>[2012/05/29 20:04:47.515136,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = Eigene Bilder, attr = 22
>[2012/05/29 20:04:47.515163,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[Eigene Bilder] found Eigene Dateien/Eigene Bilder fname=Eigene Bilder (Eigene Bilder)
>[2012/05/29 20:04:47.515187,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:47.515290,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=Eigene Bilder directory=Eigene Dateien dirtype=22 numentries=1
>[2012/05/29 20:04:47.521798,  3] smbd/process.c:1489(process_smb)
>  Transaction 175 of length 90 (0 toread)
>[2012/05/29 20:04:47.521837,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtconX (pid 32737) conn 0x0
>[2012/05/29 20:04:47.521851,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.521897,  4] smbd/reply.c:786(reply_tcon_and_X)
>  Client requested device type [?????] for share [SITE0-1A]
>[2012/05/29 20:04:47.521940,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.521955,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.521966,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.522018,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.522037,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.522049,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.522060,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.522128,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.522177,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.522192,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.522204,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.522228,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.522273,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.522288,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.522300,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.523187,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5037
>[2012/05/29 20:04:47.523238,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.523258,  3] smbd/service.c:552(find_forced_group)
>  Forced group SITE0-1A
>[2012/05/29 20:04:47.523275,  3] smbd/service.c:807(make_connection_snum)
>  Connect path is '/home/groups/klassen/SITE0-1A' for service [SITE0-1A]
>[2012/05/29 20:04:47.523302,  3] smbd/vfs.c:97(vfs_init_default)
>  Initialising default vfs hooks
>[2012/05/29 20:04:47.523315,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2012/05/29 20:04:47.523328,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [acl_xattr]
>[2012/05/29 20:04:47.523385,  2] modules/vfs_acl_xattr.c:193(connect_acl_xattr)
>  connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service SITE0-1A
>[2012/05/29 20:04:47.523460,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid administrator does not start with 'S-'.
>[2012/05/29 20:04:47.523481,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.523493,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.523505,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.524119,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: Administrator
>[2012/05/29 20:04:47.524231,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.524249,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.524261,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.524293,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.524347,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.524361,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.524372,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.524397,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.524418,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.524430,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.524457,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.524482,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.524514,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.524528,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.524540,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.524564,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.524590,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.524611,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid join-backup does not start with 'S-'.
>[2012/05/29 20:04:47.524627,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.524639,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.524650,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.525212,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: join-backup
>[2012/05/29 20:04:47.525323,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.525340,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.525352,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.525383,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.525431,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.525445,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.525456,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.525479,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.525507,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.525521,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.525532,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.525549,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:47.525562,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.525574,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:47.526019,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11017] count=0
>[2012/05/29 20:04:47.526467,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5008
>[2012/05/29 20:04:47.526517,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.526537,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.526554,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.526567,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.526578,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.526606,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.526641,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.526655,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.526696,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.526723,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.526750,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.526776,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.526789,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.526800,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.526823,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.526839,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.526851,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.526862,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.526885,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.526913,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.526926,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.526938,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.526962,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.527033,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5037) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.527087,  1] smbd/service.c:1070(make_connection_snum)
>  winxpsp3ar2 (::ffff:10.200.8.230) connect to service SITE0-1A initially as user schueler1 (uid=2010, gid=5037) (pid 32737)
>[2012/05/29 20:04:47.527108,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.527134,  3] smbd/reply.c:865(reply_tcon_and_X)
>  tconX service=SITE0-1A 
>[2012/05/29 20:04:47.527822,  3] smbd/process.c:1489(process_smb)
>  Transaction 176 of length 80 (0 toread)
>[2012/05/29 20:04:47.527853,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a6ef80
>[2012/05/29 20:04:47.527870,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5037) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.527895,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/groups/klassen/SITE0-1A
>[2012/05/29 20:04:47.527918,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.527939,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/groups/klassen/SITE0-1A]
>[2012/05/29 20:04:47.527959,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/groups/klassen/SITE0-1A
>[2012/05/29 20:04:47.527981,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.528004,  1] smbd/dosmode.c:255(get_ea_dos_attribute)
>  get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Die Operation wird nicht unterstÃ¼tzt
>[2012/05/29 20:04:47.528838,  3] smbd/process.c:1489(process_smb)
>  Transaction 177 of length 104 (0 toread)
>[2012/05/29 20:04:47.528868,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.528883,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.528908,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2012/05/29 20:04:47.528928,  4] smbd/nttrans.c:283(nt_open_pipe)
>  nt_open_pipe: Opening pipe \srvsvc.
>[2012/05/29 20:04:47.528952,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \srvsvc
>[2012/05/29 20:04:47.528978,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.529005,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.529018,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.529050,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.529067,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.529081,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.529093,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.529118,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.529151,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.529167,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.529179,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.529204,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.529222,  4] rpc_server/srv_pipe_hnd.c:162(make_internal_rpc_pipe_p)
>  Created internal pipe \srvsvc (pipes_open=0)
>[2012/05/29 20:04:47.529807,  3] smbd/process.c:1489(process_smb)
>  Transaction 178 of length 140 (0 toread)
>[2012/05/29 20:04:47.529837,  3] smbd/process.c:1298(switch_message)
>  switch message SMBwriteX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.529851,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.529882,  3] rpc_server/srv_pipe.c:1668(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc
>[2012/05/29 20:04:47.529897,  3] rpc_server/srv_pipe.c:998(check_bind_req)
>  check_bind_req for \srvsvc
>[2012/05/29 20:04:47.529925,  3] smbd/pipes.c:352(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2012/05/29 20:04:47.530427,  3] smbd/process.c:1489(process_smb)
>  Transaction 179 of length 63 (0 toread)
>[2012/05/29 20:04:47.530455,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.530469,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.530490,  3] smbd/pipes.c:462(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2012/05/29 20:04:47.531102,  3] smbd/process.c:1489(process_smb)
>  Transaction 180 of length 184 (0 toread)
>[2012/05/29 20:04:47.531131,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.531144,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.531160,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=96 params=0 setup=2
>[2012/05/29 20:04:47.531175,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:47.531187,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "srvsvc" (pnum 1a73)
>[2012/05/29 20:04:47.531206,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 80
>[2012/05/29 20:04:47.531223,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \srvsvc op 0x10 - api_rpcTNP: rpc command: SRVSVC_NETSHAREGETINFO
>[2012/05/29 20:04:47.531264,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 54
>[2012/05/29 20:04:47.531815,  3] smbd/process.c:1489(process_smb)
>  Transaction 181 of length 45 (0 toread)
>[2012/05/29 20:04:47.531847,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.531860,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.531873,  3] smbd/reply.c:4653(reply_close)
>  close fd=-1 fnum=6771 (numopen=1)
>[2012/05/29 20:04:47.532757,  3] smbd/process.c:1489(process_smb)
>  Transaction 182 of length 104 (0 toread)
>[2012/05/29 20:04:47.532786,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.532799,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.532818,  4] smbd/nttrans.c:283(nt_open_pipe)
>  nt_open_pipe: Opening pipe \wkssvc.
>[2012/05/29 20:04:47.532842,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \wkssvc
>[2012/05/29 20:04:47.532875,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.532891,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.532903,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.532942,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.532961,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.532975,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.532987,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.533013,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.533051,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.533066,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.533078,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.533104,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.533123,  4] rpc_server/srv_pipe_hnd.c:162(make_internal_rpc_pipe_p)
>  Created internal pipe \wkssvc (pipes_open=0)
>[2012/05/29 20:04:47.533784,  3] smbd/process.c:1489(process_smb)
>  Transaction 183 of length 140 (0 toread)
>[2012/05/29 20:04:47.533821,  3] smbd/process.c:1298(switch_message)
>  switch message SMBwriteX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.533836,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.533875,  3] rpc_server/srv_pipe.c:1668(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\wkssvc
>[2012/05/29 20:04:47.533893,  3] rpc_server/srv_pipe.c:998(check_bind_req)
>  check_bind_req for \wkssvc
>[2012/05/29 20:04:47.533920,  3] smbd/pipes.c:352(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2012/05/29 20:04:47.534465,  3] smbd/process.c:1489(process_smb)
>  Transaction 184 of length 63 (0 toread)
>[2012/05/29 20:04:47.534498,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.534513,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.534536,  3] smbd/pipes.c:462(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2012/05/29 20:04:47.535240,  3] smbd/process.c:1489(process_smb)
>  Transaction 185 of length 152 (0 toread)
>[2012/05/29 20:04:47.535272,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.535286,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.535303,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=64 params=0 setup=2
>[2012/05/29 20:04:47.535319,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:47.535331,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "wkssvc" (pnum 1a74)
>[2012/05/29 20:04:47.535366,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 80
>[2012/05/29 20:04:47.535401,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \wkssvc op 0x0 - api_rpcTNP: rpc command: WKSSVC_NETWKSTAGETINFO
>[2012/05/29 20:04:47.535451,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 71
>[2012/05/29 20:04:47.536007,  3] smbd/process.c:1489(process_smb)
>  Transaction 186 of length 45 (0 toread)
>[2012/05/29 20:04:47.536037,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.536050,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.536063,  3] smbd/reply.c:4653(reply_close)
>  close fd=-1 fnum=6772 (numopen=1)
>[2012/05/29 20:04:47.537016,  3] smbd/process.c:1489(process_smb)
>  Transaction 187 of length 104 (0 toread)
>[2012/05/29 20:04:47.537051,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.537065,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.537099,  4] smbd/nttrans.c:283(nt_open_pipe)
>  nt_open_pipe: Opening pipe \srvsvc.
>[2012/05/29 20:04:47.537127,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \srvsvc
>[2012/05/29 20:04:47.537152,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.537169,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.537181,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.537237,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.537257,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.537271,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.537283,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.537309,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.537348,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.537364,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.537376,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.537402,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.537422,  4] rpc_server/srv_pipe_hnd.c:162(make_internal_rpc_pipe_p)
>  Created internal pipe \srvsvc (pipes_open=0)
>[2012/05/29 20:04:47.538012,  3] smbd/process.c:1489(process_smb)
>  Transaction 188 of length 140 (0 toread)
>[2012/05/29 20:04:47.538044,  3] smbd/process.c:1298(switch_message)
>  switch message SMBwriteX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.538057,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.538234,  3] rpc_server/srv_pipe.c:1668(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc
>[2012/05/29 20:04:47.538262,  3] rpc_server/srv_pipe.c:998(check_bind_req)
>  check_bind_req for \srvsvc
>[2012/05/29 20:04:47.538288,  3] smbd/pipes.c:352(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2012/05/29 20:04:47.538774,  3] smbd/process.c:1489(process_smb)
>  Transaction 189 of length 63 (0 toread)
>[2012/05/29 20:04:47.538803,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.538816,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.538838,  3] smbd/pipes.c:462(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2012/05/29 20:04:47.539340,  3] smbd/process.c:1489(process_smb)
>  Transaction 190 of length 184 (0 toread)
>[2012/05/29 20:04:47.539388,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.539402,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.539418,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=96 params=0 setup=2
>[2012/05/29 20:04:47.539433,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:47.539446,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "srvsvc" (pnum 1a75)
>[2012/05/29 20:04:47.539465,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 80
>[2012/05/29 20:04:47.539480,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \srvsvc op 0x10 - api_rpcTNP: rpc command: SRVSVC_NETSHAREGETINFO
>[2012/05/29 20:04:47.539522,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 54
>[2012/05/29 20:04:47.540217,  3] smbd/process.c:1489(process_smb)
>  Transaction 191 of length 45 (0 toread)
>[2012/05/29 20:04:47.540247,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.540260,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.540273,  3] smbd/reply.c:4653(reply_close)
>  close fd=-1 fnum=6773 (numopen=1)
>[2012/05/29 20:04:47.541489,  3] smbd/process.c:1489(process_smb)
>  Transaction 192 of length 74 (0 toread)
>[2012/05/29 20:04:47.541518,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a6ef80
>[2012/05/29 20:04:47.541537,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5037) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.541566,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/groups/klassen/SITE0-1A
>[2012/05/29 20:04:47.541593,  3] smbd/trans2.c:3464(call_trans2qfsinfo)
>  call_trans2qfsinfo: level = 258
>[2012/05/29 20:04:47.541609,  3] smbd/trans2.c:2906(smbd_do_qfsinfo)
>  smbd_do_qfsinfo: level = 258
>[2012/05/29 20:04:47.541727,  4] smbd/trans2.c:3480(call_trans2qfsinfo)
>  SMBtrans2 info_level = 258
>[2012/05/29 20:04:47.542017,  3] smbd/process.c:1489(process_smb)
>  Transaction 193 of length 80 (0 toread)
>[2012/05/29 20:04:47.542045,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a6ef80
>[2012/05/29 20:04:47.542057,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.542072,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1005
>[2012/05/29 20:04:47.542094,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/groups/klassen/SITE0-1A]
>[2012/05/29 20:04:47.542115,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/groups/klassen/SITE0-1A
>[2012/05/29 20:04:47.542140,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1005 call=5 total_data=0
>[2012/05/29 20:04:47.542550,  3] smbd/process.c:1489(process_smb)
>  Transaction 194 of length 80 (0 toread)
>[2012/05/29 20:04:47.542579,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a6ef80
>[2012/05/29 20:04:47.542592,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.542606,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1006
>[2012/05/29 20:04:47.542624,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/groups/klassen/SITE0-1A]
>[2012/05/29 20:04:47.542641,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/groups/klassen/SITE0-1A
>[2012/05/29 20:04:47.542660,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1006 call=5 total_data=0
>[2012/05/29 20:04:47.543051,  3] smbd/process.c:1489(process_smb)
>  Transaction 195 of length 80 (0 toread)
>[2012/05/29 20:04:47.543091,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a6ef80
>[2012/05/29 20:04:47.543105,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.543119,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1007
>[2012/05/29 20:04:47.543137,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/groups/klassen/SITE0-1A]
>[2012/05/29 20:04:47.543154,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/groups/klassen/SITE0-1A
>[2012/05/29 20:04:47.543172,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1007 call=5 total_data=0
>[2012/05/29 20:04:47.543602,  3] smbd/process.c:1489(process_smb)
>  Transaction 196 of length 90 (0 toread)
>[2012/05/29 20:04:47.543630,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a6ef80
>[2012/05/29 20:04:47.543643,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.543662,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/groups/klassen/SITE0-1A]
>[2012/05/29 20:04:47.543679,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/groups/klassen/SITE0-1A
>[2012/05/29 20:04:47.543695,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/groups/klassen/SITE0-1A]
>[2012/05/29 20:04:47.543709,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/groups/klassen/SITE0-1A
>[2012/05/29 20:04:47.543728,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0760
>[2012/05/29 20:04:47.543742,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/groups/klassen/SITE0-1A]
>[2012/05/29 20:04:47.543756,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/groups/klassen/SITE0-1A
>[2012/05/29 20:04:47.543779,  4] smbd/open.c:2000(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0760, access_mask = 0x100080, open_access_mask = 0x100080
>[2012/05/29 20:04:47.543854,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5037) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.543874,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.543886,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.543913,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5037) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.543932,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0770
>[2012/05/29 20:04:47.543945,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0760
>[2012/05/29 20:04:47.543985,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5037) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.544003,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.544014,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.544037,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5037) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.544055,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0770
>[2012/05/29 20:04:47.544067,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0760
>[2012/05/29 20:04:47.544550,  3] smbd/process.c:1489(process_smb)
>  Transaction 197 of length 88 (0 toread)
>[2012/05/29 20:04:47.544579,  3] smbd/process.c:1298(switch_message)
>  switch message SMBnttrans (pid 32737) conn 0x7f3751a6ef80
>[2012/05/29 20:04:47.544592,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.545111,  3] smbd/process.c:1489(process_smb)
>  Transaction 198 of length 74 (0 toread)
>[2012/05/29 20:04:47.545139,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a6ef80
>[2012/05/29 20:04:47.545163,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.545178,  3] smbd/trans2.c:3464(call_trans2qfsinfo)
>  call_trans2qfsinfo: level = 1008
>[2012/05/29 20:04:47.545193,  3] smbd/trans2.c:2906(smbd_do_qfsinfo)
>  smbd_do_qfsinfo: level = 1008
>[2012/05/29 20:04:47.545297,  4] smbd/trans2.c:3480(call_trans2qfsinfo)
>  SMBtrans2 info_level = 1008
>[2012/05/29 20:04:47.545746,  3] smbd/process.c:1489(process_smb)
>  Transaction 199 of length 45 (0 toread)
>[2012/05/29 20:04:47.545774,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751a6ef80
>[2012/05/29 20:04:47.545787,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.545800,  3] smbd/reply.c:4643(reply_close)
>  close directory fnum=6775
>[2012/05/29 20:04:47.545906,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.549014,  3] smbd/process.c:1489(process_smb)
>  Transaction 200 of length 94 (0 toread)
>[2012/05/29 20:04:47.549047,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtconX (pid 32737) conn 0x0
>[2012/05/29 20:04:47.549060,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.549100,  4] smbd/reply.c:786(reply_tcon_and_X)
>  Client requested device type [?????] for share [MARKTPLATZ]
>[2012/05/29 20:04:47.549149,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.549166,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.549177,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.549214,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.549232,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.549245,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.549256,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.549278,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.549319,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.549333,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.549344,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.549368,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.549410,  3] smbd/service.c:807(make_connection_snum)
>  Connect path is '/home/groups/Marktplatz' for service [Marktplatz]
>[2012/05/29 20:04:47.549438,  3] smbd/vfs.c:97(vfs_init_default)
>  Initialising default vfs hooks
>[2012/05/29 20:04:47.549452,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2012/05/29 20:04:47.549465,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [acl_xattr]
>[2012/05/29 20:04:47.549520,  2] modules/vfs_acl_xattr.c:193(connect_acl_xattr)
>  connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service Marktplatz
>[2012/05/29 20:04:47.549595,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid administrator does not start with 'S-'.
>[2012/05/29 20:04:47.549617,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.549629,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.549640,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.550538,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: Administrator
>[2012/05/29 20:04:47.550651,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.550693,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.550705,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.550738,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.550794,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.550808,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.550819,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.550842,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.550864,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.550877,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.550888,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.550910,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.550943,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.550958,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.550970,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.551040,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.551073,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.551096,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid join-backup does not start with 'S-'.
>[2012/05/29 20:04:47.551113,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.551125,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.551137,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.551726,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: join-backup
>[2012/05/29 20:04:47.551850,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.551870,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.551884,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.551916,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.551966,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.551980,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.551991,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.552015,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.552044,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.552058,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.552069,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.552087,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:47.552100,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.552111,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:04:47.552572,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11017] count=0
>[2012/05/29 20:04:47.553047,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5008
>[2012/05/29 20:04:47.553099,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.553120,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.553139,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.553152,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.553164,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.553196,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.553236,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.553250,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.553262,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:04:47.553286,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.553316,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.553345,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.553359,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.553371,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.553395,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.553411,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.553423,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.553434,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.553457,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.553485,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.553498,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.553510,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.553652,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.553690,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.553742,  1] smbd/service.c:1070(make_connection_snum)
>  winxpsp3ar2 (::ffff:10.200.8.230) connect to service Marktplatz initially as user schueler1 (uid=2010, gid=5038) (pid 32737)
>[2012/05/29 20:04:47.553764,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.553791,  3] smbd/reply.c:865(reply_tcon_and_X)
>  tconX service=MARKTPLATZ 
>[2012/05/29 20:04:47.554398,  3] smbd/process.c:1489(process_smb)
>  Transaction 201 of length 80 (0 toread)
>[2012/05/29 20:04:47.554432,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aaec10
>[2012/05/29 20:04:47.554448,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.554473,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/groups/Marktplatz
>[2012/05/29 20:04:47.554497,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.554519,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/groups/Marktplatz]
>[2012/05/29 20:04:47.554541,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/groups/Marktplatz
>[2012/05/29 20:04:47.554587,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.554613,  1] smbd/dosmode.c:255(get_ea_dos_attribute)
>  get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Die Operation wird nicht unterstÃ¼tzt
>[2012/05/29 20:04:47.555474,  3] smbd/process.c:1489(process_smb)
>  Transaction 202 of length 104 (0 toread)
>[2012/05/29 20:04:47.555507,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.555524,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.555549,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2012/05/29 20:04:47.555570,  4] smbd/nttrans.c:283(nt_open_pipe)
>  nt_open_pipe: Opening pipe \srvsvc.
>[2012/05/29 20:04:47.555597,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \srvsvc
>[2012/05/29 20:04:47.555627,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.555642,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.555654,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.555689,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.555708,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.555722,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.555733,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.555759,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.555801,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.555831,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.555845,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.555872,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.555893,  4] rpc_server/srv_pipe_hnd.c:162(make_internal_rpc_pipe_p)
>  Created internal pipe \srvsvc (pipes_open=0)
>[2012/05/29 20:04:47.556479,  3] smbd/process.c:1489(process_smb)
>  Transaction 203 of length 140 (0 toread)
>[2012/05/29 20:04:47.556514,  3] smbd/process.c:1298(switch_message)
>  switch message SMBwriteX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.556529,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.556563,  3] rpc_server/srv_pipe.c:1668(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc
>[2012/05/29 20:04:47.556578,  3] rpc_server/srv_pipe.c:998(check_bind_req)
>  check_bind_req for \srvsvc
>[2012/05/29 20:04:47.556608,  3] smbd/pipes.c:352(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2012/05/29 20:04:47.557197,  3] smbd/process.c:1489(process_smb)
>  Transaction 204 of length 63 (0 toread)
>[2012/05/29 20:04:47.557232,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.557247,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.557270,  3] smbd/pipes.c:462(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2012/05/29 20:04:47.557888,  3] smbd/process.c:1489(process_smb)
>  Transaction 205 of length 188 (0 toread)
>[2012/05/29 20:04:47.557918,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.557932,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.557951,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=100 params=0 setup=2
>[2012/05/29 20:04:47.558006,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:47.558020,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "srvsvc" (pnum 1a78)
>[2012/05/29 20:04:47.558042,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 80
>[2012/05/29 20:04:47.558060,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \srvsvc op 0x10 - api_rpcTNP: rpc command: SRVSVC_NETSHAREGETINFO
>[2012/05/29 20:04:47.558111,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 54
>[2012/05/29 20:04:47.558748,  3] smbd/process.c:1489(process_smb)
>  Transaction 206 of length 45 (0 toread)
>[2012/05/29 20:04:47.558778,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.558792,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.558805,  3] smbd/reply.c:4653(reply_close)
>  close fd=-1 fnum=6776 (numopen=1)
>[2012/05/29 20:04:47.559622,  3] smbd/process.c:1489(process_smb)
>  Transaction 207 of length 104 (0 toread)
>[2012/05/29 20:04:47.559657,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.559670,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.559688,  4] smbd/nttrans.c:283(nt_open_pipe)
>  nt_open_pipe: Opening pipe \wkssvc.
>[2012/05/29 20:04:47.559717,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \wkssvc
>[2012/05/29 20:04:47.559746,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.559764,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.559776,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.559839,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.559862,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.559877,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.559889,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.559915,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.559958,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.559975,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.559987,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.560012,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.560034,  4] rpc_server/srv_pipe_hnd.c:162(make_internal_rpc_pipe_p)
>  Created internal pipe \wkssvc (pipes_open=0)
>[2012/05/29 20:04:47.560614,  3] smbd/process.c:1489(process_smb)
>  Transaction 208 of length 140 (0 toread)
>[2012/05/29 20:04:47.560645,  3] smbd/process.c:1298(switch_message)
>  switch message SMBwriteX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.560660,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.560691,  3] rpc_server/srv_pipe.c:1668(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\wkssvc
>[2012/05/29 20:04:47.560706,  3] rpc_server/srv_pipe.c:998(check_bind_req)
>  check_bind_req for \wkssvc
>[2012/05/29 20:04:47.560734,  3] smbd/pipes.c:352(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2012/05/29 20:04:47.561216,  3] smbd/process.c:1489(process_smb)
>  Transaction 209 of length 63 (0 toread)
>[2012/05/29 20:04:47.561244,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.561290,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.561315,  3] smbd/pipes.c:462(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2012/05/29 20:04:47.561807,  3] smbd/process.c:1489(process_smb)
>  Transaction 210 of length 152 (0 toread)
>[2012/05/29 20:04:47.561836,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.561849,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.561868,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=64 params=0 setup=2
>[2012/05/29 20:04:47.561897,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:47.561910,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "wkssvc" (pnum 1a79)
>[2012/05/29 20:04:47.561930,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 80
>[2012/05/29 20:04:47.561946,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \wkssvc op 0x0 - api_rpcTNP: rpc command: WKSSVC_NETWKSTAGETINFO
>[2012/05/29 20:04:47.561982,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 71
>[2012/05/29 20:04:47.562510,  3] smbd/process.c:1489(process_smb)
>  Transaction 211 of length 45 (0 toread)
>[2012/05/29 20:04:47.562539,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.562552,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.562565,  3] smbd/reply.c:4653(reply_close)
>  close fd=-1 fnum=6777 (numopen=1)
>[2012/05/29 20:04:47.563483,  3] smbd/process.c:1489(process_smb)
>  Transaction 212 of length 104 (0 toread)
>[2012/05/29 20:04:47.563512,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.563526,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.563542,  4] smbd/nttrans.c:283(nt_open_pipe)
>  nt_open_pipe: Opening pipe \srvsvc.
>[2012/05/29 20:04:47.563569,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \srvsvc
>[2012/05/29 20:04:47.563594,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.563620,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.563637,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.563682,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.563702,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.563715,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.563727,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.563753,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.563792,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.563819,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.563832,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.563861,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.563882,  4] rpc_server/srv_pipe_hnd.c:162(make_internal_rpc_pipe_p)
>  Created internal pipe \srvsvc (pipes_open=0)
>[2012/05/29 20:04:47.564414,  3] smbd/process.c:1489(process_smb)
>  Transaction 213 of length 140 (0 toread)
>[2012/05/29 20:04:47.564445,  3] smbd/process.c:1298(switch_message)
>  switch message SMBwriteX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.564472,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.564498,  3] rpc_server/srv_pipe.c:1668(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc
>[2012/05/29 20:04:47.564514,  3] rpc_server/srv_pipe.c:998(check_bind_req)
>  check_bind_req for \srvsvc
>[2012/05/29 20:04:47.564538,  3] smbd/pipes.c:352(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2012/05/29 20:04:47.565040,  3] smbd/process.c:1489(process_smb)
>  Transaction 214 of length 63 (0 toread)
>[2012/05/29 20:04:47.565070,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.565082,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.565104,  3] smbd/pipes.c:462(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2012/05/29 20:04:47.565626,  3] smbd/process.c:1489(process_smb)
>  Transaction 215 of length 188 (0 toread)
>[2012/05/29 20:04:47.565655,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.565668,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.565683,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=100 params=0 setup=2
>[2012/05/29 20:04:47.565698,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:04:47.565710,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "srvsvc" (pnum 1a7a)
>[2012/05/29 20:04:47.565728,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 80
>[2012/05/29 20:04:47.565743,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \srvsvc op 0x10 - api_rpcTNP: rpc command: SRVSVC_NETSHAREGETINFO
>[2012/05/29 20:04:47.565784,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 54
>[2012/05/29 20:04:47.566416,  3] smbd/process.c:1489(process_smb)
>  Transaction 216 of length 45 (0 toread)
>[2012/05/29 20:04:47.566445,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:04:47.566458,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.566471,  3] smbd/reply.c:4653(reply_close)
>  close fd=-1 fnum=6778 (numopen=1)
>[2012/05/29 20:04:47.567706,  3] smbd/process.c:1489(process_smb)
>  Transaction 217 of length 74 (0 toread)
>[2012/05/29 20:04:47.567736,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aaec10
>[2012/05/29 20:04:47.567752,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.567778,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/groups/Marktplatz
>[2012/05/29 20:04:47.567804,  3] smbd/trans2.c:3464(call_trans2qfsinfo)
>  call_trans2qfsinfo: level = 258
>[2012/05/29 20:04:47.567833,  3] smbd/trans2.c:2906(smbd_do_qfsinfo)
>  smbd_do_qfsinfo: level = 258
>[2012/05/29 20:04:47.567942,  4] smbd/trans2.c:3480(call_trans2qfsinfo)
>  SMBtrans2 info_level = 258
>[2012/05/29 20:04:47.568327,  3] smbd/process.c:1489(process_smb)
>  Transaction 218 of length 80 (0 toread)
>[2012/05/29 20:04:47.568354,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aaec10
>[2012/05/29 20:04:47.568367,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.568381,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1005
>[2012/05/29 20:04:47.568402,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/groups/Marktplatz]
>[2012/05/29 20:04:47.568424,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/groups/Marktplatz
>[2012/05/29 20:04:47.568446,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1005 call=5 total_data=0
>[2012/05/29 20:04:47.568954,  3] smbd/process.c:1489(process_smb)
>  Transaction 219 of length 80 (0 toread)
>[2012/05/29 20:04:47.568983,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aaec10
>[2012/05/29 20:04:47.568996,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.569010,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1006
>[2012/05/29 20:04:47.569028,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/groups/Marktplatz]
>[2012/05/29 20:04:47.569045,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/groups/Marktplatz
>[2012/05/29 20:04:47.569063,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1006 call=5 total_data=0
>[2012/05/29 20:04:47.569539,  3] smbd/process.c:1489(process_smb)
>  Transaction 220 of length 80 (0 toread)
>[2012/05/29 20:04:47.569567,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aaec10
>[2012/05/29 20:04:47.569580,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.569594,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1007
>[2012/05/29 20:04:47.569612,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/groups/Marktplatz]
>[2012/05/29 20:04:47.569629,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/groups/Marktplatz
>[2012/05/29 20:04:47.569647,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1007 call=5 total_data=0
>[2012/05/29 20:04:47.570112,  3] smbd/process.c:1489(process_smb)
>  Transaction 221 of length 90 (0 toread)
>[2012/05/29 20:04:47.570141,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751aaec10
>[2012/05/29 20:04:47.570154,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.570174,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/groups/Marktplatz]
>[2012/05/29 20:04:47.570192,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/groups/Marktplatz
>[2012/05/29 20:04:47.570207,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/groups/Marktplatz]
>[2012/05/29 20:04:47.570221,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/groups/Marktplatz
>[2012/05/29 20:04:47.570241,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0744
>[2012/05/29 20:04:47.570256,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/groups/Marktplatz]
>[2012/05/29 20:04:47.570270,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/groups/Marktplatz
>[2012/05/29 20:04:47.570295,  4] smbd/open.c:2000(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x100080, open_access_mask = 0x100080
>[2012/05/29 20:04:47.570362,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.570380,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.570392,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.570419,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.570439,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0755
>[2012/05/29 20:04:47.570452,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0744
>[2012/05/29 20:04:47.570493,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.570510,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.570522,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:47.570560,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.570578,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0755
>[2012/05/29 20:04:47.570591,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0744
>[2012/05/29 20:04:47.571162,  3] smbd/process.c:1489(process_smb)
>  Transaction 222 of length 88 (0 toread)
>[2012/05/29 20:04:47.571195,  3] smbd/process.c:1298(switch_message)
>  switch message SMBnttrans (pid 32737) conn 0x7f3751aaec10
>[2012/05/29 20:04:47.571209,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.571730,  3] smbd/process.c:1489(process_smb)
>  Transaction 223 of length 74 (0 toread)
>[2012/05/29 20:04:47.571763,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aaec10
>[2012/05/29 20:04:47.571777,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.571793,  3] smbd/trans2.c:3464(call_trans2qfsinfo)
>  call_trans2qfsinfo: level = 1008
>[2012/05/29 20:04:47.571810,  3] smbd/trans2.c:2906(smbd_do_qfsinfo)
>  smbd_do_qfsinfo: level = 1008
>[2012/05/29 20:04:47.571919,  4] smbd/trans2.c:3480(call_trans2qfsinfo)
>  SMBtrans2 info_level = 1008
>[2012/05/29 20:04:47.572288,  3] smbd/process.c:1489(process_smb)
>  Transaction 224 of length 45 (0 toread)
>[2012/05/29 20:04:47.572328,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751aaec10
>[2012/05/29 20:04:47.572349,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.572362,  3] smbd/reply.c:4643(reply_close)
>  close directory fnum=6780
>[2012/05/29 20:04:47.574847,  3] smbd/process.c:1489(process_smb)
>  Transaction 225 of length 80 (0 toread)
>[2012/05/29 20:04:47.574897,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751a6ef80
>[2012/05/29 20:04:47.574919,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5037) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.574948,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/groups/klassen/SITE0-1A
>[2012/05/29 20:04:47.574973,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.575033,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/groups/klassen/SITE0-1A]
>[2012/05/29 20:04:47.575061,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/groups/klassen/SITE0-1A
>[2012/05/29 20:04:47.575097,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.580120,  3] smbd/process.c:1489(process_smb)
>  Transaction 226 of length 80 (0 toread)
>[2012/05/29 20:04:47.580155,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aaec10
>[2012/05/29 20:04:47.580171,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.580193,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/groups/Marktplatz
>[2012/05/29 20:04:47.580212,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.580231,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/groups/Marktplatz]
>[2012/05/29 20:04:47.580250,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/groups/Marktplatz
>[2012/05/29 20:04:47.580269,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.598100,  3] smbd/process.c:1489(process_smb)
>  Transaction 227 of length 110 (0 toread)
>[2012/05/29 20:04:47.598190,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.598214,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:47.598279,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:04:47.598306,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.598341,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.598366,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.598394,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.599033,  3] smbd/process.c:1489(process_smb)
>  Transaction 228 of length 110 (0 toread)
>[2012/05/29 20:04:47.599065,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.599078,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.599093,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.599114,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:47.599134,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:47.599153,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.649282,  3] smbd/process.c:1489(process_smb)
>  Transaction 229 of length 138 (0 toread)
>[2012/05/29 20:04:47.649375,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.649392,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.649415,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.649457,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:04:47.649489,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:04:47.649521,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:47.650289,  3] smbd/process.c:1489(process_smb)
>  Transaction 230 of length 138 (0 toread)
>[2012/05/29 20:04:47.650326,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:47.650352,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:47.650368,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:47.650392,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:04:47.650414,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:04:47.650435,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:51.969968,  3] smbd/process.c:1489(process_smb)
>  Transaction 231 of length 106 (0 toread)
>[2012/05/29 20:04:51.970087,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:51.970106,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:51.970129,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:51.970268,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:51.970292,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:51.970305,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:51.970341,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:51.970363,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:51.970379,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:51.970434,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [netshellicon] [/home/schueler1]
>[2012/05/29 20:04:51.970467,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: netshellicon reduced to /home/schueler1/netshellicon
>[2012/05/29 20:04:51.970483,  3] smbd/trans2.c:5209(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of netshellicon failed (Datei oder Verzeichnis nicht gefunden)
>[2012/05/29 20:04:51.970508,  3] smbd/error.c:80(error_packet_set)
>  error packet at smbd/trans2.c(5211) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2012/05/29 20:04:51.971274,  3] smbd/process.c:1489(process_smb)
>  Transaction 232 of length 106 (0 toread)
>[2012/05/29 20:04:51.971304,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:51.971317,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:51.971344,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:51.971388,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:51.971406,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:51.971419,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:51.971444,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:51.971462,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:51.971475,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:51.971508,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [netshellicon] [/home/schueler1]
>[2012/05/29 20:04:51.971533,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: netshellicon reduced to /home/schueler1/netshellicon
>[2012/05/29 20:04:51.971547,  3] smbd/trans2.c:5209(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of netshellicon failed (Datei oder Verzeichnis nicht gefunden)
>[2012/05/29 20:04:51.971564,  3] smbd/error.c:80(error_packet_set)
>  error packet at smbd/trans2.c(5211) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2012/05/29 20:04:51.985305,  3] smbd/process.c:1489(process_smb)
>  Transaction 233 of length 110 (0 toread)
>[2012/05/29 20:04:51.985383,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:51.985399,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:51.985419,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:51.985450,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:51.985478,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:51.985505,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:51.986138,  3] smbd/process.c:1489(process_smb)
>  Transaction 234 of length 120 (0 toread)
>[2012/05/29 20:04:51.986188,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:51.986202,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:51.986222,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:51.986251,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/*] [/home/schueler1]
>[2012/05/29 20:04:51.986278,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/* reduced to /home/schueler1/Eigene Dateien/*
>[2012/05/29 20:04:51.986292,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:04:51.986307,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:04:51.986358,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:51.986377,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:51.986390,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:51.986419,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:51.986439,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:51.986452,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:04:51.986478,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien, expect_close = 1
>[2012/05/29 20:04:51.986492,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = *, attr = 22
>[2012/05/29 20:04:51.986528,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/. fname=. (.)
>[2012/05/29 20:04:51.986563,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/.. fname=.. (..)
>[2012/05/29 20:04:51.986606,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/$RECYCLE.BIN fname=$RECYCLE.BIN ($RECYCLE.BIN)
>[2012/05/29 20:04:51.986636,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/desktop.ini fname=desktop.ini (desktop.ini)
>[2012/05/29 20:04:51.986665,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Musik fname=Eigene Musik (Eigene Musik)
>[2012/05/29 20:04:51.986699,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder fname=Eigene Bilder (Eigene Bilder)
>[2012/05/29 20:04:51.986738,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/schulertext.txt.txt fname=schulertext.txt.txt (schulertext.txt.txt)
>[2012/05/29 20:04:51.986763,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:51.986875,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=* directory=Eigene Dateien dirtype=22 numentries=7
>[2012/05/29 20:04:51.987695,  3] smbd/process.c:1489(process_smb)
>  Transaction 235 of length 136 (0 toread)
>[2012/05/29 20:04:51.987725,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:51.987738,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:51.987752,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:51.987778,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/$RECYCLE.BIN] [/home/schueler1]
>[2012/05/29 20:04:51.987810,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/$RECYCLE.BIN reduced to /home/schueler1/Eigene Dateien/$RECYCLE.BIN
>[2012/05/29 20:04:51.987842,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/$RECYCLE.BIN (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:52.188921,  3] smbd/process.c:1489(process_smb)
>  Transaction 236 of length 146 (0 toread)
>[2012/05/29 20:04:52.189017,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:52.189034,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:52.189065,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:52.189118,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/$RECYCLE.BIN/*] [/home/schueler1]
>[2012/05/29 20:04:52.189160,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/$RECYCLE.BIN/* reduced to /home/schueler1/Eigene Dateien/$RECYCLE.BIN/*
>[2012/05/29 20:04:52.189177,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/$RECYCLE.BIN] [/home/schueler1]
>[2012/05/29 20:04:52.189208,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/$RECYCLE.BIN reduced to /home/schueler1/Eigene Dateien/$RECYCLE.BIN
>[2012/05/29 20:04:52.189305,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:52.189326,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:52.189339,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:52.189384,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:52.189486,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien/$RECYCLE.BIN, expect_close = 1
>[2012/05/29 20:04:52.189505,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = *, attr = 22
>[2012/05/29 20:04:52.189557,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/$RECYCLE.BIN/. fname=. (.)
>[2012/05/29 20:04:52.189594,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/$RECYCLE.BIN/.. fname=.. (..)
>[2012/05/29 20:04:52.189637,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/$RECYCLE.BIN/desktop.ini fname=desktop.ini (desktop.ini)
>[2012/05/29 20:04:52.189660,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:52.189792,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=* directory=Eigene Dateien/$RECYCLE.BIN dirtype=22 numentries=3
>[2012/05/29 20:04:52.192067,  3] smbd/process.c:1489(process_smb)
>  Transaction 237 of length 136 (0 toread)
>[2012/05/29 20:04:52.192110,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:52.192125,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:52.192141,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:52.192166,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik] [/home/schueler1]
>[2012/05/29 20:04:52.192189,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik reduced to /home/schueler1/Eigene Dateien/Eigene Musik
>[2012/05/29 20:04:52.192210,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Musik (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:52.192740,  3] smbd/process.c:1489(process_smb)
>  Transaction 238 of length 146 (0 toread)
>[2012/05/29 20:04:52.192770,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:52.192783,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:52.192834,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:52.192872,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik/*] [/home/schueler1]
>[2012/05/29 20:04:52.192902,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik/* reduced to /home/schueler1/Eigene Dateien/Eigene Musik/*
>[2012/05/29 20:04:52.192917,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik] [/home/schueler1]
>[2012/05/29 20:04:52.192934,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik reduced to /home/schueler1/Eigene Dateien/Eigene Musik
>[2012/05/29 20:04:52.192974,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:52.192992,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:52.193004,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:52.193030,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:52.193085,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien/Eigene Musik, expect_close = 1
>[2012/05/29 20:04:52.193103,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = *, attr = 22
>[2012/05/29 20:04:52.193134,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Musik/. fname=. (.)
>[2012/05/29 20:04:52.193164,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Musik/.. fname=.. (..)
>[2012/05/29 20:04:52.193202,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Musik/Beispielmusik.lnk fname=Beispielmusik.lnk (Beispielmusik.lnk)
>[2012/05/29 20:04:52.193239,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Musik/Desktop.ini fname=Desktop.ini (Desktop.ini)
>[2012/05/29 20:04:52.193260,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:52.193374,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=* directory=Eigene Dateien/Eigene Musik dirtype=22 numentries=4
>[2012/05/29 20:04:52.194063,  3] smbd/process.c:1489(process_smb)
>  Transaction 239 of length 182 (0 toread)
>[2012/05/29 20:04:52.194091,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:52.194104,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:52.194145,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik/Beispielmusik.lnk] [/home/schueler1]
>[2012/05/29 20:04:52.194171,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik/Beispielmusik.lnk reduced to /home/schueler1/Eigene Dateien/Eigene Musik/Beispielmusik.lnk
>[2012/05/29 20:04:52.194188,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik/Beispielmusik.lnk] [/home/schueler1]
>[2012/05/29 20:04:52.194207,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik/Beispielmusik.lnk reduced to /home/schueler1/Eigene Dateien/Eigene Musik/Beispielmusik.lnk
>[2012/05/29 20:04:52.194227,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(Eigene Dateien/Eigene Musik/Beispielmusik.lnk) returning 0700
>[2012/05/29 20:04:52.194241,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik/Beispielmusik.lnk] [/home/schueler1]
>[2012/05/29 20:04:52.194259,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik/Beispielmusik.lnk reduced to /home/schueler1/Eigene Dateien/Eigene Musik/Beispielmusik.lnk
>[2012/05/29 20:04:52.194294,  4] smbd/open.c:2000(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0700, access_mask = 0x20089, open_access_mask = 0x20089
>[2012/05/29 20:04:52.194339,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:52.194357,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:52.194368,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:52.194396,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:52.194443,  2] smbd/open.c:657(open_file)
>  schueler1 opened file Eigene Dateien/Eigene Musik/Beispielmusik.lnk read=Yes write=No (numopen=1)
>[2012/05/29 20:04:52.194466,  3] smbd/oplock_linux.c:127(linux_set_kernel_oplock)
>  linux_set_kernel_oplock: got kernel oplock on file Eigene Dateien/Eigene Musik/Beispielmusik.lnk, file_id = fe00:2c02c:0 gen_id = 24
>[2012/05/29 20:04:52.195139,  3] smbd/process.c:1489(process_smb)
>  Transaction 240 of length 76 (0 toread)
>[2012/05/29 20:04:52.195182,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:52.195204,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:52.195219,  3] smbd/trans2.c:5013(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006
>[2012/05/29 20:04:52.195243,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Musik/Beispielmusik.lnk (fnum = 6781) level=1006 call=7 total_data=0
>[2012/05/29 20:04:52.196201,  3] smbd/process.c:1489(process_smb)
>  Transaction 241 of length 76 (0 toread)
>[2012/05/29 20:04:52.196238,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:52.196251,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:52.196266,  3] smbd/trans2.c:5013(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2012/05/29 20:04:52.196291,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Musik/Beispielmusik.lnk (fnum = 6781) level=1004 call=7 total_data=0
>[2012/05/29 20:04:52.199618,  3] smbd/process.c:1489(process_smb)
>  Transaction 242 of length 138 (0 toread)
>[2012/05/29 20:04:52.199679,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:52.199693,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:52.199711,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:52.199749,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:04:52.199779,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:04:52.199807,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:52.200406,  3] smbd/process.c:1489(process_smb)
>  Transaction 243 of length 148 (0 toread)
>[2012/05/29 20:04:52.200435,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:52.200459,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:52.200481,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:52.200511,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/*] [/home/schueler1]
>[2012/05/29 20:04:52.200563,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/* reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/*
>[2012/05/29 20:04:52.200579,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:04:52.200596,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:04:52.200664,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:52.200684,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:52.200697,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:52.200733,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:52.200797,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien/Eigene Bilder, expect_close = 1
>[2012/05/29 20:04:52.200814,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = *, attr = 22
>[2012/05/29 20:04:52.200853,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/. fname=. (.)
>[2012/05/29 20:04:52.200888,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/.. fname=.. (..)
>[2012/05/29 20:04:52.200936,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/$RECYCLE.BIN fname=$RECYCLE.BIN ($RECYCLE.BIN)
>[2012/05/29 20:04:52.200968,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/Beispielbilder.lnk fname=Beispielbilder.lnk (Beispielbilder.lnk)
>[2012/05/29 20:04:52.201013,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/Desktop.ini fname=Desktop.ini (Desktop.ini)
>[2012/05/29 20:04:52.201035,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:52.201151,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=* directory=Eigene Dateien/Eigene Bilder dirtype=22 numentries=5
>[2012/05/29 20:04:52.202009,  3] smbd/process.c:1489(process_smb)
>  Transaction 244 of length 164 (0 toread)
>[2012/05/29 20:04:52.202042,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:52.202067,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:52.202091,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:52.202128,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/$RECYCLE.BIN] [/home/schueler1]
>[2012/05/29 20:04:52.202154,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/$RECYCLE.BIN reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/$RECYCLE.BIN
>[2012/05/29 20:04:52.202175,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder/$RECYCLE.BIN (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:52.202681,  3] smbd/process.c:1489(process_smb)
>  Transaction 245 of length 174 (0 toread)
>[2012/05/29 20:04:52.202710,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:52.202723,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:52.202739,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:52.202767,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/*] [/home/schueler1]
>[2012/05/29 20:04:52.202811,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/* reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/*
>[2012/05/29 20:04:52.202827,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/$RECYCLE.BIN] [/home/schueler1]
>[2012/05/29 20:04:52.202846,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/$RECYCLE.BIN reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/$RECYCLE.BIN
>[2012/05/29 20:04:52.202889,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:52.202906,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:52.202918,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:52.202947,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:52.203020,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien/Eigene Bilder/$RECYCLE.BIN, expect_close = 1
>[2012/05/29 20:04:52.203041,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = *, attr = 22
>[2012/05/29 20:04:52.203073,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/. fname=. (.)
>[2012/05/29 20:04:52.203105,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/.. fname=.. (..)
>[2012/05/29 20:04:52.203143,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/desktop.ini fname=desktop.ini (desktop.ini)
>[2012/05/29 20:04:52.203164,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:52.203272,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=* directory=Eigene Dateien/Eigene Bilder/$RECYCLE.BIN dirtype=22 numentries=3
>[2012/05/29 20:04:52.204486,  3] smbd/process.c:1489(process_smb)
>  Transaction 246 of length 186 (0 toread)
>[2012/05/29 20:04:52.204518,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:52.204531,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:52.204562,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/Beispielbilder.lnk] [/home/schueler1]
>[2012/05/29 20:04:52.204588,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/Beispielbilder.lnk reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/Beispielbilder.lnk
>[2012/05/29 20:04:52.204604,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/Beispielbilder.lnk] [/home/schueler1]
>[2012/05/29 20:04:52.204623,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/Beispielbilder.lnk reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/Beispielbilder.lnk
>[2012/05/29 20:04:52.204643,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(Eigene Dateien/Eigene Bilder/Beispielbilder.lnk) returning 0700
>[2012/05/29 20:04:52.204657,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/Beispielbilder.lnk] [/home/schueler1]
>[2012/05/29 20:04:52.204675,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/Beispielbilder.lnk reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/Beispielbilder.lnk
>[2012/05/29 20:04:52.204700,  4] smbd/open.c:2000(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0700, access_mask = 0x20089, open_access_mask = 0x20089
>[2012/05/29 20:04:52.204741,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:52.204772,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:52.204784,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:52.204816,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:52.204857,  2] smbd/open.c:657(open_file)
>  schueler1 opened file Eigene Dateien/Eigene Bilder/Beispielbilder.lnk read=Yes write=No (numopen=2)
>[2012/05/29 20:04:52.204880,  3] smbd/oplock_linux.c:127(linux_set_kernel_oplock)
>  linux_set_kernel_oplock: got kernel oplock on file Eigene Dateien/Eigene Bilder/Beispielbilder.lnk, file_id = fe00:2c029:0 gen_id = 25
>[2012/05/29 20:04:52.205512,  3] smbd/process.c:1489(process_smb)
>  Transaction 247 of length 76 (0 toread)
>[2012/05/29 20:04:52.205541,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:52.205554,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:52.205569,  3] smbd/trans2.c:5013(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006
>[2012/05/29 20:04:52.205592,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder/Beispielbilder.lnk (fnum = 6782) level=1006 call=7 total_data=0
>[2012/05/29 20:04:52.206391,  3] smbd/process.c:1489(process_smb)
>  Transaction 248 of length 76 (0 toread)
>[2012/05/29 20:04:52.206420,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:52.206433,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:52.206447,  3] smbd/trans2.c:5013(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2012/05/29 20:04:52.206468,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder/Beispielbilder.lnk (fnum = 6782) level=1004 call=7 total_data=0
>[2012/05/29 20:04:52.209861,  3] smbd/process.c:1489(process_smb)
>  Transaction 249 of length 138 (0 toread)
>[2012/05/29 20:04:52.209892,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:52.209905,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:52.209919,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:52.209943,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:04:52.209965,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:04:52.209984,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:52.210103,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:52.210505,  3] smbd/process.c:1489(process_smb)
>  Transaction 250 of length 148 (0 toread)
>[2012/05/29 20:04:52.210534,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:52.210550,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:52.210576,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:52.210605,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/*] [/home/schueler1]
>[2012/05/29 20:04:52.210633,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/* reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/*
>[2012/05/29 20:04:52.210662,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:04:52.210681,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:04:52.210725,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:52.210742,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:52.210754,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:52.210781,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:52.210840,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien/Eigene Bilder, expect_close = 1
>[2012/05/29 20:04:52.210858,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = *, attr = 22
>[2012/05/29 20:04:52.210890,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/. fname=. (.)
>[2012/05/29 20:04:52.210922,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/.. fname=.. (..)
>[2012/05/29 20:04:52.210961,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/$RECYCLE.BIN fname=$RECYCLE.BIN ($RECYCLE.BIN)
>[2012/05/29 20:04:52.211026,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/Beispielbilder.lnk fname=Beispielbilder.lnk (Beispielbilder.lnk)
>[2012/05/29 20:04:52.211067,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/Desktop.ini fname=Desktop.ini (Desktop.ini)
>[2012/05/29 20:04:52.211089,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:52.211199,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=* directory=Eigene Dateien/Eigene Bilder dirtype=22 numentries=5
>[2012/05/29 20:04:52.211940,  3] smbd/process.c:1489(process_smb)
>  Transaction 251 of length 164 (0 toread)
>[2012/05/29 20:04:52.211969,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:52.211982,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:52.211997,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:04:52.212019,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/$RECYCLE.BIN] [/home/schueler1]
>[2012/05/29 20:04:52.212041,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/$RECYCLE.BIN reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/$RECYCLE.BIN
>[2012/05/29 20:04:52.212061,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder/$RECYCLE.BIN (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:04:52.212577,  3] smbd/process.c:1489(process_smb)
>  Transaction 252 of length 174 (0 toread)
>[2012/05/29 20:04:52.212622,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:52.212635,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:52.212652,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:04:52.212681,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/*] [/home/schueler1]
>[2012/05/29 20:04:52.212714,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/* reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/*
>[2012/05/29 20:04:52.212742,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/$RECYCLE.BIN] [/home/schueler1]
>[2012/05/29 20:04:52.212762,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/$RECYCLE.BIN reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/$RECYCLE.BIN
>[2012/05/29 20:04:52.212814,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:52.212834,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:04:52.212847,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:04:52.212877,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:52.212920,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien/Eigene Bilder/$RECYCLE.BIN, expect_close = 1
>[2012/05/29 20:04:52.212936,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = *, attr = 22
>[2012/05/29 20:04:52.212967,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/. fname=. (.)
>[2012/05/29 20:04:52.212998,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/.. fname=.. (..)
>[2012/05/29 20:04:52.213034,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/desktop.ini fname=desktop.ini (desktop.ini)
>[2012/05/29 20:04:52.213070,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:04:52.213181,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=* directory=Eigene Dateien/Eigene Bilder/$RECYCLE.BIN dirtype=22 numentries=3
>[2012/05/29 20:04:52.214272,  3] smbd/process.c:1489(process_smb)
>  Transaction 253 of length 76 (0 toread)
>[2012/05/29 20:04:52.214306,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:04:52.214319,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:04:52.214344,  3] smbd/trans2.c:5013(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2012/05/29 20:04:52.214368,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder/Beispielbilder.lnk (fnum = 6782) level=1004 call=7 total_data=0
>[2012/05/29 20:04:57.472889,  3] smbd/process.c:1489(process_smb)
>  Transaction 254 of length 43 (0 toread)
>[2012/05/29 20:04:57.473003,  3] smbd/process.c:1298(switch_message)
>  switch message SMBulogoffX (pid 32737) conn 0x0
>[2012/05/29 20:04:57.473024,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:57.473079,  3] smbd/reply.c:2074(reply_ulogoffX)
>  ulogoffX vuid=101
>[2012/05/29 20:04:57.473687,  3] smbd/process.c:1489(process_smb)
>  Transaction 255 of length 39 (0 toread)
>[2012/05/29 20:04:57.482803,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtdis (pid 32737) conn 0x7f3751a7cc20
>[2012/05/29 20:04:57.482833,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:57.482859,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2012/05/29 20:04:57.482879,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:04:57.482893,  3] smbd/service.c:1251(close_cnum)
>  winxpsp3ar2 (::ffff:10.200.8.230) closed connection to service IPC$
>[2012/05/29 20:04:57.482914,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to IPC$
>[2012/05/29 20:04:57.482953,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /
>[2012/05/29 20:04:57.482969,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:05:08.848040,  3] smbd/process.c:1489(process_smb)
>  Transaction 256 of length 45 (0 toread)
>[2012/05/29 20:05:08.848191,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:05:08.848222,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:05:08.848258,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:05:08.848293,  3] smbd/reply.c:4653(reply_close)
>  close fd=34 fnum=6781 (numopen=2)
>[2012/05/29 20:05:08.848349,  2] smbd/close.c:656(close_normal_file)
>  schueler1 closed file Eigene Dateien/Eigene Musik/Beispielmusik.lnk (numopen=1) NT_STATUS_OK
>[2012/05/29 20:05:08.849135,  3] smbd/process.c:1489(process_smb)
>  Transaction 257 of length 45 (0 toread)
>[2012/05/29 20:05:08.849169,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:05:08.849183,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:05:08.849195,  3] smbd/reply.c:4653(reply_close)
>  close fd=35 fnum=6782 (numopen=1)
>[2012/05/29 20:05:08.849226,  2] smbd/close.c:656(close_normal_file)
>  schueler1 closed file Eigene Dateien/Eigene Bilder/Beispielbilder.lnk (numopen=0) NT_STATUS_OK
>[2012/05/29 20:05:11.957694,  3] smbd/process.c:1489(process_smb)
>  Transaction 258 of length 100 (0 toread)
>[2012/05/29 20:05:11.957803,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:05:11.957821,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:05:11.957840,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:05:11.957928,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:05:11.957948,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:05:11.957962,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:05:11.957997,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:05:11.958017,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:05:11.958032,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:05:11.958101,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [fxsst.dll] [/home/schueler1]
>[2012/05/29 20:05:11.958140,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: fxsst.dll reduced to /home/schueler1/fxsst.dll
>[2012/05/29 20:05:11.958155,  3] smbd/trans2.c:5209(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of fxsst.dll failed (Datei oder Verzeichnis nicht gefunden)
>[2012/05/29 20:05:11.958178,  3] smbd/error.c:80(error_packet_set)
>  error packet at smbd/trans2.c(5211) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2012/05/29 20:05:15.332424,  3] smbd/process.c:1489(process_smb)
>  Transaction 259 of length 45 (0 toread)
>[2012/05/29 20:05:15.332524,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751a84700
>[2012/05/29 20:05:15.332549,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:05:15.332598,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2012/05/29 20:05:15.332622,  3] smbd/reply.c:4653(reply_close)
>  close fd=-1 fnum=6758 (numopen=1)
>[2012/05/29 20:05:26.660747,  3] smbd/process.c:1489(process_smb)
>  Transaction 260 of length 43 (0 toread)
>[2012/05/29 20:05:26.660850,  3] smbd/process.c:1298(switch_message)
>  switch message SMBulogoffX (pid 32737) conn 0x0
>[2012/05/29 20:05:26.660867,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:05:26.660913,  3] smbd/reply.c:2074(reply_ulogoffX)
>  ulogoffX vuid=100
>[2012/05/29 20:05:26.661499,  3] smbd/process.c:1489(process_smb)
>  Transaction 261 of length 39 (0 toread)
>[2012/05/29 20:05:26.661528,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtdis (pid 32737) conn 0x7f3751a84700
>[2012/05/29 20:05:26.661570,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:05:26.661591,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:05:26.661607,  3] smbd/service.c:1251(close_cnum)
>  winxpsp3ar2 (::ffff:10.200.8.230) closed connection to service IPC$
>[2012/05/29 20:05:26.661625,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to IPC$
>[2012/05/29 20:05:26.661686,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /
>[2012/05/29 20:05:26.661708,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:05:31.548679,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:06:31.608208,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:19.618373,  3] smbd/process.c:2085(check_reload)
>  Printcap cache time expired.
>[2012/05/29 20:07:19.618485,  3] printing/pcap.c:137(pcap_cache_reload)
>  reloading printcap cache
>[2012/05/29 20:07:19.624812,  0] printing/print_cups.c:304(cups_cache_reload_async)
>  Unable to get printer list - client-error-forbidden
>[2012/05/29 20:07:19.624973,  0] printing/print_cups.c:468(cups_async_callback)
>  failed to retrieve printer list: NT_STATUS_UNSUCCESSFUL
>[2012/05/29 20:07:19.625037,  3] printing/pcap.c:249(pcap_cache_reload)
>  reload status: error
>[2012/05/29 20:07:19.625555,  1] smbd/server.c:282(remove_child_pid)
>  Could not find child 487 -- ignoring
>[2012/05/29 20:07:22.942235,  3] smbd/process.c:1489(process_smb)
>  Transaction 262 of length 100 (0 toread)
>[2012/05/29 20:07:22.942329,  3] smbd/process.c:1298(switch_message)
>  switch message SMBntcreateX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.942362,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.942398,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2012/05/29 20:07:22.942427,  4] smbd/nttrans.c:283(nt_open_pipe)
>  nt_open_pipe: Opening pipe \samr.
>[2012/05/29 20:07:22.942461,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \samr
>[2012/05/29 20:07:22.942495,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.942511,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.942524,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.943349,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.943381,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.943396,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.943408,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.943835,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.943892,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.943910,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.943923,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.943953,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.943976,  4] rpc_server/srv_pipe_hnd.c:162(make_internal_rpc_pipe_p)
>  Created internal pipe \samr (pipes_open=0)
>[2012/05/29 20:07:22.945223,  3] smbd/process.c:1489(process_smb)
>  Transaction 263 of length 140 (0 toread)
>[2012/05/29 20:07:22.945261,  3] smbd/process.c:1298(switch_message)
>  switch message SMBwriteX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.945277,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:22.945352,  3] rpc_server/srv_pipe.c:1668(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\samr -> \PIPE\samr
>[2012/05/29 20:07:22.945371,  3] rpc_server/srv_pipe.c:998(check_bind_req)
>  check_bind_req for \samr
>[2012/05/29 20:07:22.945403,  3] smbd/pipes.c:352(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2012/05/29 20:07:22.948426,  3] smbd/process.c:1489(process_smb)
>  Transaction 264 of length 63 (0 toread)
>[2012/05/29 20:07:22.948500,  3] smbd/process.c:1298(switch_message)
>  switch message SMBreadX (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.948516,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:22.948551,  3] smbd/pipes.c:462(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2012/05/29 20:07:22.963919,  3] smbd/process.c:1489(process_smb)
>  Transaction 265 of length 168 (0 toread)
>[2012/05/29 20:07:22.964016,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.964035,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:22.964069,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=80 params=0 setup=2
>[2012/05/29 20:07:22.964089,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:07:22.964103,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a7f)
>[2012/05/29 20:07:22.964134,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 78
>[2012/05/29 20:07:22.964154,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x40 - api_rpcTNP: rpc command: SAMR_CONNECT5
>[2012/05/29 20:07:22.964195,  4] rpc_server/srv_samr_nt.c:230(access_check_object)
>  _samr_Connect5: access GRANTED (requested: 0x00000030, granted: 0x00000030)
>[2012/05/29 20:07:22.964213,  4] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal)
>  Opened policy hnd[1] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.964256,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 1042
>[2012/05/29 20:07:22.964860,  3] smbd/process.c:1489(process_smb)
>  Transaction 266 of length 140 (0 toread)
>[2012/05/29 20:07:22.964890,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.964903,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:22.964918,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=52 params=0 setup=2
>[2012/05/29 20:07:22.964935,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:07:22.964947,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a7f)
>[2012/05/29 20:07:22.964964,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:07:22.964978,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x6 - api_rpcTNP: rpc command: SAMR_ENUMDOMAINS
>[2012/05/29 20:07:22.965012,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.965059,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 90
>[2012/05/29 20:07:22.965529,  3] smbd/process.c:1489(process_smb)
>  Transaction 267 of length 158 (0 toread)
>[2012/05/29 20:07:22.965558,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.965571,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:22.965587,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=70 params=0 setup=2
>[2012/05/29 20:07:22.965626,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:07:22.965638,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a7f)
>[2012/05/29 20:07:22.965656,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:07:22.965670,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x5 - api_rpcTNP: rpc command: SAMR_LOOKUPDOMAIN
>[2012/05/29 20:07:22.965690,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.965743,  2] rpc_server/srv_samr_nt.c:4124(_samr_LookupDomain)
>  Returning domain sid for domain S3I -> S-1-5-21-3785813934-3866640808-4451219
>[2012/05/29 20:07:22.965764,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 94
>[2012/05/29 20:07:22.966270,  3] smbd/process.c:1489(process_smb)
>  Transaction 268 of length 164 (0 toread)
>[2012/05/29 20:07:22.966305,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.966330,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:22.966348,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=76 params=0 setup=2
>[2012/05/29 20:07:22.966363,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:07:22.966375,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a7f)
>[2012/05/29 20:07:22.966394,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:07:22.966408,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x7 - api_rpcTNP: rpc command: SAMR_OPENDOMAIN
>[2012/05/29 20:07:22.966427,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.966465,  4] rpc_server/srv_samr_nt.c:230(access_check_object)
>  _samr_OpenDomain: access GRANTED (requested: 0x00000200, granted: 0x00000210)
>[2012/05/29 20:07:22.966481,  4] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal)
>  Opened policy hnd[2] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.966514,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 1042
>[2012/05/29 20:07:22.967010,  3] smbd/process.c:1489(process_smb)
>  Transaction 269 of length 152 (0 toread)
>[2012/05/29 20:07:22.967040,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.967053,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:22.967068,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=64 params=0 setup=2
>[2012/05/29 20:07:22.967082,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:07:22.967094,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a7f)
>[2012/05/29 20:07:22.967112,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:07:22.967126,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x7 - api_rpcTNP: rpc command: SAMR_OPENDOMAIN
>[2012/05/29 20:07:22.967153,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[1] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.967189,  4] rpc_server/srv_samr_nt.c:230(access_check_object)
>  _samr_OpenDomain: access GRANTED (requested: 0x00000280, granted: 0x00000290)
>[2012/05/29 20:07:22.967216,  4] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal)
>  Opened policy hnd[3] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.967251,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 1042
>[2012/05/29 20:07:22.967839,  3] smbd/process.c:1489(process_smb)
>  Transaction 270 of length 186 (0 toread)
>[2012/05/29 20:07:22.967868,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.967881,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:22.967896,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=98 params=0 setup=2
>[2012/05/29 20:07:22.967911,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:07:22.967922,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a7f)
>[2012/05/29 20:07:22.967940,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:07:22.967954,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x11 - api_rpcTNP: rpc command: SAMR_LOOKUPNAMES
>[2012/05/29 20:07:22.967982,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[1] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.968023,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.968040,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.968053,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.969059,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: schueler1
>[2012/05/29 20:07:22.969189,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.969206,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.969217,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.969254,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.969313,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.969327,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.969338,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.969362,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.969393,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.969407,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.969418,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.969435,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:07:22.969448,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.969459,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:07:22.969887,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11077] count=0
>[2012/05/29 20:07:22.970328,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5038
>[2012/05/29 20:07:22.970375,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.970407,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.970426,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.970438,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.970450,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.970475,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.970512,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.970526,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.970538,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.970562,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.970591,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.970620,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 34
>[2012/05/29 20:07:22.971150,  3] smbd/process.c:1489(process_smb)
>  Transaction 271 of length 140 (0 toread)
>[2012/05/29 20:07:22.971180,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.971194,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:22.971208,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=52 params=0 setup=2
>[2012/05/29 20:07:22.971223,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:07:22.971235,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a7f)
>[2012/05/29 20:07:22.971252,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:07:22.971267,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x22 - api_rpcTNP: rpc command: SAMR_OPENUSER
>[2012/05/29 20:07:22.971286,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[1] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.971323,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.971338,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.971350,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.971371,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.971385,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.971396,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.971423,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.971439,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.971451,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.971462,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.971485,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.971515,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.971531,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.971542,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.971566,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.971598,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.971617,  4] rpc_server/srv_samr_nt.c:230(access_check_object)
>  _samr_OpenUser: access GRANTED (requested: 0x0002011b, granted: 0x000f05ff)
>[2012/05/29 20:07:22.971631,  4] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal)
>  Opened policy hnd[4] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.971666,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 1274
>[2012/05/29 20:07:22.972138,  3] smbd/process.c:1489(process_smb)
>  Transaction 272 of length 134 (0 toread)
>[2012/05/29 20:07:22.972167,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.972180,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:22.972195,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=46 params=0 setup=2
>[2012/05/29 20:07:22.972209,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:07:22.972318,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a7f)
>[2012/05/29 20:07:22.972341,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:07:22.972361,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x24 - api_rpcTNP: rpc command: SAMR_QUERYUSERINFO
>[2012/05/29 20:07:22.972381,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.972416,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.972430,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.972442,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.972464,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.972477,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.972488,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.972514,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.972530,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.972542,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.972553,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.972576,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.972605,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.972620,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.972631,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.972655,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.972675,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.972689,  3] rpc_server/srv_samr_nt.c:3064(_samr_QueryUserInfo)
>  User:[schueler1]
>[2012/05/29 20:07:22.972702,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.972715,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.972726,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.972757,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.972771,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.972785,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.972796,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.973221,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.973247,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.973262,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.973273,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.973300,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.973320,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.973333,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.973344,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.973369,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.973410,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 1185
>[2012/05/29 20:07:22.973943,  3] smbd/process.c:1489(process_smb)
>  Transaction 273 of length 136 (0 toread)
>[2012/05/29 20:07:22.973972,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.973985,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:22.973999,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=48 params=0 setup=2
>[2012/05/29 20:07:22.974014,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:07:22.974026,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a7f)
>[2012/05/29 20:07:22.974043,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:07:22.974057,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x3 - api_rpcTNP: rpc command: SAMR_QUERYSECURITY
>[2012/05/29 20:07:22.974079,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.974113,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.974143,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.974174,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.974187,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.974199,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.974220,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.974235,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.974246,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.974272,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.974300,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.974313,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.974324,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.974348,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.974378,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.974393,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.974404,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.974428,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.974448,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.974462,  3] rpc_server/srv_samr_nt.c:752(check_change_pw_access)
>  User:[schueler1]
>[2012/05/29 20:07:22.974499,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 1934
>[2012/05/29 20:07:22.975058,  3] smbd/process.c:1489(process_smb)
>  Transaction 274 of length 132 (0 toread)
>[2012/05/29 20:07:22.975087,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.975100,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:22.975115,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2012/05/29 20:07:22.975129,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:07:22.975141,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a7f)
>[2012/05/29 20:07:22.975158,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:07:22.975172,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x27 - api_rpcTNP: rpc command: SAMR_GETGROUPSFORUSER
>[2012/05/29 20:07:22.975195,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.975230,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.975244,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.975256,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.975277,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.975291,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.975302,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.975328,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.975344,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.975356,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.975367,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.975390,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.975420,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.975434,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.975446,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:22.975481,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.975503,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.975517,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.975530,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.975542,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.975761,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.975790,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 1025
>[2012/05/29 20:07:22.976329,  3] smbd/process.c:1489(process_smb)
>  Transaction 275 of length 288 (0 toread)
>[2012/05/29 20:07:22.976367,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.976381,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:22.976397,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=200 params=0 setup=2
>[2012/05/29 20:07:22.976411,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:07:22.976423,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a7f)
>[2012/05/29 20:07:22.976441,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:07:22.976455,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x10 - api_rpcTNP: rpc command: SAMR_GETALIASMEMBERSHIP
>[2012/05/29 20:07:22.976480,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[1] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.976515,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.976529,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.976541,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:22.976989,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:22.977021,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 1777
>[2012/05/29 20:07:22.977497,  3] smbd/process.c:1489(process_smb)
>  Transaction 276 of length 132 (0 toread)
>[2012/05/29 20:07:22.977527,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.977540,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:22.977555,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2012/05/29 20:07:22.977570,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:07:22.977581,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a7f)
>[2012/05/29 20:07:22.977599,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:07:22.977614,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE
>[2012/05/29 20:07:22.977632,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.977664,  3] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd)
>  Closed policy
>[2012/05/29 20:07:22.977678,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:07:22.978130,  3] smbd/process.c:1489(process_smb)
>  Transaction 277 of length 132 (0 toread)
>[2012/05/29 20:07:22.978174,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.978188,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:22.978203,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2012/05/29 20:07:22.978218,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:07:22.978229,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a7f)
>[2012/05/29 20:07:22.978247,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:07:22.978261,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE
>[2012/05/29 20:07:22.978278,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[1] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.978310,  3] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd)
>  Closed policy
>[2012/05/29 20:07:22.978325,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:07:22.978764,  3] smbd/process.c:1489(process_smb)
>  Transaction 278 of length 132 (0 toread)
>[2012/05/29 20:07:22.978793,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.978806,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:22.978821,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2012/05/29 20:07:22.978836,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:07:22.978847,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a7f)
>[2012/05/29 20:07:22.978864,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:07:22.978891,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE
>[2012/05/29 20:07:22.978909,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.978942,  3] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd)
>  Closed policy
>[2012/05/29 20:07:22.978957,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:07:22.979498,  3] smbd/process.c:1489(process_smb)
>  Transaction 279 of length 132 (0 toread)
>[2012/05/29 20:07:22.979529,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.979542,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:22.979558,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2012/05/29 20:07:22.979573,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2012/05/29 20:07:22.979585,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "samr" (pnum 1a7f)
>[2012/05/29 20:07:22.979612,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:07:22.979631,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE
>[2012/05/29 20:07:22.979648,  4] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 C5 4F 5A 10   ........ .....OZ.
>  [0010] E1 7F 00 00                                       .... 
>[2012/05/29 20:07:22.979680,  3] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd)
>  Closed policy
>[2012/05/29 20:07:22.979694,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 26
>[2012/05/29 20:07:22.980246,  3] smbd/process.c:1489(process_smb)
>  Transaction 280 of length 45 (0 toread)
>[2012/05/29 20:07:22.980275,  3] smbd/process.c:1298(switch_message)
>  switch message SMBclose (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:22.980289,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:22.980302,  3] smbd/reply.c:4653(reply_close)
>  close fd=-1 fnum=6783 (numopen=1)
>[2012/05/29 20:07:30.601075,  3] smbd/process.c:1489(process_smb)
>  Transaction 281 of length 240 (0 toread)
>[2012/05/29 20:07:30.601167,  3] smbd/process.c:1298(switch_message)
>  switch message SMBsesssetupX (pid 32737) conn 0x0
>[2012/05/29 20:07:30.601183,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.601218,  3] smbd/sesssetup.c:1458(reply_sesssetup_and_X)
>  wct=12 flg2=0xc807
>[2012/05/29 20:07:30.601234,  3] smbd/sesssetup.c:1212(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2012/05/29 20:07:30.601252,  3] smbd/sesssetup.c:1254(reply_sesssetup_and_X_spnego)
>  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2012/05/29 20:07:30.601288,  3] smbd/sesssetup.c:806(reply_spnego_negotiate)
>  reply_spnego_negotiate: Got secblob of size 40
>[2012/05/29 20:07:30.601324,  3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0xa2088207
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_NEGOTIATE_OEM
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_VERSION
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_56
>[2012/05/29 20:07:30.602197,  3] smbd/process.c:1489(process_smb)
>  Transaction 282 of length 268 (0 toread)
>[2012/05/29 20:07:30.602232,  3] smbd/process.c:1298(switch_message)
>  switch message SMBsesssetupX (pid 32737) conn 0x0
>[2012/05/29 20:07:30.602246,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.602265,  3] smbd/sesssetup.c:1458(reply_sesssetup_and_X)
>  wct=12 flg2=0xc807
>[2012/05/29 20:07:30.602277,  3] smbd/sesssetup.c:1212(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2012/05/29 20:07:30.602291,  3] smbd/sesssetup.c:1254(reply_sesssetup_and_X_spnego)
>  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2012/05/29 20:07:30.602315,  3] libsmb/ntlmssp.c:747(ntlmssp_server_auth)
>  Got user=[] domain=[] workstation=[WINXPSP3AR2] len1=1 len2=0
>[2012/05/29 20:07:30.602380,  3] auth/auth.c:216(check_ntlm_password)
>  check_ntlm_password:  Checking password for unmapped user []\[]@[WINXPSP3AR2] with the new password interface
>[2012/05/29 20:07:30.602398,  3] auth/auth.c:219(check_ntlm_password)
>  check_ntlm_password:  mapped user is: [S3I]\[]@[WINXPSP3AR2]
>[2012/05/29 20:07:30.602422,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.602435,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.602446,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.602484,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.602521,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.602536,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.602548,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.602571,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.602592,  3] auth/auth.c:265(check_ntlm_password)
>  check_ntlm_password: guest authentication for user [] succeeded
>[2012/05/29 20:07:30.602623,  3] libsmb/ntlmssp_sign.c:343(ntlmssp_sign_init)
>  NTLMSSP Sign/Seal - Initialising with flags:
>[2012/05/29 20:07:30.602666,  3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0xa2088205
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_VERSION
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_56
>[2012/05/29 20:07:30.602714,  3] smbd/password.c:282(register_existing_vuid)
>  register_existing_vuid: User name: nobody	Real name: nobody
>[2012/05/29 20:07:30.602726,  3] smbd/password.c:292(register_existing_vuid)
>  register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 103
>[2012/05/29 20:07:30.603449,  3] smbd/process.c:1489(process_smb)
>  Transaction 283 of length 82 (0 toread)
>[2012/05/29 20:07:30.603493,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtconX (pid 32737) conn 0x0
>[2012/05/29 20:07:30.603507,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.603532,  4] smbd/reply.c:786(reply_tcon_and_X)
>  Client requested device type [?????] for share [IPC$]
>[2012/05/29 20:07:30.603562,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.603577,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.603588,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.603618,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.603648,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.603662,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.603674,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.603696,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.603733,  3] smbd/service.c:807(make_connection_snum)
>  Connect path is '/tmp' for service [IPC$]
>[2012/05/29 20:07:30.603760,  3] smbd/vfs.c:97(vfs_init_default)
>  Initialising default vfs hooks
>[2012/05/29 20:07:30.603774,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2012/05/29 20:07:30.603844,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid administrator does not start with 'S-'.
>[2012/05/29 20:07:30.603865,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.603877,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.603889,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.604699,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: Administrator
>[2012/05/29 20:07:30.604807,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.604824,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.604835,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.604865,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.604918,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.604931,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.604943,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.604980,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.605000,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.605013,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.605024,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.605064,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.605097,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.605111,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.605123,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.605146,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.605170,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.605190,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid join-backup does not start with 'S-'.
>[2012/05/29 20:07:30.605206,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.605218,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.605229,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.605752,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: join-backup
>[2012/05/29 20:07:30.605857,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.605873,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.605885,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.605913,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.605959,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.605973,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.605984,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.606007,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.606034,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.606050,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.606061,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.606078,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:07:30.606090,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.606102,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:07:30.606512,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11017] count=0
>[2012/05/29 20:07:30.606946,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5008
>[2012/05/29 20:07:30.607034,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.607057,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.607074,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.607086,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.607097,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.607123,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.607155,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.607169,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.607181,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.607216,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.607241,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.607265,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.607278,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.607290,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.607313,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.607340,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.607353,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.607364,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.607387,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.607409,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.607444,  3] smbd/service.c:1070(make_connection_snum)
>  winxpsp3ar2 (::ffff:10.200.8.230) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 32737)
>[2012/05/29 20:07:30.607463,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.607485,  3] smbd/reply.c:865(reply_tcon_and_X)
>  tconX service=IPC$ 
>[2012/05/29 20:07:30.609181,  3] smbd/process.c:1489(process_smb)
>  Transaction 284 of length 88 (0 toread)
>[2012/05/29 20:07:30.609216,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtconX (pid 32737) conn 0x0
>[2012/05/29 20:07:30.609234,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.609258,  4] smbd/reply.c:786(reply_tcon_and_X)
>  Client requested device type [?????] for share [LEHRER1]
>[2012/05/29 20:07:30.609445,  3] smbd/service.c:330(find_service)
>  checking for home directory lehrer1 gave /home/lehrer1
>[2012/05/29 20:07:30.609505,  3] param/loadparm.c:6299(lp_add_home)
>  adding home's share [lehrer1] for user 'lehrer1' at '/home/lehrer1'
>[2012/05/29 20:07:30.609530,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.609545,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.609556,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.609585,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.609615,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.609636,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.609648,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.609672,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.609714,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.609731,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.609742,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.609766,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.609800,  3] smbd/service.c:807(make_connection_snum)
>  Connect path is '/home/lehrer1' for service [lehrer1]
>[2012/05/29 20:07:30.609825,  3] smbd/vfs.c:97(vfs_init_default)
>  Initialising default vfs hooks
>[2012/05/29 20:07:30.609839,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2012/05/29 20:07:30.609865,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [acl_xattr]
>[2012/05/29 20:07:30.609914,  2] modules/vfs_acl_xattr.c:193(connect_acl_xattr)
>  connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service lehrer1
>[2012/05/29 20:07:30.609978,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid administrator does not start with 'S-'.
>[2012/05/29 20:07:30.609998,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.610011,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.610022,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.610676,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: Administrator
>[2012/05/29 20:07:30.610785,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.610802,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.610814,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.610845,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.610896,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.610910,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.610921,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.610944,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.610964,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.610977,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.611043,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.611073,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.611106,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.611120,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.611132,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.611156,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.611180,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.611200,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid join-backup does not start with 'S-'.
>[2012/05/29 20:07:30.611217,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.611229,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.611240,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.611766,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: join-backup
>[2012/05/29 20:07:30.611871,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.611888,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.611900,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.611928,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.611998,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.612012,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.612023,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.612063,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.612090,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.612104,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.612115,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.612133,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:07:30.612146,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.612157,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:07:30.612551,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11017] count=0
>[2012/05/29 20:07:30.612982,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5008
>[2012/05/29 20:07:30.613029,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.613048,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.613064,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.613077,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.613090,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.613115,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.613147,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.613161,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.613173,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.613195,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.613219,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.613242,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.613256,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.613267,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.613290,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.613306,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.613318,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.613329,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.613350,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.613378,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.613392,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.613403,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.613426,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.613447,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.613486,  1] smbd/service.c:1070(make_connection_snum)
>  winxpsp3ar2 (::ffff:10.200.8.230) connect to service lehrer1 initially as user schueler1 (uid=2010, gid=5038) (pid 32737)
>[2012/05/29 20:07:30.613506,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.613541,  3] smbd/reply.c:865(reply_tcon_and_X)
>  tconX service=LEHRER1 
>[2012/05/29 20:07:30.614441,  3] smbd/process.c:1489(process_smb)
>  Transaction 285 of length 80 (0 toread)
>[2012/05/29 20:07:30.614472,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751ab08c0
>[2012/05/29 20:07:30.614487,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.614509,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/lehrer1
>[2012/05/29 20:07:30.614529,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:30.614549,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/lehrer1]
>[2012/05/29 20:07:30.614571,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/lehrer1
>[2012/05/29 20:07:30.614593,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:30.620011,  3] smbd/process.c:1489(process_smb)
>  Transaction 286 of length 88 (0 toread)
>[2012/05/29 20:07:30.620041,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtconX (pid 32737) conn 0x0
>[2012/05/29 20:07:30.620055,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.620087,  4] smbd/reply.c:786(reply_tcon_and_X)
>  Client requested device type [?????] for share [LEHRER1]
>[2012/05/29 20:07:30.620118,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.620133,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.620144,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.620177,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.620195,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.620207,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.620219,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.620242,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.620277,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.620292,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.620303,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.621112,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.621165,  3] smbd/service.c:807(make_connection_snum)
>  Connect path is '/home/lehrer1' for service [lehrer1]
>[2012/05/29 20:07:30.621192,  3] smbd/vfs.c:97(vfs_init_default)
>  Initialising default vfs hooks
>[2012/05/29 20:07:30.621205,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2012/05/29 20:07:30.621221,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [acl_xattr]
>[2012/05/29 20:07:30.621277,  2] modules/vfs_acl_xattr.c:193(connect_acl_xattr)
>  connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service lehrer1
>[2012/05/29 20:07:30.621832,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid administrator does not start with 'S-'.
>[2012/05/29 20:07:30.621859,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.621872,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.621883,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.622603,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: Administrator
>[2012/05/29 20:07:30.622723,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.622741,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.622753,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.622782,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.622836,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.622850,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.622861,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.622884,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.622903,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.622916,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.622927,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.622950,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.622980,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.623032,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.623045,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.623071,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.623096,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.623116,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid join-backup does not start with 'S-'.
>[2012/05/29 20:07:30.623133,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.623145,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.623156,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.623669,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: join-backup
>[2012/05/29 20:07:30.623772,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.623789,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.623801,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.623829,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.623877,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.623891,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.623902,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.623924,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.623972,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.623988,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.623999,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.624018,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:07:30.624031,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.624042,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:07:30.624437,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11017] count=0
>[2012/05/29 20:07:30.624881,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5008
>[2012/05/29 20:07:30.624929,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.624948,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.624964,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.624977,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.624988,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.625014,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.625046,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.625060,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.625071,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:30.625095,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.625118,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.625140,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.625154,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.625165,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.625188,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.625203,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.625215,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.625226,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.625247,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.625274,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.625288,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.625299,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.625321,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.625342,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.625379,  1] smbd/service.c:1070(make_connection_snum)
>  winxpsp3ar2 (::ffff:10.200.8.230) connect to service lehrer1 initially as user schueler1 (uid=2010, gid=5038) (pid 32737)
>[2012/05/29 20:07:30.625399,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.625422,  3] smbd/reply.c:865(reply_tcon_and_X)
>  tconX service=LEHRER1 
>[2012/05/29 20:07:30.626268,  3] smbd/process.c:1489(process_smb)
>  Transaction 287 of length 110 (0 toread)
>[2012/05/29 20:07:30.626316,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aad6b0
>[2012/05/29 20:07:30.626334,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.626378,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:30.626413,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/lehrer1]
>[2012/05/29 20:07:30.626441,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/lehrer1/Eigene Dateien
>[2012/05/29 20:07:30.626485,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:30.627215,  3] smbd/process.c:1489(process_smb)
>  Transaction 288 of length 120 (0 toread)
>[2012/05/29 20:07:30.627248,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aad6b0
>[2012/05/29 20:07:30.627262,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:30.627282,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:30.627322,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/*] [/home/lehrer1]
>[2012/05/29 20:07:30.627349,  3] smbd/vfs.c:962(check_reduced_name)
>  check_reduced_name: couldn't get realpath for Eigene Dateien/*
>[2012/05/29 20:07:30.627362,  3] smbd/filename.c:1184(filename_convert)
>  filename_convert: check_name failed for name Eigene Dateien/* with NT_STATUS_ACCESS_DENIED
>[2012/05/29 20:07:30.627377,  3] smbd/error.c:80(error_packet_set)
>  error packet at smbd/trans2.c(2305) cmd=50 (SMBtrans2) NT_STATUS_ACCESS_DENIED
>[2012/05/29 20:07:30.628226,  3] smbd/process.c:1489(process_smb)
>  Transaction 289 of length 136 (0 toread)
>[2012/05/29 20:07:30.628256,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aad6b0
>[2012/05/29 20:07:30.628269,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:30.628282,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:30.628380,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.628403,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.628416,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.628441,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.628462,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:30.628475,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:30.628508,  3] smbd/filename.c:945(get_real_filename_full_scan)
>  scan dir didn't open dir [Eigene Dateien]
>[2012/05/29 20:07:30.628524,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/$RECYCLE.BIN] [/home/lehrer1]
>[2012/05/29 20:07:30.628546,  3] smbd/vfs.c:962(check_reduced_name)
>  check_reduced_name: couldn't get realpath for Eigene Dateien/$RECYCLE.BIN
>[2012/05/29 20:07:30.628558,  3] smbd/filename.c:1184(filename_convert)
>  filename_convert: check_name failed for name Eigene Dateien/$RECYCLE.BIN with NT_STATUS_ACCESS_DENIED
>[2012/05/29 20:07:30.628573,  3] smbd/error.c:80(error_packet_set)
>  error packet at smbd/trans2.c(5129) cmd=50 (SMBtrans2) NT_STATUS_ACCESS_DENIED
>[2012/05/29 20:07:30.629670,  3] smbd/process.c:1489(process_smb)
>  Transaction 290 of length 136 (0 toread)
>[2012/05/29 20:07:30.629699,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aad6b0
>[2012/05/29 20:07:30.629712,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:30.629725,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:30.629772,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.629790,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.629802,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.629826,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.629860,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:30.629874,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:30.629889,  3] smbd/filename.c:945(get_real_filename_full_scan)
>  scan dir didn't open dir [Eigene Dateien]
>[2012/05/29 20:07:30.629902,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik] [/home/lehrer1]
>[2012/05/29 20:07:30.629922,  3] smbd/vfs.c:962(check_reduced_name)
>  check_reduced_name: couldn't get realpath for Eigene Dateien/Eigene Musik
>[2012/05/29 20:07:30.629934,  3] smbd/filename.c:1184(filename_convert)
>  filename_convert: check_name failed for name Eigene Dateien/Eigene Musik with NT_STATUS_ACCESS_DENIED
>[2012/05/29 20:07:30.629948,  3] smbd/error.c:80(error_packet_set)
>  error packet at smbd/trans2.c(5129) cmd=50 (SMBtrans2) NT_STATUS_ACCESS_DENIED
>[2012/05/29 20:07:30.631164,  3] smbd/process.c:1489(process_smb)
>  Transaction 291 of length 138 (0 toread)
>[2012/05/29 20:07:30.631193,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aad6b0
>[2012/05/29 20:07:30.631206,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:30.631219,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:30.631266,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.631284,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.631296,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.631321,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.631338,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:30.631351,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:30.631365,  3] smbd/filename.c:945(get_real_filename_full_scan)
>  scan dir didn't open dir [Eigene Dateien]
>[2012/05/29 20:07:30.631378,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/lehrer1]
>[2012/05/29 20:07:30.631399,  3] smbd/vfs.c:962(check_reduced_name)
>  check_reduced_name: couldn't get realpath for Eigene Dateien/Eigene Bilder
>[2012/05/29 20:07:30.631412,  3] smbd/filename.c:1184(filename_convert)
>  filename_convert: check_name failed for name Eigene Dateien/Eigene Bilder with NT_STATUS_ACCESS_DENIED
>[2012/05/29 20:07:30.631426,  3] smbd/error.c:80(error_packet_set)
>  error packet at smbd/trans2.c(5129) cmd=50 (SMBtrans2) NT_STATUS_ACCESS_DENIED
>[2012/05/29 20:07:30.632275,  3] smbd/process.c:1489(process_smb)
>  Transaction 292 of length 164 (0 toread)
>[2012/05/29 20:07:30.632303,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aad6b0
>[2012/05/29 20:07:30.632316,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:30.632330,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:30.632376,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.632394,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.632406,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:30.632430,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:30.632448,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:30.632461,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:30.632475,  3] smbd/filename.c:945(get_real_filename_full_scan)
>  scan dir didn't open dir [Eigene Dateien]
>[2012/05/29 20:07:30.632490,  3] smbd/error.c:80(error_packet_set)
>  error packet at smbd/trans2.c(5129) cmd=50 (SMBtrans2) NT_STATUS_ACCESS_DENIED
>[2012/05/29 20:07:31.609245,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:31.609358,  3] smbd/process.c:2085(check_reload)
>  Printcap cache time expired.
>[2012/05/29 20:07:31.609378,  3] printing/pcap.c:137(pcap_cache_reload)
>  reloading printcap cache
>[2012/05/29 20:07:31.615457,  0] printing/print_cups.c:304(cups_cache_reload_async)
>  Unable to get printer list - client-error-forbidden
>[2012/05/29 20:07:31.615593,  0] printing/print_cups.c:468(cups_async_callback)
>  failed to retrieve printer list: NT_STATUS_UNSUCCESSFUL
>[2012/05/29 20:07:31.615648,  3] printing/pcap.c:249(pcap_cache_reload)
>  reload status: error
>[2012/05/29 20:07:34.347884,  3] smbd/process.c:1489(process_smb)
>  Transaction 293 of length 43 (0 toread)
>[2012/05/29 20:07:34.347994,  3] smbd/process.c:1298(switch_message)
>  switch message SMBulogoffX (pid 32737) conn 0x0
>[2012/05/29 20:07:34.348015,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:34.348101,  3] smbd/reply.c:2074(reply_ulogoffX)
>  ulogoffX vuid=103
>[2012/05/29 20:07:34.348684,  3] smbd/process.c:1489(process_smb)
>  Transaction 294 of length 39 (0 toread)
>[2012/05/29 20:07:34.348720,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtdis (pid 32737) conn 0x7f3751a84700
>[2012/05/29 20:07:34.348733,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:34.348753,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2012/05/29 20:07:34.348776,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:34.348792,  3] smbd/service.c:1251(close_cnum)
>  winxpsp3ar2 (::ffff:10.200.8.230) closed connection to service IPC$
>[2012/05/29 20:07:34.348811,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to IPC$
>[2012/05/29 20:07:34.348857,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /
>[2012/05/29 20:07:34.348887,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.129836,  3] smbd/process.c:1489(process_smb)
>  Transaction 295 of length 240 (0 toread)
>[2012/05/29 20:07:38.129936,  3] smbd/process.c:1298(switch_message)
>  switch message SMBsesssetupX (pid 32737) conn 0x0
>[2012/05/29 20:07:38.129951,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.129980,  3] smbd/sesssetup.c:1458(reply_sesssetup_and_X)
>  wct=12 flg2=0xc807
>[2012/05/29 20:07:38.129994,  3] smbd/sesssetup.c:1212(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2012/05/29 20:07:38.130011,  3] smbd/sesssetup.c:1254(reply_sesssetup_and_X_spnego)
>  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2012/05/29 20:07:38.130047,  3] smbd/sesssetup.c:806(reply_spnego_negotiate)
>  reply_spnego_negotiate: Got secblob of size 40
>[2012/05/29 20:07:38.130099,  3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0xa2088207
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_NEGOTIATE_OEM
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_VERSION
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_56
>[2012/05/29 20:07:38.130948,  3] smbd/process.c:1489(process_smb)
>  Transaction 296 of length 268 (0 toread)
>[2012/05/29 20:07:38.130983,  3] smbd/process.c:1298(switch_message)
>  switch message SMBsesssetupX (pid 32737) conn 0x0
>[2012/05/29 20:07:38.130996,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.131045,  3] smbd/sesssetup.c:1458(reply_sesssetup_and_X)
>  wct=12 flg2=0xc807
>[2012/05/29 20:07:38.131060,  3] smbd/sesssetup.c:1212(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2012/05/29 20:07:38.131074,  3] smbd/sesssetup.c:1254(reply_sesssetup_and_X_spnego)
>  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2012/05/29 20:07:38.131123,  3] libsmb/ntlmssp.c:747(ntlmssp_server_auth)
>  Got user=[] domain=[] workstation=[WINXPSP3AR2] len1=1 len2=0
>[2012/05/29 20:07:38.131194,  3] auth/auth.c:216(check_ntlm_password)
>  check_ntlm_password:  Checking password for unmapped user []\[]@[WINXPSP3AR2] with the new password interface
>[2012/05/29 20:07:38.131216,  3] auth/auth.c:219(check_ntlm_password)
>  check_ntlm_password:  mapped user is: [S3I]\[]@[WINXPSP3AR2]
>[2012/05/29 20:07:38.131241,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.131257,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.131270,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.131308,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.131351,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.131366,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.131378,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.131402,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.131423,  3] auth/auth.c:265(check_ntlm_password)
>  check_ntlm_password: guest authentication for user [] succeeded
>[2012/05/29 20:07:38.131439,  3] libsmb/ntlmssp_sign.c:343(ntlmssp_sign_init)
>  NTLMSSP Sign/Seal - Initialising with flags:
>[2012/05/29 20:07:38.131451,  3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0xa2088205
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_VERSION
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_56
>[2012/05/29 20:07:38.131498,  3] smbd/password.c:282(register_existing_vuid)
>  register_existing_vuid: User name: nobody	Real name: nobody
>[2012/05/29 20:07:38.131510,  3] smbd/password.c:292(register_existing_vuid)
>  register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 104
>[2012/05/29 20:07:38.132207,  3] smbd/process.c:1489(process_smb)
>  Transaction 297 of length 82 (0 toread)
>[2012/05/29 20:07:38.132244,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtconX (pid 32737) conn 0x0
>[2012/05/29 20:07:38.132257,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.132281,  4] smbd/reply.c:786(reply_tcon_and_X)
>  Client requested device type [?????] for share [IPC$]
>[2012/05/29 20:07:38.132311,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.132326,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.132337,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.132364,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.132397,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.132412,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.132423,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.132446,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.132483,  3] smbd/service.c:807(make_connection_snum)
>  Connect path is '/tmp' for service [IPC$]
>[2012/05/29 20:07:38.132513,  3] smbd/vfs.c:97(vfs_init_default)
>  Initialising default vfs hooks
>[2012/05/29 20:07:38.132527,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2012/05/29 20:07:38.132575,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid administrator does not start with 'S-'.
>[2012/05/29 20:07:38.132606,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.132620,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.132632,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.133423,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: Administrator
>[2012/05/29 20:07:38.133544,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.133564,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.133576,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.133604,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.133659,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.133673,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.133684,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.133707,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.133726,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.133739,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.133750,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.133772,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.133801,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.133815,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.133827,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.133851,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.133875,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.133894,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid join-backup does not start with 'S-'.
>[2012/05/29 20:07:38.133910,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.133922,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.133933,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.134443,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: join-backup
>[2012/05/29 20:07:38.134545,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.134562,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.134574,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.134602,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.134649,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.134663,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.134674,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.134697,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.134723,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.134738,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.134750,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.134779,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:07:38.134792,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.134804,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:07:38.135246,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11017] count=0
>[2012/05/29 20:07:38.135683,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5008
>[2012/05/29 20:07:38.135731,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.135749,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.135765,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.135777,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.135789,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.135814,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.135845,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.135859,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.135871,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.135894,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.135917,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.135940,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.135953,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.135965,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.135987,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.136014,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.136028,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.136039,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.136076,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.136102,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.136136,  3] smbd/service.c:1070(make_connection_snum)
>  winxpsp3ar2 (::ffff:10.200.8.230) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 32737)
>[2012/05/29 20:07:38.136155,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.136175,  3] smbd/reply.c:865(reply_tcon_and_X)
>  tconX service=IPC$ 
>[2012/05/29 20:07:38.139039,  3] smbd/process.c:1489(process_smb)
>  Transaction 298 of length 92 (0 toread)
>[2012/05/29 20:07:38.139068,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtconX (pid 32737) conn 0x0
>[2012/05/29 20:07:38.139096,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.139119,  4] smbd/reply.c:786(reply_tcon_and_X)
>  Client requested device type [?????] for share [SCHUELER1]
>[2012/05/29 20:07:38.139144,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.139159,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.139170,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.139208,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.139226,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.139238,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.139249,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.139271,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.139301,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.139315,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.139326,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.139349,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.139379,  3] smbd/service.c:807(make_connection_snum)
>  Connect path is '/home/schueler1' for service [schueler1]
>[2012/05/29 20:07:38.139402,  3] smbd/vfs.c:97(vfs_init_default)
>  Initialising default vfs hooks
>[2012/05/29 20:07:38.139415,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2012/05/29 20:07:38.139428,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [acl_xattr]
>[2012/05/29 20:07:38.139486,  2] modules/vfs_acl_xattr.c:193(connect_acl_xattr)
>  connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service schueler1
>[2012/05/29 20:07:38.139553,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid administrator does not start with 'S-'.
>[2012/05/29 20:07:38.139572,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.139585,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.139596,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.140150,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: Administrator
>[2012/05/29 20:07:38.140259,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.140276,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.140287,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.140318,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.140367,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.140381,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.140392,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.140416,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.140434,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.140447,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.140458,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.140479,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.140509,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.140523,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.140535,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.140557,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.140580,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.140614,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid join-backup does not start with 'S-'.
>[2012/05/29 20:07:38.140632,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.140644,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.140655,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.141159,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: join-backup
>[2012/05/29 20:07:38.141263,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.141283,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.141294,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.141322,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.141368,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.141382,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.141394,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.141416,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.141440,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.141454,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.141465,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.141482,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:07:38.141495,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.141506,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:07:38.141895,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11017] count=0
>[2012/05/29 20:07:38.142317,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5008
>[2012/05/29 20:07:38.142365,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.142384,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.142400,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.142413,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.142424,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.142450,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.142483,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.142497,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.142509,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:38.142532,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.142554,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.142577,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.142590,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.142601,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.142624,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.142651,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.142664,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.142675,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.142699,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.142727,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.142740,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.142751,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.142774,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.142794,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.142829,  1] smbd/service.c:1070(make_connection_snum)
>  winxpsp3ar2 (::ffff:10.200.8.230) connect to service schueler1 initially as user schueler1 (uid=2010, gid=5038) (pid 32737)
>[2012/05/29 20:07:38.142849,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.142870,  3] smbd/reply.c:865(reply_tcon_and_X)
>  tconX service=SCHUELER1 
>[2012/05/29 20:07:38.149929,  3] smbd/process.c:1489(process_smb)
>  Transaction 299 of length 80 (0 toread)
>[2012/05/29 20:07:38.149991,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:38.150009,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.150040,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:07:38.150063,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:38.150085,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/schueler1]
>[2012/05/29 20:07:38.150230,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/schueler1
>[2012/05/29 20:07:38.150263,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:38.150436,  3] smbd/process.c:1489(process_smb)
>  Transaction 300 of length 80 (0 toread)
>[2012/05/29 20:07:38.150464,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751ab08c0
>[2012/05/29 20:07:38.150479,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.150501,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/lehrer1
>[2012/05/29 20:07:38.150518,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:38.150535,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/lehrer1]
>[2012/05/29 20:07:38.150552,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/lehrer1
>[2012/05/29 20:07:38.150570,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:38.153474,  3] smbd/process.c:1489(process_smb)
>  Transaction 301 of length 116 (0 toread)
>[2012/05/29 20:07:38.153513,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751ab08c0
>[2012/05/29 20:07:38.153526,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:38.153546,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:38.153574,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/lehrer1]
>[2012/05/29 20:07:38.153717,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/lehrer1/Eigene Dateien
>[2012/05/29 20:07:38.153743,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [./] [/home/lehrer1]
>[2012/05/29 20:07:38.153760,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ./ reduced to /home/lehrer1
>[2012/05/29 20:07:38.153814,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.153832,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.153845,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.153870,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.153890,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:38.153903,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:38.153921,  3] smbd/error.c:80(error_packet_set)
>  error packet at smbd/trans2.c(2395) cmd=50 (SMBtrans2) NT_STATUS_ACCESS_DENIED
>[2012/05/29 20:07:38.154048,  3] smbd/process.c:1489(process_smb)
>  Transaction 302 of length 110 (0 toread)
>[2012/05/29 20:07:38.154074,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:07:38.154089,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.154111,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:07:38.154128,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:38.154148,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:07:38.154167,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:07:38.154185,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:38.155019,  3] smbd/process.c:1489(process_smb)
>  Transaction 303 of length 120 (0 toread)
>[2012/05/29 20:07:38.155076,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:07:38.155091,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:38.155106,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:38.155135,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/*] [/home/schueler1]
>[2012/05/29 20:07:38.155267,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/* reduced to /home/schueler1/Eigene Dateien/*
>[2012/05/29 20:07:38.155282,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:07:38.155297,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:07:38.155331,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.155348,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.155360,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.155384,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.155401,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:38.155414,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:38.155445,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien, expect_close = 1
>[2012/05/29 20:07:38.155470,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = *, attr = 22
>[2012/05/29 20:07:38.155508,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/. fname=. (.)
>[2012/05/29 20:07:38.155540,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/.. fname=.. (..)
>[2012/05/29 20:07:38.155584,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/$RECYCLE.BIN fname=$RECYCLE.BIN ($RECYCLE.BIN)
>[2012/05/29 20:07:38.155614,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/desktop.ini fname=desktop.ini (desktop.ini)
>[2012/05/29 20:07:38.155642,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Musik fname=Eigene Musik (Eigene Musik)
>[2012/05/29 20:07:38.155673,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder fname=Eigene Bilder (Eigene Bilder)
>[2012/05/29 20:07:38.155704,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/schulertext.txt.txt fname=schulertext.txt.txt (schulertext.txt.txt)
>[2012/05/29 20:07:38.155744,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:07:38.155860,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=* directory=Eigene Dateien dirtype=22 numentries=7
>[2012/05/29 20:07:38.155904,  3] smbd/process.c:1489(process_smb)
>  Transaction 304 of length 110 (0 toread)
>[2012/05/29 20:07:38.155921,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751ab08c0
>[2012/05/29 20:07:38.155935,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.155958,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/lehrer1
>[2012/05/29 20:07:38.155974,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:38.155994,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/lehrer1]
>[2012/05/29 20:07:38.156012,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/lehrer1/Eigene Dateien
>[2012/05/29 20:07:38.156030,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:38.156971,  3] smbd/process.c:1489(process_smb)
>  Transaction 305 of length 142 (0 toread)
>[2012/05/29 20:07:38.157001,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751ab08c0
>[2012/05/29 20:07:38.157014,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:38.157029,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:38.157076,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.157094,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.157107,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.157130,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.157147,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:38.157160,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:38.157174,  3] smbd/filename.c:945(get_real_filename_full_scan)
>  scan dir didn't open dir [Eigene Dateien]
>[2012/05/29 20:07:38.157188,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/$RECYCLE.BIN] [/home/lehrer1]
>[2012/05/29 20:07:38.157210,  3] smbd/vfs.c:962(check_reduced_name)
>  check_reduced_name: couldn't get realpath for Eigene Dateien/$RECYCLE.BIN
>[2012/05/29 20:07:38.157233,  3] smbd/filename.c:1184(filename_convert)
>  filename_convert: check_name failed for name Eigene Dateien/$RECYCLE.BIN with NT_STATUS_ACCESS_DENIED
>[2012/05/29 20:07:38.157248,  3] smbd/error.c:80(error_packet_set)
>  error packet at smbd/trans2.c(2305) cmd=50 (SMBtrans2) NT_STATUS_ACCESS_DENIED
>[2012/05/29 20:07:38.158613,  3] smbd/process.c:1489(process_smb)
>  Transaction 306 of length 136 (0 toread)
>[2012/05/29 20:07:38.158646,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:07:38.158661,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.158684,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:07:38.158701,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:38.158727,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik] [/home/schueler1]
>[2012/05/29 20:07:38.158749,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik reduced to /home/schueler1/Eigene Dateien/Eigene Musik
>[2012/05/29 20:07:38.158770,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Musik (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:38.158974,  3] smbd/process.c:1489(process_smb)
>  Transaction 307 of length 110 (0 toread)
>[2012/05/29 20:07:38.159033,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751ab08c0
>[2012/05/29 20:07:38.159061,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.159085,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/lehrer1
>[2012/05/29 20:07:38.159102,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:38.159121,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/lehrer1]
>[2012/05/29 20:07:38.159246,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/lehrer1/Eigene Dateien
>[2012/05/29 20:07:38.159271,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:38.159406,  3] smbd/process.c:1489(process_smb)
>  Transaction 308 of length 146 (0 toread)
>[2012/05/29 20:07:38.159432,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:07:38.159446,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.159468,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:07:38.159486,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:38.159513,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik/*] [/home/schueler1]
>[2012/05/29 20:07:38.159541,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik/* reduced to /home/schueler1/Eigene Dateien/Eigene Musik/*
>[2012/05/29 20:07:38.159556,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik] [/home/schueler1]
>[2012/05/29 20:07:38.159572,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik reduced to /home/schueler1/Eigene Dateien/Eigene Musik
>[2012/05/29 20:07:38.159621,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.159640,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.159652,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.159695,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.159748,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien/Eigene Musik, expect_close = 1
>[2012/05/29 20:07:38.159764,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = *, attr = 22
>[2012/05/29 20:07:38.159903,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Musik/. fname=. (.)
>[2012/05/29 20:07:38.159942,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Musik/.. fname=.. (..)
>[2012/05/29 20:07:38.159981,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Musik/Beispielmusik.lnk fname=Beispielmusik.lnk (Beispielmusik.lnk)
>[2012/05/29 20:07:38.160015,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Musik/Desktop.ini fname=Desktop.ini (Desktop.ini)
>[2012/05/29 20:07:38.160036,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:07:38.160159,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=* directory=Eigene Dateien/Eigene Musik dirtype=22 numentries=4
>[2012/05/29 20:07:38.160204,  3] smbd/process.c:1489(process_smb)
>  Transaction 309 of length 142 (0 toread)
>[2012/05/29 20:07:38.160221,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751ab08c0
>[2012/05/29 20:07:38.160235,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.160257,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/lehrer1
>[2012/05/29 20:07:38.160276,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:38.160325,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.160343,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.160355,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.160376,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.160394,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:38.160406,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:38.160420,  3] smbd/filename.c:945(get_real_filename_full_scan)
>  scan dir didn't open dir [Eigene Dateien]
>[2012/05/29 20:07:38.160433,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik] [/home/lehrer1]
>[2012/05/29 20:07:38.160455,  3] smbd/vfs.c:962(check_reduced_name)
>  check_reduced_name: couldn't get realpath for Eigene Dateien/Eigene Musik
>[2012/05/29 20:07:38.160467,  3] smbd/filename.c:1184(filename_convert)
>  filename_convert: check_name failed for name Eigene Dateien/Eigene Musik with NT_STATUS_ACCESS_DENIED
>[2012/05/29 20:07:38.160482,  3] smbd/error.c:80(error_packet_set)
>  error packet at smbd/trans2.c(2305) cmd=50 (SMBtrans2) NT_STATUS_ACCESS_DENIED
>[2012/05/29 20:07:38.161686,  3] smbd/process.c:1489(process_smb)
>  Transaction 310 of length 138 (0 toread)
>[2012/05/29 20:07:38.161725,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:07:38.161742,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.161768,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:07:38.161786,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:38.161812,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:07:38.161848,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:07:38.161871,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:38.162117,  3] smbd/process.c:1489(process_smb)
>  Transaction 311 of length 110 (0 toread)
>[2012/05/29 20:07:38.162144,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751ab08c0
>[2012/05/29 20:07:38.162159,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.162182,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/lehrer1
>[2012/05/29 20:07:38.162199,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:38.162218,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/lehrer1]
>[2012/05/29 20:07:38.162238,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/lehrer1/Eigene Dateien
>[2012/05/29 20:07:38.162256,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:38.162449,  3] smbd/process.c:1489(process_smb)
>  Transaction 312 of length 148 (0 toread)
>[2012/05/29 20:07:38.162476,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:07:38.162491,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.162513,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:07:38.162533,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:38.162559,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/*] [/home/schueler1]
>[2012/05/29 20:07:38.162587,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/* reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/*
>[2012/05/29 20:07:38.162602,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:07:38.162618,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:07:38.162660,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.162712,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.162831,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.162864,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.162913,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien/Eigene Bilder, expect_close = 1
>[2012/05/29 20:07:38.162929,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = *, attr = 22
>[2012/05/29 20:07:38.162960,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/. fname=. (.)
>[2012/05/29 20:07:38.163033,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/.. fname=.. (..)
>[2012/05/29 20:07:38.163082,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/$RECYCLE.BIN fname=$RECYCLE.BIN ($RECYCLE.BIN)
>[2012/05/29 20:07:38.163114,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/Beispielbilder.lnk fname=Beispielbilder.lnk (Beispielbilder.lnk)
>[2012/05/29 20:07:38.163160,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/Desktop.ini fname=Desktop.ini (Desktop.ini)
>[2012/05/29 20:07:38.163181,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:07:38.163294,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=* directory=Eigene Dateien/Eigene Bilder dirtype=22 numentries=5
>[2012/05/29 20:07:38.163339,  3] smbd/process.c:1489(process_smb)
>  Transaction 313 of length 144 (0 toread)
>[2012/05/29 20:07:38.163356,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751ab08c0
>[2012/05/29 20:07:38.163370,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.163393,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/lehrer1
>[2012/05/29 20:07:38.163412,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:38.163460,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.163478,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.163490,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.163511,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.163529,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:38.163542,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:38.163556,  3] smbd/filename.c:945(get_real_filename_full_scan)
>  scan dir didn't open dir [Eigene Dateien]
>[2012/05/29 20:07:38.163569,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/lehrer1]
>[2012/05/29 20:07:38.163591,  3] smbd/vfs.c:962(check_reduced_name)
>  check_reduced_name: couldn't get realpath for Eigene Dateien/Eigene Bilder
>[2012/05/29 20:07:38.163603,  3] smbd/filename.c:1184(filename_convert)
>  filename_convert: check_name failed for name Eigene Dateien/Eigene Bilder with NT_STATUS_ACCESS_DENIED
>[2012/05/29 20:07:38.163618,  3] smbd/error.c:80(error_packet_set)
>  error packet at smbd/trans2.c(2305) cmd=50 (SMBtrans2) NT_STATUS_ACCESS_DENIED
>[2012/05/29 20:07:38.165206,  3] smbd/process.c:1489(process_smb)
>  Transaction 314 of length 164 (0 toread)
>[2012/05/29 20:07:38.165238,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:07:38.165254,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.165277,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:07:38.165293,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:38.165331,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/$RECYCLE.BIN] [/home/schueler1]
>[2012/05/29 20:07:38.165358,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/$RECYCLE.BIN reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/$RECYCLE.BIN
>[2012/05/29 20:07:38.165378,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder/$RECYCLE.BIN (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:38.165603,  3] smbd/process.c:1489(process_smb)
>  Transaction 315 of length 138 (0 toread)
>[2012/05/29 20:07:38.165629,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751ab08c0
>[2012/05/29 20:07:38.165643,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.165664,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/lehrer1
>[2012/05/29 20:07:38.165693,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:38.165737,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.165755,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.165767,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.165788,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.165805,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:38.165818,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:38.165832,  3] smbd/filename.c:945(get_real_filename_full_scan)
>  scan dir didn't open dir [Eigene Dateien]
>[2012/05/29 20:07:38.165845,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/lehrer1]
>[2012/05/29 20:07:38.165866,  3] smbd/vfs.c:962(check_reduced_name)
>  check_reduced_name: couldn't get realpath for Eigene Dateien/Eigene Bilder
>[2012/05/29 20:07:38.165877,  3] smbd/filename.c:1184(filename_convert)
>  filename_convert: check_name failed for name Eigene Dateien/Eigene Bilder with NT_STATUS_ACCESS_DENIED
>[2012/05/29 20:07:38.165892,  3] smbd/error.c:80(error_packet_set)
>  error packet at smbd/trans2.c(5129) cmd=50 (SMBtrans2) NT_STATUS_ACCESS_DENIED
>[2012/05/29 20:07:38.166068,  3] smbd/process.c:1489(process_smb)
>  Transaction 316 of length 174 (0 toread)
>[2012/05/29 20:07:38.166095,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:07:38.166109,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.166130,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:07:38.166148,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:38.166191,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/*] [/home/schueler1]
>[2012/05/29 20:07:38.166224,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/* reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/*
>[2012/05/29 20:07:38.166239,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/$RECYCLE.BIN] [/home/schueler1]
>[2012/05/29 20:07:38.166257,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/$RECYCLE.BIN reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/$RECYCLE.BIN
>[2012/05/29 20:07:38.166297,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.166314,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.166326,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.166353,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.166399,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien/Eigene Bilder/$RECYCLE.BIN, expect_close = 1
>[2012/05/29 20:07:38.166415,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = *, attr = 22
>[2012/05/29 20:07:38.166445,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/. fname=. (.)
>[2012/05/29 20:07:38.166477,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/.. fname=.. (..)
>[2012/05/29 20:07:38.166514,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/desktop.ini fname=desktop.ini (desktop.ini)
>[2012/05/29 20:07:38.166551,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:07:38.166663,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=* directory=Eigene Dateien/Eigene Bilder/$RECYCLE.BIN dirtype=22 numentries=3
>[2012/05/29 20:07:38.168928,  3] smbd/process.c:1489(process_smb)
>  Transaction 317 of length 136 (0 toread)
>[2012/05/29 20:07:38.168956,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:07:38.168970,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:38.168983,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:38.169007,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/$RECYCLE.BIN] [/home/schueler1]
>[2012/05/29 20:07:38.169029,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/$RECYCLE.BIN reduced to /home/schueler1/Eigene Dateien/$RECYCLE.BIN
>[2012/05/29 20:07:38.169048,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/$RECYCLE.BIN (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:38.175135,  3] smbd/process.c:1489(process_smb)
>  Transaction 318 of length 146 (0 toread)
>[2012/05/29 20:07:38.175164,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:07:38.175177,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:38.175193,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:38.175220,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/$RECYCLE.BIN/*] [/home/schueler1]
>[2012/05/29 20:07:38.175250,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/$RECYCLE.BIN/* reduced to /home/schueler1/Eigene Dateien/$RECYCLE.BIN/*
>[2012/05/29 20:07:38.175264,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/$RECYCLE.BIN] [/home/schueler1]
>[2012/05/29 20:07:38.175281,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/$RECYCLE.BIN reduced to /home/schueler1/Eigene Dateien/$RECYCLE.BIN
>[2012/05/29 20:07:38.175320,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.175337,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.175349,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:38.175376,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:38.175428,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien/$RECYCLE.BIN, expect_close = 1
>[2012/05/29 20:07:38.175447,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = *, attr = 22
>[2012/05/29 20:07:38.175477,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/$RECYCLE.BIN/. fname=. (.)
>[2012/05/29 20:07:38.175507,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/$RECYCLE.BIN/.. fname=.. (..)
>[2012/05/29 20:07:38.175541,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[*] found Eigene Dateien/$RECYCLE.BIN/desktop.ini fname=desktop.ini (desktop.ini)
>[2012/05/29 20:07:38.175562,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:07:38.175671,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=* directory=Eigene Dateien/$RECYCLE.BIN dirtype=22 numentries=3
>[2012/05/29 20:07:45.682071,  3] smbd/process.c:1489(process_smb)
>  Transaction 319 of length 138 (0 toread)
>[2012/05/29 20:07:45.682174,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.682198,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.682242,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:45.682284,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:07:45.682313,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:07:45.682343,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:45.682964,  3] smbd/process.c:1489(process_smb)
>  Transaction 320 of length 182 (0 toread)
>[2012/05/29 20:07:45.683022,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.683038,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.683058,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:45.683085,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/Beispielbilder.lnk] [/home/schueler1]
>[2012/05/29 20:07:45.683108,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/Beispielbilder.lnk reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/Beispielbilder.lnk
>[2012/05/29 20:07:45.683123,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:07:45.683140,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:07:45.683200,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.683219,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.683231,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.683263,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.683318,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien/Eigene Bilder, expect_close = 1
>[2012/05/29 20:07:45.683334,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = Beispielbilder.lnk, attr = 22
>[2012/05/29 20:07:45.683369,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[Beispielbilder.lnk] found Eigene Dateien/Eigene Bilder/Beispielbilder.lnk fname=Beispielbilder.lnk (Beispielbilder.lnk)
>[2012/05/29 20:07:45.683398,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:07:45.683507,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=Beispielbilder.lnk directory=Eigene Dateien/Eigene Bilder dirtype=22 numentries=1
>[2012/05/29 20:07:45.689700,  3] smbd/process.c:1489(process_smb)
>  Transaction 321 of length 136 (0 toread)
>[2012/05/29 20:07:45.689729,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.689742,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.689755,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:45.689780,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik] [/home/schueler1]
>[2012/05/29 20:07:45.689802,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik reduced to /home/schueler1/Eigene Dateien/Eigene Musik
>[2012/05/29 20:07:45.689832,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Musik (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:45.690427,  3] smbd/process.c:1489(process_smb)
>  Transaction 322 of length 178 (0 toread)
>[2012/05/29 20:07:45.690456,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.690468,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.690483,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:45.690509,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik/Beispielmusik.lnk] [/home/schueler1]
>[2012/05/29 20:07:45.690531,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik/Beispielmusik.lnk reduced to /home/schueler1/Eigene Dateien/Eigene Musik/Beispielmusik.lnk
>[2012/05/29 20:07:45.690546,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik] [/home/schueler1]
>[2012/05/29 20:07:45.690562,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik reduced to /home/schueler1/Eigene Dateien/Eigene Musik
>[2012/05/29 20:07:45.690601,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.690619,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.690630,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.690657,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.690698,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien/Eigene Musik, expect_close = 1
>[2012/05/29 20:07:45.690713,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = Beispielmusik.lnk, attr = 22
>[2012/05/29 20:07:45.690744,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[Beispielmusik.lnk] found Eigene Dateien/Eigene Musik/Beispielmusik.lnk fname=Beispielmusik.lnk (Beispielmusik.lnk)
>[2012/05/29 20:07:45.690769,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:07:45.690886,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=Beispielmusik.lnk directory=Eigene Dateien/Eigene Musik dirtype=22 numentries=1
>[2012/05/29 20:07:45.699765,  3] smbd/process.c:1489(process_smb)
>  Transaction 323 of length 110 (0 toread)
>[2012/05/29 20:07:45.699795,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.699808,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.699821,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:45.699841,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:07:45.699874,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:07:45.699902,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:45.700458,  3] smbd/process.c:1489(process_smb)
>  Transaction 324 of length 156 (0 toread)
>[2012/05/29 20:07:45.700496,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.700510,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.700525,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:45.700565,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/schulertext.txt.txt] [/home/schueler1]
>[2012/05/29 20:07:45.700587,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/schulertext.txt.txt reduced to /home/schueler1/Eigene Dateien/schulertext.txt.txt
>[2012/05/29 20:07:45.700602,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:07:45.700617,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:07:45.700651,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.700668,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.700679,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.700703,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.700722,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:45.700736,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:45.700756,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien, expect_close = 1
>[2012/05/29 20:07:45.700769,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = schulertext.txt.txt, attr = 22
>[2012/05/29 20:07:45.700797,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[schulertext.txt.txt] found Eigene Dateien/schulertext.txt.txt fname=schulertext.txt.txt (schulertext.txt.txt)
>[2012/05/29 20:07:45.700819,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:07:45.700928,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=schulertext.txt.txt directory=Eigene Dateien dirtype=22 numentries=1
>[2012/05/29 20:07:45.706703,  3] smbd/process.c:1489(process_smb)
>  Transaction 325 of length 138 (0 toread)
>[2012/05/29 20:07:45.706733,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.706747,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.706760,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:45.706781,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:07:45.706802,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:07:45.706822,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:45.707407,  3] smbd/process.c:1489(process_smb)
>  Transaction 326 of length 168 (0 toread)
>[2012/05/29 20:07:45.707436,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.707449,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.707474,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:45.707505,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/Desktop.ini] [/home/schueler1]
>[2012/05/29 20:07:45.707528,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/Desktop.ini reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/Desktop.ini
>[2012/05/29 20:07:45.707543,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:07:45.707572,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:07:45.707611,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.707628,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.707640,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.707667,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.707708,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien/Eigene Bilder, expect_close = 1
>[2012/05/29 20:07:45.707724,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = Desktop.ini, attr = 22
>[2012/05/29 20:07:45.707753,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[Desktop.ini] found Eigene Dateien/Eigene Bilder/Desktop.ini fname=Desktop.ini (Desktop.ini)
>[2012/05/29 20:07:45.707774,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:07:45.707882,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=Desktop.ini directory=Eigene Dateien/Eigene Bilder dirtype=22 numentries=1
>[2012/05/29 20:07:45.713313,  3] smbd/process.c:1489(process_smb)
>  Transaction 327 of length 110 (0 toread)
>[2012/05/29 20:07:45.713341,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.713354,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.713367,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:45.713388,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:07:45.713408,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:07:45.713427,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:45.714053,  3] smbd/process.c:1489(process_smb)
>  Transaction 328 of length 140 (0 toread)
>[2012/05/29 20:07:45.714081,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.714094,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.714110,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:45.714137,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/desktop.ini] [/home/schueler1]
>[2012/05/29 20:07:45.714158,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/desktop.ini reduced to /home/schueler1/Eigene Dateien/desktop.ini
>[2012/05/29 20:07:45.714172,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:07:45.714188,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:07:45.714220,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.714238,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.714251,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.714275,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.714293,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:45.714305,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:45.714338,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien, expect_close = 1
>[2012/05/29 20:07:45.714352,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = desktop.ini, attr = 22
>[2012/05/29 20:07:45.714380,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[desktop.ini] found Eigene Dateien/desktop.ini fname=desktop.ini (desktop.ini)
>[2012/05/29 20:07:45.714400,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:07:45.714506,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=desktop.ini directory=Eigene Dateien dirtype=22 numentries=1
>[2012/05/29 20:07:45.720802,  3] smbd/process.c:1489(process_smb)
>  Transaction 329 of length 136 (0 toread)
>[2012/05/29 20:07:45.720831,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.720844,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.720857,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:45.720955,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/$RECYCLE.BIN] [/home/schueler1]
>[2012/05/29 20:07:45.720986,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/$RECYCLE.BIN reduced to /home/schueler1/Eigene Dateien/$RECYCLE.BIN
>[2012/05/29 20:07:45.721006,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/$RECYCLE.BIN (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:45.721509,  3] smbd/process.c:1489(process_smb)
>  Transaction 330 of length 166 (0 toread)
>[2012/05/29 20:07:45.721537,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.721550,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.721566,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:45.721594,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/$RECYCLE.BIN/desktop.ini] [/home/schueler1]
>[2012/05/29 20:07:45.721616,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/$RECYCLE.BIN/desktop.ini reduced to /home/schueler1/Eigene Dateien/$RECYCLE.BIN/desktop.ini
>[2012/05/29 20:07:45.721631,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/$RECYCLE.BIN] [/home/schueler1]
>[2012/05/29 20:07:45.721648,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/$RECYCLE.BIN reduced to /home/schueler1/Eigene Dateien/$RECYCLE.BIN
>[2012/05/29 20:07:45.721686,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.721703,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.721715,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.721742,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.721783,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien/$RECYCLE.BIN, expect_close = 1
>[2012/05/29 20:07:45.721798,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = desktop.ini, attr = 22
>[2012/05/29 20:07:45.721828,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[desktop.ini] found Eigene Dateien/$RECYCLE.BIN/desktop.ini fname=desktop.ini (desktop.ini)
>[2012/05/29 20:07:45.721849,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:07:45.721955,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=desktop.ini directory=Eigene Dateien/$RECYCLE.BIN dirtype=22 numentries=1
>[2012/05/29 20:07:45.728193,  3] smbd/process.c:1489(process_smb)
>  Transaction 331 of length 164 (0 toread)
>[2012/05/29 20:07:45.728223,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.728236,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.728249,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:45.728285,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/$RECYCLE.BIN] [/home/schueler1]
>[2012/05/29 20:07:45.728309,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/$RECYCLE.BIN reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/$RECYCLE.BIN
>[2012/05/29 20:07:45.728329,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder/$RECYCLE.BIN (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:45.728876,  3] smbd/process.c:1489(process_smb)
>  Transaction 332 of length 194 (0 toread)
>[2012/05/29 20:07:45.728904,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.728917,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.728932,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:45.728962,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/desktop.ini] [/home/schueler1]
>[2012/05/29 20:07:45.728987,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/desktop.ini reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/desktop.ini
>[2012/05/29 20:07:45.729001,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/$RECYCLE.BIN] [/home/schueler1]
>[2012/05/29 20:07:45.729019,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/$RECYCLE.BIN reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/$RECYCLE.BIN
>[2012/05/29 20:07:45.729059,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.729077,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.729088,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.729188,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.729241,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien/Eigene Bilder/$RECYCLE.BIN, expect_close = 1
>[2012/05/29 20:07:45.729257,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = desktop.ini, attr = 22
>[2012/05/29 20:07:45.729287,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[desktop.ini] found Eigene Dateien/Eigene Bilder/$RECYCLE.BIN/desktop.ini fname=desktop.ini (desktop.ini)
>[2012/05/29 20:07:45.729309,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:07:45.729416,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=desktop.ini directory=Eigene Dateien/Eigene Bilder/$RECYCLE.BIN dirtype=22 numentries=1
>[2012/05/29 20:07:45.735167,  3] smbd/process.c:1489(process_smb)
>  Transaction 333 of length 136 (0 toread)
>[2012/05/29 20:07:45.735206,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.735219,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.735233,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:45.735273,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik] [/home/schueler1]
>[2012/05/29 20:07:45.735297,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik reduced to /home/schueler1/Eigene Dateien/Eigene Musik
>[2012/05/29 20:07:45.735318,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Musik (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:45.735939,  3] smbd/process.c:1489(process_smb)
>  Transaction 334 of length 166 (0 toread)
>[2012/05/29 20:07:45.735968,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.735981,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.735998,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:45.736027,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik/Desktop.ini] [/home/schueler1]
>[2012/05/29 20:07:45.736050,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik/Desktop.ini reduced to /home/schueler1/Eigene Dateien/Eigene Musik/Desktop.ini
>[2012/05/29 20:07:45.736085,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik] [/home/schueler1]
>[2012/05/29 20:07:45.736104,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik reduced to /home/schueler1/Eigene Dateien/Eigene Musik
>[2012/05/29 20:07:45.736147,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.736165,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.736178,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.736207,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.736251,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien/Eigene Musik, expect_close = 1
>[2012/05/29 20:07:45.736267,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = Desktop.ini, attr = 22
>[2012/05/29 20:07:45.736298,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[Desktop.ini] found Eigene Dateien/Eigene Musik/Desktop.ini fname=Desktop.ini (Desktop.ini)
>[2012/05/29 20:07:45.736319,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:07:45.736428,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=Desktop.ini directory=Eigene Dateien/Eigene Musik dirtype=22 numentries=1
>[2012/05/29 20:07:45.738602,  3] smbd/process.c:1489(process_smb)
>  Transaction 335 of length 80 (0 toread)
>[2012/05/29 20:07:45.738631,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.738644,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.738657,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:45.738675,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [.] [/home/schueler1]
>[2012/05/29 20:07:45.738692,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: . reduced to /home/schueler1
>[2012/05/29 20:07:45.738712,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:45.740997,  3] smbd/process.c:1489(process_smb)
>  Transaction 336 of length 116 (0 toread)
>[2012/05/29 20:07:45.741025,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.741038,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.741066,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:45.741091,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:07:45.741111,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:07:45.741124,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [./] [/home/schueler1]
>[2012/05/29 20:07:45.741138,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: ./ reduced to /home/schueler1
>[2012/05/29 20:07:45.741172,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.741188,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.741214,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.741239,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.741257,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:45.741270,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:45.741290,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2012/05/29 20:07:45.741304,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = Eigene Dateien, attr = 22
>[2012/05/29 20:07:45.741331,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[Eigene Dateien] found ./Eigene Dateien fname=Eigene Dateien (Eigene Dateien)
>[2012/05/29 20:07:45.741354,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:07:45.741461,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=Eigene Dateien directory=./ dirtype=22 numentries=1
>[2012/05/29 20:07:45.743637,  3] smbd/process.c:1489(process_smb)
>  Transaction 337 of length 110 (0 toread)
>[2012/05/29 20:07:45.743672,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.743687,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.743701,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:45.743723,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:07:45.743743,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:07:45.743762,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:45.744346,  3] smbd/process.c:1489(process_smb)
>  Transaction 338 of length 142 (0 toread)
>[2012/05/29 20:07:45.744385,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.744400,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.744417,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:45.744442,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Musik] [/home/schueler1]
>[2012/05/29 20:07:45.744463,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Musik reduced to /home/schueler1/Eigene Dateien/Eigene Musik
>[2012/05/29 20:07:45.744478,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:07:45.744551,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:07:45.744630,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.744653,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.744665,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.744691,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.744708,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:45.744762,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:45.744787,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien, expect_close = 1
>[2012/05/29 20:07:45.744800,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = Eigene Musik, attr = 22
>[2012/05/29 20:07:45.744828,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[Eigene Musik] found Eigene Dateien/Eigene Musik fname=Eigene Musik (Eigene Musik)
>[2012/05/29 20:07:45.744852,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:07:45.744976,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=Eigene Musik directory=Eigene Dateien dirtype=22 numentries=1
>[2012/05/29 20:07:45.747068,  3] smbd/process.c:1489(process_smb)
>  Transaction 339 of length 110 (0 toread)
>[2012/05/29 20:07:45.747100,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.747114,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.747128,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:45.747150,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:07:45.747172,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:07:45.747191,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:45.747780,  3] smbd/process.c:1489(process_smb)
>  Transaction 340 of length 144 (0 toread)
>[2012/05/29 20:07:45.747808,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.747821,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.747837,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:45.747862,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:07:45.747883,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:07:45.747897,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:07:45.747913,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:07:45.747963,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.747983,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.747995,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.748020,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.748037,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:45.748050,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:45.748087,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien, expect_close = 1
>[2012/05/29 20:07:45.748102,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = Eigene Bilder, attr = 22
>[2012/05/29 20:07:45.748129,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[Eigene Bilder] found Eigene Dateien/Eigene Bilder fname=Eigene Bilder (Eigene Bilder)
>[2012/05/29 20:07:45.748152,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:07:45.748258,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=Eigene Bilder directory=Eigene Dateien dirtype=22 numentries=1
>[2012/05/29 20:07:45.750311,  3] smbd/process.c:1489(process_smb)
>  Transaction 341 of length 110 (0 toread)
>[2012/05/29 20:07:45.750341,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.750354,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.750367,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:45.750388,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:07:45.750408,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:07:45.750426,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:45.750950,  3] smbd/process.c:1489(process_smb)
>  Transaction 342 of length 142 (0 toread)
>[2012/05/29 20:07:45.750979,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.751024,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.751042,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:45.751068,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/$RECYCLE.BIN] [/home/schueler1]
>[2012/05/29 20:07:45.751089,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/$RECYCLE.BIN reduced to /home/schueler1/Eigene Dateien/$RECYCLE.BIN
>[2012/05/29 20:07:45.751103,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien] [/home/schueler1]
>[2012/05/29 20:07:45.751118,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien reduced to /home/schueler1/Eigene Dateien
>[2012/05/29 20:07:45.751152,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.751169,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.751180,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.751205,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.751222,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:45.751235,  3] smbd/dosmode.c:166(unix_mode)
>  unix_mode(.) returning 0700
>[2012/05/29 20:07:45.751255,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien, expect_close = 1
>[2012/05/29 20:07:45.751269,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = $RECYCLE.BIN, attr = 22
>[2012/05/29 20:07:45.751296,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[$RECYCLE.BIN] found Eigene Dateien/$RECYCLE.BIN fname=$RECYCLE.BIN ($RECYCLE.BIN)
>[2012/05/29 20:07:45.751317,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:07:45.751422,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=$RECYCLE.BIN directory=Eigene Dateien dirtype=22 numentries=1
>[2012/05/29 20:07:45.752260,  3] smbd/process.c:1489(process_smb)
>  Transaction 343 of length 138 (0 toread)
>[2012/05/29 20:07:45.752287,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.752300,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.752314,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2012/05/29 20:07:45.752335,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:07:45.752355,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:07:45.752374,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo Eigene Dateien/Eigene Bilder (fnum = -1) level=1004 call=5 total_data=0
>[2012/05/29 20:07:45.753067,  3] smbd/process.c:1489(process_smb)
>  Transaction 344 of length 170 (0 toread)
>[2012/05/29 20:07:45.753096,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtrans2 (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:45.753109,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2012/05/29 20:07:45.753125,  3] smbd/trans2.c:2252(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2012/05/29 20:07:45.753150,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder/$RECYCLE.BIN] [/home/schueler1]
>[2012/05/29 20:07:45.753173,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder/$RECYCLE.BIN reduced to /home/schueler1/Eigene Dateien/Eigene Bilder/$RECYCLE.BIN
>[2012/05/29 20:07:45.753188,  3] smbd/vfs.c:881(check_reduced_name)
>  check_reduced_name [Eigene Dateien/Eigene Bilder] [/home/schueler1]
>[2012/05/29 20:07:45.753205,  3] smbd/vfs.c:1038(check_reduced_name)
>  check_reduced_name: Eigene Dateien/Eigene Bilder reduced to /home/schueler1/Eigene Dateien/Eigene Bilder
>[2012/05/29 20:07:45.753246,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(2010, 5038) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.753263,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.753275,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:45.753304,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:45.753350,  3] smbd/dir.c:544(dptr_create)
>  creating new dirptr 256 for path Eigene Dateien/Eigene Bilder, expect_close = 1
>[2012/05/29 20:07:45.753365,  4] smbd/trans2.c:2400(call_trans2findfirst)
>  dptr_num is 256, wcard = $RECYCLE.BIN, attr = 22
>[2012/05/29 20:07:45.753396,  3] smbd/dir.c:993(smbd_dirptr_get_entry)
>  smbd_dirptr_get_entry mask=[$RECYCLE.BIN] found Eigene Dateien/Eigene Bilder/$RECYCLE.BIN fname=$RECYCLE.BIN ($RECYCLE.BIN)
>[2012/05/29 20:07:45.753418,  4] smbd/dir.c:250(dptr_close_internal)
>  closing dptr key 256
>[2012/05/29 20:07:45.753526,  4] smbd/trans2.c:2510(call_trans2findfirst)
>  SMBtrans2 mask=$RECYCLE.BIN directory=Eigene Dateien/Eigene Bilder dirtype=22 numentries=1
>[2012/05/29 20:07:47.878667,  3] smbd/process.c:1489(process_smb)
>  Transaction 345 of length 39 (0 toread)
>[2012/05/29 20:07:47.878758,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtdis (pid 32737) conn 0x7f3751a71810
>[2012/05/29 20:07:47.878773,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.878806,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /var/lib/samba/netlogon
>[2012/05/29 20:07:47.878832,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.878847,  1] smbd/service.c:1251(close_cnum)
>  winxpsp3ar2 (::ffff:10.200.8.230) closed connection to service netlogon
>[2012/05/29 20:07:47.878894,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to netlogon
>[2012/05/29 20:07:47.878935,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /
>[2012/05/29 20:07:47.878964,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.879568,  3] smbd/process.c:1489(process_smb)
>  Transaction 346 of length 39 (0 toread)
>[2012/05/29 20:07:47.879599,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtdis (pid 32737) conn 0x7f3751a71060
>[2012/05/29 20:07:47.879612,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.879630,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2012/05/29 20:07:47.879646,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.879659,  3] smbd/service.c:1251(close_cnum)
>  winxpsp3ar2 (::ffff:10.200.8.230) closed connection to service IPC$
>[2012/05/29 20:07:47.879675,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to IPC$
>[2012/05/29 20:07:47.879703,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /
>[2012/05/29 20:07:47.879718,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.880211,  3] smbd/process.c:1489(process_smb)
>  Transaction 347 of length 39 (0 toread)
>[2012/05/29 20:07:47.880240,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtdis (pid 32737) conn 0x7f3751aad6b0
>[2012/05/29 20:07:47.880252,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.880270,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/lehrer1
>[2012/05/29 20:07:47.880287,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.880301,  1] smbd/service.c:1251(close_cnum)
>  winxpsp3ar2 (::ffff:10.200.8.230) closed connection to service lehrer1
>[2012/05/29 20:07:47.880316,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to lehrer1
>[2012/05/29 20:07:47.880344,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /
>[2012/05/29 20:07:47.880358,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.880890,  3] smbd/process.c:1489(process_smb)
>  Transaction 348 of length 39 (0 toread)
>[2012/05/29 20:07:47.880918,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtdis (pid 32737) conn 0x7f3751ab08c0
>[2012/05/29 20:07:47.880930,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.880948,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/lehrer1
>[2012/05/29 20:07:47.880964,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.880978,  1] smbd/service.c:1251(close_cnum)
>  winxpsp3ar2 (::ffff:10.200.8.230) closed connection to service lehrer1
>[2012/05/29 20:07:47.880992,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to lehrer1
>[2012/05/29 20:07:47.881018,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /
>[2012/05/29 20:07:47.881032,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.881529,  3] smbd/process.c:1489(process_smb)
>  Transaction 349 of length 39 (0 toread)
>[2012/05/29 20:07:47.881557,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtdis (pid 32737) conn 0x7f3751abb350
>[2012/05/29 20:07:47.881569,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.881587,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:07:47.881604,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.881618,  1] smbd/service.c:1251(close_cnum)
>  winxpsp3ar2 (::ffff:10.200.8.230) closed connection to service schueler1
>[2012/05/29 20:07:47.881632,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to schueler1
>[2012/05/29 20:07:47.881673,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /
>[2012/05/29 20:07:47.881689,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.882376,  3] smbd/process.c:1489(process_smb)
>  Transaction 350 of length 39 (0 toread)
>[2012/05/29 20:07:47.882406,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtdis (pid 32737) conn 0x7f3751aba640
>[2012/05/29 20:07:47.882418,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.882437,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:07:47.882452,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.882467,  1] smbd/service.c:1251(close_cnum)
>  winxpsp3ar2 (::ffff:10.200.8.230) closed connection to service schueler1
>[2012/05/29 20:07:47.882482,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to schueler1
>[2012/05/29 20:07:47.882510,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /
>[2012/05/29 20:07:47.882525,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.883117,  3] smbd/process.c:1489(process_smb)
>  Transaction 351 of length 39 (0 toread)
>[2012/05/29 20:07:47.883146,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtdis (pid 32737) conn 0x7f3751a6ef80
>[2012/05/29 20:07:47.883158,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.883175,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/groups/klassen/SITE0-1A
>[2012/05/29 20:07:47.883193,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.883207,  1] smbd/service.c:1251(close_cnum)
>  winxpsp3ar2 (::ffff:10.200.8.230) closed connection to service SITE0-1A
>[2012/05/29 20:07:47.883222,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to SITE0-1A
>[2012/05/29 20:07:47.883249,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /
>[2012/05/29 20:07:47.883264,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.883769,  3] smbd/process.c:1489(process_smb)
>  Transaction 352 of length 43 (0 toread)
>[2012/05/29 20:07:47.883805,  3] smbd/process.c:1298(switch_message)
>  switch message SMBulogoffX (pid 32737) conn 0x0
>[2012/05/29 20:07:47.883819,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.883872,  4] auth/pampass.c:472(smb_pam_start)
>  smb_pam_start: PAM: Init user: schueler1
>[2012/05/29 20:07:47.886592,  4] auth/pampass.c:489(smb_pam_start)
>  smb_pam_start: PAM: setting rhost to: ::ffff:10.200.8.230
>[2012/05/29 20:07:47.886626,  4] auth/pampass.c:498(smb_pam_start)
>  smb_pam_start: PAM: setting tty
>[2012/05/29 20:07:47.886638,  4] auth/pampass.c:506(smb_pam_start)
>  smb_pam_start: PAM: Init passed for user: schueler1
>[2012/05/29 20:07:47.886650,  4] auth/pampass.c:643(smb_internal_pam_session)
>  smb_internal_pam_session: PAM: tty set to: smb/32737/102
>[2012/05/29 20:07:47.887229,  4] auth/pampass.c:450(smb_pam_end)
>  smb_pam_end: PAM: PAM_END OK.
>[2012/05/29 20:07:47.887293,  3] smbd/reply.c:2074(reply_ulogoffX)
>  ulogoffX vuid=102
>[2012/05/29 20:07:47.887919,  3] smbd/process.c:1489(process_smb)
>  Transaction 353 of length 39 (0 toread)
>[2012/05/29 20:07:47.887963,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtdis (pid 32737) conn 0x7f3751aaec10
>[2012/05/29 20:07:47.887977,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.888000,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/groups/Marktplatz
>[2012/05/29 20:07:47.888020,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.888034,  1] smbd/service.c:1251(close_cnum)
>  winxpsp3ar2 (::ffff:10.200.8.230) closed connection to service Marktplatz
>[2012/05/29 20:07:47.888051,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to Marktplatz
>[2012/05/29 20:07:47.888096,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /
>[2012/05/29 20:07:47.888112,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.902251,  3] smbd/process.c:1489(process_smb)
>  Transaction 354 of length 240 (0 toread)
>[2012/05/29 20:07:47.902330,  3] smbd/process.c:1298(switch_message)
>  switch message SMBsesssetupX (pid 32737) conn 0x0
>[2012/05/29 20:07:47.902345,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.902370,  3] smbd/sesssetup.c:1458(reply_sesssetup_and_X)
>  wct=12 flg2=0xc807
>[2012/05/29 20:07:47.902384,  3] smbd/sesssetup.c:1212(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2012/05/29 20:07:47.902401,  3] smbd/sesssetup.c:1254(reply_sesssetup_and_X_spnego)
>  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2012/05/29 20:07:47.902437,  3] smbd/sesssetup.c:806(reply_spnego_negotiate)
>  reply_spnego_negotiate: Got secblob of size 40
>[2012/05/29 20:07:47.902472,  3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0xa2088207
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_NEGOTIATE_OEM
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_VERSION
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_56
>[2012/05/29 20:07:47.903440,  3] smbd/process.c:1489(process_smb)
>  Transaction 355 of length 344 (0 toread)
>[2012/05/29 20:07:47.903480,  3] smbd/process.c:1298(switch_message)
>  switch message SMBsesssetupX (pid 32737) conn 0x0
>[2012/05/29 20:07:47.903494,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.903511,  3] smbd/sesssetup.c:1458(reply_sesssetup_and_X)
>  wct=12 flg2=0xc807
>[2012/05/29 20:07:47.903524,  3] smbd/sesssetup.c:1212(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2012/05/29 20:07:47.903537,  3] smbd/sesssetup.c:1254(reply_sesssetup_and_X_spnego)
>  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2012/05/29 20:07:47.903560,  3] libsmb/ntlmssp.c:747(ntlmssp_server_auth)
>  Got user=[schueler1] domain=[S3I] workstation=[WINXPSP3AR2] len1=24 len2=24
>[2012/05/29 20:07:47.903631,  3] auth/auth.c:216(check_ntlm_password)
>  check_ntlm_password:  Checking password for unmapped user [S3I]\[schueler1]@[WINXPSP3AR2] with the new password interface
>[2012/05/29 20:07:47.903650,  3] auth/auth.c:219(check_ntlm_password)
>  check_ntlm_password:  mapped user is: [S3I]\[schueler1]@[WINXPSP3AR2]
>[2012/05/29 20:07:47.903669,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.903683,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.903694,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.904521,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: schueler1
>[2012/05/29 20:07:47.904638,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:47.904654,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.904666,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:47.904705,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.904761,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:47.904775,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.904786,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:47.904807,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.904836,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:47.904870,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.904883,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:47.904900,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:07:47.904913,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:07:47.904924,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:07:47.905334,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11077] count=0
>[2012/05/29 20:07:47.905770,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5038
>[2012/05/29 20:07:47.905816,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:47.905834,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.905851,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:47.905863,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.905874,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:47.905899,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.905932,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:47.905946,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.905957,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:47.905980,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.906006,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.906022,  4] ../libcli/auth/ntlm_check.c:399(ntlm_password_check)
>  ntlm_password_check: Checking NT MD4 password
>[2012/05/29 20:07:47.906085,  4] auth/auth_sam.c:180(sam_account_ok)
>  sam_account_ok: Checking SMB password for user schueler1
>[2012/05/29 20:07:47.906105,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.906117,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.906128,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.906152,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.906166,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.906178,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.906189,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.906374,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.906398,  3] auth/auth.c:265(check_ntlm_password)
>  check_ntlm_password: sam authentication for user [schueler1] succeeded
>[2012/05/29 20:07:47.906411,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.906423,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.906435,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.906450,  4] auth/pampass.c:472(smb_pam_start)
>  smb_pam_start: PAM: Init user: schueler1
>[2012/05/29 20:07:47.909297,  4] auth/pampass.c:489(smb_pam_start)
>  smb_pam_start: PAM: setting rhost to: ::ffff:10.200.8.230
>[2012/05/29 20:07:47.909333,  4] auth/pampass.c:498(smb_pam_start)
>  smb_pam_start: PAM: setting tty
>[2012/05/29 20:07:47.909345,  4] auth/pampass.c:506(smb_pam_start)
>  smb_pam_start: PAM: Init passed for user: schueler1
>[2012/05/29 20:07:47.909374,  4] auth/pampass.c:564(smb_pam_account)
>  smb_pam_account: PAM: Account Management for User: schueler1
>[2012/05/29 20:07:47.910806,  4] auth/pampass.c:583(smb_pam_account)
>  smb_pam_account: PAM: Account OK for User: schueler1
>[2012/05/29 20:07:47.911118,  4] auth/pampass.c:450(smb_pam_end)
>  smb_pam_end: PAM: PAM_END OK.
>[2012/05/29 20:07:47.911152,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.911169,  2] auth/auth.c:304(check_ntlm_password)
>  check_ntlm_password:  authentication for user [schueler1] -> [schueler1] -> [schueler1] succeeded
>[2012/05/29 20:07:47.911210,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-21-3785813934-3866640808-4451219-5020]
>[2012/05/29 20:07:47.911231,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-21-3785813934-3866640808-4451219-11077]
>[2012/05/29 20:07:47.911254,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-2]
>[2012/05/29 20:07:47.911270,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-11]
>[2012/05/29 20:07:47.911287,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-21-3785813934-3866640808-4451219-11069]
>[2012/05/29 20:07:47.911306,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-21-3785813934-3866640808-4451219-11075]
>[2012/05/29 20:07:47.911508,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.911535,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.911548,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:47.911976,  4] passdb/pdb_ldap.c:2559(ldapsam_getgroup)
>  ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))
>[2012/05/29 20:07:47.912013,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:47.912046,  3] libsmb/ntlmssp_sign.c:343(ntlmssp_sign_init)
>  NTLMSSP Sign/Seal - Initialising with flags:
>[2012/05/29 20:07:47.912078,  3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0xa2088205
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_VERSION
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_56
>[2012/05/29 20:07:47.912128,  3] smbd/password.c:282(register_existing_vuid)
>  register_existing_vuid: User name: schueler1	Real name: schueler1 univention
>[2012/05/29 20:07:47.912142,  3] smbd/password.c:292(register_existing_vuid)
>  register_existing_vuid: UNIX uid 2010 is UNIX user schueler1, and will be vuid 105
>[2012/05/29 20:07:47.912174,  4] auth/pampass.c:472(smb_pam_start)
>  smb_pam_start: PAM: Init user: schueler1
>[2012/05/29 20:07:47.914690,  4] auth/pampass.c:489(smb_pam_start)
>  smb_pam_start: PAM: setting rhost to: ::ffff:10.200.8.230
>[2012/05/29 20:07:47.914728,  4] auth/pampass.c:498(smb_pam_start)
>  smb_pam_start: PAM: setting tty
>[2012/05/29 20:07:47.914740,  4] auth/pampass.c:506(smb_pam_start)
>  smb_pam_start: PAM: Init passed for user: schueler1
>[2012/05/29 20:07:47.914752,  4] auth/pampass.c:643(smb_internal_pam_session)
>  smb_internal_pam_session: PAM: tty set to: smb/32737/105
>[2012/05/29 20:07:48.582839,  4] auth/pampass.c:450(smb_pam_end)
>  smb_pam_end: PAM: PAM_END OK.
>[2012/05/29 20:07:48.582953,  3] smbd/password.c:209(register_homes_share)
>  Using static (or previously created) service for user 'schueler1'; path = '/home/schueler1'
>[2012/05/29 20:07:48.584155,  3] smbd/process.c:1489(process_smb)
>  Transaction 356 of length 92 (0 toread)
>[2012/05/29 20:07:48.584195,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtconX (pid 32737) conn 0x0
>[2012/05/29 20:07:48.584230,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.584267,  4] smbd/reply.c:786(reply_tcon_and_X)
>  Client requested device type [?????] for share [SCHUELER1]
>[2012/05/29 20:07:48.584300,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.584315,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.584326,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.584359,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.584377,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.584390,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.584401,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.584423,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.584464,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.584479,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.584490,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.584514,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.584552,  3] smbd/service.c:807(make_connection_snum)
>  Connect path is '/home/schueler1' for service [schueler1]
>[2012/05/29 20:07:48.584582,  3] smbd/vfs.c:97(vfs_init_default)
>  Initialising default vfs hooks
>[2012/05/29 20:07:48.584597,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2012/05/29 20:07:48.584610,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [acl_xattr]
>[2012/05/29 20:07:48.584781,  2] modules/vfs_acl_xattr.c:193(connect_acl_xattr)
>  connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service schueler1
>[2012/05/29 20:07:48.584857,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid administrator does not start with 'S-'.
>[2012/05/29 20:07:48.584878,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.584891,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.584902,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.585684,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: Administrator
>[2012/05/29 20:07:48.585790,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.585807,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.585819,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.585847,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.585899,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.585913,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.585925,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.585947,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.585967,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.585979,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.585991,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.586026,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.586057,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.586072,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.586083,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.586106,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.586130,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.586150,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid join-backup does not start with 'S-'.
>[2012/05/29 20:07:48.586166,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.586178,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.586189,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.586702,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
>  init_sam_from_ldap: Entry found for user: join-backup
>[2012/05/29 20:07:48.586805,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.586823,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.586834,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.586863,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.586910,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.586924,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.586935,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.586958,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.586985,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.586998,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.587010,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.587091,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2012/05/29 20:07:48.587108,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.587119,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2012/05/29 20:07:48.587602,  4] passdb/pdb_ldap.c:1692(ldapsam_getsampwsid)
>  ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-3785813934-3866640808-4451219-11017] count=0
>[2012/05/29 20:07:48.588038,  2] passdb/pdb_ldap.c:2443(init_group_from_ldap)
>  init_group_from_ldap: Entry found for group: 5008
>[2012/05/29 20:07:48.588099,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.588119,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.588136,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.588148,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.588160,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.588185,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.588217,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.588232,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.588243,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2012/05/29 20:07:48.588277,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.588303,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.588325,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.588338,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.588350,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.588372,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.588387,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.588399,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.588410,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.588431,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.588459,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.588473,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.588484,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2012/05/29 20:07:48.588505,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.588525,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (2010, 5038) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.588563,  1] smbd/service.c:1070(make_connection_snum)
>  winxpsp3ar2 (::ffff:10.200.8.230) connect to service schueler1 initially as user schueler1 (uid=2010, gid=5038) (pid 32737)
>[2012/05/29 20:07:48.588582,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.588603,  3] smbd/reply.c:865(reply_tcon_and_X)
>  tconX service=SCHUELER1 
>[2012/05/29 20:07:48.615484,  3] smbd/process.c:1489(process_smb)
>  Transaction 357 of length 43 (0 toread)
>[2012/05/29 20:07:48.615533,  3] smbd/process.c:1298(switch_message)
>  switch message SMBulogoffX (pid 32737) conn 0x0
>[2012/05/29 20:07:48.615547,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.615581,  4] auth/pampass.c:472(smb_pam_start)
>  smb_pam_start: PAM: Init user: schueler1
>[2012/05/29 20:07:48.618134,  4] auth/pampass.c:489(smb_pam_start)
>  smb_pam_start: PAM: setting rhost to: ::ffff:10.200.8.230
>[2012/05/29 20:07:48.618159,  4] auth/pampass.c:498(smb_pam_start)
>  smb_pam_start: PAM: setting tty
>[2012/05/29 20:07:48.618172,  4] auth/pampass.c:506(smb_pam_start)
>  smb_pam_start: PAM: Init passed for user: schueler1
>[2012/05/29 20:07:48.618184,  4] auth/pampass.c:643(smb_internal_pam_session)
>  smb_internal_pam_session: PAM: tty set to: smb/32737/105
>[2012/05/29 20:07:48.618676,  4] auth/pampass.c:450(smb_pam_end)
>  smb_pam_end: PAM: PAM_END OK.
>[2012/05/29 20:07:48.618723,  3] smbd/reply.c:2074(reply_ulogoffX)
>  ulogoffX vuid=105
>[2012/05/29 20:07:48.619283,  3] smbd/process.c:1489(process_smb)
>  Transaction 358 of length 39 (0 toread)
>[2012/05/29 20:07:48.619312,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtdis (pid 32737) conn 0x7f3751a72010
>[2012/05/29 20:07:48.619325,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.619349,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /home/schueler1
>[2012/05/29 20:07:48.619367,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:48.619382,  1] smbd/service.c:1251(close_cnum)
>  winxpsp3ar2 (::ffff:10.200.8.230) closed connection to service schueler1
>[2012/05/29 20:07:48.619397,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to schueler1
>[2012/05/29 20:07:48.619426,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /
>[2012/05/29 20:07:48.619441,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:49.591696,  3] smbd/process.c:1489(process_smb)
>  Transaction 359 of length 43 (0 toread)
>[2012/05/29 20:07:49.628610,  3] smbd/process.c:1298(switch_message)
>  switch message SMBulogoffX (pid 32737) conn 0x0
>[2012/05/29 20:07:49.628658,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:49.628710,  3] smbd/reply.c:2074(reply_ulogoffX)
>  ulogoffX vuid=104
>[2012/05/29 20:07:49.629596,  3] smbd/process.c:1489(process_smb)
>  Transaction 360 of length 39 (0 toread)
>[2012/05/29 20:07:49.629625,  3] smbd/process.c:1298(switch_message)
>  switch message SMBtdis (pid 32737) conn 0x7f3751a84700
>[2012/05/29 20:07:49.629638,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:49.629657,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2012/05/29 20:07:49.629675,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:49.629690,  3] smbd/service.c:1251(close_cnum)
>  winxpsp3ar2 (::ffff:10.200.8.230) closed connection to service IPC$
>[2012/05/29 20:07:49.629707,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to IPC$
>[2012/05/29 20:07:49.629747,  4] smbd/vfs.c:751(vfs_ChDir)
>  vfs_ChDir to /
>[2012/05/29 20:07:49.629762,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:49.630378,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:07:49.630425,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to 
>[2012/05/29 20:07:49.637983,  3] smbd/server.c:924(exit_server_common)
>  Server exit (failed to receive smb request)
>[2012/05/29 20:10:48.067943,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:10:48.068023,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to 
>[2012/05/29 20:10:48.068152,  3] smbd/server.c:924(exit_server_common)
>  Server exit (termination signal)
>[2012/05/29 20:10:48.068750,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2012/05/29 20:10:48.068829,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to 
>[2012/05/29 20:10:48.068862,  3] smbd/connection.c:42(yield_connection)
>  deleting connection record returned NT_STATUS_NOT_FOUND
>[2012/05/29 20:10:48.068935,  3] smbd/server.c:924(exit_server_common)
>  Server exit (termination signal)

Actions: View

Attachments on bug 27364: 4416 | 4417 | 4481