[2007/02/14 12:53:30, 0] smbd/server.c:main(847) smbd version 3.0.24-1.fc5 started. Copyright Andrew Tridgell and the Samba Team 1992-2006 [2007/02/14 12:53:30, 5] lib/debug.c:debug_dump_status(391) INFO: Current debug levels: all: True/10 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 locking: False/0 msdfs: False/0 dmapi: False/0 doing parameter max log size = 10240 doing parameter password server = SAMBA doing parameter passdb backend = ldapsam:ldap://ldap.intern.rk-klosterneuburg.at/ doing parameter os level = 40 doing parameter wins server = 192.168.60.3 doing parameter dns proxy = no doing parameter ldap suffix = dc=rk-klbg,dc=at doing parameter ldap user suffix = ou=Users doing parameter ldap group suffix = ou=Groups doing parameter ldap machine suffix = ou=Computers doing parameter ldap idmap suffix = ou=Idmap doing parameter ldap admin dn = cn=Manager,dc=rk-klbg,dc=at doing parameter ldap ssl = no doing parameter ldap passwd sync = yes doing parameter ldap delete dn = no doing parameter admin users = smbadmin doing parameter enable privileges = yes doing parameter idmap uid = 16777216-33554431 doing parameter idmap gid = 16777216-33554431 doing parameter idmap backend = ldap:ldap://samba.intern.rk-klosterneuburg.at/ doing parameter winbind trusted domains only = Yes doing parameter unix charset = ISO-8859-15 [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(105) Attempting to register new charset UCS-2LE [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(113) Registered charset UCS-2LE [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(105) Attempting to register new charset UTF-16LE [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(113) Registered charset UTF-16LE [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(105) Attempting to register new charset UCS-2BE [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(113) Registered charset UCS-2BE [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(105) Attempting to register new charset UTF-16BE [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(113) Registered charset UTF-16BE [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(105) Attempting to register new charset UTF8 [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(113) Registered charset UTF8 [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(105) Attempting to register new charset UTF-8 [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(113) Registered charset UTF-8 [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(105) Attempting to register new charset ASCII [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(113) Registered charset ASCII [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(105) Attempting to register new charset 646 [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(113) Registered charset 646 [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(105) Attempting to register new charset ISO-8859-1 [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(113) Registered charset ISO-8859-1 [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(105) Attempting to register new charset UCS2-HEX [2007/02/14 12:53:30, 5] lib/iconv.c:smb_register_charset(113) Registered charset UCS2-HEX [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2007/02/14 12:53:30, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE doing parameter display charset = ISO-8859-15 doing parameter dos charset = 850 doing parameter deadtime = 15 [2007/02/14 12:53:31, 2] param/loadparm.c:do_section(3713) Processing section "[homes]" [2007/02/14 12:53:31, 8] param/loadparm.c:add_a_service(2498) add_a_service: Creating snum = 0 for homes [2007/02/14 12:53:31, 10] param/loadparm.c:hash_a_service(2535) hash_a_service: creating tdb servicehash [2007/02/14 12:53:31, 10] param/loadparm.c:hash_a_service(2545) hash_a_service: hashing index 0 for service name homes doing parameter comment = Home Directories doing parameter browseable = no doing parameter writable = yes [2007/02/14 12:53:31, 2] param/loadparm.c:do_section(3713) Processing section "[printers]" [2007/02/14 12:53:31, 8] param/loadparm.c:add_a_service(2498) add_a_service: Creating snum = 1 for printers [2007/02/14 12:53:31, 10] param/loadparm.c:hash_a_service(2545) hash_a_service: hashing index 1 for service name printers doing parameter comment = All Printers doing parameter path = /usr/spool/samba doing parameter browseable = no doing parameter guest ok = no doing parameter writable = no doing parameter printable = yes [2007/02/14 12:53:31, 2] param/loadparm.c:do_section(3713) Processing section "[home]" [2007/02/14 12:53:31, 8] param/loadparm.c:add_a_service(2498) add_a_service: Creating snum = 2 for home [2007/02/14 12:53:31, 10] param/loadparm.c:hash_a_service(2545) hash_a_service: hashing index 2 for service name home doing parameter comment = User homes doing parameter path = /home doing parameter public = no doing parameter writeable = yes doing parameter printable = no [2007/02/14 12:53:31, 2] param/loadparm.c:do_section(3713) Processing section "[data]" [2007/02/14 12:53:31, 8] param/loadparm.c:add_a_service(2498) add_a_service: Creating snum = 3 for data [2007/02/14 12:53:31, 10] param/loadparm.c:hash_a_service(2545) hash_a_service: hashing index 3 for service name data doing parameter comment = Data doing parameter path = /home/samba/data doing parameter public = no doing parameter writeable = yes doing parameter printable = no [2007/02/14 12:53:31, 4] param/loadparm.c:lp_load(4985) pm_process() returned Yes [2007/02/14 12:53:31, 8] param/loadparm.c:add_a_service(2498) add_a_service: Creating snum = 4 for IPC$ [2007/02/14 12:53:31, 10] param/loadparm.c:hash_a_service(2545) hash_a_service: hashing index 4 for service name IPC$ [2007/02/14 12:53:31, 3] param/loadparm.c:lp_add_ipc(2632) adding IPC service [2007/02/14 12:53:31, 10] param/loadparm.c:set_server_role(4230) set_server_role: role = ROLE_DOMAIN_MEMBER [2007/02/14 12:53:31, 3] printing/pcap.c:pcap_cache_reload(117) reloading printcap cache [2007/02/14 12:53:31, 5] printing/print_cups.c:cups_cache_reload(71) reloading cups printcap cache [2007/02/14 12:53:31, 10] printing/print_cups.c:cups_server(51) cups server left to default localhost [2007/02/14 12:53:31, 3] printing/pcap.c:pcap_cache_reload(223) reload status: ok [2007/02/14 12:53:31, 3] printing/pcap.c:pcap_cache_reload(117) reloading printcap cache [2007/02/14 12:53:31, 5] printing/print_cups.c:cups_cache_reload(71) reloading cups printcap cache [2007/02/14 12:53:31, 10] printing/print_cups.c:cups_server(51) cups server left to default localhost [2007/02/14 12:53:31, 3] printing/pcap.c:pcap_cache_reload(223) reload status: ok [2007/02/14 12:53:31, 6] param/loadparm.c:lp_file_list_changed(3001) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Feb 14 12:53:18 2007 [2007/02/14 12:53:31, 2] lib/interface.c:add_interface(81) added interface ip=192.168.60.4 bcast=192.168.60.255 nmask=255.255.255.0 [2007/02/14 12:53:31, 5] lib/util.c:init_names(308) Netbios name list:- my_netbios_names[0]="MONSTER" [2007/02/14 12:53:31, 3] smbd/server.c:main(877) loaded services [2007/02/14 12:53:31, 3] smbd/server.c:main(892) Becoming a daemon. [2007/02/14 12:53:31, 8] lib/util.c:fcntl_lock(1981) fcntl_lock fd=6 op=13 offset=0 count=1 type=1 [2007/02/14 12:53:31, 8] lib/util.c:fcntl_lock(2000) fcntl_lock: Lock call successful [2007/02/14 12:53:31, 2] lib/tallocmsg.c:register_msg_pool_usage(61) Registered MSG_REQ_POOL_USAGE [2007/02/14 12:53:31, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED [2007/02/14 12:53:31, 5] passdb/pdb_interface.c:smb_register_passdb(105) Attempting to register passdb backend ldapsam [2007/02/14 12:53:31, 5] passdb/pdb_interface.c:smb_register_passdb(118) Successfully added passdb backend 'ldapsam' [2007/02/14 12:53:31, 5] passdb/pdb_interface.c:smb_register_passdb(105) Attempting to register passdb backend ldapsam_compat [2007/02/14 12:53:31, 5] passdb/pdb_interface.c:smb_register_passdb(118) Successfully added passdb backend 'ldapsam_compat' [2007/02/14 12:53:31, 5] passdb/pdb_interface.c:smb_register_passdb(105) Attempting to register passdb backend NDS_ldapsam [2007/02/14 12:53:31, 5] passdb/pdb_interface.c:smb_register_passdb(118) Successfully added passdb backend 'NDS_ldapsam' [2007/02/14 12:53:31, 5] passdb/pdb_interface.c:smb_register_passdb(105) Attempting to register passdb backend NDS_ldapsam_compat [2007/02/14 12:53:31, 5] passdb/pdb_interface.c:smb_register_passdb(118) Successfully added passdb backend 'NDS_ldapsam_compat' [2007/02/14 12:53:31, 5] passdb/pdb_interface.c:smb_register_passdb(105) Attempting to register passdb backend smbpasswd [2007/02/14 12:53:31, 5] passdb/pdb_interface.c:smb_register_passdb(118) Successfully added passdb backend 'smbpasswd' [2007/02/14 12:53:31, 5] passdb/pdb_interface.c:smb_register_passdb(105) Attempting to register passdb backend tdbsam [2007/02/14 12:53:31, 5] passdb/pdb_interface.c:smb_register_passdb(118) Successfully added passdb backend 'tdbsam' [2007/02/14 12:53:31, 5] passdb/pdb_interface.c:make_pdb_method_name(158) Attempting to find an passdb backend to match ldapsam:ldap://ldap.intern.rk-klosterneuburg.at/ (ldapsam) [2007/02/14 12:53:31, 5] passdb/pdb_interface.c:make_pdb_method_name(179) Found pdb backend ldapsam [2007/02/14 12:53:31, 2] lib/smbldap_util.c:smbldap_search_domain_info(219) smbldap_search_domain_info: Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=MONSTER))] [2007/02/14 12:53:31, 5] lib/smbldap.c:smbldap_search_ext(1179) smbldap_search_ext: base => [dc=rk-klbg,dc=at], filter => [(&(objectClass=sambaDomain)(sambaDomainName=MONSTER))], scope => [2] [2007/02/14 12:53:31, 5] lib/smbldap.c:smbldap_close(1080) The connection to the LDAP server was closed [2007/02/14 12:53:31, 10] lib/smbldap.c:smb_ldap_setup_conn(632) smb_ldap_setup_connection: ldap://ldap.intern.rk-klosterneuburg.at/ [2007/02/14 12:53:31, 2] lib/smbldap.c:smbldap_open_connection(788) smbldap_open_connection: connection opened [2007/02/14 12:53:31, 10] lib/smbldap.c:smbldap_connect_system(947) ldap_connect_system: Binding to ldap server ldap://ldap.intern.rk-klosterneuburg.at/ as "cn=Manager,dc=rk-klbg,dc=at" [2007/02/14 12:53:31, 3] lib/smbldap.c:smbldap_connect_system(992) ldap_connect_system: succesful connection to the LDAP server ldap_connect_system: LDAP server does support paged results [2007/02/14 12:53:31, 4] lib/smbldap.c:smbldap_open(1060) The LDAP server is succesfully connected [2007/02/14 12:53:31, 5] passdb/pdb_interface.c:make_pdb_method_name(190) pdb backend ldapsam:ldap://ldap.intern.rk-klosterneuburg.at/ has a valid init [2007/02/14 12:53:31, 5] lib/gencache.c:gencache_init(61) Opening cache file at /var/cache/samba/gencache.tdb [2007/02/14 12:53:31, 5] libsmb/namecache.c:namecache_enable(58) namecache_enable: enabling netbios namecache, timeout 660 seconds [2007/02/14 12:53:31, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Print] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print] with subkey [Printers] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] with subkey [NULL] [2007/02/14 12:53:31, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Ports] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] with subkey [NULL] [2007/02/14 12:53:31, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\Print] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [Print] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Print] with subkey [NULL] [2007/02/14 12:53:31, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [LanmanServer] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer] with subkey [Shares] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] with subkey [NULL] [2007/02/14 12:53:31, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [Eventlog] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] with subkey [NULL] [2007/02/14 12:53:31, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Perflib] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] with subkey [NULL] [2007/02/14 12:53:31, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Perflib] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] with subkey [009] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009] with subkey [NULL] [2007/02/14 12:53:31, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [Print] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Print] with subkey [Monitors] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors] with subkey [NULL] [2007/02/14 12:53:31, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [ProductOptions] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] with subkey [NULL] [2007/02/14 12:53:31, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [Terminal Server] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server] with subkey [DefaultUserConfiguration] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration] with subkey [NULL] [2007/02/14 12:53:31, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [TcpIp] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp] with subkey [Parameters] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters] with subkey [NULL] [2007/02/14 12:53:31, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [Netlogon] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon] with subkey [Parameters] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] with subkey [NULL] [2007/02/14 12:53:31, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKU] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKU] with subkey [NULL] [2007/02/14 12:53:31, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKCR] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKCR] with subkey [NULL] [2007/02/14 12:53:31, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKPD] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKPD] with subkey [NULL] [2007/02/14 12:53:31, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKPT] [2007/02/14 12:53:31, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKPT] with subkey [NULL] [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_fetch_values(563) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2007/02/14 12:53:31, 8] registry/reg_db.c:regdb_unpack_values(513) specific: [Samba Printer Port], len: 2 [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_fetch_values(563) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2007/02/14 12:53:31, 8] registry/reg_db.c:regdb_unpack_values(513) specific: [DefaultSpoolDirectory], len: 70 [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_fetch_values(563) regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2007/02/14 12:53:31, 8] registry/reg_db.c:regdb_unpack_values(513) specific: [DisplayName], len: 20 [2007/02/14 12:53:31, 8] registry/reg_db.c:regdb_unpack_values(513) specific: [ErrorControl], len: 4 [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_fetch_values(563) regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2007/02/14 12:53:31, 8] registry/reg_db.c:regdb_unpack_values(513) specific: [DisplayName], len: 20 [2007/02/14 12:53:31, 8] registry/reg_db.c:regdb_unpack_values(513) specific: [ErrorControl], len: 4 [2007/02/14 12:53:31, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Control/Print] [2007/02/14 12:53:31, 8] lib/adt_tree.c:pathtree_add(201) pathtree_add: Enter [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_add(268) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/Print] to tree [2007/02/14 12:53:31, 8] lib/adt_tree.c:pathtree_add(270) pathtree_add: Exit [2007/02/14 12:53:31, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] [2007/02/14 12:53:31, 8] lib/adt_tree.c:pathtree_add(201) pathtree_add: Enter [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_add(268) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] to tree [2007/02/14 12:53:31, 8] lib/adt_tree.c:pathtree_add(270) pathtree_add: Exit [2007/02/14 12:53:31, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] [2007/02/14 12:53:31, 8] lib/adt_tree.c:pathtree_add(201) pathtree_add: Enter [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_add(268) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] to tree [2007/02/14 12:53:31, 8] lib/adt_tree.c:pathtree_add(270) pathtree_add: Exit [2007/02/14 12:53:31, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] [2007/02/14 12:53:31, 8] lib/adt_tree.c:pathtree_add(201) pathtree_add: Enter [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_add(268) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] to tree [2007/02/14 12:53:31, 8] lib/adt_tree.c:pathtree_add(270) pathtree_add: Exit [2007/02/14 12:53:31, 10] passdb/lookup_sid.c:uid_to_sid(1084) uid_to_sid: winbindd 0 -> S-1-5-21-181998944-1107627502-2274996074-1000 [2007/02/14 12:53:31, 10] passdb/lookup_sid.c:uid_to_sid(1105) uid_to_sid: local 0 -> S-1-5-21-181998944-1107627502-2274996074-1000 [2007/02/14 12:53:31, 5] lib/smbldap.c:smbldap_search_ext(1179) smbldap_search_ext: base => [ou=Groups,dc=rk-klbg,dc=at], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=0))], scope => [2] [2007/02/14 12:53:31, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140) init_group_from_ldap: Entry found for group: 0 [2007/02/14 12:53:31, 10] lib/smbldap.c:smbldap_get_single_attribute(276) smbldap_get_single_attribute: [description] = [] [2007/02/14 12:53:31, 10] passdb/lookup_sid.c:gid_to_sid(1149) gid_to_sid: local 0 -> S-1-5-21-181998944-1107627502-2274996074-1001 [2007/02/14 12:53:31, 3] passdb/lookup_sid.c:store_gid_sid_cache(1059) store_gid_sid_cache: gid 0 in cache -> S-1-5-21-181998944-1107627502-2274996074-1001 [2007/02/14 12:53:31, 5] lib/smbldap.c:smbldap_search_ext(1179) smbldap_search_ext: base => [ou=Groups,dc=rk-klbg,dc=at], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))], scope => [2] [2007/02/14 12:53:31, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140) init_group_from_ldap: Entry found for group: 804 [2007/02/14 12:53:31, 10] passdb/lookup_sid.c:sid_to_gid(1324) sid_to_gid: S-1-5-32-544 -> 804 [2007/02/14 12:53:31, 3] passdb/lookup_sid.c:store_gid_sid_cache(1059) store_gid_sid_cache: gid 804 in cache -> S-1-5-32-544 [2007/02/14 12:53:31, 5] lib/smbldap.c:smbldap_search_ext(1179) smbldap_search_ext: base => [ou=Groups,dc=rk-klbg,dc=at], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))], scope => [2] [2007/02/14 12:53:31, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140) init_group_from_ldap: Entry found for group: 100 [2007/02/14 12:53:31, 10] passdb/lookup_sid.c:sid_to_gid(1324) sid_to_gid: S-1-5-32-545 -> 100 [2007/02/14 12:53:31, 3] passdb/lookup_sid.c:store_gid_sid_cache(1059) store_gid_sid_cache: gid 100 in cache -> S-1-5-32-545 [2007/02/14 12:53:31, 5] lib/smbldap.c:smbldap_search_ext(1179) smbldap_search_ext: base => [ou=Groups,dc=rk-klbg,dc=at], filter => [(&(|(objectclass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=S-1-5-21-181998944-1107627502-2274996074-1000)(sambaSIDList=S-1-5-32-544)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-11)))], scope => [2] [2007/02/14 12:53:31, 5] lib/smbldap.c:smbldap_search_ext(1179) smbldap_search_ext: base => [ou=Groups,dc=rk-klbg,dc=at], filter => [(&(|(objectclass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=S-1-5-21-181998944-1107627502-2274996074-1000)(sambaSIDList=S-1-5-32-544)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-11)))], scope => [2] [2007/02/14 12:53:31, 10] lib/privileges.c:grant_privilege(569) grant_privilege: S-1-1-0 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2007/02/14 12:53:31, 10] lib/privileges.c:grant_privilege(569) grant_privilege: S-1-5-32-548 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2007/02/14 12:53:31, 10] lib/privileges.c:grant_privilege(569) grant_privilege: S-1-5-32-549 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2007/02/14 12:53:31, 10] lib/privileges.c:grant_privilege(569) grant_privilege: S-1-5-32-550 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2007/02/14 12:53:31, 10] lib/privileges.c:grant_privilege(569) grant_privilege: S-1-5-32-551 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2007/02/14 12:53:31, 10] lib/privileges.c:grant_privilege(569) grant_privilege: S-1-5-32-544 original privilege mask: SE_PRIV 0xff0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0xff0 0x0 0x0 0x0 [2007/02/14 12:53:31, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-21-181998944-1107627502-2274996074-1000] [2007/02/14 12:53:31, 5] lib/privileges.c:get_privileges_for_sids(459) get_privileges_for_sids: sid = S-1-5-32-544 Privilege set: SE_PRIV 0xff0 0x0 0x0 0x0 [2007/02/14 12:53:31, 5] lib/privileges.c:get_privileges_for_sids(459) get_privileges_for_sids: sid = S-1-1-0 Privilege set: SE_PRIV 0x0 0x0 0x0 0x0 [2007/02/14 12:53:31, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-2] [2007/02/14 12:53:31, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-11] [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_open(248) regdb_open: incrementing refcount (1) [2007/02/14 12:53:31, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services] [2007/02/14 12:53:31, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_find(413) pathtree_find: Exit [2007/02/14 12:53:31, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2007/02/14 12:53:31, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 5 entries and first sid S-1-5-21-181998944-1107627502-2274996074-1000. [2007/02/14 12:53:31, 3] lib/util_seaccess.c:se_access_check(250) [2007/02/14 12:53:31, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-181998944-1107627502-2274996074-1000 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2007/02/14 12:53:31, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_open(248) regdb_open: incrementing refcount (2) [2007/02/14 12:53:31, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2007/02/14 12:53:31, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_find(413) pathtree_find: Exit [2007/02/14 12:53:31, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2007/02/14 12:53:31, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 5 entries and first sid S-1-5-21-181998944-1107627502-2274996074-1000. [2007/02/14 12:53:31, 3] lib/util_seaccess.c:se_access_check(250) [2007/02/14 12:53:31, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-181998944-1107627502-2274996074-1000 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2007/02/14 12:53:31, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_store_values(593) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (2) [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_open(248) regdb_open: incrementing refcount (2) [2007/02/14 12:53:31, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2007/02/14 12:53:31, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security] [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security] [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_find(413) pathtree_find: Exit [2007/02/14 12:53:31, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2007/02/14 12:53:31, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 5 entries and first sid S-1-5-21-181998944-1107627502-2274996074-1000. [2007/02/14 12:53:31, 3] lib/util_seaccess.c:se_access_check(250) [2007/02/14 12:53:31, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-181998944-1107627502-2274996074-1000 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2007/02/14 12:53:31, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 sec_io_desc sec_desc [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0000 revision : 0001 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0002 type : 8004 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0004 off_owner_sid: 00000000 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0008 off_grp_sid : 00000000 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 000c off_sacl : 00000000 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0010 off_dacl : 00000014 [2007/02/14 12:53:31, 6] rpc_parse/parse_prs.c:prs_debug(84) 000014 sec_io_acl dacl [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0014 revision: 0002 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0018 num_aces : 00000004 [2007/02/14 12:53:31, 7] rpc_parse/parse_prs.c:prs_debug(84) 00001c sec_io_ace ace_list[00]: [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 001c type : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 001d flags: 00 [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000020 sec_io_access info [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0020 mask: 0002018d [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_dom_sid trustee [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0024 sid_rev_num: 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0025 num_auths : 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0026 id_auth[0] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0027 id_auth[1] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0028 id_auth[2] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0029 id_auth[3] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 002a id_auth[4] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 002b id_auth[5] : 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32s(991) 002c sub_auths : 00000000 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 001e size : 0014 [2007/02/14 12:53:31, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 sec_io_ace ace_list[01]: [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0030 type : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0031 flags: 00 [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000034 sec_io_access info [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0034 mask: 000201fd [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000038 smb_io_dom_sid trustee [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0038 sid_rev_num: 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0039 num_auths : 02 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003a id_auth[0] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003b id_auth[1] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003c id_auth[2] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003d id_auth[3] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003e id_auth[4] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003f id_auth[5] : 05 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32s(991) 0040 sub_auths : 00000020 00000223 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0032 size : 0018 [2007/02/14 12:53:31, 7] rpc_parse/parse_prs.c:prs_debug(84) 000048 sec_io_ace ace_list[02]: [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0048 type : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0049 flags: 00 [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 00004c sec_io_access info [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 004c mask: 000f01ff [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_dom_sid trustee [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0050 sid_rev_num: 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0051 num_auths : 02 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0052 id_auth[0] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0053 id_auth[1] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0054 id_auth[2] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0055 id_auth[3] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0056 id_auth[4] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0057 id_auth[5] : 05 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32s(991) 0058 sub_auths : 00000020 00000225 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 004a size : 0018 [2007/02/14 12:53:31, 7] rpc_parse/parse_prs.c:prs_debug(84) 000060 sec_io_ace ace_list[03]: [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0060 type : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0061 flags: 00 [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000064 sec_io_access info [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0064 mask: 000f01ff [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000068 smb_io_dom_sid trustee [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0068 sid_rev_num: 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0069 num_auths : 02 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006a id_auth[0] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006b id_auth[1] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006c id_auth[2] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006d id_auth[3] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006e id_auth[4] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006f id_auth[5] : 05 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32s(991) 0070 sub_auths : 00000020 00000220 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0062 size : 0018 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0016 size : 0064 [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_store_values(593) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (2) [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_open(248) regdb_open: incrementing refcount (2) [2007/02/14 12:53:31, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2007/02/14 12:53:31, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_find(413) pathtree_find: Exit [2007/02/14 12:53:31, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2007/02/14 12:53:31, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 5 entries and first sid S-1-5-21-181998944-1107627502-2274996074-1000. [2007/02/14 12:53:31, 3] lib/util_seaccess.c:se_access_check(250) [2007/02/14 12:53:31, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-181998944-1107627502-2274996074-1000 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2007/02/14 12:53:31, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_store_values(593) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (2) [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_open(248) regdb_open: incrementing refcount (2) [2007/02/14 12:53:31, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2007/02/14 12:53:31, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security] [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security] [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_find(413) pathtree_find: Exit [2007/02/14 12:53:31, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2007/02/14 12:53:31, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 5 entries and first sid S-1-5-21-181998944-1107627502-2274996074-1000. [2007/02/14 12:53:31, 3] lib/util_seaccess.c:se_access_check(250) [2007/02/14 12:53:31, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-181998944-1107627502-2274996074-1000 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2007/02/14 12:53:31, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 sec_io_desc sec_desc [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0000 revision : 0001 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0002 type : 8004 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0004 off_owner_sid: 00000000 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0008 off_grp_sid : 00000000 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 000c off_sacl : 00000000 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0010 off_dacl : 00000014 [2007/02/14 12:53:31, 6] rpc_parse/parse_prs.c:prs_debug(84) 000014 sec_io_acl dacl [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0014 revision: 0002 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0018 num_aces : 00000004 [2007/02/14 12:53:31, 7] rpc_parse/parse_prs.c:prs_debug(84) 00001c sec_io_ace ace_list[00]: [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 001c type : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 001d flags: 00 [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000020 sec_io_access info [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0020 mask: 0002018d [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_dom_sid trustee [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0024 sid_rev_num: 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0025 num_auths : 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0026 id_auth[0] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0027 id_auth[1] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0028 id_auth[2] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0029 id_auth[3] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 002a id_auth[4] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 002b id_auth[5] : 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32s(991) 002c sub_auths : 00000000 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 001e size : 0014 [2007/02/14 12:53:31, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 sec_io_ace ace_list[01]: [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0030 type : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0031 flags: 00 [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000034 sec_io_access info [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0034 mask: 000201fd [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000038 smb_io_dom_sid trustee [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0038 sid_rev_num: 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0039 num_auths : 02 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003a id_auth[0] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003b id_auth[1] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003c id_auth[2] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003d id_auth[3] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003e id_auth[4] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003f id_auth[5] : 05 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32s(991) 0040 sub_auths : 00000020 00000223 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0032 size : 0018 [2007/02/14 12:53:31, 7] rpc_parse/parse_prs.c:prs_debug(84) 000048 sec_io_ace ace_list[02]: [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0048 type : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0049 flags: 00 [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 00004c sec_io_access info [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 004c mask: 000f01ff [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_dom_sid trustee [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0050 sid_rev_num: 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0051 num_auths : 02 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0052 id_auth[0] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0053 id_auth[1] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0054 id_auth[2] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0055 id_auth[3] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0056 id_auth[4] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0057 id_auth[5] : 05 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32s(991) 0058 sub_auths : 00000020 00000225 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 004a size : 0018 [2007/02/14 12:53:31, 7] rpc_parse/parse_prs.c:prs_debug(84) 000060 sec_io_ace ace_list[03]: [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0060 type : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0061 flags: 00 [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000064 sec_io_access info [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0064 mask: 000f01ff [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000068 smb_io_dom_sid trustee [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0068 sid_rev_num: 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0069 num_auths : 02 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006a id_auth[0] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006b id_auth[1] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006c id_auth[2] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006d id_auth[3] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006e id_auth[4] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006f id_auth[5] : 05 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32s(991) 0070 sub_auths : 00000020 00000220 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0062 size : 0018 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0016 size : 0064 [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_store_values(593) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (2) [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_open(248) regdb_open: incrementing refcount (2) [2007/02/14 12:53:31, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2007/02/14 12:53:31, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_find(413) pathtree_find: Exit [2007/02/14 12:53:31, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2007/02/14 12:53:31, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 5 entries and first sid S-1-5-21-181998944-1107627502-2274996074-1000. [2007/02/14 12:53:31, 3] lib/util_seaccess.c:se_access_check(250) [2007/02/14 12:53:31, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-181998944-1107627502-2274996074-1000 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2007/02/14 12:53:31, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_store_values(593) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (2) [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_open(248) regdb_open: incrementing refcount (2) [2007/02/14 12:53:31, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2007/02/14 12:53:31, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_find(413) pathtree_find: Exit [2007/02/14 12:53:31, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2007/02/14 12:53:31, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 5 entries and first sid S-1-5-21-181998944-1107627502-2274996074-1000. [2007/02/14 12:53:31, 3] lib/util_seaccess.c:se_access_check(250) [2007/02/14 12:53:31, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-181998944-1107627502-2274996074-1000 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2007/02/14 12:53:31, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 sec_io_desc sec_desc [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0000 revision : 0001 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0002 type : 8004 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0004 off_owner_sid: 00000000 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0008 off_grp_sid : 00000000 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 000c off_sacl : 00000000 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0010 off_dacl : 00000014 [2007/02/14 12:53:31, 6] rpc_parse/parse_prs.c:prs_debug(84) 000014 sec_io_acl dacl [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0014 revision: 0002 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0018 num_aces : 00000004 [2007/02/14 12:53:31, 7] rpc_parse/parse_prs.c:prs_debug(84) 00001c sec_io_ace ace_list[00]: [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 001c type : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 001d flags: 00 [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000020 sec_io_access info [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0020 mask: 0002018d [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_dom_sid trustee [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0024 sid_rev_num: 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0025 num_auths : 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0026 id_auth[0] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0027 id_auth[1] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0028 id_auth[2] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0029 id_auth[3] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 002a id_auth[4] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 002b id_auth[5] : 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32s(991) 002c sub_auths : 00000000 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 001e size : 0014 [2007/02/14 12:53:31, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 sec_io_ace ace_list[01]: [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0030 type : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0031 flags: 00 [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000034 sec_io_access info [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0034 mask: 000201fd [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000038 smb_io_dom_sid trustee [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0038 sid_rev_num: 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0039 num_auths : 02 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003a id_auth[0] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003b id_auth[1] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003c id_auth[2] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003d id_auth[3] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003e id_auth[4] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003f id_auth[5] : 05 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32s(991) 0040 sub_auths : 00000020 00000223 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0032 size : 0018 [2007/02/14 12:53:31, 7] rpc_parse/parse_prs.c:prs_debug(84) 000048 sec_io_ace ace_list[02]: [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0048 type : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0049 flags: 00 [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 00004c sec_io_access info [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 004c mask: 000f01ff [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_dom_sid trustee [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0050 sid_rev_num: 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0051 num_auths : 02 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0052 id_auth[0] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0053 id_auth[1] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0054 id_auth[2] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0055 id_auth[3] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0056 id_auth[4] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0057 id_auth[5] : 05 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32s(991) 0058 sub_auths : 00000020 00000225 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 004a size : 0018 [2007/02/14 12:53:31, 7] rpc_parse/parse_prs.c:prs_debug(84) 000060 sec_io_ace ace_list[03]: [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0060 type : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0061 flags: 00 [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000064 sec_io_access info [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0064 mask: 000f01ff [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000068 smb_io_dom_sid trustee [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0068 sid_rev_num: 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0069 num_auths : 02 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006a id_auth[0] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006b id_auth[1] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006c id_auth[2] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006d id_auth[3] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006e id_auth[4] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006f id_auth[5] : 05 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32s(991) 0070 sub_auths : 00000020 00000220 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0062 size : 0018 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0016 size : 0064 [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_store_values(593) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (2) [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_open(248) regdb_open: incrementing refcount (2) [2007/02/14 12:53:31, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2007/02/14 12:53:31, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_find(413) pathtree_find: Exit [2007/02/14 12:53:31, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2007/02/14 12:53:31, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 5 entries and first sid S-1-5-21-181998944-1107627502-2274996074-1000. [2007/02/14 12:53:31, 3] lib/util_seaccess.c:se_access_check(250) [2007/02/14 12:53:31, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-181998944-1107627502-2274996074-1000 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2007/02/14 12:53:31, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_store_values(593) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (2) [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_open(248) regdb_open: incrementing refcount (2) [2007/02/14 12:53:31, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2007/02/14 12:53:31, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security] [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security] [2007/02/14 12:53:31, 10] lib/adt_tree.c:pathtree_find(413) pathtree_find: Exit [2007/02/14 12:53:31, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2007/02/14 12:53:31, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 5 entries and first sid S-1-5-21-181998944-1107627502-2274996074-1000. [2007/02/14 12:53:31, 3] lib/util_seaccess.c:se_access_check(250) [2007/02/14 12:53:31, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-181998944-1107627502-2274996074-1000 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2007/02/14 12:53:31, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 sec_io_desc sec_desc [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0000 revision : 0001 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0002 type : 8004 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0004 off_owner_sid: 00000000 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0008 off_grp_sid : 00000000 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 000c off_sacl : 00000000 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0010 off_dacl : 00000014 [2007/02/14 12:53:31, 6] rpc_parse/parse_prs.c:prs_debug(84) 000014 sec_io_acl dacl [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0014 revision: 0002 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0018 num_aces : 00000004 [2007/02/14 12:53:31, 7] rpc_parse/parse_prs.c:prs_debug(84) 00001c sec_io_ace ace_list[00]: [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 001c type : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 001d flags: 00 [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000020 sec_io_access info [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0020 mask: 0002018d [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_dom_sid trustee [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0024 sid_rev_num: 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0025 num_auths : 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0026 id_auth[0] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0027 id_auth[1] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0028 id_auth[2] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0029 id_auth[3] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 002a id_auth[4] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 002b id_auth[5] : 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32s(991) 002c sub_auths : 00000000 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 001e size : 0014 [2007/02/14 12:53:31, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 sec_io_ace ace_list[01]: [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0030 type : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0031 flags: 00 [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000034 sec_io_access info [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0034 mask: 000201fd [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000038 smb_io_dom_sid trustee [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0038 sid_rev_num: 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0039 num_auths : 02 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003a id_auth[0] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003b id_auth[1] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003c id_auth[2] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003d id_auth[3] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003e id_auth[4] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 003f id_auth[5] : 05 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32s(991) 0040 sub_auths : 00000020 00000223 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0032 size : 0018 [2007/02/14 12:53:31, 7] rpc_parse/parse_prs.c:prs_debug(84) 000048 sec_io_ace ace_list[02]: [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0048 type : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0049 flags: 00 [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 00004c sec_io_access info [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 004c mask: 000f01ff [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_dom_sid trustee [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0050 sid_rev_num: 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0051 num_auths : 02 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0052 id_auth[0] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0053 id_auth[1] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0054 id_auth[2] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0055 id_auth[3] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0056 id_auth[4] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0057 id_auth[5] : 05 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32s(991) 0058 sub_auths : 00000020 00000225 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 004a size : 0018 [2007/02/14 12:53:31, 7] rpc_parse/parse_prs.c:prs_debug(84) 000060 sec_io_ace ace_list[03]: [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0060 type : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0061 flags: 00 [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000064 sec_io_access info [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32(704) 0064 mask: 000f01ff [2007/02/14 12:53:31, 8] rpc_parse/parse_prs.c:prs_debug(84) 000068 smb_io_dom_sid trustee [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0068 sid_rev_num: 01 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 0069 num_auths : 02 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006a id_auth[0] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006b id_auth[1] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006c id_auth[2] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006d id_auth[3] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006e id_auth[4] : 00 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint8(615) 006f id_auth[5] : 05 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint32s(991) 0070 sub_auths : 00000020 00000220 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0062 size : 0018 [2007/02/14 12:53:31, 5] rpc_parse/parse_prs.c:prs_uint16(675) 0016 size : 0064 [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_store_values(593) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (2) [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (1) [2007/02/14 12:53:31, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (0) [2007/02/14 12:53:31, 10] printing/nt_printing.c:update_c_setprinter(710) update_c_setprinter: c_setprinter = 0 [2007/02/14 12:53:31, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/02/14 12:53:31, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/02/14 12:53:31, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/02/14 12:53:31, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/02/14 12:53:31, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/02/14 12:53:31, 6] passdb/pdb_interface.c:pdb_getsampwsid(320) pdb_getsampwsid: Building guest account [2007/02/14 12:53:31, 10] passdb/pdb_get_set.c:pdb_set_username(534) pdb_set_username: setting username nobody, was [2007/02/14 12:53:31, 10] passdb/pdb_get_set.c:pdb_set_fullname(603) pdb_set_full_name: setting full name Nobody, was [2007/02/14 12:53:31, 10] passdb/pdb_get_set.c:pdb_set_domain(557) pdb_set_domain: setting domain MONSTER, was [2007/02/14 12:53:31, 10] passdb/pdb_get_set.c:pdb_set_user_sid(463) pdb_set_user_sid: setting user sid S-1-5-21-264317539-4085856039-3162983169-501 [2007/02/14 12:53:31, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-264317539-4085856039-3162983169-501 from rid 501 [2007/02/14 12:53:31, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/02/14 12:53:31, 10] lib/util_pw.c:getpwnam_alloc(76) Got nobody from pwnam_cache [2007/02/14 12:53:31, 10] lib/util_pw.c:getpwnam_alloc(76) Got nobody from pwnam_cache [2007/02/14 12:53:31, 10] lib/system_smbd.c:sys_getgrouplist(125) sys_getgrouplist: user [nobody] [2007/02/14 12:53:31, 5] lib/smbldap.c:smbldap_search_ext(1179) smbldap_search_ext: base => [ou=Groups,dc=rk-klbg,dc=at], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=99))], scope => [2] [2007/02/14 12:53:31, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140) init_group_from_ldap: Entry found for group: 99 [2007/02/14 12:53:31, 10] passdb/lookup_sid.c:gid_to_sid(1149) gid_to_sid: local 99 -> S-1-5-32-546 [2007/02/14 12:53:31, 3] passdb/lookup_sid.c:store_gid_sid_cache(1059) store_gid_sid_cache: gid 99 in cache -> S-1-5-32-546 [2007/02/14 12:53:31, 5] auth/auth_util.c:make_server_info_sam(625) make_server_info_sam: made server info for user nobody -> nobody [2007/02/14 12:53:31, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1015) fetch gid from cache 804 -> S-1-5-32-544 [2007/02/14 12:53:31, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1015) fetch gid from cache 100 -> S-1-5-32-545 [2007/02/14 12:53:31, 5] lib/smbldap.c:smbldap_search_ext(1179) smbldap_search_ext: base => [ou=Groups,dc=rk-klbg,dc=at], filter => [(&(|(objectclass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=S-1-5-21-264317539-4085856039-3162983169-501)(sambaSIDList=S-1-5-32-546)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-32-546)(sambaSIDList=S-1-22-2-99)))], scope => [2] [2007/02/14 12:53:31, 5] lib/smbldap.c:smbldap_search_ext(1179) smbldap_search_ext: base => [ou=Groups,dc=rk-klbg,dc=at], filter => [(&(|(objectclass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=S-1-5-21-264317539-4085856039-3162983169-501)(sambaSIDList=S-1-5-32-546)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-32-546)(sambaSIDList=S-1-22-2-99)))], scope => [2] [2007/02/14 12:53:31, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-21-264317539-4085856039-3162983169-501] [2007/02/14 12:53:31, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2007/02/14 12:53:31, 5] lib/privileges.c:get_privileges_for_sids(459) get_privileges_for_sids: sid = S-1-1-0 Privilege set: SE_PRIV 0x0 0x0 0x0 0x0 [2007/02/14 12:53:31, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-2] [2007/02/14 12:53:31, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2007/02/14 12:53:31, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-22-2-99] [2007/02/14 12:53:31, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1015) fetch gid from cache 99 -> S-1-5-32-546 [2007/02/14 12:53:31, 5] lib/smbldap.c:smbldap_search_ext(1179) smbldap_search_ext: base => [ou=Groups,dc=rk-klbg,dc=at], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0))], scope => [2] [2007/02/14 12:53:31, 4] passdb/pdb_ldap.c:ldapsam_getgroup(2217) ldapsam_getgroup: Did not find group [2007/02/14 12:53:31, 10] auth/auth_util.c:create_local_token(1023) Could not convert SID S-1-1-0 to gid, ignoring it [2007/02/14 12:53:31, 5] lib/smbldap.c:smbldap_search_ext(1179) smbldap_search_ext: base => [ou=Groups,dc=rk-klbg,dc=at], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))], scope => [2] [2007/02/14 12:53:31, 4] passdb/pdb_ldap.c:ldapsam_getgroup(2217) ldapsam_getgroup: Did not find group [2007/02/14 12:53:31, 10] auth/auth_util.c:create_local_token(1023) Could not convert SID S-1-5-2 to gid, ignoring it [2007/02/14 12:53:31, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1015) fetch gid from cache 99 -> S-1-5-32-546 [2007/02/14 12:53:31, 10] passdb/lookup_sid.c:sid_to_gid(1324) sid_to_gid: S-1-22-2-99 -> 99 [2007/02/14 12:53:31, 10] auth/auth_util.c:debug_nt_user_token(454) NT user token of user S-1-5-21-264317539-4085856039-3162983169-501 contains 6 SIDs SID[ 0]: S-1-5-21-264317539-4085856039-3162983169-501 SID[ 1]: S-1-5-32-546 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-22-2-99 SE_PRIV 0x0 0x0 0x0 0x0 [2007/02/14 12:53:31, 5] smbd/connection.c:claim_connection(170) claiming 0 [2007/02/14 12:53:31, 3] printing/printing.c:start_background_queue(1386) start_background_queue: Starting background LPQ thread [2007/02/14 12:53:31, 5] printing/printing.c:start_background_queue(1396) start_background_queue: background LPQ thread started [2007/02/14 12:53:31, 5] smbd/connection.c:claim_connection(170) claiming smbd lpq backend 0 [2007/02/14 12:53:31, 5] printing/printing.c:start_background_queue(1407) start_background_queue: background LPQ thread waiting for messages [2007/02/14 12:53:31, 10] lib/util_sock.c:open_socket_in(839) bind succeeded on port 445 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 87380 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 87380 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2007/02/14 12:53:31, 10] lib/util_sock.c:open_socket_in(839) bind succeeded on port 139 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 87380 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 87380 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2007/02/14 12:53:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2007/02/14 12:53:31, 2] smbd/server.c:open_sockets_smbd(384) waiting for a connection