some more logs (sorry, these buggers are big and comparing them is making me cross-eyed)
> -----Original Message----- > From: _Chris McKeever_ > Sent: Thursday, July 10, 2003 1:25 PM > To: _Chris McKeever_; [EMAIL PROTECTED] > Subject: RE: [Samba] Samba/LDAP XP Authentication Weirdness > > > logs below: > > -- Jason Williams Wrote: > > Weird stuff happening eh? > > Just to get a few things out of the way, the user that is > having problems > logging on, they have an account on the PDC? > > ---> all done through ldap, logs show authenticating user > fine (below) > > The machine account will be there since it has already > connected to the > PDC. > > ---> machine account is in the LDAP > > The original user works, but when you create a new user on the XP box > and try and log on, you get errors right? > > ---> I am not creating a new user, just trying to log in (as > I did with the first user that works). I did however try to > add that user to the list of power users and that didnt help either. > > Anything the logs say? > > ---> see comments below > > > > -----Original Message----- > > From: _Chris McKeever_ [mailto:[EMAIL PROTECTED] > > > > > > > Samba 2.2.8a, RH7.3 > > > > I have successfully connected machines running XP to the > > samba controlled > > domain. > > > > There are 3 XP machines, each with only one user designated > > as a power user > > (ie domain\username power user). Each can log into any of the three > > machines without a problem. > > > > Now I am trying to log a different person into any of these > > machines and I > > get the message "System Could Not Log You On". > > > > I can log into any of these machines with the administrator > > or my account > > (neither of which are set up in the local users - other than > > computername\administrator). > > > > Any ideas of what is going on? Did I miss something? I > > thought that with > > domain logins that any user can log into the XP machine as > > long as they are > > set-up correctly via samba, which they are since they can > > access resources > > from windows 98 machines to samba shares. > > > > Thanks > > From the logs it seems like the user is authenticating fine > against ldap/samba: > > problem user: > > [2003/07/10 12:46:59, 3] > rpc_server/srv_netlog_nt.c:_net_sam_logon(605) > SAM Logon (Interactive). Domain:[PRUPREF.COM]. User:[jearhart] > [2003/07/10 12:46:59, 3] smbd/sec_ctx.c:push_sec_ctx(296) > push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 > [2003/07/10 12:46:59, 3] smbd/uid.c:push_conn_ctx(285) > push_conn_ctx(100) : conn_ctx_stack_ndx = 0 > [2003/07/10 12:46:59, 3] smbd/sec_ctx.c:set_sec_ctx(328) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 > [2003/07/10 12:46:59, 5] passdb/pdb_ldap.c:ldap_open_connection(122) > ldap_open_connection: starting... > [2003/07/10 12:46:59, 10] passdb/pdb_ldap.c:ldap_open_connection(148) > Initializing connection to winnetka.prupref.com on port 389 > [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_open_connection(186) > StartTLS issued: using a TLS connection > [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_open_connection(217) > ldap_open_connection: connection opened > [2003/07/10 12:46:59, 0] passdb/pdb_ldap.c:ldap_connect_system(315) > ldap_connect_system: Binding to ldap server as > "cn=root,dc=prupref,dc=com" > [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_connect_system(331) > ldap_connect_system: succesful connection to the LDAP server > [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_search_one_user(343) > ldap_search_one_user: searching > for:[(&(uid=jearhart)(objectclass=sambaAccount))] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [uid] = [jearhart] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:init_sam_from_ldap(576) > Entry found for user: jearhart > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [pwdLastSet] = [1057792387] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [logonTime] = [0] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [logoffTime] = [2147483647] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [kickoffTime] = [2147483647] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [pwdCanChange] = [0] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [pwdMustChange] = [2147483647] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [cn] = [Jeff Earhart] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [homeDrive] = [<does not exist>] > [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(626) > homeDrive fell back to > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [smbHome] = [<does not exist>] > [2003/07/10 12:47:00, 4] lib/substitute.c:automount_server(183) > Home server: prupref-winn > [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(635) > smbHome fell back to \\prupref-winn\jearhart > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [scriptPath] = [<does not exist>] > [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(644) > scriptPath fell back to > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [profilePath] = [<does not exist>] > [2003/07/10 12:47:00, 4] lib/substitute.c:automount_server(183) > Home server: prupref-winn > [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(653) > profilePath fell back to \\prupref-winn\jearhart\profile > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [description] = [<does not exist>] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [userWorkstations] = [<does not exist>] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [rid] = [87124] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [primaryGroupID] = [3005] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [lmPassword] = [B9AD96875] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [ntPassword] = [77A7A] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [acctFlags] = [[UX ]] > [2003/07/10 12:47:00, 3] smbd/sec_ctx.c:pop_sec_ctx(435) > pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 > [2003/07/10 12:47:00, 3] smbd/sec_ctx.c:push_sec_ctx(296) > push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 > [2003/07/10 12:47:00, 3] smbd/uid.c:push_conn_ctx(285) > push_conn_ctx(100) : conn_ctx_stack_ndx = 0 > > ** this is where the strange part is > > 2003/07/10 12:47:00, 10] lib/util_sid.c:split_domain_name(340) > split_domain_name:name 'jearhart' split into domain > :'PRUPREF-WINN' and user :'jearhart' > [2003/07/10 12:47:00, 5] rpc_server/srv_lsa_nt.c:init_lsa_rid2s(160) > init_lsa_rid2s: looking up name jearhart > [2003/07/10 12:47:00, 10] smbd/uid.c:lookup_name(457) > lookup_name: winbind lookup for jearhart failed - trying local > [2003/07/10 12:47:00, 10] smbd/uid.c:lookup_name(486) > lookup_name: (local) jearhart -> SID > S-1-5-21-2263616378-1746176118-2189425910-87124 (type 1) > [2003/07/10 12:47:00, 5] rpc_server/srv_lsa_nt.c:init_lsa_rid2s(164) > init_lsa_rid2s: found > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60) > 000000 lsa_io_r_lookup_names > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0000 ptr_dom_ref: 00000001 > [2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60) > 000004 lsa_io_dom_r_ref > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0004 num_ref_doms_1: 00000001 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > > > Here are logs from the successfull user: > > 2003/07/10 12:42:54, 3] rpc_server/srv_netlog_nt.c:_net_sam_logon(605) > SAM Logon (Interactive). Domain:[PRUPREF.COM]. User:[mbarnes] > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:push_sec_ctx(296) > push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 > [2003/07/10 12:42:54, 3] smbd/uid.c:push_conn_ctx(285) > push_conn_ctx(100) : conn_ctx_stack_ndx = 0 > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:set_sec_ctx(328) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:ldap_open_connection(122) > ldap_open_connection: starting... > [2003/07/10 12:42:54, 10] passdb/pdb_ldap.c:ldap_open_connection(148) > Initializing connection to winnetka.prupref.com on port 389 > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_open_connection(186) > StartTLS issued: using a TLS connection > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_open_connection(217) > ldap_open_connection: connection opened > [2003/07/10 12:42:54, 0] passdb/pdb_ldap.c:ldap_connect_system(315) > ldap_connect_system: Binding to ldap server as > "cn=root,dc=prupref,dc=com" > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_connect_system(331) > ldap_connect_system: succesful connection to the LDAP server > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_search_one_user(343) > ldap_search_one_user: searching > for:[(&(uid=mbarnes)(objectclass=sambaAccount))] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [uid] = [mbarnes] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:init_sam_from_ldap(576) > Entry found for user: mbarnes > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [pwdLastSet] = [1052162872] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [logonTime] = [0] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [logoffTime] = [2147483647] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [kickoffTime] = [2147483647] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [pwdCanChange] = [0] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [pwdMustChange] = [2147483647] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [cn] = [Michael Barnes] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [homeDrive] = [<does not exist>] > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(626) > homeDrive fell back to > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [smbHome] = [<does not exist>] > [2003/07/10 12:42:54, 4] lib/substitute.c:automount_server(183) > Home server: prupref-winn > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(635) > smbHome fell back to \\prupref-winn\mbarnes > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [scriptPath] = [<does not exist>] > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(644) > scriptPath fell back to > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [profilePath] = [<does not exist>] > [2003/07/10 12:42:54, 4] lib/substitute.c:automount_server(183) > Home server: prupref-winn > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(653) > profilePath fell back to \\prupref-winn\mbarnes\profile > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [description] = [<does not exist>] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [userWorkstations] = [<does not exist>] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [rid] = [6722] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [primaryGroupID] = [3005] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [lmPassword] = [3DEC2A3] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [ntPassword] = [A87AD606] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [acctFlags] = [[UX ]] > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:pop_sec_ctx(435) > pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:push_sec_ctx(296) > push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 > [2003/07/10 12:42:54, 3] smbd/uid.c:push_conn_ctx(285) > push_conn_ctx(100) : conn_ctx_stack_ndx = 0 > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:set_sec_ctx(328) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:pop_sec_ctx(435) > pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 > [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(456) > user_in_list: checking user mbarnes in list > [2003/07/10 12:42:54, 3] > rpc_server/srv_util.c:get_domain_user_groups(187) > domain group access 513/7 granted > [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(456) > user_in_list: checking user mbarnes in list root @domain-admins > [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(460) > user_in_list: checking user |mbarnes| against |root| > [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(460) > user_in_list: checking user |mbarnes| against |@domain-admins| > [2003/07/10 12:42:54, 5] lib/username.c:user_in_netgroup_list(298) > Unable to get default yp domain > [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(392) > user_in_unix_group_list: checking user mbarnes in group > domain-admins > [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413) > user_in_unix_group_list: checking user mbarnes against > member jearhart > [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413) > user_in_unix_group_list: checking user mbarnes against > member cfusion > [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413) > user_in_unix_group_list: checking user mbarnes against > member administrator > [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413) > user_in_unix_group_list: checking user mbarnes against > member mfalanga > [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413) > user_in_unix_group_list: checking user mbarnes against > member cgmckeever > [2003/07/10 12:42:54, 4] rpc_server/srv_util.c:make_dom_gids(90) > make_dom_gids: 513/7 > [2003/07/10 12:42:54, 5] rpc_server/srv_util.c:make_dom_gids(149) > group id: 513 attr: 7 > [2003/07/10 12:42:54, 4] rpc_parse/parse_net.c:init_dom_sid2s(813) > init_dom_sid2s: > > ** The part about domain splitting is not there > > > if you need other parts of the logs, please let me know. > > Thanks I notice some discrepecny starting here (which the domain splitting shortyl follows): User that doesnt work: 2003/07/10 12:47:00, 10] lib/util.c:dump_data(1541) [000] 5C 50 49 50 45 5C 00 00 00 05 00 00 03 10 00 00 \PIPE\.. ........ [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) [010] 00 68 00 00 00 02 00 00 00 50 00 00 00 00 00 0E .h...... .P...... [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) [020] 00 00 00 00 00 02 00 00 00 00 00 00 00 94 A6 0D ........ ........ [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) [030] 3F 1A 08 00 00 01 00 00 00 01 00 00 00 10 00 12 ?....... ........ [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) [040] 00 38 83 0C 00 09 00 00 00 00 00 00 00 08 00 00 .8...... ........ [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) [050] 00 6A 00 65 00 61 00 72 00 68 00 61 00 72 00 74 .j.e.a.r .h.a.r.t [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) [060] 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 ........ ........ [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) [070] 00 . [2003/07/10 12:47:00, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 2074) [2003/07/10 12:47:00, 4] smbd/uid.c:change_to_user(119) change_to_user: Skipping user change - already user [2003/07/10 12:47:00, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=104 params=0 setup=2 [2003/07/10 12:47:00, 5] smbd/ipc.c:reply_trans(539) calling named_pipe [2003/07/10 12:47:00, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/07/10 12:47:00, 5] smbd/ipc.c:api_fd_reply(275) api_fd_reply [2003/07/10 12:47:00, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(990) search for pipe pnum=768b [2003/07/10 12:47:00, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993) pipe name lsarpc pnum=768b (pipes_open=2) [2003/07/10 12:47:00, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993) pipe name NETLOGON pnum=7689 (pipes_open=2) [2003/07/10 12:47:00, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "lsarpc" (pnum 768b)api_fd_reply: p:0x82344d0 max_trans_reply: 1024 [2003/07/10 12:47:00, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(752) write_to_pipe: 768b name: lsarpc open: Yes len: 104 [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1541) [000] 05 00 00 03 10 00 00 00 68 00 00 00 02 00 00 00 ........ h....... [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549) [010] 50 00 00 00 00 00 0E 00 00 00 00 00 02 00 00 00 P....... ........ [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549) [020] 00 00 00 00 94 A6 0D 3F 1A 08 00 00 01 00 00 00 .......? ........ [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549) [030] 01 00 00 00 10 00 12 00 38 83 0C 00 09 00 00 00 ........ 8....... [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549) [040] 00 00 00 00 08 00 00 00 6A 00 65 00 61 00 72 00 ........ j.e.a.r. [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549) [050] 68 00 61 00 72 00 74 00 00 00 00 00 00 00 00 00 h.a.r.t. ........ [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549) [060] 02 00 00 00 00 00 00 00 ........ [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762) write_to_pipe: data_left = 104 [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(674) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 104 [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(299) fill_rpc_header: data_to_copy = 104, len_needed_to_complete_hdr = 16, receive_len = 0 [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766) write_to_pipe: data_used = 16 [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762) write_to_pipe: data_left = 88 [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(674) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 88 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_rpc_hdr [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0000 major : 05 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0001 minor : 00 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0002 pkt_type : 00 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0003 flags : 03 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0004 pack_type0: 10 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0005 pack_type1: 00 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0006 pack_type2: 00 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0007 pack_type3: 00 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 frag_len : 0068 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a auth_len : 0000 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 000c call_id : 00000002 [2003/07/10 12:47:00, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(387) unmarshall_rpc_header: using little-endian RPC [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(416) unmarshall_rpc_header: type = 0, flags = 3 [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766) write_to_pipe: data_used = 0 [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762) write_to_pipe: data_left = 88 [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(674) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 88, incoming data = 88 [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(619) process_complete_pdu: processing packet type 0 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_rpc_hdr_req req [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0000 alloc_hint: 00000050 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0004 context_id: 0000 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0006 opnum : 000e [2003/07/10 12:47:00, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 0 [2003/07/10 12:47:00, 3] rpc_server/srv_pipe.c:api_pipe_request(1165) Doing \PIPE\lsarpc [2003/07/10 12:47:00, 4] rpc_server/srv_pipe.c:api_rpcTNP(1190) api_rpcTNP: api_ntlsa_rpc op 0xe - created /tmp/in_api_ntlsa_rpc_14.1.prs [2003/07/10 12:47:00, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197) api_rpcTNP: pipe 30347 rpc command: LSA_LOOKUPNAMES [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 lsa_io_q_lookup_names [2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_pol_hnd [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0000 data1: 00000000 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0004 data2: 00000002 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 data3: 0000 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a data4: 0000 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8s(675) 000c data5: 94 a6 0d 3f 1a 08 00 00 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0014 num_entries : 00000001 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0018 num_entries2 : 00000001 [2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60) 00001c smb_io_unihdr hdr_name [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) 001c uni_str_len: 0010 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) 001e uni_max_len: 0012 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0020 buffer : 000c8338 [2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60) 000024 smb_io_unistr2 dom_name [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0024 uni_max_len: 00000009 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0028 undoc : 00000000 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 002c uni_str_len: 00000008 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:dbg_rw_punival(760) 0030 buffer : j.e.a.r.h.a.r.t. [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0040 num_trans_entries : 00000000 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0044 ptr_trans_sids : 00000000 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0048 lookup_level : 00000002 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 004c mapped_count : 00000000 [2003/07/10 12:47:00, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(160) Found policy hnd[0] [000] 00 00 00 00 02 00 00 00 00 00 00 00 94 A6 0D 3F ........ .......? [2003/07/10 12:47:00, 4] lib/util.c:dump_data(1549) [010] 1A 08 00 00 .... [2003/07/10 12:47:00, 10] lib/util_sid.c:split_domain_name(340) split_domain_name:name 'jearhart' split into domain :'PRUPREF-WINN' and user :'jearhart USer that works: 2003/07/10 12:42:56, 10] lib/util.c:dump_data(1541) [000] 5C 50 49 50 45 5C 00 00 00 05 00 00 03 10 00 00 \PIPE\.. ........ [2003/07/10 12:42:56, 10] lib/util.c:dump_data(1549) [010] 00 2E 00 00 00 02 00 00 00 16 00 00 00 00 00 07 ........ ........ [2003/07/10 12:42:56, 10] lib/util.c:dump_data(1549) [020] 00 00 00 00 00 02 00 00 00 00 00 00 00 A0 A5 0D ........ ........ [2003/07/10 12:42:56, 10] lib/util.c:dump_data(1549) [030] 3F 02 08 00 00 05 00 ?...... [2003/07/10 12:42:56, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 2050) [2003/07/10 12:42:56, 4] smbd/uid.c:change_to_user(119) change_to_user: Skipping user change - already user [2003/07/10 12:42:56, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=46 params=0 setup=2 [2003/07/10 12:42:56, 5] smbd/ipc.c:reply_trans(539) calling named_pipe [2003/07/10 12:42:56, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/07/10 12:42:56, 5] smbd/ipc.c:api_fd_reply(275) api_fd_reply [2003/07/10 12:42:56, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(990) search for pipe pnum=75a2 [2003/07/10 12:42:56, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993) pipe name lsarpc pnum=75a2 (pipes_open=2) [2003/07/10 12:42:56, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993) pipe name NETLOGON pnum=75a0 (pipes_open=2) [2003/07/10 12:42:56, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "lsarpc" (pnum 75a2)api_fd_reply: p:0x82566d0 max_trans_reply: 1024 [2003/07/10 12:42:56, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(752) write_to_pipe: 75a2 name: lsarpc open: Yes len: 46 [2003/07/10 12:42:56, 50] lib/util.c:dump_data(1541) [000] 05 00 00 03 10 00 00 00 2E 00 00 00 02 00 00 00 ........ ........ [2003/07/10 12:42:56, 50] lib/util.c:dump_data(1549) [010] 16 00 00 00 00 00 07 00 00 00 00 00 02 00 00 00 ........ ........ [2003/07/10 12:42:56, 50] lib/util.c:dump_data(1549) [020] 00 00 00 00 A0 A5 0D 3F 02 08 00 00 05 00 .......? ...... [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762) write_to_pipe: data_left = 46 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(674) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 46 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(299) fill_rpc_header: data_to_copy = 46, len_needed_to_complete_hdr = 16, receive_len = 0 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766) write_to_pipe: data_used = 16 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762) write_to_pipe: data_left = 30 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(674) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 30 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_rpc_hdr [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0000 major : 05 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0001 minor : 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0002 pkt_type : 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0003 flags : 03 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0004 pack_type0: 10 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0005 pack_type1: 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0006 pack_type2: 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0007 pack_type3: 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 frag_len : 002e [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a auth_len : 0000 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 000c call_id : 00000002 [2003/07/10 12:42:56, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(387) unmarshall_rpc_header: using little-endian RPC [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(416) unmarshall_rpc_header: type = 0, flags = 3 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766) write_to_pipe: data_used = 0 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762) write_to_pipe: data_left = 30 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(674) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 30, incoming data = 30 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(619) process_complete_pdu: processing packet type 0 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_rpc_hdr_req req [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0000 alloc_hint: 00000016 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0004 context_id: 0000 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0006 opnum : 0007 [2003/07/10 12:42:56, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 0 [2003/07/10 12:42:56, 3] rpc_server/srv_pipe.c:api_pipe_request(1165) Doing \PIPE\lsarpc [2003/07/10 12:42:56, 4] rpc_server/srv_pipe.c:api_rpcTNP(1190) api_rpcTNP: api_ntlsa_rpc op 0x7 - created /tmp/in_api_ntlsa_rpc_7.5.prs [2003/07/10 12:42:56, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197) api_rpcTNP: pipe 30114 rpc command: LSA_QUERYINFOPOLICY [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 lsa_io_q_query [2003/07/10 12:42:56, 6] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_pol_hnd [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0000 data1: 00000000 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0004 data2: 00000002 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 data3: 0000 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a data4: 0000 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8s(675) 000c data5: a0 a5 0d 3f 02 08 00 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0014 info_class: 0005 [2003/07/10 12:42:56, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(160) Found policy hnd[0] [000] 00 00 00 00 02 00 00 00 00 00 00 00 A0 A5 0D 3F ........ .......? [2003/07/10 12:42:56, 4] lib/util.c:dump_data(1549) [010] 02 08 00 00 .... [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 lsa_io_r_query [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0000 undoc_buffer: 22000000 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0004 info_class: 0005 [2003/07/10 12:42:56, 6] rpc_parse/parse_prs.c:prs_debug(60) 000008 lsa_io_dom_query [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 uni_dom_max_len: 0016 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a uni_dom_str_len: 0018 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 000c buffer_dom_name: 00000001 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0010 buffer_dom_sid : 00000001 [2003/07/10 12:42:56, 7] rpc_parse/parse_prs.c:prs_debug(60) 000014 smb_io_unistr2 unistr2 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0014 uni_max_len: 0000000c [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0018 undoc : 00000000 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 001c uni_str_len: 0000000b [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:dbg_rw_punival(760) 0020 buffer : P.R.U.P.R.E.F...C.O.M. [2003/07/10 12:42:56, 7] rpc_parse/parse_prs.c:prs_debug(60) 000038 smb_io_dom_sid2 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0038 num_auths: 00000004 [2003/07/10 12:42:56, 8] rpc_parse/parse_prs.c:prs_debug(60) 00003c smb_io_dom_sid sid [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 003c sid_rev_num: 01 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 003d num_auths : 04 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 003e id_auth[0] : 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 003f id_auth[1] : 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0040 id_auth[2] : 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0041 id_auth[3] : 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0042 id_auth[4] : 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0043 id_auth[5] : 05 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32s(815) 0044 sub_auths : 00000015 86ec0b7a 68148876 827ffcf6 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_ntstatus(617) 0054 status: NT_STATUS_OK [2003/07/10 12:42:56, 0] rpc_parse/parse_prs.c:prs_dump(46) created /tmp/out_api_ntlsa_rpc_7.5.prs [2003/07/10 12:42:56, 5] rpc_server/srv_pipe.c:api_rpcTNP(1235) api_rpcTNP: called api_ntlsa_rpc successfully [2003/07/10 12:42:56, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 512 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766) write_to_pipe: data_used = 30 [2003/07/10 12:42:56, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(799) read_from_pipe: 75a2 name: lsarpc len: 1024 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:read_from_pipe(844) read_from_pipe: lsarpc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 88. [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_rpc_hdr hdr [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0000 major : 05 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0001 minor : 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0002 pkt_type : 02 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0003 flags : 03 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0004 pack_type0: 10 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0005 pack_type1: 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0006 pack_type2: 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0007 pack_type3: 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 frag_len : 0070 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a auth_len : 0000 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 000c call_id : 00000002 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60) 000010 smb_io_rpc_hdr_resp resp [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0010 alloc_hint: 00000058 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0014 context_id: 0000 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0016 cancel_ct : 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0017 reserved : 00 [2003/07/10 12:42:56, 5] smbd/ipc.c:copy_trans_params_and_data(62) copy_trans_params_and_data: params[0..0] data[0..112] [2003/07/10 12:42:56, 5] lib/util.c:show_msg(268) size=168 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 [2003/07/10 12:42:56, 5] lib/util.c:show_msg(276) smb_tid=2 smb_pid=528 smb_uid=101 > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba