Samba › Samba - General

I could really use some help here (SAMBA PDC)

Classic

List

Threaded

1 message

John Zakhar

I could really use some help here (SAMBA PDC)

The log files are attached, I have NEVER had so much trouble with a
samba PDC before. I need to turn in my unix admin license, this is
pathetic...

Anyway, I am here. When trying to join a domain with the administrator
account I get "no mapping between account name and security ID's was done"
And the joining fails...

All the needed files are attached, from the ldap log. to the samba.conf
to the ldifs of the machine, root and admin account.
Trying with the root account nets me the same error

in smbusers I noticed an entry i never made

root = administrator

software versions:

[root@vnpdc01 openldap-data]# rpm -qa |grep samba
samba-3.0.11-1
samba-swat-3.0.11-1
samba-client-3.0.11-1
samba-common-3.0.11-1

I am assumine the rpm or something else made that mapping. I dunno...

I have really about had it here, it's been well over a week, we are
working on close to two. I need to get this resolved or move on to a
Windows PDC. I have a deadline to meet with a domain controller (that is
no one problem here, i realize this)

If more information is needed please ask. I will be happy to provide
anything but passwords..
If anyone has any insite, advice, or whatever I would very much
appreciate it

--
John Zakhar <[hidden email]>

Systems Administrator.

Ventus Networks
800 Connecticut Ave
Norwalk, CT. 06854

Work 1-(203)-642-2800
Home 1-(860)-318-0276
Cell 1-(203)-257-4165

# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options (perhaps too
# many!) most of which are not shown in this example
#
# Any line which starts with a ; (semi-colon) or a # (hash)
# is a comment and is ignored. In this example we will use a #
# for commentry and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command "testparm"
# to check that you have not made any basic syntactic errors.
#
#======================= Global Settings =====================================
[global]

workgroup = VENTUS_OFFICE
netbios name = vnpdc01
server string = Ventus File Server
hosts allow = 172.28.0. 192.168.1 127.
printcap name = /etc/printcap
load printers = yes
log file = /var/log/samba/%m.log
max log size = 50
ldap passwd sync = Yes
passdb backend = ldapsam:ldap://192.168.1.242/
ldap suffix = o=ventusnetworks.com,dc=na
ldap filter = (&(uid=%u)(objectclass=sambaSamAccount))
ldap machine suffix = ou=Computers
ldap user suffix = ou=Staff
ldap group suffix = ou=Groups
ldap admin dn = "cn=Manager,dc=na"
ldap delete dn = no
#ldap ssl = ssl
security = user
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
log level = 10
local master = yes
os level = 255
domain master = yes
preferred master = yes
domain logons = yes
# logon script = netlogon.bat
logon path = \\%L\Profiles\%U
# logon drive = U:

name resolve order = wins lmhosts bcast
wins support = yes
dns proxy = no

#delete user script = /usr/local/sbin/smbldap-userdel "%u"
add machine script = /opt/IDEALX/sbin/smbldap-useradd -w "%u" -H W
add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g"
#delete group script = /usr/local/sbin/smbldap-groupdel "%g"
add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /opt/IDEALX/sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g "%g" "%u"

#============================ Share Definitions ==============================
# idmap uid = 16777216-33554431
# idmap gid = 16777216-33554431
template shell = /bin/false
winbind use default domain = no

idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
[homes]
comment = Home Directories
browseable = no
writable = yes

[netlogon]
comment = Network Logon Service
path = /var/samba/logon
guest ok = yes
writable = no
share modes = no

#[Profiles]
# path = /home/profiles
# browseable = no
# guest ok = yes

#[printers]
# comment = All Printers
# path = /var/spool/samba
# browseable = no
# Set public = yes to allow user 'guest account' to print
# guest ok = no
# writable = no
# printable = yes

[engineering]
comment = Engineering Share
path = /opt/store/engineering
public = yes
read only = no
write list = @Engineering
read list = @Engineering
create mask = 0770

[support]
comment = Support Share
path = /opt/store/support
public = no
read only = no
write list = @support
read list = @support
create mask = 0770

[Accounting]
comment = Accounting Share
path = /opt/store/accounting
public = no
read only = no
write list = @accounting
read list = @accounting
create mask = 0770

[sales]
comment = Sales Share
path = /opt/store/sales
public = no
read only = no
write list = @sales
read list = @sales
create mask = 0770

[Administration]
comment = Administration Share
path = /opt/store/administration
public = no
read only = no
write list = @administration
create mask = 0770

[CompanyShare]
comment = Company Share
writeable = yes
path = /opt/store
write list = @administration,@sales,@accounting,@support,@Engineering
create mask = 0777
[SAP_Project]
comment = SAP Share
path = /opt/store/Sap_Project
write list = @administration,@sales,@accounting,@support,@Engineering
public = no
read only = no

[public]
comment = Public Share
path = /opt/store/public
public = yes
read only = no
create mask = 0777
[User Home]
comment = user homes
path = /opt/store/UserHome
writeable = yes
public = no
write list = @administration,@sales,@accounting,@support,@Engineering
read only = no

[Lisa Backup]
comment = Just for Lisa =)
path = /opt/store/Lisa\ Backup
writeable = yes
public = no
write list = lromano
read only = no

[admin]
path = /home/
public = yes
read only = no

dn: uid=administrator, ou=Staff, o=ventusnetworks.com, dc=na
sambaLMPassword:
sambaPrimaryGroupSID: S-1-5-21-3107161993-1039155829-3332455197-512
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: posixAccount
objectClass: shadowAccount
userPassword::
sambaLogonTime: 0
sambaHomeDrive: H:
uid: administrator
uidNumber: 0
cn: administrator
sambaLogoffTime: 2147483647
sambaPwdLastSet: 1111419696
loginShell: /bin/bash
sambaAcctFlags: [U ]
sambaProfilePath: \\vnpdc01\profiles\administrator\
gidNumber: 512
sambaPwdMustChange: 2147483647
sambaNTPassword:
sambaPwdCanChange: 1111419696
gecos: Netbios Domain Administrator
sambaSID: S-1-5-21-3107161993-1039155829-3332455197-2996
homeDirectory: /home/administrator
sambaKickoffTime: 2147483647
sn: administrator
sambaHomePath: \\vnpdc01\home\administrator
sambaPasswordHistory: 0000000000000000000000000000000000000000000000000000000
000000000

dn: uid=ibm-zus90725eca$, ou=Computers, o=ventusnetworks.com, dc=na
sambaPwdLastSet: 1111418025
sn: ibm-zus90725eca$
sambaAcctFlags: [W ]
userPassword:: e1NNRDV9cHVjZlRnck5MWVFmaENjcjFJQUp6RHdZbHBBPQ==
uidNumber: 1023
gidNumber: 515
sambaPwdMustChange: 2147483647
uid: ibm-zus90725eca$
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: posixAccount
objectClass: sambaSamAccount
objectClass: person
objectClass: top
sambaSID: S-1-5-21-3107161993-1036545829-3332455197
cn: ibm-zus90725eca$
homeDirectory: /dev/null
sambaPasswordHistory: 0000000000000000000000000000000000000000000000000000000
000000000
sambaPwdCanChange: 1111418025
sambaNTPassword: 4143428EA74C32CCF1AED23B88F1C64C
sambaLMPassword: 205A06C82DD819D1AAD3B435B51404EE

dn: sambaDomainName=VENTUS_OFFICE, o=ventusnetworks.com, dc=na
sambaNextUserRid: 67109862
sambaSID: S-1-5-21-3107161993-1039155829-3332455197
sambaNextGroupRid: 67109863
objectClass: sambaDomain
sambaAlgorithmicRidBase: 1000
sambaDomainName: VENTUS_OFFICE

smb_bcc=61
[2005/03/21 11:41:52, 10] lib/util.c:dump_data(1990)
[000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\....
[010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 04 00 00 ........ .,......
[020] 00 14 00 00 00 00 00 01 00 00 00 00 00 07 00 00 ........ ........
[030] 00 00 00 00 00 4F F9 3E 42 4C 5A 00 00 .....O.> BLZ..
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 23116) conn 0x9c99a28
[2005/03/21 11:41:52, 4] smbd/uid.c:change_to_user(194)
change_to_user: Skipping user change - already user
[2005/03/21 11:41:52, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=44 params=0 setup=2
[2005/03/21 11:41:52, 5] smbd/ipc.c:reply_trans(560)
calling named_pipe
[2005/03/21 11:41:52, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/03/21 11:41:52, 5] smbd/ipc.c:api_fd_reply(265)
api_fd_reply
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
search for pipe pnum=7307
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
pipe name samr pnum=7307 (pipes_open=2)
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
pipe name lsarpc pnum=7302 (pipes_open=2)
[2005/03/21 11:41:52, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "samr" (pnum 7307)
[2005/03/21 11:41:52, 10] smbd/ipc.c:api_fd_reply(299)
api_fd_reply: p:0x9ca1360 max_trans_reply: 1024
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852)
write_to_pipe: 7307 name: samr open: Yes len: 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
write_to_pipe: data_left = 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399)
fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
write_to_pipe: data_used = 16
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
write_to_pipe: data_left = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 major : 05
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 minor : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 pkt_type : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 flags : 03
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0004 pack_type0: 10
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0005 pack_type1: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0006 pack_type2: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0007 pack_type3: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 frag_len : 002c
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a auth_len : 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c call_id : 00000004
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486)
unmarshall_rpc_header: using little-endian RPC
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515)
unmarshall_rpc_header: type = 0, flags = 3
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
write_to_pipe: data_used = 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
write_to_pipe: data_left = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 28, incoming data = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(720)
process_complete_pdu: processing packet type 0
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr_req req
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 alloc_hint: 00000014
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0004 context_id: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0006 opnum : 0001
[2005/03/21 11:41:52, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe.c:api_pipe_request(1497)
Requested \PIPE\samr
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531)
api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557)
api_rpc_cmds[0].fn == 0x813d91a
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 samr_io_q_close_hnd
[2005/03/21 11:41:52, 6] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_pol_hnd pol
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 data1: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0004 data2: 00000007
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 data3: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a data4: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
000c data5: 4f f9 3e 42 4c 5a 00 00
[2005/03/21 11:41:52, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
Found policy hnd[0] [000] 00 00 00 00 07 00 00 00 00 00 00 00 4F F9 3E 42 ........ ....O.>B
[010] 4C 5A 00 00 LZ..
[2005/03/21 11:41:52, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2005/03/21 11:41:52, 5] rpc_server/srv_samr_nt.c:_samr_close_hnd(591)
samr_reply_close_hnd: 591
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 samr_io_r_close_hnd
[2005/03/21 11:41:52, 6] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_pol_hnd pol
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 data1: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0004 data2: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 data3: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a data4: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
000c data5: 00 00 00 00 00 00 00 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
0014 status: NT_STATUS_OK
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578)
api_rpcTNP: called samr successfully
[2005/03/21 11:41:52, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
write_to_pipe: data_used = 28
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
read_from_pipe: 7307 name: samr len: 1024
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(982)
read_from_pipe: samr: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24.
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr hdr
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 major : 05
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 minor : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 pkt_type : 02
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 flags : 03
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0004 pack_type0: 10
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0005 pack_type1: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0006 pack_type2: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0007 pack_type3: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 frag_len : 0030
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a auth_len : 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c call_id : 00000004
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
000010 smb_io_rpc_hdr_resp resp
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0010 alloc_hint: 00000018
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0014 context_id: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0016 cancel_ct : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0017 reserved : 00
[2005/03/21 11:41:52, 5] smbd/ipc.c:copy_trans_params_and_data(60)
copy_trans_params_and_data: params[0..0] data[0..48]
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
size=104
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=904
smb_uid=100
smb_mid=2944
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 48 (0x30)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 48 (0x30)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=49
[2005/03/21 11:41:52, 10] lib/util.c:dump_data(1990)
[000] 00 05 00 02 03 10 00 00 00 30 00 00 00 04 00 00 ........ .0......
[010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
[020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
[030] 00 .
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
write_socket(25,108)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
write_socket(25,108) wrote 108
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
got smb length of 128
[2005/03/21 11:41:52, 6] smbd/process.c:process_smb(1090)
got message type 0x0 of len 0x80
[2005/03/21 11:41:52, 3] smbd/process.c:process_smb(1091)
Transaction 48 of length 132
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
size=128
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=904
smb_uid=100
smb_mid=3008
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 44 (0x2C)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 84 (0x54)
smb_vwv[11]= 44 (0x2C)
smb_vwv[12]= 84 (0x54)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]=29447 (0x7307)
smb_bcc=61
[2005/03/21 11:41:52, 10] lib/util.c:dump_data(1990)
[000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\....
[010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 05 00 00 ........ .,......
[020] 00 14 00 00 00 00 00 01 00 00 00 00 00 06 00 00 ........ ........
[030] 00 00 00 00 00 4F F9 3E 42 4C 5A 00 00 .....O.> BLZ..
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 23116) conn 0x9c99a28
[2005/03/21 11:41:52, 4] smbd/uid.c:change_to_user(194)
change_to_user: Skipping user change - already user
[2005/03/21 11:41:52, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=44 params=0 setup=2
[2005/03/21 11:41:52, 5] smbd/ipc.c:reply_trans(560)
calling named_pipe
[2005/03/21 11:41:52, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/03/21 11:41:52, 5] smbd/ipc.c:api_fd_reply(265)
api_fd_reply
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
search for pipe pnum=7307
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
pipe name samr pnum=7307 (pipes_open=2)
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
pipe name lsarpc pnum=7302 (pipes_open=2)
[2005/03/21 11:41:52, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "samr" (pnum 7307)
[2005/03/21 11:41:52, 10] smbd/ipc.c:api_fd_reply(299)
api_fd_reply: p:0x9ca1360 max_trans_reply: 1024
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852)
write_to_pipe: 7307 name: samr open: Yes len: 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
write_to_pipe: data_left = 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399)
fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
write_to_pipe: data_used = 16
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
write_to_pipe: data_left = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 major : 05
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 minor : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 pkt_type : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 flags : 03
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0004 pack_type0: 10
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0005 pack_type1: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0006 pack_type2: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0007 pack_type3: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 frag_len : 002c
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a auth_len : 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c call_id : 00000005
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486)
unmarshall_rpc_header: using little-endian RPC
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515)
unmarshall_rpc_header: type = 0, flags = 3
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
write_to_pipe: data_used = 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
write_to_pipe: data_left = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 28, incoming data = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(720)
process_complete_pdu: processing packet type 0
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr_req req
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 alloc_hint: 00000014
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0004 context_id: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0006 opnum : 0001
[2005/03/21 11:41:52, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe.c:api_pipe_request(1497)
Requested \PIPE\samr
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531)
api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557)
api_rpc_cmds[0].fn == 0x813d91a
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 samr_io_q_close_hnd
[2005/03/21 11:41:52, 6] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_pol_hnd pol
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 data1: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0004 data2: 00000006
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 data3: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a data4: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
000c data5: 4f f9 3e 42 4c 5a 00 00
[2005/03/21 11:41:52, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
Found policy hnd[0] [000] 00 00 00 00 06 00 00 00 00 00 00 00 4F F9 3E 42 ........ ....O.>B
[010] 4C 5A 00 00 LZ..
[2005/03/21 11:41:52, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2005/03/21 11:41:52, 5] rpc_server/srv_samr_nt.c:_samr_close_hnd(591)
samr_reply_close_hnd: 591
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 samr_io_r_close_hnd
[2005/03/21 11:41:52, 6] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_pol_hnd pol
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 data1: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0004 data2: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 data3: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a data4: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
000c data5: 00 00 00 00 00 00 00 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
0014 status: NT_STATUS_OK
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578)
api_rpcTNP: called samr successfully
[2005/03/21 11:41:52, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
write_to_pipe: data_used = 28
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
read_from_pipe: 7307 name: samr len: 1024
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(982)
read_from_pipe: samr: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24.
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr hdr
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 major : 05
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 minor : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 pkt_type : 02
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 flags : 03
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0004 pack_type0: 10
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0005 pack_type1: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0006 pack_type2: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0007 pack_type3: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 frag_len : 0030
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a auth_len : 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c call_id : 00000005
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
000010 smb_io_rpc_hdr_resp resp
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0010 alloc_hint: 00000018
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0014 context_id: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0016 cancel_ct : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0017 reserved : 00
[2005/03/21 11:41:52, 5] smbd/ipc.c:copy_trans_params_and_data(60)
copy_trans_params_and_data: params[0..0] data[0..48]
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
size=104
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=904
smb_uid=100
smb_mid=3008
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 48 (0x30)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 48 (0x30)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=49
[2005/03/21 11:41:52, 10] lib/util.c:dump_data(1990)
[000] 00 05 00 02 03 10 00 00 00 30 00 00 00 05 00 00 ........ .0......
[010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
[020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
[030] 00 .
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
write_socket(25,108)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
write_socket(25,108) wrote 108
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
got smb length of 41
[2005/03/21 11:41:52, 6] smbd/process.c:process_smb(1090)
got message type 0x0 of len 0x29
[2005/03/21 11:41:52, 3] smbd/process.c:process_smb(1091)
Transaction 49 of length 45
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
size=41
smb_com=0x4
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=65279
smb_uid=100
smb_mid=3072
smt_wct=3
smb_vwv[ 0]=29447 (0x7307)
smb_vwv[ 1]=65535 (0xFFFF)
smb_vwv[ 2]=65535 (0xFFFF)
smb_bcc=0
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
switch message SMBclose (pid 23116) conn 0x9c99a28
[2005/03/21 11:41:52, 4] smbd/uid.c:change_to_user(194)
change_to_user: Skipping user change - already user
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
search for pipe pnum=7307
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
pipe name samr pnum=7307 (pipes_open=2)
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
pipe name lsarpc pnum=7302 (pipes_open=2)
[2005/03/21 11:41:52, 5] smbd/pipes.c:reply_pipe_close(260)
reply_pipe_close: pnum:7307
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1081)
closed pipe name samr pnum=7307 (pipes_open=1)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
size=35
smb_com=0x4
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=65279
smb_uid=100
smb_mid=3072
smt_wct=0
smb_bcc=0
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
write_socket(25,39)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
write_socket(25,39) wrote 39
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
got smb length of 128
[2005/03/21 11:41:52, 6] smbd/process.c:process_smb(1090)
got message type 0x0 of len 0x80
[2005/03/21 11:41:52, 3] smbd/process.c:process_smb(1091)
Transaction 50 of length 132
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
size=128
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=904
smb_uid=100
smb_mid=3136
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 44 (0x2C)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 84 (0x54)
smb_vwv[11]= 44 (0x2C)
smb_vwv[12]= 84 (0x54)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]=29442 (0x7302)
smb_bcc=61
[2005/03/21 11:41:52, 10] lib/util.c:dump_data(1990)
[000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\....
[010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 04 00 00 ........ .,......
[020] 00 14 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........ ........
[030] 00 00 00 00 00 4E F9 3E 42 4C 5A 00 00 .....N.> BLZ..
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 23116) conn 0x9c99a28
[2005/03/21 11:41:52, 4] smbd/uid.c:change_to_user(194)
change_to_user: Skipping user change - already user
[2005/03/21 11:41:52, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=44 params=0 setup=2
[2005/03/21 11:41:52, 5] smbd/ipc.c:reply_trans(560)
calling named_pipe
[2005/03/21 11:41:52, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/03/21 11:41:52, 5] smbd/ipc.c:api_fd_reply(265)
api_fd_reply
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
search for pipe pnum=7302
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
pipe name lsarpc pnum=7302 (pipes_open=1)
[2005/03/21 11:41:52, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "lsarpc" (pnum 7302)
[2005/03/21 11:41:52, 10] smbd/ipc.c:api_fd_reply(299)
api_fd_reply: p:0x9c966c8 max_trans_reply: 1024
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852)
write_to_pipe: 7302 name: lsarpc open: Yes len: 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
write_to_pipe: data_left = 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399)
fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
write_to_pipe: data_used = 16
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
write_to_pipe: data_left = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 major : 05
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 minor : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 pkt_type : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 flags : 03
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0004 pack_type0: 10
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0005 pack_type1: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0006 pack_type2: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0007 pack_type3: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 frag_len : 002c
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a auth_len : 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c call_id : 00000004
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486)
unmarshall_rpc_header: using little-endian RPC
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515)
unmarshall_rpc_header: type = 0, flags = 3
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
write_to_pipe: data_used = 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
write_to_pipe: data_left = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 28, incoming data = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(720)
process_complete_pdu: processing packet type 0
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr_req req
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 alloc_hint: 00000014
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0004 context_id: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0006 opnum : 0000
[2005/03/21 11:41:52, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe.c:api_pipe_request(1497)
Requested \PIPE\lsarpc
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531)
api_rpcTNP: lsarpc op 0x0 - api_rpcTNP: rpc command: LSA_CLOSE
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557)
api_rpc_cmds[4].fn == 0x8111a60
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 lsa_io_q_close
[2005/03/21 11:41:52, 6] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_pol_hnd
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 data1: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0004 data2: 00000001
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 data3: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a data4: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
000c data5: 4e f9 3e 42 4c 5a 00 00
[2005/03/21 11:41:52, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
Found policy hnd[0] [000] 00 00 00 00 01 00 00 00 00 00 00 00 4E F9 3E 42 ........ ....N.>B
[010] 4C 5A 00 00 LZ..
[2005/03/21 11:41:52, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
Found policy hnd[0] [000] 00 00 00 00 01 00 00 00 00 00 00 00 4E F9 3E 42 ........ ....N.>B
[010] 4C 5A 00 00 LZ..
[2005/03/21 11:41:52, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 lsa_io_r_close
[2005/03/21 11:41:52, 6] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_pol_hnd
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 data1: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0004 data2: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 data3: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a data4: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
000c data5: 00 00 00 00 00 00 00 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
0014 status: NT_STATUS_OK
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578)
api_rpcTNP: called lsarpc successfully
[2005/03/21 11:41:52, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
write_to_pipe: data_used = 28
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
read_from_pipe: 7302 name: lsarpc len: 1024
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(982)
read_from_pipe: lsarpc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24.
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr hdr
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 major : 05
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 minor : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 pkt_type : 02
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 flags : 03
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0004 pack_type0: 10
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0005 pack_type1: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0006 pack_type2: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0007 pack_type3: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 frag_len : 0030
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a auth_len : 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c call_id : 00000004
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
000010 smb_io_rpc_hdr_resp resp
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0010 alloc_hint: 00000018
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0014 context_id: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0016 cancel_ct : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0017 reserved : 00
[2005/03/21 11:41:52, 5] smbd/ipc.c:copy_trans_params_and_data(60)
copy_trans_params_and_data: params[0..0] data[0..48]
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
size=104
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=904
smb_uid=100
smb_mid=3136
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 48 (0x30)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 48 (0x30)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=49
[2005/03/21 11:41:52, 10] lib/util.c:dump_data(1990)
[000] 00 05 00 02 03 10 00 00 00 30 00 00 00 04 00 00 ........ .0......
[010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
[020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
[030] 00 .
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
write_socket(25,108)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
write_socket(25,108) wrote 108
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
got smb length of 41
[2005/03/21 11:41:52, 6] smbd/process.c:process_smb(1090)
got message type 0x0 of len 0x29
[2005/03/21 11:41:52, 3] smbd/process.c:process_smb(1091)
Transaction 51 of length 45
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
size=41
smb_com=0x4
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=65279
smb_uid=100
smb_mid=3200
smt_wct=3
smb_vwv[ 0]=29442 (0x7302)
smb_vwv[ 1]=65535 (0xFFFF)
smb_vwv[ 2]=65535 (0xFFFF)
smb_bcc=0
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
switch message SMBclose (pid 23116) conn 0x9c99a28
[2005/03/21 11:41:52, 4] smbd/uid.c:change_to_user(194)
change_to_user: Skipping user change - already user
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
search for pipe pnum=7302
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
pipe name lsarpc pnum=7302 (pipes_open=1)
[2005/03/21 11:41:52, 5] smbd/pipes.c:reply_pipe_close(260)
reply_pipe_close: pnum:7302
[2005/03/21 11:41:52, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235)
close_policy_by_pipe: deleted handle list for pipe lsarpc
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1081)
closed pipe name lsarpc pnum=7302 (pipes_open=0)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
size=35
smb_com=0x4
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=65279
smb_uid=100
smb_mid=3200
smt_wct=0
smb_bcc=0
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
write_socket(25,39)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
write_socket(25,39) wrote 39
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
got smb length of 39
[2005/03/21 11:41:52, 6] smbd/process.c:process_smb(1090)
got message type 0x0 of len 0x27
[2005/03/21 11:41:52, 3] smbd/process.c:process_smb(1091)
Transaction 52 of length 43
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
size=39
smb_com=0x74
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=0
smb_pid=65279
smb_uid=100
smb_mid=3264
smt_wct=2
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 0 (0x0)
smb_bcc=0
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
switch message SMBulogoffX (pid 23116) conn 0x0
[2005/03/21 11:41:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_unix_user_token(507)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2005/03/21 11:41:52, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/21 11:41:52, 5] auth/auth_util.c:free_server_info(1374)
attempting to free (and zero) a server_info structure
[2005/03/21 11:41:52, 3] smbd/reply.c:reply_ulogoffX(1248)
ulogoffX vuid=100
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
size=39
smb_com=0x74
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=65279
smb_uid=100
smb_mid=3264
smt_wct=2
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 0 (0x0)
smb_bcc=0
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
write_socket(25,43)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
write_socket(25,43) wrote 43
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
got smb length of 35
[2005/03/21 11:41:52, 6] smbd/process.c:process_smb(1090)
got message type 0x0 of len 0x23
[2005/03/21 11:41:52, 3] smbd/process.c:process_smb(1091)
Transaction 53 of length 39
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
size=35
smb_com=0x71
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=65279
smb_uid=100
smb_mid=3328
smt_wct=0
smb_bcc=0
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
switch message SMBtdis (pid 23116) conn 0x9c99a28
[2005/03/21 11:41:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_unix_user_token(507)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2005/03/21 11:41:52, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/21 11:41:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_unix_user_token(507)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2005/03/21 11:41:52, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/21 11:41:52, 3] smbd/service.c:close_cnum(833)
ibm-zus90725eca (172.28.0.64) closed connection to service IPC$
[2005/03/21 11:41:52, 3] smbd/connection.c:yield_connection(69)
Yielding connection to IPC$
[2005/03/21 11:41:52, 4] smbd/vfs.c:vfs_ChDir(657)
vfs_ChDir to /
[2005/03/21 11:41:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_unix_user_token(507)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2005/03/21 11:41:52, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
size=35
smb_com=0x71
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=65279
smb_uid=100
smb_mid=3328
smt_wct=0
smb_bcc=0
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
write_socket(25,39)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
write_socket(25,39) wrote 39
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_socket_data(378)
read_socket_data: recv of 4 returned 0. Error = Success
[2005/03/21 11:41:52, 10] lib/util_sock.c:receive_smb_raw(556)
receive_smb_raw: length < 0!
[2005/03/21 11:41:52, 3] smbd/process.c:timeout_processing(1334)
timeout_processing: End of file from client (client has disconnected).
[2005/03/21 11:41:52, 5] lib/gencache.c:gencache_shutdown(88)
Closing cache file
[2005/03/21 11:41:52, 5] libsmb/namecache.c:namecache_shutdown(79)
namecache_shutdown: netbios namecache closed successfully.
[2005/03/21 11:41:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_unix_user_token(507)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2005/03/21 11:41:52, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/21 11:41:52, 2] smbd/server.c:exit_server(609)
Closing connections
[2005/03/21 11:41:52, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2005/03/21 11:41:52, 5] smbd/oplock.c:receive_local_message(107)
receive_local_message: doing select with timeout of 1 ms
[2005/03/21 11:41:52, 3] smbd/server.c:exit_server(652)
Server exit (normal exit)

dn: uid=root, ou=Staff, o=ventusnetworks.com, dc=na
sambaLMPassword:
sambaPrimaryGroupSID: S-1-5-21-3107161993-1039155829-3332455197-512
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: posixAccount
objectClass: shadowAccount
userPassword::
sambaLogonTime: 0
sambaHomeDrive: H:
uid: root
uidNumber: 0
cn: root
sambaLogoffTime: 2147483647
sambaPwdLastSet: 1110913083
sambaAcctFlags: [U ]
loginShell: /bin/false
sambaProfilePath: \\vnpdc01\profiles\root\
gidNumber: 512
sambaPwdMustChange: 2147483647
sambaNTPassword:
sambaPwdCanChange: 1110913083
gecos: Netbios Domain Administrator
sambaSID: S-1-5-21-3107161993-1039155829-3332455197-2996
homeDirectory: /home/root
sambaKickoffTime: 2147483647
sn: root
sambaHomePath: \\vnpdc01\home\root
sambaPasswordHistory: 0000000000000000000000000000000000000000000000000000000
000000000

Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 fd=22 ACCEPT from IP=172.28.0.46:33934 (IP=0.0.0.0:389)
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=0 BIND dn="cn=Manager,dc=na" method=128
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=0 BIND dn="cn=Manager,dc=na" mech=SIMPLE ssf=0
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=0 RESULT tag=97 err=0 text=
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)"
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=1 SRCH attr=supportedControl
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=2 SRCH base="o=ventusnetworks.com,dc=na" scope=2 deref=0 filter="(&(&(uid=administrator)(objectClass=sambaSamAccount))(objectClass=sambaSamAccount))"
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=2 SRCH attr=uid uidNumber gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange sambaLogonTime sambaLogoffTime sambaKickoffTime cn displayName sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours modifyTimestamp
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 fd=23 ACCEPT from IP=172.28.0.46:33935 (IP=0.0.0.0:389)
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=0 BIND dn="" method=128
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=0 RESULT tag=97 err=0 text=
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=1 SRCH base="o=ventusnetworks.com,dc=na" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=administrator))"
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=1 SRCH attr=uid userPassword uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=2 SRCH base="o=ventusnetworks.com,dc=na" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=administrator))"
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=3 SRCH base="ou=Groups,o=ventusnetworks.com,dc=na" scope=1 deref=0 filter="(&(objectClass=posixGroup)(|(memberUid=administrator)(uniqueMember=uid=administrator,ou=staff,o=ventusnetworks.com,dc=na)))"
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=3 SRCH attr=gidNumber
Mar 21 11:37:24 vnldap02 slapd[20690]: <= bdb_equality_candidates: (uniqueMember) index_param failed (18)
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=40 op=3 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=39 op=3 UNBIND
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=39 fd=22 closed
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 fd=22 ACCEPT from IP=172.28.0.46:33936 (IP=0.0.0.0:389)
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=0 BIND dn="cn=Manager,dc=na" method=128
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=0 BIND dn="cn=Manager,dc=na" mech=SIMPLE ssf=0
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=0 RESULT tag=97 err=0 text=
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)"
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=1 SRCH attr=supportedControl
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=2 SRCH base="ou=Groups,o=ventusnetworks.com,dc=na" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(gidNumber=512))"
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=2 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass
Mar 21 11:37:26 vnldap02 slapd[20690]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Mar 21 11:37:27 vnldap02 slapd[20690]: conn=41 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=41 fd=22 closed
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=40 fd=23 closed
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 fd=22 ACCEPT from IP=172.28.0.46:33937 (IP=0.0.0.0:389)
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=0 BIND dn="cn=Manager,dc=na" method=128
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=0 BIND dn="cn=Manager,dc=na" mech=SIMPLE ssf=0
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=0 RESULT tag=97 err=0 text=
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)"
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=1 SRCH attr=supportedControl
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=2 SRCH base="o=ventusnetworks.com,dc=na" scope=2 deref=0 filter="(&(&(uid=administrator)(objectClass=sambaSamAccount))(objectClass=sambaSamAccount))"
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=2 SRCH attr=uid uidNumber gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange sambaLogonTime sambaLogoffTime sambaKickoffTime cn displayName sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours modifyTimestamp
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=42 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 fd=23 ACCEPT from IP=172.28.0.46:33938 (IP=0.0.0.0:389)
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=0 BIND dn="" method=128
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=0 RESULT tag=97 err=0 text=
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=1 SRCH base="o=ventusnetworks.com,dc=na" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=administrator))"
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=1 SRCH attr=uid userPassword uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=2 SRCH base="o=ventusnetworks.com,dc=na" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=administrator))"
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=3 SRCH base="ou=Groups,o=ventusnetworks.com,dc=na" scope=1 deref=0 filter="(&(objectClass=posixGroup)(|(memberUid=administrator)(uniqueMember=uid=administrator,ou=staff,o=ventusnetworks.com,dc=na)))"
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=3 SRCH attr=gidNumber
Mar 21 11:37:29 vnldap02 slapd[20690]: <= bdb_equality_candidates: (uniqueMember) index_param failed (18)
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=43 op=3 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=42 op=3 UNBIND
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=42 fd=22 closed
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=44 fd=22 ACCEPT from IP=172.28.0.46:33939 (IP=0.0.0.0:389)
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=44 op=0 BIND dn="cn=Manager,dc=na" method=128
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=44 op=0 BIND dn="cn=Manager,dc=na" mech=SIMPLE ssf=0
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=44 op=0 RESULT tag=97 err=0 text=
Mar 21 11:37:31 vnldap02 slapd[20690]: conn=44 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)"
Mar 21 11:37:31 vnldap02 slapd[20690]: conn=44 op=1 SRCH attr=supportedControl
Mar 21 11:37:31 vnldap02 slapd[20690]: conn=44 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:31 vnldap02 slapd[20690]: conn=44 op=2 SRCH base="ou=Groups,o=ventusnetworks.com,dc=na" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(gidNumber=512))"
Mar 21 11:37:31 vnldap02 slapd[20690]: conn=44 op=2 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass
Mar 21 11:37:31 vnldap02 slapd[20690]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Mar 21 11:37:32 vnldap02 slapd[20690]: conn=44 op=2 SEARCH RESUL