Discussion:
Winbind Issues in Samba 3.0.0
(too old to reply)
Clay
2003-12-01 11:03:44 UTC
Permalink
First ...let me thanks Samba Team for your time and effort..Samba is great..



I have an existing Samba 2.28a environment supporting WinNT4 and Win2K
clients..works great

I have two samba servers...One running as a PDC (SambaPDC) and the

other (SambaFS1) using winbind to authentic users from the PDC (no users in
passwd on this machine)



All is working great in the 2.28a environment. On the winbind server, I can
issue getent passwd and receive all my local users followed by the domain
users from SambaPDC. I can issue wbinfo -u and get all the Domain Users.

Everything works...



I am now trying to upgrade to Samba 3.0.0 on both machines SambaPDC and
SambaFS1.



Everything seems to work fine on both machines SambaPDC and SambaFS1 running
winbind.



On the winbind 3.0.0 server (SambaFS1), I can use wbinfo -u to see Domain
Users and getent passwd functions as expected.



Now the problem..



On SambaFS1 now running 3.0.0 with winbind



I issue smbclient -L localhost -U (any domain member name) and get

NT_STATUS_NO_LOGON_SERVERS



If I use just smbclient -L localhost it will authentic fine as anonymous and
list the available shares on SambaFS1....



If needed I can post the smb.conf files from each machine...just didn't want
to make the post any longer...



Please help...this is driving me nuts...I have tried everything possible I
know to do...



Thanks



Clay


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.529 / Virus Database: 324 - Release Date: 10/16/2003
Gerald (Jerry) Carter
2003-12-01 11:03:53 UTC
Permalink
Post by Clay
On SambaFS1 now running 3.0.0 with winbind
I issue smbclient -L localhost -U (any domain member name) and get
NT_STATUS_NO_LOGON_SERVERS
Look at the level 10 debug log from winbindd on the file
server and see why it reported that error.



cheers, jerry
----------------------------------------------------------------------
Hewlett-Packard ------------------------- http://www.hp.com
SAMBA Team ---------------------- http://www.samba.org
GnuPG Key ---- http://www.plainjoe.org/gpg_public.asc
"You can never go home again, Oatman, but I guess you can shop there."
--John Cusack - "Grosse Point Blank" (1997)
Clay
2003-12-01 11:03:57 UTC
Permalink
Jerry,

Hey thanks for the reply....

I am currently using Samba 2.2.8a on a slackware 9 box , both the PDC and
the winbind computer. I have not done any of the pam stuff.

But when I started up the 3.0.0 on each box, attached is part of the winbind
log at level 10, when I attempt to attach to the localhost using users on
the PDC...ie smbclient -L localhost -U ckinney

[2003/10/26 20:16:38, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(263)
[30739]: pam auth crap domain: PDC user: ckinney
[2003/10/26 20:16:38, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(379)
NTLM CRAP authentication for user [PDC]\[ckinney] returned
NT_STATUS_NO_LOGON_SERVERS (PAM: 4)

Any help would be greatly appreciated....

Thanks

Clay
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Post by Clay
On SambaFS1 now running 3.0.0 with winbind
I issue smbclient -L localhost -U (any domain member name) and get
NT_STATUS_NO_LOGON_SERVERS
Look at the level 10 debug log from winbindd on the file
server and see why it reported that error.
cheers, jerry
----------------------------------------------------------------------
Hewlett-Packard ------------------------- http://www.hp.com
SAMBA Team ---------------------- http://www.samba.org
GnuPG Key ---- http://www.plainjoe.org/gpg_public.asc
"You can never go home again, Oatman, but I guess you can shop there."
--John Cusack - "Grosse Point Blank" (1997)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oqv6IR7qMdg1EfYRAp6IAJ9SGxUgUVhknb1/BT3W8cLS1PqRpACffc+2
xKhywTVrx0YXGsk00NPwZu0=
=rifx
-----END PGP SIGNATURE-----
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.532 / Virus Database: 326 - Release Date: 10/27/2003
Gerald (Jerry) Carter
2003-12-01 11:03:57 UTC
Permalink
Clay wrote:
| Jerry,
|
| Hey thanks for the reply....
|
| I am currently using Samba 2.2.8a on a slackware 9 box , both the PDC and
| the winbind computer. I have not done any of the pam stuff.
|
| But when I started up the 3.0.0 on each box, attached is part of the
winbind
| log at level 10, when I attempt to attach to the localhost using users on
| the PDC...ie smbclient -L localhost -U ckinney
|
| [2003/10/26 20:16:38, 3]
nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(263)
| [30739]: pam auth crap domain: PDC user: ckinney
| [2003/10/26 20:16:38, 2]
nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(379)
| NTLM CRAP authentication for user [PDC]\[ckinney] returned
| NT_STATUS_NO_LOGON_SERVERS (PAM: 4)

The failure to find the PDC is earlier in the log.
This snippet doesn't tell us much. Sorry.




cheers, jerry
~ ----------------------------------------------------------------------
~ Hewlett-Packard ------------------------- http://www.hp.com
~ SAMBA Team ---------------------- http://www.samba.org
~ GnuPG Key ---- http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~ --John Cusack - "Grosse Point Blank" (1997)
Gerald (Jerry) Carter
2003-12-01 11:03:57 UTC
Permalink
Clay wrote:
| Jerry,
|
| Hey thanks for the reply....
|
| I am currently using Samba 2.2.8a on a slackware 9 box , both the PDC and
| the winbind computer. I have not done any of the pam stuff.
|
| But when I started up the 3.0.0 on each box, attached is part of the
winbind
| log at level 10, when I attempt to attach to the localhost using users on
| the PDC...ie smbclient -L localhost -U ckinney

Wait...is localhost the domain member or the Samba PDC?

| [2003/10/26 20:16:38, 3]
nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(263)
| [30739]: pam auth crap domain: PDC user: ckinney
| [2003/10/26 20:16:38, 2]
nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(379)
| NTLM CRAP authentication for user [PDC]\[ckinney] returned
| NT_STATUS_NO_LOGON_SERVERS (PAM: 4)

Is PDC the name of your domain?





jerry
Clay
2003-12-01 11:04:03 UTC
Permalink
Jerry,
Post by Gerald (Jerry) Carter
Is PDC the name of your domain?
No sorry...I was trying to simply things with the last post..

The Domain is Matrix with Nemesis as the PDC...sorry for the confusion...
Post by Gerald (Jerry) Carter
The failure to find the PDC is earlier in the log.
This snippet doesn't tell us much. Sorry.
Wait...is localhost the domain member or the Samba PDC?
Localhost is a domain member

Below is the log.winbindd..

One section of the log mentions...
Post by Gerald (Jerry) Carter
Using cleartext machine password....I have encryted enabled...I don't
understand this one....

Thanks for the help

Clay

[2003/11/03 21:02:51, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132)
rpc_check_hdr: rdata->data_size = 96
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr rpc_hdr
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 major : 05
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 minor : 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 pkt_type : 02
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 flags : 03
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0004 pack_type0: 10
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0005 pack_type1: 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0006 pack_type2: 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0007 pack_type3: 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0008 frag_len : 0060
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint16(605)
000a auth_len : 0020
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c call_id : 00000020
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0010 alloc_hint: 00000020
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0014 context_id: 0000
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0016 cancel_ct : 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0017 reserved : 00
[2003/11/03 21:02:51, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478)
rpc_api_pipe: len left: 0 smbtrans read: 96
[2003/11/03 21:02:51, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(210)
rpc_auth_pipe: pkt_type: 2 len: 96 auth_len: 32 NTLMSSP No schannel Yes
sign Yes seal Yes
[2003/11/03 21:02:51, 10] rpc_client/cli_pipe.c:rpc_auth_pipe(217)
rpc_auth_pipe: packet:
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr_auth auth_hdr
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 auth_type : 44
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 auth_level : 06
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 padding : 08
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 reserved : 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0004 auth_context : 00000001
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
000008 smb_io_rpc_auth_netsec_chk schannel_auth_sign
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0008 sig : 77 00 7a 00 ff ff 00 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0010 seq_num: 6f 99 e2 7a be 6e ca ad
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0018 packet_digest: 8f 36 70 06 a5 f1 07 32
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0020 data8: ff ab 0c b1 bc cd b3 14
[2003/11/03 21:02:51, 10] rpc_parse/parse_prs.c:netsec_decode(1547)
SCHANNEL: netsec_decode seq_num=27 data_len=32
[2003/11/03 21:02:51, 6] rpc_client/cli_pipe.c:rpc_api_pipe(520)
rpc_api_pipe: fragment first and last both set
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
000018 net_io_r_sam_logon
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0018 buffer_creds: 00000001
[2003/11/03 21:02:51, 6] rpc_parse/parse_prs.c:prs_debug(81)
00001c smb_io_cred
[2003/11/03 21:02:51, 7] rpc_parse/parse_prs.c:prs_debug(81)
00001c smb_io_chal
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
001c data: 7c 2f 1e 4f b2 fd 74 f7
[2003/11/03 21:02:51, 7] rpc_parse/parse_prs.c:prs_debug(81)
000024 smb_io_utime
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0024 time: 00000000
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0028 switch_value: 0003
[2003/11/03 21:02:51, 6] rpc_parse/parse_prs.c:prs_debug(81)
00002c net_io_user_info3
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
002c ptr_user_info : 00000000
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0030 auth_resp : 00000001
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_ntstatus(664)
0034 status : NT_STATUS_UNSUCCESSFUL
[2003/11/03 21:02:51, 5] libsmb/credentials.c:clnt_deal_with_creds(148)
clnt_deal_with_creds: 148
[2003/11/03 21:02:51, 4] libsmb/credentials.c:cred_create(90)
cred_create
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_create(92)
sess_key : 13F0F3D94148C6C4
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_create(93)
stor_cred: 015F37969F5DC621
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_create(94)
timestamp: 3fa716dc
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_create(95)
timecred : DD75DED59F5DC621
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_create(96)
calc_cred: 7C2F1E4FB2FD74F7
[2003/11/03 21:02:51, 4] libsmb/credentials.c:cred_assert(121)
cred_assert
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_assert(123)
challenge : 7C2F1E4FB2FD74F7
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_assert(124)
calculated: 7C2F1E4FB2FD74F7
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_assert(128)
credentials check ok
[2003/11/03 21:02:51, 5] libsmb/credentials.c:clnt_deal_with_creds(167)
new clnt cred: DD75DED59F5DC621
[2003/11/03 21:02:51, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(379)
NTLM CRAP authentication for user [MATRIX]\[gmckenzie] returned
NT_STATUS_NO_LOGON_SERVERS (PAM: 4)
[2003/11/03 21:02:51, 10] nsswitch/winbindd.c:client_write(502)
client_write: wrote 1300 bytes.
[2003/11/03 21:02:51, 10] nsswitch/winbindd.c:winbind_client_read(455)
client_read: read 0 bytes. Need 1568 more for a full request.
[2003/11/03 21:02:51, 5] nsswitch/winbindd.c:winbind_client_read(462)
read failed on sock 23, pid 5604: EOF
[2003/11/03 21:03:17, 6] nsswitch/winbindd.c:new_connection(340)
accepted socket 21
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:winbind_client_read(455)
client_read: read 1568 bytes. Need 0 more for a full request.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:process_request(305)
process_request: request fn INTERFACE_VERSION
[2003/11/03 21:03:17, 3]
nsswitch/winbindd_misc.c:winbindd_interface_version(231)
[ 5607]: request interface version
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(502)
client_write: wrote 1300 bytes.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:winbind_client_read(455)
client_read: read 1568 bytes. Need 0 more for a full request.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:process_request(305)
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2003/11/03 21:03:17, 3]
nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(267)
[ 5607]: request location of privileged pipe
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(502)
client_write: wrote 1300 bytes.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(547)
client_write: need to write 48 extra data bytes.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(502)
client_write: wrote 48 bytes.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(536)
client_write: client_write: complete response written.
[2003/11/03 21:03:17, 6] nsswitch/winbindd.c:new_connection(340)
accepted socket 23
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:winbind_client_read(455)
client_read: read 0 bytes. Need 1568 more for a full request.
[2003/11/03 21:03:17, 5] nsswitch/winbindd.c:winbind_client_read(462)
read failed on sock 21, pid 5607: EOF
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:winbind_client_read(455)
client_read: read 1568 bytes. Need 0 more for a full request.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:process_request(305)
process_request: request fn PING
[2003/11/03 21:03:17, 3] nsswitch/winbindd_misc.c:winbindd_ping(208)
[ 5607]: ping
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(502)
client_write: wrote 1300 bytes.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:winbind_client_read(455)
client_read: read 1568 bytes. Need 0 more for a full request.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:process_request(305)
process_request: request fn AUTH_CRAP
[2003/11/03 21:03:17, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(263)
[ 5607]: pam auth crap domain: MATRIX user: ckinney
[2003/11/03 21:03:17, 4]
passdb/secrets.c:secrets_fetch_trust_account_password(255)
Using cleartext machine password
[2003/11/03 21:03:17, 4] libsmb/credentials.c:cred_create(90)
cred_create
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(92)
sess_key : 13F0F3D94148C6C4
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(93)
stor_cred: DD75DED59F5DC621
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(94)
timestamp: 3fa716f5
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(95)
timecred : D28C85159F5DC621
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(96)
calc_cred: 7A18583BED617C9B
[2003/11/03 21:03:17, 5] rpc_parse/parse_net.c:init_id_info2(1050)
init_id_info2: 1050
[2003/11/03 21:03:17, 5] rpc_parse/parse_misc.c:init_logon_id(1462)
make_logon_id: 1462
[2003/11/03 21:03:17, 5] rpc_parse/parse_net.c:init_sam_info(1157)
init_sam_info: 1157
[2003/11/03 21:03:17, 5] rpc_parse/parse_misc.c:init_clnt_info2(1377)
make_clnt_info: 1377
Post by Gerald (Jerry) Carter
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
| Jerry,
|
| Hey thanks for the reply....
|
| I am currently using Samba 2.2.8a on a slackware 9 box , both the PDC and
| the winbind computer. I have not done any of the pam stuff.
|
| But when I started up the 3.0.0 on each box, attached is part of the
winbind
| log at level 10, when I attempt to attach to the localhost using users on
| the PDC...ie smbclient -L localhost -U ckinney
Wait...is localhost the domain member or the Samba PDC?
| [2003/10/26 20:16:38, 3]
nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(263)
| [30739]: pam auth crap domain: PDC user: ckinney
| [2003/10/26 20:16:38, 2]
nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(379)
| NTLM CRAP authentication for user [PDC]\[ckinney] returned
| NT_STATUS_NO_LOGON_SERVERS (PAM: 4)
Is PDC the name of your domain?
jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/pnkGIR7qMdg1EfYRAgPJAJ0T7y6/CTyRUmOJZcoNoOOi9Xhc9wCfXXiw
pPB0pioCGJjnGBI3+idBVUg=
=9FRz
-----END PGP SIGNATURE-----
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.532 / Virus Database: 326 - Release Date: 10/27/2003
Clay
2003-12-01 11:04:06 UTC
Permalink
Jerry,
Post by Gerald (Jerry) Carter
Is PDC the name of your domain?
No sorry...I was trying to simply things with the last post..

The Domain is Matrix with Nemesis as the PDC...sorry for the confusion...
Post by Gerald (Jerry) Carter
The failure to find the PDC is earlier in the log.
This snippet doesn't tell us much. Sorry.
Wait...is localhost the domain member or the Samba PDC?
Localhost is a domain member

Below is the log.winbindd..

Thanks for the help

Clay

[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00a8 uni_max_len: 00000006
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00ac undoc : 00000000
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00b0 uni_str_len: 00000006
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
00b4 buffer : M.A.T.R.I.X.
[2003/11/03 21:02:51, 9] rpc_parse/parse_prs.c:prs_debug(81)
0000c0 smb_io_unistr2 uni_user_name
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00c0 uni_max_len: 00000009
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00c4 undoc : 00000000
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00c8 uni_str_len: 00000009
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
00cc buffer : g.m.c.k.e.n.z.i.e.
[2003/11/03 21:02:51, 9] rpc_parse/parse_prs.c:prs_debug(81)
0000de smb_io_unistr2 uni_wksta_name
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00e0 uni_max_len: 0000000a
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00e4 undoc : 00000000
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00e8 uni_str_len: 0000000a
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
00ec buffer : \.\.m.c.k.e.n.z.i.e.
[2003/11/03 21:02:51, 9] rpc_parse/parse_prs.c:prs_debug(81)
000100 smb_io_string2 nt_chal_resp
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0100 str_max_len: 00000018
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0104 undoc : 00000000
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0108 str_str_len: 00000018
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_string2(960)
010c buffer : .{.:^.....+.q.....y..Z.<
[2003/11/03 21:02:51, 9] rpc_parse/parse_prs.c:prs_debug(81)
000124 smb_io_string2 lm_chal_resp
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0124 str_max_len: 00000018
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0128 undoc : 00000000
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
012c str_str_len: 00000018
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_string2(960)
0130 buffer : '...z.^m..H..i}..BDF.. .
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0148 validation_level: 0003
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
000150 smb_io_rpc_hdr_auth hdr_auth
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0150 auth_type : 44
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0151 auth_level : 06
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0152 padding : 06
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0153 reserved : 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0154 auth_context : 00000001
[2003/11/03 21:02:51, 10] rpc_client/cli_pipe.c:rpc_api_pipe_req(1028)
SCHANNEL seq_num=26
[2003/11/03 21:02:51, 10] rpc_parse/parse_prs.c:netsec_encode(1476)
SCHANNEL: netsec_encode seq_num=26 data_len=336
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
000158 smb_io_rpc_auth_netsec_chk
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0158 sig : 77 00 7a 00 ff ff 00 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0160 seq_num: a3 b3 77 08 2e 2c c9 7b
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0168 packet_digest: 49 10 7f d6 57 a1 7f be
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0170 data8: 12 3c bd 7b f7 e5 f4 5c
[2003/11/03 21:02:51, 5] rpc_client/cli_pipe.c:create_rpc_request(844)
create_rpc_request: opnum: 0x2 data_len: 0x190
[2003/11/03 21:02:51, 10] rpc_client/cli_pipe.c:create_rpc_request(861)
create_rpc_request: data_len: 190 auth_len: 20 alloc_hint: 158
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr hdr
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 major : 05
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 minor : 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 pkt_type : 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 flags : 03
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0004 pack_type0: 10
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0005 pack_type1: 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0006 pack_type2: 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0007 pack_type3: 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0008 frag_len : 0190
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint16(605)
000a auth_len : 0020
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c call_id : 00000020
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_req hdr_req
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0010 alloc_hint: 00000158
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0014 context_id: 0000
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0016 opnum : 0002
[2003/11/03 21:02:51, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405)
rpc_api_pipe: fnum:7672
[2003/11/03 21:02:51, 5] lib/util.c:show_msg(456)
[2003/11/03 21:02:51, 5] lib/util.c:show_msg(466)
size=482
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=8
smb_flg2=51201
smb_tid=1
smb_pid=5582
smb_uid=100
smb_mid=23
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 400 (0x190)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 4280 (0x10B8)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 82 (0x52)
smb_vwv[11]= 400 (0x190)
smb_vwv[12]= 82 (0x52)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]=30322 (0x7672)
smb_bcc=415
[2003/11/03 21:02:51, 10] lib/util.c:dump_data(1825)
[000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\....
[010] 00 00 03 10 00 00 00 90 01 20 00 20 00 00 00 58 ........ . . ...X
[020] 01 00 00 00 00 02 00 13 3C BD 7B FD E5 F4 5C 09 ........ <.{...\.
[030] 9C 51 0F 5C D3 72 51 A0 A3 50 A7 1D 8C 28 E9 69 .Q.\.rQ. .P...(.i
[040] D0 20 A2 C0 8E C7 66 BD E9 59 46 3E 0F 6F A6 07 . ....f. .YF>.o..
[050] CC 24 CD C5 05 4A 6C AA 26 D4 BB 73 68 EB 39 6E .$...Jl. &..sh.9n
[060] 95 D2 D2 DE 76 F8 DE 95 68 DF 7B 2E FD CA 25 E3 ....v... h.{...%.
[070] 7E 8D 81 32 43 32 44 8C F5 34 A7 17 8A 4F EC C4 ~..2C2D. .4...O..
[080] 9D 9E 7D 5F 4F 11 1C 5E 24 A4 21 02 87 E7 9D 72 ..}_O..^ $.!....r
[090] 50 17 70 06 CA C8 D6 20 DE 11 AF 97 23 CE 4A EE P.p.... ....#.J.
[0A0] A6 77 80 CF DC 3E D6 36 B0 0B C8 BB 72 15 4D CF .w...>.6 ....r.M.
[0B0] 5A 5B 49 CA 70 49 91 1C 25 D0 31 FC A6 2C D4 35 Z[I.pI.. %.1..,.5
[0C0] 84 28 64 FE 18 27 B5 27 E3 6B 91 04 04 7D 2C 60 .(d..'.' .k...},`
[0D0] 2E FE DA 19 95 BB AC BF 01 31 F6 FB 27 5C 70 13 ........ .1..'\p.
[0E0] 13 22 E9 10 0D F9 02 61 44 4F D8 FD DB 44 4A 2E .".....a DO...DJ.
[0F0] 66 A7 8A B0 CA B3 18 39 1C 40 2A 22 13 72 1B DE f......9 .@*".r..
[100] F1 3D 12 C4 01 2B C9 AC 6F B0 A0 5A E3 F7 FC 4A .=...+.. o..Z...J
[110] 37 57 F9 50 8A 14 99 D2 EF 3B 6F 0C 0E 21 B0 F7 7W.P.... .;o..!..
[120] BC 37 7E 0F 4C AE D5 66 C6 12 55 49 33 3A 64 4F .7~.L..f ..UI3:dO
[130] E4 86 AB 93 33 D6 F5 4D 77 7B 38 CB 61 FE CB D8 ....3..M w{8.a...
[140] 18 23 58 7A 43 42 EA 7B A1 0A 06 78 9F 00 F1 5A .#XzCB.{ ...x...Z
[150] B6 BF 34 DF DF 6C B7 FD ED 83 3A 68 FD 6C 4D 70 ..4..l.. ..:h.lMp
[160] 60 F0 5B E6 F0 7D 96 BF AD 90 64 20 81 BA 85 2F `.[..}.. ..d .../
[170] 1F EC 61 AC 6F F3 A3 44 06 06 00 01 00 00 00 77 ..a.o..D .......w
[180] 00 7A 00 FF FF 00 00 A3 B3 77 08 2E 2C C9 7B 49 .z...... .w..,.{I
[190] 10 7F D6 57 A1 7F BE 12 3C BD 7B F7 E5 F4 5C ...W.... <.{...\
[2003/11/03 21:02:51, 6] lib/util_sock.c:write_socket(407)
write_socket(20,486)
[2003/11/03 21:02:51, 6] lib/util_sock.c:write_socket(410)
write_socket(20,486) wrote 486
[2003/11/03 21:02:51, 10]
lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 152
[2003/11/03 21:02:51, 5] lib/util.c:show_msg(456)
[2003/11/03 21:02:51, 5] lib/util.c:show_msg(466)
size=152
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=5582
smb_uid=100
smb_mid=23
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 96 (0x60)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 96 (0x60)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=97
[2003/11/03 21:02:51, 10] lib/util.c:dump_data(1825)
[000] 00 05 00 02 03 10 00 00 00 60 00 20 00 20 00 00 ........ .`. . ..
[010] 00 20 00 00 00 00 00 00 00 FE AB 0C B1 C0 E2 AD . ...... ........
[020] 5B 87 29 74 6F 76 A9 EE 54 76 8D A8 D2 39 2F 90 [.)tov.. Tv...9/.
[030] 60 39 17 C3 F3 77 FF 86 40 44 06 08 00 01 00 00 `9...w.. @D......
[040] 00 77 00 7A 00 FF FF 00 00 6F 99 E2 7A BE 6E CA .w.z.... .o..z.n.
[050] AD 8F 36 70 06 A5 F1 07 32 FF AB 0C B1 BC CD B3 ..6p.... 2.......
[060] 14 .
[2003/11/03 21:02:51, 5] lib/util.c:show_msg(456)
[2003/11/03 21:02:51, 5] lib/util.c:show_msg(466)
size=152
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=5582
smb_uid=100
smb_mid=23
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 96 (0x60)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 96 (0x60)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=97
[2003/11/03 21:02:51, 10] lib/util.c:dump_data(1825)
[000] 00 05 00 02 03 10 00 00 00 60 00 20 00 20 00 00 ........ .`. . ..
[010] 00 20 00 00 00 00 00 00 00 FE AB 0C B1 C0 E2 AD . ...... ........
[020] 5B 87 29 74 6F 76 A9 EE 54 76 8D A8 D2 39 2F 90 [.)tov.. Tv...9/.
[030] 60 39 17 C3 F3 77 FF 86 40 44 06 08 00 01 00 00 `9...w.. @D......
[040] 00 77 00 7A 00 FF FF 00 00 6F 99 E2 7A BE 6E CA .w.z.... .o..z.n.
[050] AD 8F 36 70 06 A5 F1 07 32 FF AB 0C B1 BC CD B3 ..6p.... 2.......
[060] 14 .
[2003/11/03 21:02:51, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132)
rpc_check_hdr: rdata->data_size = 96
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr rpc_hdr
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 major : 05
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 minor : 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 pkt_type : 02
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 flags : 03
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0004 pack_type0: 10
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0005 pack_type1: 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0006 pack_type2: 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0007 pack_type3: 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0008 frag_len : 0060
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint16(605)
000a auth_len : 0020
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c call_id : 00000020
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0010 alloc_hint: 00000020
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0014 context_id: 0000
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0016 cancel_ct : 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0017 reserved : 00
[2003/11/03 21:02:51, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478)
rpc_api_pipe: len left: 0 smbtrans read: 96
[2003/11/03 21:02:51, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(210)
rpc_auth_pipe: pkt_type: 2 len: 96 auth_len: 32 NTLMSSP No schannel Yes
sign Yes seal Yes
[2003/11/03 21:02:51, 10] rpc_client/cli_pipe.c:rpc_auth_pipe(217)
rpc_auth_pipe: packet:
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr_auth auth_hdr
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 auth_type : 44
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 auth_level : 06
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 padding : 08
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 reserved : 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0004 auth_context : 00000001
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
000008 smb_io_rpc_auth_netsec_chk schannel_auth_sign
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0008 sig : 77 00 7a 00 ff ff 00 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0010 seq_num: 6f 99 e2 7a be 6e ca ad
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0018 packet_digest: 8f 36 70 06 a5 f1 07 32
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0020 data8: ff ab 0c b1 bc cd b3 14
[2003/11/03 21:02:51, 10] rpc_parse/parse_prs.c:netsec_decode(1547)
SCHANNEL: netsec_decode seq_num=27 data_len=32
[2003/11/03 21:02:51, 6] rpc_client/cli_pipe.c:rpc_api_pipe(520)
rpc_api_pipe: fragment first and last both set
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
000018 net_io_r_sam_logon
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0018 buffer_creds: 00000001
[2003/11/03 21:02:51, 6] rpc_parse/parse_prs.c:prs_debug(81)
00001c smb_io_cred
[2003/11/03 21:02:51, 7] rpc_parse/parse_prs.c:prs_debug(81)
00001c smb_io_chal
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
001c data: 7c 2f 1e 4f b2 fd 74 f7
[2003/11/03 21:02:51, 7] rpc_parse/parse_prs.c:prs_debug(81)
000024 smb_io_utime
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0024 time: 00000000
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0028 switch_value: 0003
[2003/11/03 21:02:51, 6] rpc_parse/parse_prs.c:prs_debug(81)
00002c net_io_user_info3
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
002c ptr_user_info : 00000000
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0030 auth_resp : 00000001
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_ntstatus(664)
0034 status : NT_STATUS_UNSUCCESSFUL
[2003/11/03 21:02:51, 5] libsmb/credentials.c:clnt_deal_with_creds(148)
clnt_deal_with_creds: 148
[2003/11/03 21:02:51, 4] libsmb/credentials.c:cred_create(90)
cred_create
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_create(92)
sess_key : 13F0F3D94148C6C4
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_create(93)
stor_cred: 015F37969F5DC621
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_create(94)
timestamp: 3fa716dc
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_create(95)
timecred : DD75DED59F5DC621
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_create(96)
calc_cred: 7C2F1E4FB2FD74F7
[2003/11/03 21:02:51, 4] libsmb/credentials.c:cred_assert(121)
cred_assert
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_assert(123)
challenge : 7C2F1E4FB2FD74F7
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_assert(124)
calculated: 7C2F1E4FB2FD74F7
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_assert(128)
credentials check ok
[2003/11/03 21:02:51, 5] libsmb/credentials.c:clnt_deal_with_creds(167)
new clnt cred: DD75DED59F5DC621
[2003/11/03 21:02:51, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(379)
NTLM CRAP authentication for user [MATRIX]\[gmckenzie] returned
NT_STATUS_NO_LOGON_SERVERS (PAM: 4)
[2003/11/03 21:02:51, 10] nsswitch/winbindd.c:client_write(502)
client_write: wrote 1300 bytes.
[2003/11/03 21:02:51, 10] nsswitch/winbindd.c:winbind_client_read(455)
client_read: read 0 bytes. Need 1568 more for a full request.
[2003/11/03 21:02:51, 5] nsswitch/winbindd.c:winbind_client_read(462)
read failed on sock 23, pid 5604: EOF
[2003/11/03 21:03:17, 6] nsswitch/winbindd.c:new_connection(340)
accepted socket 21
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:winbind_client_read(455)
client_read: read 1568 bytes. Need 0 more for a full request.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:process_request(305)
process_request: request fn INTERFACE_VERSION
[2003/11/03 21:03:17, 3]
nsswitch/winbindd_misc.c:winbindd_interface_version(231)
[ 5607]: request interface version
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(502)
client_write: wrote 1300 bytes.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:winbind_client_read(455)
client_read: read 1568 bytes. Need 0 more for a full request.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:process_request(305)
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2003/11/03 21:03:17, 3]
nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(267)
[ 5607]: request location of privileged pipe
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(502)
client_write: wrote 1300 bytes.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(547)
client_write: need to write 48 extra data bytes.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(502)
client_write: wrote 48 bytes.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(536)
client_write: client_write: complete response written.
[2003/11/03 21:03:17, 6] nsswitch/winbindd.c:new_connection(340)
accepted socket 23
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:winbind_client_read(455)
client_read: read 0 bytes. Need 1568 more for a full request.
[2003/11/03 21:03:17, 5] nsswitch/winbindd.c:winbind_client_read(462)
read failed on sock 21, pid 5607: EOF
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:winbind_client_read(455)
client_read: read 1568 bytes. Need 0 more for a full request.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:process_request(305)
process_request: request fn PING
[2003/11/03 21:03:17, 3] nsswitch/winbindd_misc.c:winbindd_ping(208)
[ 5607]: ping
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(502)
client_write: wrote 1300 bytes.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:winbind_client_read(455)
client_read: read 1568 bytes. Need 0 more for a full request.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:process_request(305)
process_request: request fn AUTH_CRAP
[2003/11/03 21:03:17, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(263)
[ 5607]: pam auth crap domain: MATRIX user: ckinney
[2003/11/03 21:03:17, 4]
passdb/secrets.c:secrets_fetch_trust_account_password(255)
Using cleartext machine password
[2003/11/03 21:03:17, 4] libsmb/credentials.c:cred_create(90)
cred_create
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(92)
sess_key : 13F0F3D94148C6C4
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(93)
stor_cred: DD75DED59F5DC621
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(94)
timestamp: 3fa716f5
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(95)
timecred : D28C85159F5DC621
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(96)
calc_cred: 7A18583BED617C9B
[2003/11/03 21:03:17, 5] rpc_parse/parse_net.c:init_id_info2(1050)
init_id_info2: 1050
[2003/11/03 21:03:17, 5] rpc_parse/parse_misc.c:init_logon_id(1462)
make_logon_id: 1462
[2003/11/03 21:03:17, 5] rpc_parse/parse_net.c:init_sam_info(1157)
init_sam_info: 1157
[2003/11/03 21:03:17, 5] rpc_parse/parse_misc.c:init_clnt_info2(1377)
make_clnt_info: 1377
[2003/11/03 21:03:17, 5] rpc_parse/parse_misc.c:init_clnt_srv(1222)
init_clnt_srv: 1222
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 net_io_q_sam_logon
[2003/11/03 21:03:17, 6] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_sam_info
[2003/11/03 21:03:17, 7] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_clnt_info2
[2003/11/03 21:03:17, 8] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_clnt_srv
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0000 undoc_buffer : 00000001
[2003/11/03 21:03:17, 9] rpc_parse/parse_prs.c:prs_debug(81)
000004 smb_io_unistr2 unistr2
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0004 uni_max_len: 0000000a
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0008 undoc : 00000000
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c uni_str_len: 0000000a
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
0010 buffer : \.\.N.E.M.E.S.I.S...
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0024 undoc_buffer2: 00000001
[2003/11/03 21:03:17, 9] rpc_parse/parse_prs.c:prs_debug(81)
000028 smb_io_unistr2 unistr2
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0028 uni_max_len: 00000007
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
002c undoc : 00000000
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0030 uni_str_len: 00000007
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
0034 buffer : P.E.2.6.0.0...
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0044 ptr_cred: 00000001
[2003/11/03 21:03:17, 8] rpc_parse/parse_prs.c:prs_debug(81)
000048 smb_io_cred
[2003/11/03 21:03:17, 9] rpc_parse/parse_prs.c:prs_debug(81)
000048 smb_io_chal
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0048 data: 7a 18 58 3b ed 61 7c 9b
[2003/11/03 21:03:17, 9] rpc_parse/parse_prs.c:prs_debug(81)
000050 smb_io_utime
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0050 time: 3fa716f5
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0054 ptr_rtn_cred : 00000001
[2003/11/03 21:03:17, 7] rpc_parse/parse_prs.c:prs_debug(81)
000058 smb_io_cred
[2003/11/03 21:03:17, 8] rpc_parse/parse_prs.c:prs_debug(81)
000058 smb_io_chal
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0058 data: 00 00 00 00 00 00 00 00
[2003/11/03 21:03:17, 8] rpc_parse/parse_prs.c:prs_debug(81)
000060 smb_io_utime
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0060 time: 00000000
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0064 logon_level : 0002
[2003/11/03 21:03:17, 7] rpc_parse/parse_prs.c:prs_debug(81)
000066 smb_io_sam_info logon_info
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0066 switch_value : 0002
[2003/11/03 21:03:17, 8] rpc_parse/parse_prs.c:prs_debug(81)
000068 net_io_id_info2
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0068 ptr_id_info2: 00000001
[2003/11/03 21:03:17, 9] rpc_parse/parse_prs.c:prs_debug(81)
00006c smb_io_unihdr unihdr
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
006c uni_str_len: 000c
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
006e uni_max_len: 000c
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0070 buffer : 00000001
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0074 param_ctrl: 00000000
[2003/11/03 21:03:17, 9] rpc_parse/parse_prs.c:prs_debug(81)
000078 smb_io_logon_id
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0078 low : 0000dead
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
007c high: 0000beef
[2003/11/03 21:03:17, 9] rpc_parse/parse_prs.c:prs_debug(81)
000080 smb_io_unihdr unihdr
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0080 uni_str_len: 000e
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0082 uni_max_len: 000e
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0084 buffer : 00000001
[2003/11/03 21:03:17, 9] rpc_parse/parse_prs.c:prs_debug(81)
000088 smb_io_unihdr unihdr
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0088 uni_str_len: 0010
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
008a uni_max_len: 0010
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
008c buffer : 00000001
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0090 lm_chal: 22 04 89 6b 38 99 ce f5
[2003/11/03 21:03:17, 9] rpc_parse/parse_prs.c:prs_debug(81)
000098 smb_io_strhdr hdr_nt_chal_resp
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0098 str_str_len: 0018
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
009a str_max_len: 0018
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
009c buffer : 00000001
[2003/11/03 21:03:17, 9] rpc_parse/parse_prs.c:prs_debug(81)
0000a0 smb_io_strhdr hdr_lm_chal_resp
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
00a0 str_str_len: 0018
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
00a2 str_max_len: 0018
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00a4 buffer : 00000001
[2003/11/03 21:03:17, 9] rpc_parse/parse_prs.c:prs_debug(81)
0000a8 smb_io_unistr2 uni_domain_name
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00a8 uni_max_len: 00000006
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00ac undoc : 00000000
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00b0 uni_str_len: 00000006
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
00b4 buffer : M.A.T.R.I.X.
[2003/11/03 21:03:17, 9] rpc_parse/parse_prs.c:prs_debug(81)
0000c0 smb_io_unistr2 uni_user_name
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00c0 uni_max_len: 00000007
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00c4 undoc : 00000000
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00c8 uni_str_len: 00000007
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
00cc buffer : c.k.i.n.n.e.y.
[2003/11/03 21:03:17, 9] rpc_parse/parse_prs.c:prs_debug(81)
0000da smb_io_unistr2 uni_wksta_name
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00dc uni_max_len: 00000008
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00e0 undoc : 00000000
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00e4 uni_str_len: 00000008
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
00e8 buffer : \.\.P.E.2.6.0.0.
[2003/11/03 21:03:17, 9] rpc_parse/parse_prs.c:prs_debug(81)
0000f8 smb_io_string2 nt_chal_resp
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00f8 str_max_len: 00000018
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
00fc undoc : 00000000
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0100 str_str_len: 00000018
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_string2(960)
0104 buffer : dJP.....Y....p..2...R.-w
[2003/11/03 21:03:17, 9] rpc_parse/parse_prs.c:prs_debug(81)
00011c smb_io_string2 lm_chal_resp
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
011c str_max_len: 00000018
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0120 undoc : 00000000
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0124 str_str_len: 00000018
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_string2(960)
0128 buffer : .V.....jl..:.b.......3`.
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0140 validation_level: 0003
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_debug(81)
000148 smb_io_rpc_hdr_auth hdr_auth
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0148 auth_type : 44
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0149 auth_level : 06
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
014a padding : 06
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
014b reserved : 00
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
014c auth_context : 00000001
[2003/11/03 21:03:17, 10] rpc_client/cli_pipe.c:rpc_api_pipe_req(1028)
SCHANNEL seq_num=28
[2003/11/03 21:03:17, 10] rpc_parse/parse_prs.c:netsec_encode(1476)
SCHANNEL: netsec_encode seq_num=28 data_len=328
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_debug(81)
000150 smb_io_rpc_auth_netsec_chk
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0150 sig : 77 00 7a 00 ff ff 00 00
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0158 seq_num: e4 79 01 c4 e2 72 5f e9
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0160 packet_digest: 8a fa c7 a1 6d ad a9 a8
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0168 data8: 5d 3f 84 16 55 36 b4 df
[2003/11/03 21:03:17, 5] rpc_client/cli_pipe.c:create_rpc_request(844)
create_rpc_request: opnum: 0x2 data_len: 0x188
[2003/11/03 21:03:17, 10] rpc_client/cli_pipe.c:create_rpc_request(861)
create_rpc_request: data_len: 188 auth_len: 20 alloc_hint: 150
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr hdr
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 major : 05
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 minor : 00
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 pkt_type : 00
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 flags : 03
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0004 pack_type0: 10
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0005 pack_type1: 00
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0006 pack_type2: 00
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0007 pack_type3: 00
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0008 frag_len : 0188
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
000a auth_len : 0020
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c call_id : 00000021
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_req hdr_req
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0010 alloc_hint: 00000150
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0014 context_id: 0000
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0016 opnum : 0002
[2003/11/03 21:03:17, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405)
rpc_api_pipe: fnum:7672
[2003/11/03 21:03:17, 5] lib/util.c:show_msg(456)
[2003/11/03 21:03:17, 5] lib/util.c:show_msg(466)
size=474
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=8
smb_flg2=51201
smb_tid=1
smb_pid=5582
smb_uid=100
smb_mid=24
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 392 (0x188)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 4280 (0x10B8)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 82 (0x52)
smb_vwv[11]= 392 (0x188)
smb_vwv[12]= 82 (0x52)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]=30322 (0x7672)
smb_bcc=407
[2003/11/03 21:03:17, 10] lib/util.c:dump_data(1825)
[000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\....
[010] 00 00 03 10 00 00 00 88 01 20 00 21 00 00 00 50 ........ . .!...P
[020] 01 00 00 00 00 02 00 5C 3F 84 16 5F 36 B4 DF CC .......\ ?.._6...
[030] 90 11 69 66 AB 24 4E 81 30 20 C5 88 A8 84 F4 7B ..if.$N. 0 .....{
[040] 12 F5 63 2E B9 79 51 F8 46 3C A0 12 5D 82 02 18 ..c..yQ. F<..]...
[050] 9A EE 5C 5A 78 AA 00 D1 7B 1E 22 85 A9 C3 A6 A5 ..\Zx... {.".....
[060] 83 F1 76 C2 20 92 B9 EC 32 58 FB FE 91 5D FC E1 ..v. ... 2X...]..
[070] D2 E2 B5 27 68 E6 AB 39 6D 39 94 DB EC E8 38 BD ...'h..9 m9....8.
[080] 13 07 DD 04 D4 B0 12 CA D1 3A 08 6B BF BF B3 E0 ........ .:.k....
[090] DA 11 FF 46 5D 5D 4E 6A E8 7E 96 36 0A AE 67 5D ...F]]Nj .~.6..g]
[0A0] E2 FA A8 9C 4A 7F B5 A2 ED 57 EB B7 D2 D0 E5 A0 ....J... .W......
[0B0] 65 52 CA BA 16 38 6C 58 F3 21 99 67 E6 CF 64 58 eR...8lX .!.g..dX
[0C0] 60 3D 6D 4E 77 F1 C1 FD AF B4 DF D2 3B 15 4A 18 `=mNw... ....;.J.
[0D0] AC 4F F6 1E AE 21 A6 AE 0D B9 0D 9A 40 9A 64 8C .O...!.. ***@.d.
[0E0] 1E 07 43 B1 D1 1D C9 31 6C 0B C6 59 52 5B 65 B1 ..C....1 l..YR[e.
[0F0] 46 BF 8F 91 65 36 E6 12 FE 54 29 D8 CF 2B CC EC F...e6.. .T)..+..
[100] 35 45 17 D3 11 7A BC F8 CD EA 2E 74 D6 84 29 D3 5E...z.. ...t..).
[110] 2F 0C 1E 0A 47 FA 63 4D 3F BF E3 90 C4 14 F9 31 /...G.cM ?......1
[120] 17 22 26 7A 9F 61 35 93 BD B3 24 02 47 A9 56 FF ."&z.a5. ..$.G.V.
[130] FC 33 66 D7 CB 34 21 23 A1 EB 39 8E 98 CB 75 08 .3f..4!# ..9...u.
[140] 50 1B 9E ED 6F 3D 18 BD 47 59 B8 FF 50 CE 7F A8 P...o=.. GY..P...
[150] 6C 29 8F 75 A9 4E 8B 0A 14 03 37 D1 EB B9 42 24 l).u.N.. ..7...B$
[160] 5A CB 5C 82 DC 6B 12 5E 04 91 93 3A EB 96 98 44 Z.\..k.^ ...:...D
[170] 06 06 00 01 00 00 00 77 00 7A 00 FF FF 00 00 E4 .......w .z......
[180] 79 01 C4 E2 72 5F E9 8A FA C7 A1 6D AD A9 A8 5D y...r_.. ...m...]
[190] 3F 84 16 55 36 B4 DF ?..U6..
[2003/11/03 21:03:17, 6] lib/util_sock.c:write_socket(407)
write_socket(20,478)
[2003/11/03 21:03:17, 6] lib/util_sock.c:write_socket(410)
write_socket(20,478) wrote 478
[2003/11/03 21:03:17, 10]
lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 152
[2003/11/03 21:03:17, 5] lib/util.c:show_msg(456)
[2003/11/03 21:03:17, 5] lib/util.c:show_msg(466)
size=152
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=5582
smb_uid=100
smb_mid=24
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 96 (0x60)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 96 (0x60)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=97
[2003/11/03 21:03:17, 10] lib/util.c:dump_data(1825)
[000] 00 05 00 02 03 10 00 00 00 60 00 20 00 21 00 00 ........ .`. .!..
[010] 00 20 00 00 00 00 00 00 00 2C EE FC A5 F4 67 43 . ...... .,....gC
[020] AE DF 66 81 9D 94 2C 79 E7 C7 15 97 F9 73 14 94 ..f...,y .....s..
[030] 77 C8 2B DC F0 20 14 CC 7D 44 06 08 00 01 00 00 w.+.. .. }D......
[040] 00 77 00 7A 00 FF FF 00 00 18 74 5C BD D3 7B EF .w.z.... ..t\..{.
[050] B3 23 94 B3 CC 8A E2 AA B9 2D EE FC A5 2C 74 82 .#...... .-...,t.
[060] 07 .
[2003/11/03 21:03:17, 5] lib/util.c:show_msg(456)
[2003/11/03 21:03:17, 5] lib/util.c:show_msg(466)
size=152
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=5582
smb_uid=100
smb_mid=24
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 96 (0x60)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 96 (0x60)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=97
[2003/11/03 21:03:17, 10] lib/util.c:dump_data(1825)
[000] 00 05 00 02 03 10 00 00 00 60 00 20 00 21 00 00 ........ .`. .!..
[010] 00 20 00 00 00 00 00 00 00 2C EE FC A5 F4 67 43 . ...... .,....gC
[020] AE DF 66 81 9D 94 2C 79 E7 C7 15 97 F9 73 14 94 ..f...,y .....s..
[030] 77 C8 2B DC F0 20 14 CC 7D 44 06 08 00 01 00 00 w.+.. .. }D......
[040] 00 77 00 7A 00 FF FF 00 00 18 74 5C BD D3 7B EF .w.z.... ..t\..{.
[050] B3 23 94 B3 CC 8A E2 AA B9 2D EE FC A5 2C 74 82 .#...... .-...,t.
[060] 07 .
[2003/11/03 21:03:17, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132)
rpc_check_hdr: rdata->data_size = 96
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr rpc_hdr
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 major : 05
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 minor : 00
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 pkt_type : 02
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 flags : 03
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0004 pack_type0: 10
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0005 pack_type1: 00
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0006 pack_type2: 00
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0007 pack_type3: 00
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0008 frag_len : 0060
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
000a auth_len : 0020
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c call_id : 00000021
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0010 alloc_hint: 00000020
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0014 context_id: 0000
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0016 cancel_ct : 00
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0017 reserved : 00
[2003/11/03 21:03:17, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478)
rpc_api_pipe: len left: 0 smbtrans read: 96
[2003/11/03 21:03:17, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(210)
rpc_auth_pipe: pkt_type: 2 len: 96 auth_len: 32 NTLMSSP No schannel Yes
sign Yes seal Yes
[2003/11/03 21:03:17, 10] rpc_client/cli_pipe.c:rpc_auth_pipe(217)
rpc_auth_pipe: packet:
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr_auth auth_hdr
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 auth_type : 44
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 auth_level : 06
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 padding : 08
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 reserved : 00
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0004 auth_context : 00000001
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_debug(81)
000008 smb_io_rpc_auth_netsec_chk schannel_auth_sign
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0008 sig : 77 00 7a 00 ff ff 00 00
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0010 seq_num: 18 74 5c bd d3 7b ef b3
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0018 packet_digest: 23 94 b3 cc 8a e2 aa b9
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0020 data8: 2d ee fc a5 2c 74 82 07
[2003/11/03 21:03:17, 10] rpc_parse/parse_prs.c:netsec_decode(1547)
SCHANNEL: netsec_decode seq_num=29 data_len=32
[2003/11/03 21:03:17, 6] rpc_client/cli_pipe.c:rpc_api_pipe(520)
rpc_api_pipe: fragment first and last both set
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_debug(81)
000018 net_io_r_sam_logon
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0018 buffer_creds: 00000001
[2003/11/03 21:03:17, 6] rpc_parse/parse_prs.c:prs_debug(81)
00001c smb_io_cred
[2003/11/03 21:03:17, 7] rpc_parse/parse_prs.c:prs_debug(81)
00001c smb_io_chal
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
001c data: d8 13 c1 a9 0a c3 cc 31
[2003/11/03 21:03:17, 7] rpc_parse/parse_prs.c:prs_debug(81)
000024 smb_io_utime
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0024 time: 00000000
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0028 switch_value: 0003
[2003/11/03 21:03:17, 6] rpc_parse/parse_prs.c:prs_debug(81)
00002c net_io_user_info3
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
002c ptr_user_info : 00000000
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0030 auth_resp : 00000001
[2003/11/03 21:03:17, 5] rpc_parse/parse_prs.c:prs_ntstatus(664)
0034 status : NT_STATUS_UNSUCCESSFUL
[2003/11/03 21:03:17, 5] libsmb/credentials.c:clnt_deal_with_creds(148)
clnt_deal_with_creds: 148
[2003/11/03 21:03:17, 4] libsmb/credentials.c:cred_create(90)
cred_create
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(92)
sess_key : 13F0F3D94148C6C4
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(93)
stor_cred: DD75DED59F5DC621
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(94)
timestamp: 3fa716f6
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(95)
timecred : D38C85159F5DC621
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(96)
calc_cred: D813C1A90AC3CC31
[2003/11/03 21:03:17, 4] libsmb/credentials.c:cred_assert(121)
cred_assert
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_assert(123)
challenge : D813C1A90AC3CC31
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_assert(124)
calculated: D813C1A90AC3CC31
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_assert(128)
credentials check ok
[2003/11/03 21:03:17, 5] libsmb/credentials.c:clnt_deal_with_creds(167)
new clnt cred: D38C85159F5DC621
[2003/11/03 21:03:17, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(379)
NTLM CRAP authentication for user [MATRIX]\[ckinney] returned
NT_STATUS_NO_LOGON_SERVERS (PAM: 4)
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(502)
client_write: wrote 1300 bytes.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:winbind_client_read(455)
client_read: read 0 bytes. Need 1568 more for a full request.
[2003/11/03 21:03:17, 5] nsswitch/winbindd.c:winbind_client_read(462)
read failed on sock 23, pid 5607: EOF
[2003/11/03 21:04:03, 6] nsswitch/winbindd.c:new_connection(340)
accepted socket 21
[2003/11/03 21:04:03, 10] nsswitch/winbindd.c:winbind_client_read(455)
client_read: read 1568 bytes. Need 0 more for a full request.
[2003/11/03 21:04:03, 10] nsswitch/winbindd.c:process_request(305)
process_request: request fn INTERFACE_VERSION
[2003/11/03 21:04:03, 3]
nsswitch/winbindd_misc.c:winbindd_interface_version(231)
[ 5611]: request interface version
[2003/11/03 21:04:03, 10] nsswitch/winbindd.c:client_write(502)
client_write: wrote 1300 bytes.
[2003/11/03 21:04:03, 10] nsswitch/winbindd.c:winbind_client_read(455)
client_read: read 1568 bytes. Need 0 more for a full request.
[2003/11/03 21:04:03, 10] nsswitch/winbindd.c:process_request(305)
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2003/11/03 21:04:03, 3]
nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(267)
[ 5611]: request location of privileged pipe
[2003/11/03 21:04:03, 10] nsswitch/winbindd.c:client_write(502)
client_write: wrote 1300 bytes.
[2003/11/03 21:04:03, 10] nsswitch/winbindd.c:client_write(547)
client_write: need to write 48 extra data bytes.
[2003/11/03 21:04:03, 10] nsswitch/winbindd.c:client_write(502)
client_write: wrote 48 bytes.
[2003/11/03 21:04:03, 10] nsswitch/winbindd.c:client_write(536)
client_write: client_write: complete response written.
[2003/11/03 21:04:03, 6] nsswitch/winbindd.c:new_connection(340)
accepted socket 23
[2003/11/03 21:04:03, 10] nsswitch/winbindd.c:winbind_client_read(455)
client_read: read 0 bytes. Need 1568 more for a full request.
[2003/11/03 21:04:03, 5] nsswitch/winbindd.c:winbind_client_read(462)
read failed on sock 21, pid 5611: EOF
[2003/11/03 21:04:03, 10] nsswitch/winbindd.c:winbind_client_read(455)
client_read: read 1568 bytes. Need 0 more for a full request.
[2003/11/03 21:04:03, 10] nsswitch/winbindd.c:process_request(305)
process_request: request fn LIST_USERS
[2003/11/03 21:04:03, 3] nsswitch/winbindd_user.c:winbindd_list_users(585)
[ 5611]: list users
[2003/11/03 21:04:03, 10]
nsswitch/winbindd_cache.c:refresh_sequence_number(342)
refresh_sequence_number: MATRIX time ok
[2003/11/03 21:04:03, 10]
nsswitch/winbindd_cache.c:refresh_sequence_number(367)
refresh_sequence_number: MATRIX seq number is now 1067914804
[2003/11/03 21:04:03, 10] nsswitch/winbindd_cache.c:centry_expired(391)
centry_expired: Key UL/MATRIX for domain MATRIX is good.
[2003/11/03 21:04:03, 10] nsswitch/winbindd_cache.c:wcache_fetch(470)
wcache_fetch: returning entry UL/MATRIX for domain MATRIX
[2003/11/03 21:04:03, 10] nsswitch/winbindd_cache.c:query_user_list(680)
query_user_list: [Cached] - cached list for domain MATRIX status Success
[2003/11/03 21:04:03, 10] nsswitch/winbindd.c:client_write(502)
client_write: wrote 1300 bytes.
[2003/11/03 21:04:03, 10] nsswitch/winbindd.c:client_write(547)
client_write: need to write 384 extra data bytes.
[2003/11/03 21:04:03, 10] nsswitch/winbindd.c:client_write(502)
client_write: wrote 384 bytes.
[2003/11/03 21:04:03, 10] nsswitch/winbindd.c:client_write(536)
client_write: client_write: complete response written.
[2003/11/03 21:04:03, 10] nsswitch/winbindd.c:winbind_client_read(455)
client_read: read 0 bytes. Need 1568 more for a full request.
[2003/11/03 21:04:03, 5] nsswitch/winbindd.c:winbind_client_read(462)
read failed on sock 23, pid 5611: EOF
Post by Gerald (Jerry) Carter
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
| Jerry,
|
| Hey thanks for the reply....
|
| I am currently using Samba 2.2.8a on a slackware 9 box , both the PDC and
| the winbind computer. I have not done any of the pam stuff.
|
| But when I started up the 3.0.0 on each box, attached is part of the
winbind
| log at level 10, when I attempt to attach to the localhost using users on
| the PDC...ie smbclient -L localhost -U ckinney
Wait...is localhost the domain member or the Samba PDC?
| [2003/10/26 20:16:38, 3]
nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(263)
| [30739]: pam auth crap domain: PDC user: ckinney
| [2003/10/26 20:16:38, 2]
nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(379)
| NTLM CRAP authentication for user [PDC]\[ckinney] returned
| NT_STATUS_NO_LOGON_SERVERS (PAM: 4)
Is PDC the name of your domain?
jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/pnkGIR7qMdg1EfYRAgPJAJ0T7y6/CTyRUmOJZcoNoOOi9Xhc9wCfXXiw
pPB0pioCGJjnGBI3+idBVUg=
=9FRz
-----END PGP SIGNATURE-----
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.532 / Virus Database: 326 - Release Date: 10/27/2003
Continue reading on narkive:
Loading...