I could really use some help here (SAMBA PDC)

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

I could really use some help here (SAMBA PDC)

John Zakhar
The log files are attached, I have NEVER had so much trouble with a
samba PDC before. I need to turn in my unix admin license, this is
pathetic...

Anyway, I am here. When trying to join a domain with the administrator
account I get "no mapping between account name and security ID's was done"
And the joining fails...

All the needed files are attached, from the ldap log. to the samba.conf
to the ldifs of the machine, root and admin account.
Trying with the root account nets me the same error

in smbusers I noticed an entry i never made

root = administrator

software versions:

[root@vnpdc01 openldap-data]# rpm -qa |grep samba
samba-3.0.11-1
samba-swat-3.0.11-1
samba-client-3.0.11-1
samba-common-3.0.11-1

I am assumine the rpm or something else made that mapping. I dunno...

I have really about had it here, it's been well over a week, we are
working on close to two. I need to get this resolved or move on to a
Windows PDC. I have a deadline to meet with a domain controller (that is
no one problem here, i realize this)

If more information is needed please ask. I will be happy to provide
anything but passwords..
If anyone has any insite, advice, or whatever I would very much
appreciate it

--
John Zakhar <[hidden email]>

Systems Administrator.

Ventus Networks
800 Connecticut Ave
Norwalk, CT. 06854

Work 1-(203)-642-2800
Home 1-(860)-318-0276
Cell 1-(203)-257-4165


# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options (perhaps too
# many!) most of which are not shown in this example
#
# Any line which starts with a ; (semi-colon) or a # (hash)
# is a comment and is ignored. In this example we will use a #
# for commentry and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command "testparm"
# to check that you have not made any basic syntactic errors.
#
#======================= Global Settings =====================================
[global]

   workgroup = VENTUS_OFFICE
   netbios name = vnpdc01
   server string = Ventus File Server
   hosts allow = 172.28.0. 192.168.1 127.
   printcap name = /etc/printcap
   load printers = yes
   log file = /var/log/samba/%m.log
   max log size = 50
   ldap passwd sync = Yes
passdb backend = ldapsam:ldap://192.168.1.242/
ldap suffix = o=ventusnetworks.com,dc=na
ldap filter = (&(uid=%u)(objectclass=sambaSamAccount))
ldap machine suffix = ou=Computers
ldap user suffix = ou=Staff
ldap group suffix = ou=Groups
ldap admin dn = "cn=Manager,dc=na"
ldap delete dn = no
#ldap ssl = ssl
   security = user
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   log level = 10
   local master = yes
   os level = 255
   domain master = yes
   preferred master = yes
   domain logons = yes
#   logon script = netlogon.bat
   logon path = \\%L\Profiles\%U
#   logon drive = U:

   name resolve order = wins lmhosts bcast
   wins support = yes
   dns proxy = no

        #delete user script = /usr/local/sbin/smbldap-userdel "%u"
        add machine script = /opt/IDEALX/sbin/smbldap-useradd -w "%u" -H W
        add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g"
        #delete group script = /usr/local/sbin/smbldap-groupdel "%g"
        add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m "%u" "%g"
        delete user from group script = /opt/IDEALX/sbin/smbldap-groupmod -x "%u" "%g"            
        set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g "%g" "%u"

#============================ Share Definitions ==============================
#   idmap uid = 16777216-33554431
#   idmap gid = 16777216-33554431
   template shell = /bin/false
   winbind use default domain = no

   idmap uid = 16777216-33554431
   idmap gid = 16777216-33554431
[homes]
   comment = Home Directories
   browseable = no
   writable = yes

[netlogon]
   comment = Network Logon Service
   path = /var/samba/logon
   guest ok = yes
   writable = no
   share modes = no

#[Profiles]
#    path = /home/profiles
#    browseable = no
#    guest ok = yes

#[printers]
#   comment = All Printers
#   path = /var/spool/samba
#   browseable = no
# Set public = yes to allow user 'guest account' to print
#   guest ok = no
#   writable = no
#   printable = yes

[engineering]
    comment = Engineering Share
    path = /opt/store/engineering
    public = yes
    read only = no
    write list = @Engineering
    read list = @Engineering
    create mask = 0770

[support]
    comment = Support Share
    path = /opt/store/support
    public = no
    read only = no
    write list = @support
    read list = @support
    create mask = 0770

[Accounting]
    comment = Accounting Share
    path = /opt/store/accounting
    public = no
    read only = no
    write list = @accounting
    read list = @accounting
    create mask = 0770

[sales]
        comment = Sales Share
    path = /opt/store/sales
  public = no
    read only = no
    write list = @sales
    read list = @sales
    create mask = 0770

[Administration]
        comment = Administration Share
        path = /opt/store/administration
        public = no
        read only = no
        write list = @administration
        create mask = 0770

[CompanyShare]
        comment = Company Share
        writeable = yes
        path = /opt/store
        write list = @administration,@sales,@accounting,@support,@Engineering
        create mask = 0777
[SAP_Project]
        comment = SAP Share
        path = /opt/store/Sap_Project
        write list =  @administration,@sales,@accounting,@support,@Engineering
        public = no
        read only = no
       
[public]
    comment = Public Share
    path = /opt/store/public
    public = yes
    read only = no
    create mask = 0777
[User Home]
        comment = user homes
        path = /opt/store/UserHome
        writeable = yes
        public = no
        write list = @administration,@sales,@accounting,@support,@Engineering
        read only = no

[Lisa Backup]
        comment = Just for Lisa =)
        path = /opt/store/Lisa\ Backup
        writeable = yes
        public = no
        write list = lromano
        read only = no

[admin]
    path = /home/
    public = yes
    read only = no


dn: uid=administrator, ou=Staff, o=ventusnetworks.com, dc=na
sambaLMPassword:
sambaPrimaryGroupSID: S-1-5-21-3107161993-1039155829-3332455197-512
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: posixAccount
objectClass: shadowAccount
userPassword::
sambaLogonTime: 0
sambaHomeDrive: H:
uid: administrator
uidNumber: 0
cn: administrator
sambaLogoffTime: 2147483647
sambaPwdLastSet: 1111419696
loginShell: /bin/bash
sambaAcctFlags: [U          ]
sambaProfilePath: \\vnpdc01\profiles\administrator\
gidNumber: 512
sambaPwdMustChange: 2147483647
sambaNTPassword:
sambaPwdCanChange: 1111419696
gecos: Netbios Domain Administrator
sambaSID: S-1-5-21-3107161993-1039155829-3332455197-2996
homeDirectory: /home/administrator
sambaKickoffTime: 2147483647
sn: administrator
sambaHomePath: \\vnpdc01\home\administrator
sambaPasswordHistory: 0000000000000000000000000000000000000000000000000000000
 000000000


dn: uid=ibm-zus90725eca$, ou=Computers, o=ventusnetworks.com, dc=na
sambaPwdLastSet: 1111418025
sn: ibm-zus90725eca$
sambaAcctFlags: [W          ]
userPassword:: e1NNRDV9cHVjZlRnck5MWVFmaENjcjFJQUp6RHdZbHBBPQ==
uidNumber: 1023
gidNumber: 515
sambaPwdMustChange: 2147483647
uid: ibm-zus90725eca$
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: posixAccount
objectClass: sambaSamAccount
objectClass: person
objectClass: top
sambaSID: S-1-5-21-3107161993-1036545829-3332455197
cn: ibm-zus90725eca$
homeDirectory: /dev/null
sambaPasswordHistory: 0000000000000000000000000000000000000000000000000000000
 000000000
sambaPwdCanChange: 1111418025
sambaNTPassword: 4143428EA74C32CCF1AED23B88F1C64C
sambaLMPassword: 205A06C82DD819D1AAD3B435B51404EE


dn: sambaDomainName=VENTUS_OFFICE, o=ventusnetworks.com, dc=na
sambaNextUserRid: 67109862
sambaSID: S-1-5-21-3107161993-1039155829-3332455197
sambaNextGroupRid: 67109863
objectClass: sambaDomain
sambaAlgorithmicRidBase: 1000
sambaDomainName: VENTUS_OFFICE


  smb_bcc=61
[2005/03/21 11:41:52, 10] lib/util.c:dump_data(1990)
  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 00  .\.P.I.P .E.\....
  [010] 00 05 00 00 03 10 00 00  00 2C 00 00 00 04 00 00  ........ .,......
  [020] 00 14 00 00 00 00 00 01  00 00 00 00 00 07 00 00  ........ ........
  [030] 00 00 00 00 00 4F F9 3E  42 4C 5A 00 00           .....O.> BLZ..
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
  switch message SMBtrans (pid 23116) conn 0x9c99a28
[2005/03/21 11:41:52, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2005/03/21 11:41:52, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=44 params=0 setup=2
[2005/03/21 11:41:52, 5] smbd/ipc.c:reply_trans(560)
  calling named_pipe
[2005/03/21 11:41:52, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/03/21 11:41:52, 5] smbd/ipc.c:api_fd_reply(265)
  api_fd_reply
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=7307
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
  pipe name samr pnum=7307 (pipes_open=2)
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
  pipe name lsarpc pnum=7302 (pipes_open=2)
[2005/03/21 11:41:52, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "samr" (pnum 7307)
[2005/03/21 11:41:52, 10] smbd/ipc.c:api_fd_reply(299)
  api_fd_reply: p:0x9ca1360 max_trans_reply: 1024
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852)
  write_to_pipe: 7307 name: samr open: Yes len: 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399)
  fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 16
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0000 major     : 05
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0001 minor     : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0002 pkt_type  : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0003 flags     : 03
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0004 pack_type0: 10
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0005 pack_type1: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0006 pack_type2: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0007 pack_type3: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0008 frag_len  : 002c
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      000a auth_len  : 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      000c call_id   : 00000004
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486)
  unmarshall_rpc_header: using little-endian RPC
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515)
  unmarshall_rpc_header: type = 0, flags = 3
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 28, incoming data = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(720)
  process_complete_pdu: processing packet type 0
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr_req req
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      0000 alloc_hint: 00000014
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0004 context_id: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0006 opnum     : 0001
[2005/03/21 11:41:52, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 0
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe.c:api_pipe_request(1497)
  Requested \PIPE\samr
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531)
  api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557)
  api_rpc_cmds[0].fn == 0x813d91a
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 samr_io_q_close_hnd
[2005/03/21 11:41:52, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000000 smb_io_pol_hnd pol
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0000 data1: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0004 data2: 00000007
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          0008 data3: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          000a data4: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
          000c data5: 4f f9 3e 42 4c 5a 00 00
[2005/03/21 11:41:52, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
  Found policy hnd[0] [000] 00 00 00 00 07 00 00 00  00 00 00 00 4F F9 3E 42  ........ ....O.>B
  [010] 4C 5A 00 00                                       LZ..
[2005/03/21 11:41:52, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
  Closed policy
[2005/03/21 11:41:52, 5] rpc_server/srv_samr_nt.c:_samr_close_hnd(591)
  samr_reply_close_hnd: 591
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 samr_io_r_close_hnd
[2005/03/21 11:41:52, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000000 smb_io_pol_hnd pol
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0000 data1: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0004 data2: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          0008 data3: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          000a data4: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
          000c data5: 00 00 00 00 00 00 00 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
      0014 status: NT_STATUS_OK
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578)
  api_rpcTNP: called samr successfully
[2005/03/21 11:41:52, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 28
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
  read_from_pipe: 7307 name: samr len: 1024
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(982)
  read_from_pipe: samr: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24.
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr hdr
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0000 major     : 05
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0001 minor     : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0002 pkt_type  : 02
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0003 flags     : 03
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0004 pack_type0: 10
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0005 pack_type1: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0006 pack_type2: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0007 pack_type3: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0008 frag_len  : 0030
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      000a auth_len  : 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      000c call_id   : 00000004
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000010 smb_io_rpc_hdr_resp resp
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      0010 alloc_hint: 00000018
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0014 context_id: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0016 cancel_ct : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0017 reserved  : 00
[2005/03/21 11:41:52, 5] smbd/ipc.c:copy_trans_params_and_data(60)
  copy_trans_params_and_data: params[0..0] data[0..48]
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=104
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=1
  smb_pid=904
  smb_uid=100
  smb_mid=2944
  smt_wct=10
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=   48 (0x30)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=   56 (0x38)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=   48 (0x30)
  smb_vwv[ 7]=   56 (0x38)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_bcc=49
[2005/03/21 11:41:52, 10] lib/util.c:dump_data(1990)
  [000] 00 05 00 02 03 10 00 00  00 30 00 00 00 04 00 00  ........ .0......
  [010] 00 18 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
  [020] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
  [030] 00                                                .
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
  write_socket(25,108)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
  write_socket(25,108) wrote 108
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
  got smb length of 128
[2005/03/21 11:41:52, 6] smbd/process.c:process_smb(1090)
  got message type 0x0 of len 0x80
[2005/03/21 11:41:52, 3] smbd/process.c:process_smb(1091)
  Transaction 48 of length 132
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=128
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=904
  smb_uid=100
  smb_mid=3008
  smt_wct=16
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=   44 (0x2C)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]= 1024 (0x400)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_vwv[10]=   84 (0x54)
  smb_vwv[11]=   44 (0x2C)
  smb_vwv[12]=   84 (0x54)
  smb_vwv[13]=    2 (0x2)
  smb_vwv[14]=   38 (0x26)
  smb_vwv[15]=29447 (0x7307)
  smb_bcc=61
[2005/03/21 11:41:52, 10] lib/util.c:dump_data(1990)
  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 00  .\.P.I.P .E.\....
  [010] 00 05 00 00 03 10 00 00  00 2C 00 00 00 05 00 00  ........ .,......
  [020] 00 14 00 00 00 00 00 01  00 00 00 00 00 06 00 00  ........ ........
  [030] 00 00 00 00 00 4F F9 3E  42 4C 5A 00 00           .....O.> BLZ..
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
  switch message SMBtrans (pid 23116) conn 0x9c99a28
[2005/03/21 11:41:52, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2005/03/21 11:41:52, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=44 params=0 setup=2
[2005/03/21 11:41:52, 5] smbd/ipc.c:reply_trans(560)
  calling named_pipe
[2005/03/21 11:41:52, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/03/21 11:41:52, 5] smbd/ipc.c:api_fd_reply(265)
  api_fd_reply
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=7307
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
  pipe name samr pnum=7307 (pipes_open=2)
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
  pipe name lsarpc pnum=7302 (pipes_open=2)
[2005/03/21 11:41:52, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "samr" (pnum 7307)
[2005/03/21 11:41:52, 10] smbd/ipc.c:api_fd_reply(299)
  api_fd_reply: p:0x9ca1360 max_trans_reply: 1024
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852)
  write_to_pipe: 7307 name: samr open: Yes len: 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399)
  fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 16
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0000 major     : 05
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0001 minor     : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0002 pkt_type  : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0003 flags     : 03
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0004 pack_type0: 10
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0005 pack_type1: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0006 pack_type2: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0007 pack_type3: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0008 frag_len  : 002c
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      000a auth_len  : 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      000c call_id   : 00000005
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486)
  unmarshall_rpc_header: using little-endian RPC
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515)
  unmarshall_rpc_header: type = 0, flags = 3
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 28, incoming data = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(720)
  process_complete_pdu: processing packet type 0
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr_req req
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      0000 alloc_hint: 00000014
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0004 context_id: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0006 opnum     : 0001
[2005/03/21 11:41:52, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 0
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe.c:api_pipe_request(1497)
  Requested \PIPE\samr
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531)
  api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557)
  api_rpc_cmds[0].fn == 0x813d91a
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 samr_io_q_close_hnd
[2005/03/21 11:41:52, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000000 smb_io_pol_hnd pol
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0000 data1: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0004 data2: 00000006
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          0008 data3: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          000a data4: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
          000c data5: 4f f9 3e 42 4c 5a 00 00
[2005/03/21 11:41:52, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
  Found policy hnd[0] [000] 00 00 00 00 06 00 00 00  00 00 00 00 4F F9 3E 42  ........ ....O.>B
  [010] 4C 5A 00 00                                       LZ..
[2005/03/21 11:41:52, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
  Closed policy
[2005/03/21 11:41:52, 5] rpc_server/srv_samr_nt.c:_samr_close_hnd(591)
  samr_reply_close_hnd: 591
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 samr_io_r_close_hnd
[2005/03/21 11:41:52, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000000 smb_io_pol_hnd pol
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0000 data1: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0004 data2: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          0008 data3: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          000a data4: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
          000c data5: 00 00 00 00 00 00 00 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
      0014 status: NT_STATUS_OK
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578)
  api_rpcTNP: called samr successfully
[2005/03/21 11:41:52, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 28
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
  read_from_pipe: 7307 name: samr len: 1024
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(982)
  read_from_pipe: samr: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24.
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr hdr
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0000 major     : 05
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0001 minor     : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0002 pkt_type  : 02
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0003 flags     : 03
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0004 pack_type0: 10
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0005 pack_type1: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0006 pack_type2: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0007 pack_type3: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0008 frag_len  : 0030
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      000a auth_len  : 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      000c call_id   : 00000005
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000010 smb_io_rpc_hdr_resp resp
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      0010 alloc_hint: 00000018
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0014 context_id: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0016 cancel_ct : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0017 reserved  : 00
[2005/03/21 11:41:52, 5] smbd/ipc.c:copy_trans_params_and_data(60)
  copy_trans_params_and_data: params[0..0] data[0..48]
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=104
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=1
  smb_pid=904
  smb_uid=100
  smb_mid=3008
  smt_wct=10
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=   48 (0x30)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=   56 (0x38)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=   48 (0x30)
  smb_vwv[ 7]=   56 (0x38)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_bcc=49
[2005/03/21 11:41:52, 10] lib/util.c:dump_data(1990)
  [000] 00 05 00 02 03 10 00 00  00 30 00 00 00 05 00 00  ........ .0......
  [010] 00 18 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
  [020] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
  [030] 00                                                .
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
  write_socket(25,108)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
  write_socket(25,108) wrote 108
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
  got smb length of 41
[2005/03/21 11:41:52, 6] smbd/process.c:process_smb(1090)
  got message type 0x0 of len 0x29
[2005/03/21 11:41:52, 3] smbd/process.c:process_smb(1091)
  Transaction 49 of length 45
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=41
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=65279
  smb_uid=100
  smb_mid=3072
  smt_wct=3
  smb_vwv[ 0]=29447 (0x7307)
  smb_vwv[ 1]=65535 (0xFFFF)
  smb_vwv[ 2]=65535 (0xFFFF)
  smb_bcc=0
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
  switch message SMBclose (pid 23116) conn 0x9c99a28
[2005/03/21 11:41:52, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=7307
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
  pipe name samr pnum=7307 (pipes_open=2)
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
  pipe name lsarpc pnum=7302 (pipes_open=2)
[2005/03/21 11:41:52, 5] smbd/pipes.c:reply_pipe_close(260)
  reply_pipe_close: pnum:7307
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1081)
  closed pipe name samr pnum=7307 (pipes_open=1)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=35
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=1
  smb_pid=65279
  smb_uid=100
  smb_mid=3072
  smt_wct=0
  smb_bcc=0
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
  write_socket(25,39)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
  write_socket(25,39) wrote 39
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
  got smb length of 128
[2005/03/21 11:41:52, 6] smbd/process.c:process_smb(1090)
  got message type 0x0 of len 0x80
[2005/03/21 11:41:52, 3] smbd/process.c:process_smb(1091)
  Transaction 50 of length 132
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=128
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=904
  smb_uid=100
  smb_mid=3136
  smt_wct=16
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=   44 (0x2C)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]= 1024 (0x400)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_vwv[10]=   84 (0x54)
  smb_vwv[11]=   44 (0x2C)
  smb_vwv[12]=   84 (0x54)
  smb_vwv[13]=    2 (0x2)
  smb_vwv[14]=   38 (0x26)
  smb_vwv[15]=29442 (0x7302)
  smb_bcc=61
[2005/03/21 11:41:52, 10] lib/util.c:dump_data(1990)
  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 00  .\.P.I.P .E.\....
  [010] 00 05 00 00 03 10 00 00  00 2C 00 00 00 04 00 00  ........ .,......
  [020] 00 14 00 00 00 00 00 00  00 00 00 00 00 01 00 00  ........ ........
  [030] 00 00 00 00 00 4E F9 3E  42 4C 5A 00 00           .....N.> BLZ..
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
  switch message SMBtrans (pid 23116) conn 0x9c99a28
[2005/03/21 11:41:52, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2005/03/21 11:41:52, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=44 params=0 setup=2
[2005/03/21 11:41:52, 5] smbd/ipc.c:reply_trans(560)
  calling named_pipe
[2005/03/21 11:41:52, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/03/21 11:41:52, 5] smbd/ipc.c:api_fd_reply(265)
  api_fd_reply
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=7302
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
  pipe name lsarpc pnum=7302 (pipes_open=1)
[2005/03/21 11:41:52, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "lsarpc" (pnum 7302)
[2005/03/21 11:41:52, 10] smbd/ipc.c:api_fd_reply(299)
  api_fd_reply: p:0x9c966c8 max_trans_reply: 1024
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852)
  write_to_pipe: 7302 name: lsarpc open: Yes len: 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399)
  fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 16
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0000 major     : 05
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0001 minor     : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0002 pkt_type  : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0003 flags     : 03
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0004 pack_type0: 10
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0005 pack_type1: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0006 pack_type2: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0007 pack_type3: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0008 frag_len  : 002c
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      000a auth_len  : 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      000c call_id   : 00000004
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486)
  unmarshall_rpc_header: using little-endian RPC
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515)
  unmarshall_rpc_header: type = 0, flags = 3
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 28, incoming data = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(720)
  process_complete_pdu: processing packet type 0
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr_req req
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      0000 alloc_hint: 00000014
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0004 context_id: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0006 opnum     : 0000
[2005/03/21 11:41:52, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 0
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe.c:api_pipe_request(1497)
  Requested \PIPE\lsarpc
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531)
  api_rpcTNP: lsarpc op 0x0 - api_rpcTNP: rpc command: LSA_CLOSE
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557)
  api_rpc_cmds[4].fn == 0x8111a60
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 lsa_io_q_close
[2005/03/21 11:41:52, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000000 smb_io_pol_hnd
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0000 data1: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0004 data2: 00000001
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          0008 data3: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          000a data4: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
          000c data5: 4e f9 3e 42 4c 5a 00 00
[2005/03/21 11:41:52, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
  Found policy hnd[0] [000] 00 00 00 00 01 00 00 00  00 00 00 00 4E F9 3E 42  ........ ....N.>B
  [010] 4C 5A 00 00                                       LZ..
[2005/03/21 11:41:52, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
  Found policy hnd[0] [000] 00 00 00 00 01 00 00 00  00 00 00 00 4E F9 3E 42  ........ ....N.>B
  [010] 4C 5A 00 00                                       LZ..
[2005/03/21 11:41:52, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
  Closed policy
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 lsa_io_r_close
[2005/03/21 11:41:52, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000000 smb_io_pol_hnd
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0000 data1: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0004 data2: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          0008 data3: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          000a data4: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
          000c data5: 00 00 00 00 00 00 00 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
      0014 status: NT_STATUS_OK
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578)
  api_rpcTNP: called lsarpc successfully
[2005/03/21 11:41:52, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 28
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
  read_from_pipe: 7302 name: lsarpc len: 1024
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(982)
  read_from_pipe: lsarpc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24.
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr hdr
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0000 major     : 05
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0001 minor     : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0002 pkt_type  : 02
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0003 flags     : 03
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0004 pack_type0: 10
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0005 pack_type1: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0006 pack_type2: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0007 pack_type3: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0008 frag_len  : 0030
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      000a auth_len  : 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      000c call_id   : 00000004
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000010 smb_io_rpc_hdr_resp resp
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      0010 alloc_hint: 00000018
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0014 context_id: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0016 cancel_ct : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0017 reserved  : 00
[2005/03/21 11:41:52, 5] smbd/ipc.c:copy_trans_params_and_data(60)
  copy_trans_params_and_data: params[0..0] data[0..48]
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=104
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=1
  smb_pid=904
  smb_uid=100
  smb_mid=3136
  smt_wct=10
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=   48 (0x30)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=   56 (0x38)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=   48 (0x30)
  smb_vwv[ 7]=   56 (0x38)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_bcc=49
[2005/03/21 11:41:52, 10] lib/util.c:dump_data(1990)
  [000] 00 05 00 02 03 10 00 00  00 30 00 00 00 04 00 00  ........ .0......
  [010] 00 18 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
  [020] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
  [030] 00                                                .
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
  write_socket(25,108)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
  write_socket(25,108) wrote 108
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
  got smb length of 41
[2005/03/21 11:41:52, 6] smbd/process.c:process_smb(1090)
  got message type 0x0 of len 0x29
[2005/03/21 11:41:52, 3] smbd/process.c:process_smb(1091)
  Transaction 51 of length 45
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=41
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=65279
  smb_uid=100
  smb_mid=3200
  smt_wct=3
  smb_vwv[ 0]=29442 (0x7302)
  smb_vwv[ 1]=65535 (0xFFFF)
  smb_vwv[ 2]=65535 (0xFFFF)
  smb_bcc=0
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
  switch message SMBclose (pid 23116) conn 0x9c99a28
[2005/03/21 11:41:52, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=7302
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
  pipe name lsarpc pnum=7302 (pipes_open=1)
[2005/03/21 11:41:52, 5] smbd/pipes.c:reply_pipe_close(260)
  reply_pipe_close: pnum:7302
[2005/03/21 11:41:52, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235)
  close_policy_by_pipe: deleted handle list for pipe lsarpc
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1081)
  closed pipe name lsarpc pnum=7302 (pipes_open=0)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=35
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=1
  smb_pid=65279
  smb_uid=100
  smb_mid=3200
  smt_wct=0
  smb_bcc=0
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
  write_socket(25,39)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
  write_socket(25,39) wrote 39
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
  got smb length of 39
[2005/03/21 11:41:52, 6] smbd/process.c:process_smb(1090)
  got message type 0x0 of len 0x27
[2005/03/21 11:41:52, 3] smbd/process.c:process_smb(1091)
  Transaction 52 of length 43
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=39
  smb_com=0x74
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=0
  smb_pid=65279
  smb_uid=100
  smb_mid=3264
  smt_wct=2
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=    0 (0x0)
  smb_bcc=0
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
  switch message SMBulogoffX (pid 23116) conn 0x0
[2005/03/21 11:41:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_unix_user_token(507)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2005/03/21 11:41:52, 5] smbd/uid.c:change_to_root_user(296)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/21 11:41:52, 5] auth/auth_util.c:free_server_info(1374)
  attempting to free (and zero) a server_info structure
[2005/03/21 11:41:52, 3] smbd/reply.c:reply_ulogoffX(1248)
  ulogoffX vuid=100
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=39
  smb_com=0x74
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=0
  smb_pid=65279
  smb_uid=100
  smb_mid=3264
  smt_wct=2
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=    0 (0x0)
  smb_bcc=0
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
  write_socket(25,43)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
  write_socket(25,43) wrote 43
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
  got smb length of 35
[2005/03/21 11:41:52, 6] smbd/process.c:process_smb(1090)
  got message type 0x0 of len 0x23
[2005/03/21 11:41:52, 3] smbd/process.c:process_smb(1091)
  Transaction 53 of length 39
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=35
  smb_com=0x71
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=65279
  smb_uid=100
  smb_mid=3328
  smt_wct=0
  smb_bcc=0
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
  switch message SMBtdis (pid 23116) conn 0x9c99a28
[2005/03/21 11:41:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_unix_user_token(507)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2005/03/21 11:41:52, 5] smbd/uid.c:change_to_root_user(296)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/21 11:41:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_unix_user_token(507)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2005/03/21 11:41:52, 5] smbd/uid.c:change_to_root_user(296)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/21 11:41:52, 3] smbd/service.c:close_cnum(833)
  ibm-zus90725eca (172.28.0.64) closed connection to service IPC$
[2005/03/21 11:41:52, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to IPC$
[2005/03/21 11:41:52, 4] smbd/vfs.c:vfs_ChDir(657)
  vfs_ChDir to /
[2005/03/21 11:41:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_unix_user_token(507)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2005/03/21 11:41:52, 5] smbd/uid.c:change_to_root_user(296)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=35
  smb_com=0x71
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=1
  smb_pid=65279
  smb_uid=100
  smb_mid=3328
  smt_wct=0
  smb_bcc=0
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
  write_socket(25,39)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
  write_socket(25,39) wrote 39
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_socket_data(378)
  read_socket_data: recv of 4 returned 0. Error = Success
[2005/03/21 11:41:52, 10] lib/util_sock.c:receive_smb_raw(556)
  receive_smb_raw: length < 0!
[2005/03/21 11:41:52, 3] smbd/process.c:timeout_processing(1334)
  timeout_processing: End of file from client (client has disconnected).
[2005/03/21 11:41:52, 5] lib/gencache.c:gencache_shutdown(88)
  Closing cache file
[2005/03/21 11:41:52, 5] libsmb/namecache.c:namecache_shutdown(79)
  namecache_shutdown: netbios namecache closed successfully.
[2005/03/21 11:41:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_unix_user_token(507)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2005/03/21 11:41:52, 5] smbd/uid.c:change_to_root_user(296)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/21 11:41:52, 2] smbd/server.c:exit_server(609)
  Closing connections
[2005/03/21 11:41:52, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to
[2005/03/21 11:41:52, 5] smbd/oplock.c:receive_local_message(107)
  receive_local_message: doing select with timeout of 1 ms
[2005/03/21 11:41:52, 3] smbd/server.c:exit_server(652)
  Server exit (normal exit)

dn: uid=root, ou=Staff, o=ventusnetworks.com, dc=na
sambaLMPassword:
sambaPrimaryGroupSID: S-1-5-21-3107161993-1039155829-3332455197-512
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: posixAccount
objectClass: shadowAccount
userPassword::
sambaLogonTime: 0
sambaHomeDrive: H:
uid: root
uidNumber: 0
cn: root
sambaLogoffTime: 2147483647
sambaPwdLastSet: 1110913083
sambaAcctFlags: [U          ]
loginShell: /bin/false
sambaProfilePath: \\vnpdc01\profiles\root\
gidNumber: 512
sambaPwdMustChange: 2147483647
sambaNTPassword:
sambaPwdCanChange: 1110913083
gecos: Netbios Domain Administrator
sambaSID: S-1-5-21-3107161993-1039155829-3332455197-2996
homeDirectory: /home/root
sambaKickoffTime: 2147483647
sn: root
sambaHomePath: \\vnpdc01\home\root
sambaPasswordHistory: 0000000000000000000000000000000000000000000000000000000
 000000000



Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 fd=22 ACCEPT from IP=172.28.0.46:33934 (IP=0.0.0.0:389)
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=0 BIND dn="cn=Manager,dc=na" method=128
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=0 BIND dn="cn=Manager,dc=na" mech=SIMPLE ssf=0
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=0 RESULT tag=97 err=0 text=
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)"
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=1 SRCH attr=supportedControl
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=2 SRCH base="o=ventusnetworks.com,dc=na" scope=2 deref=0 filter="(&(&(uid=administrator)(objectClass=sambaSamAccount))(objectClass=sambaSamAccount))"
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=2 SRCH attr=uid uidNumber gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange sambaLogonTime sambaLogoffTime sambaKickoffTime cn displayName sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours modifyTimestamp
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 fd=23 ACCEPT from IP=172.28.0.46:33935 (IP=0.0.0.0:389)
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=0 BIND dn="" method=128
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=0 RESULT tag=97 err=0 text=
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=1 SRCH base="o=ventusnetworks.com,dc=na" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=administrator))"
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=1 SRCH attr=uid userPassword uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=2 SRCH base="o=ventusnetworks.com,dc=na" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=administrator))"
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=3 SRCH base="ou=Groups,o=ventusnetworks.com,dc=na" scope=1 deref=0 filter="(&(objectClass=posixGroup)(|(memberUid=administrator)(uniqueMember=uid=administrator,ou=staff,o=ventusnetworks.com,dc=na)))"
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=3 SRCH attr=gidNumber
Mar 21 11:37:24 vnldap02 slapd[20690]: <= bdb_equality_candidates: (uniqueMember) index_param failed (18)
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=40 op=3 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=39 op=3 UNBIND
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=39 fd=22 closed
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 fd=22 ACCEPT from IP=172.28.0.46:33936 (IP=0.0.0.0:389)
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=0 BIND dn="cn=Manager,dc=na" method=128
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=0 BIND dn="cn=Manager,dc=na" mech=SIMPLE ssf=0
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=0 RESULT tag=97 err=0 text=
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)"
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=1 SRCH attr=supportedControl
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=2 SRCH base="ou=Groups,o=ventusnetworks.com,dc=na" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(gidNumber=512))"
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=2 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass
Mar 21 11:37:26 vnldap02 slapd[20690]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Mar 21 11:37:27 vnldap02 slapd[20690]: conn=41 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=41 fd=22 closed
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=40 fd=23 closed
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 fd=22 ACCEPT from IP=172.28.0.46:33937 (IP=0.0.0.0:389)
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=0 BIND dn="cn=Manager,dc=na" method=128
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=0 BIND dn="cn=Manager,dc=na" mech=SIMPLE ssf=0
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=0 RESULT tag=97 err=0 text=
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)"
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=1 SRCH attr=supportedControl
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=2 SRCH base="o=ventusnetworks.com,dc=na" scope=2 deref=0 filter="(&(&(uid=administrator)(objectClass=sambaSamAccount))(objectClass=sambaSamAccount))"
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=2 SRCH attr=uid uidNumber gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange sambaLogonTime sambaLogoffTime sambaKickoffTime cn displayName sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours modifyTimestamp
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=42 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 fd=23 ACCEPT from IP=172.28.0.46:33938 (IP=0.0.0.0:389)
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=0 BIND dn="" method=128
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=0 RESULT tag=97 err=0 text=
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=1 SRCH base="o=ventusnetworks.com,dc=na" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=administrator))"
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=1 SRCH attr=uid userPassword uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=2 SRCH base="o=ventusnetworks.com,dc=na" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=administrator))"
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=3 SRCH base="ou=Groups,o=ventusnetworks.com,dc=na" scope=1 deref=0 filter="(&(objectClass=posixGroup)(|(memberUid=administrator)(uniqueMember=uid=administrator,ou=staff,o=ventusnetworks.com,dc=na)))"
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=3 SRCH attr=gidNumber
Mar 21 11:37:29 vnldap02 slapd[20690]: <= bdb_equality_candidates: (uniqueMember) index_param failed (18)
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=43 op=3 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=42 op=3 UNBIND
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=42 fd=22 closed
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=44 fd=22 ACCEPT from IP=172.28.0.46:33939 (IP=0.0.0.0:389)
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=44 op=0 BIND dn="cn=Manager,dc=na" method=128
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=44 op=0 BIND dn="cn=Manager,dc=na" mech=SIMPLE ssf=0
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=44 op=0 RESULT tag=97 err=0 text=
Mar 21 11:37:31 vnldap02 slapd[20690]: conn=44 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)"
Mar 21 11:37:31 vnldap02 slapd[20690]: conn=44 op=1 SRCH attr=supportedControl
Mar 21 11:37:31 vnldap02 slapd[20690]: conn=44 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar 21 11:37:31 vnldap02 slapd[20690]: conn=44 op=2 SRCH base="ou=Groups,o=ventusnetworks.com,dc=na" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(gidNumber=512))"
Mar 21 11:37:31 vnldap02 slapd[20690]: conn=44 op=2 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass
Mar 21 11:37:31 vnldap02 slapd[20690]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Mar 21 11:37:32 vnldap02 slapd[20690]: conn=44 op=2 SEARCH RESUL