[2018/02/02 08:19:08.401880, 3, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3739(lp_load_ex) lp_load_ex: refreshing parameters [2018/02/02 08:19:08.401910, 5, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1312(free_param_opts) Freeing parametrics: [2018/02/02 08:19:08.401937, 3, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:542(init_globals) Initialising global parameters [2018/02/02 08:19:08.401993, 3, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2668(lp_do_section) Processing section "[global]" doing parameter workgroup = SAMBA doing parameter security = user doing parameter passdb backend = tdbsam doing parameter printing = cups doing parameter printcap name = cups doing parameter load printers = yes doing parameter cups options = raw doing parameter log level = all:100 [2018/02/02 08:19:08.402058, 5, pid=22718, effective(0, 0), real(0, 0)] ../lib/util/debug.c:642(debug_dump_status) INFO: Current debug levels: all: 100 tdb: 0 printdrivers: 0 lanman: 0 smb: 0 rpc_parse: 0 rpc_srv: 0 rpc_cli: 0 passdb: 0 sam: 0 auth: 0 winbind: 0 vfs: 0 idmap: 0 quota: 0 acls: 0 locking: 0 msdfs: 0 dmapi: 0 registry: 0 scavenger: 0 dns: 0 ldb: 0 tevent: 0 doing parameter log file = /home/fujitsu/samba_log [2018/02/02 08:19:08.402129, 2, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[homes]" [2018/02/02 08:19:08.402144, 8, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1428(add_a_service) add_a_service: Creating snum = 0 for homes [2018/02/02 08:19:08.402154, 10, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1469(hash_a_service) hash_a_service: creating servicehash [2018/02/02 08:19:08.402163, 10, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1478(hash_a_service) hash_a_service: hashing index 0 for service name homes doing parameter comment = Home Directories doing parameter valid users = %S, %D%w%S doing parameter browseable = No doing parameter read only = No doing parameter inherit acls = Yes [2018/02/02 08:19:08.402209, 2, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[printers]" [2018/02/02 08:19:08.402224, 8, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1428(add_a_service) add_a_service: Creating snum = 1 for printers [2018/02/02 08:19:08.402233, 10, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1478(hash_a_service) hash_a_service: hashing index 1 for service name printers doing parameter comment = All Printers doing parameter path = /var/tmp doing parameter printable = Yes doing parameter create mask = 0600 doing parameter browseable = No [2018/02/02 08:19:08.402275, 2, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[print$]" [2018/02/02 08:19:08.402290, 8, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1428(add_a_service) add_a_service: Creating snum = 2 for print$ [2018/02/02 08:19:08.402299, 10, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1478(hash_a_service) hash_a_service: hashing index 2 for service name print$ doing parameter comment = Printer Drivers doing parameter path = /var/lib/samba/drivers doing parameter write list = root doing parameter create mask = 0664 doing parameter directory mask = 0775 [2018/02/02 08:19:08.402344, 2, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[project3]" [2018/02/02 08:19:08.402359, 8, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1428(add_a_service) add_a_service: Creating snum = 3 for project3 [2018/02/02 08:19:08.402368, 10, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1478(hash_a_service) hash_a_service: hashing index 3 for service name project3 doing parameter comment = Project 3 doing parameter path = /home/jane doing parameter read only = No doing parameter browseable = Yes doing parameter writable = yes [2018/02/02 08:19:08.402430, 4, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3780(lp_load_ex) pm_process() returned Yes [2018/02/02 08:19:08.402449, 8, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1428(add_a_service) add_a_service: Creating snum = 4 for IPC$ [2018/02/02 08:19:08.402459, 10, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1478(hash_a_service) hash_a_service: hashing index 4 for service name IPC$ [2018/02/02 08:19:08.402469, 3, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1585(lp_add_ipc) adding IPC service [2018/02/02 08:19:08.402488, 6, pid=22718, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Feb 2 08:16:14 2018 [2018/02/02 08:19:08.402743, 2, pid=22718, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) added interface docker0 ip=172.17.0.1 bcast=172.17.255.255 netmask=255.255.0.0 [2018/02/02 08:19:08.402762, 2, pid=22718, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) added interface virbr0 ip=192.168.122.1 bcast=192.168.122.255 netmask=255.255.255.0 [2018/02/02 08:19:08.402781, 2, pid=22718, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) added interface eno1 ip=10.167.133.33 bcast=10.167.133.255 netmask=255.255.255.0 [2018/02/02 08:19:08.402810, 3, pid=22718, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1705(main) loaded services [2018/02/02 08:19:08.402822, 5, pid=22718, effective(0, 0), real(0, 0)] ../source3/lib/util_names.c:152(init_names) Netbios name list:- my_netbios_names[0]="LOCALHOST" [2018/02/02 08:19:08.404212, 5, pid=22718, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 4 - private_data=(nil) [2018/02/02 08:19:08.404231, 5, pid=22718, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 7 - private_data=(nil) [2018/02/02 08:19:08.404270, 1, pid=22718, effective(0, 0), real(0, 0)] ../source3/profile/profile.c:51(set_profile_level) INFO: Profiling turned OFF from pid 22718 [2018/02/02 08:19:08.404282, 3, pid=22718, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1725(main) Standard input is not a socket, assuming -D option [2018/02/02 08:19:08.404290, 3, pid=22718, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1737(main) Becoming a daemon. [2018/02/02 08:19:08.404680, 8, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:390(fcntl_lock) fcntl_lock 13 6 0 1 1 [2018/02/02 08:19:08.404730, 8, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:425(fcntl_lock) fcntl_lock: Lock call successful [2018/02/02 08:19:08.404771, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:19:08.404910, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2018/02/02 08:19:08.404930, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 9323001855107201849 [2018/02/02 08:19:08.404979, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/modules.c:171(do_smb_load_module) Probing module 'tdbsam' [2018/02/02 08:19:08.404995, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/modules.c:185(do_smb_load_module) Probing module 'tdbsam': Trying to load from /usr/lib64/samba/pdb/tdbsam.so [2018/02/02 08:19:08.406893, 2, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/modules.c:196(do_smb_load_module) Module 'tdbsam' loaded [2018/02/02 08:19:08.407100, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/lib/samba/lock/smbXsrv_version_global.tdb [2018/02/02 08:19:08.407128, 10, pid=22720, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/lib/samba/lock/smbXsrv_version_global.tdb 2: 3: [2018/02/02 08:19:08.407148, 10, pid=22720, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 736D62587372765F76657273696F6E5F676C6F62616C00 [2018/02/02 08:19:08.407165, 10, pid=22720, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978b5cc0 [2018/02/02 08:19:08.407284, 10, pid=22720, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 736D62587372765F76657273696F6E5F676C6F62616C00 [2018/02/02 08:19:08.407304, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/lib/samba/lock/smbXsrv_version_global.tdb [2018/02/02 08:19:08.407318, 10, pid=22720, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:19:08.407333, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:250(smbXsrv_version_global_init) smbXsrv_version_global_init [2018/02/02 08:19:08.407346, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:251(smbXsrv_version_global_init) [2018/02/02 08:19:08.407355, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_version_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_version_globalU(case 0) info0 : * info0: struct smbXsrv_version_global0 db_rec : NULL num_nodes : 0x00000001 (1) nodes: ARRAY(1) nodes: struct smbXsrv_version_node0 server_id: struct server_id pid : 0x00000000000058c0 (22720) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x8161f4cab5f8fb39 (-9123742218602349767) min_version : SMBXSRV_VERSION_0 (0) max_version : SMBXSRV_VERSION_0 (0) current_version : SMBXSRV_VERSION_0 (0) [2018/02/02 08:19:08.408365, 3, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_procid.c:54(pid_to_procid) pid_to_procid: messaging_dgm_get_unique failed: No such file or directory [2018/02/02 08:19:08.408494, 10, pid=22721, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:19:08.408715, 10, pid=22721, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2018/02/02 08:19:08.408745, 10, pid=22721, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 15840908762316655837 [2018/02/02 08:19:08.408989, 4, pid=22721, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.409030, 4, pid=22721, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:08.409046, 4, pid=22721, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.409073, 5, pid=22721, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:08.409092, 5, pid=22721, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:08.409093, 10, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:19:08.409178, 10, pid=22721, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 22720 [2018/02/02 08:19:08.409233, 4, pid=22721, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:08.409427, 10, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2018/02/02 08:19:08.409472, 10, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 18064637520744845202 [2018/02/02 08:19:08.409501, 5, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 13 - private_data=0x5578978b7760 [2018/02/02 08:19:08.409527, 5, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 788 - private_data=0x5578978b7760 [2018/02/02 08:19:08.409547, 5, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 773 - private_data=(nil) [2018/02/02 08:19:08.409631, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:580(cleanupd_init) cleanupd_init: Started cleanupd pid=22722 [2018/02/02 08:19:08.409691, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 789 - private_data=0x5578978b7eb0 [2018/02/02 08:19:08.409864, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.409890, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.409909, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 41) -> 4 [2018/02/02 08:19:08.409927, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.409944, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.409962, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.409989, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410007, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410025, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410042, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 8) -> 4 [2018/02/02 08:19:08.410060, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410081, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410100, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410117, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410146, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410163, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 13) -> 4 [2018/02/02 08:19:08.410180, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410196, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410213, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410230, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410246, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410263, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410279, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410296, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410312, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410328, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410344, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410360, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410382, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410401, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 33) -> 4 [2018/02/02 08:19:08.410415, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 29) -> 29 [2018/02/02 08:19:08.410438, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410457, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 104) -> 4 [2018/02/02 08:19:08.410470, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 100) -> 100 [2018/02/02 08:19:08.410489, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410506, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.410520, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 65) -> 40 [2018/02/02 08:19:08.410534, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 25) -> 25 [2018/02/02 08:19:08.410553, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.410570, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.410583, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 65) -> 40 [2018/02/02 08:19:08.410597, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 25) -> 25 [2018/02/02 08:19:08.410617, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2018/02/02 08:19:08.410639, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [HKLM] [2018/02/02 08:19:08.410657, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:115(pathtree_birth_child) pathtree_birth_child: First child of node [NULL]! [HKLM] [2018/02/02 08:19:08.410670, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [SYSTEM] [2018/02/02 08:19:08.410684, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:115(pathtree_birth_child) pathtree_birth_child: First child of node [HKLM]! [SYSTEM] [2018/02/02 08:19:08.410697, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [CurrentControlSet] [2018/02/02 08:19:08.410710, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:115(pathtree_birth_child) pathtree_birth_child: First child of node [SYSTEM]! [CurrentControlSet] [2018/02/02 08:19:08.410723, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Control] [2018/02/02 08:19:08.410736, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:115(pathtree_birth_child) pathtree_birth_child: First child of node [CurrentControlSet]! [Control] [2018/02/02 08:19:08.410749, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Print] [2018/02/02 08:19:08.410763, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:115(pathtree_birth_child) pathtree_birth_child: First child of node [Control]! [Print] [2018/02/02 08:19:08.410775, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Printers] [2018/02/02 08:19:08.410788, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:115(pathtree_birth_child) pathtree_birth_child: First child of node [Print]! [Printers] [2018/02/02 08:19:08.410801, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] to tree [2018/02/02 08:19:08.410815, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2018/02/02 08:19:08.410828, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2018/02/02 08:19:08.410841, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.410854, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.410867, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.410880, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [SOFTWARE] [2018/02/02 08:19:08.410894, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:132(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [SOFTWARE], child -> [SYSTEM] [2018/02/02 08:19:08.410907, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:149(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [0]) [2018/02/02 08:19:08.410919, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Microsoft] [2018/02/02 08:19:08.410932, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:115(pathtree_birth_child) pathtree_birth_child: First child of node [SOFTWARE]! [Microsoft] [2018/02/02 08:19:08.410947, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Windows NT] [2018/02/02 08:19:08.410964, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:115(pathtree_birth_child) pathtree_birth_child: First child of node [Microsoft]! [Windows NT] [2018/02/02 08:19:08.410984, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [CurrentVersion] [2018/02/02 08:19:08.410997, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:115(pathtree_birth_child) pathtree_birth_child: First child of node [Windows NT]! [CurrentVersion] [2018/02/02 08:19:08.411010, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Print] [2018/02/02 08:19:08.411023, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:115(pathtree_birth_child) pathtree_birth_child: First child of node [CurrentVersion]! [Print] [2018/02/02 08:19:08.411036, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Printers] [2018/02/02 08:19:08.411052, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:115(pathtree_birth_child) pathtree_birth_child: First child of node [Print]! [Printers] [2018/02/02 08:19:08.411065, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] to tree [2018/02/02 08:19:08.411078, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2018/02/02 08:19:08.411092, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2018/02/02 08:19:08.411105, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.411117, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.411130, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.411143, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.411156, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2018/02/02 08:19:08.411169, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Microsoft] [2018/02/02 08:19:08.411182, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Microsoft] [2018/02/02 08:19:08.411194, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Windows NT] [2018/02/02 08:19:08.411207, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Windows NT] [2018/02/02 08:19:08.411220, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentVersion] [2018/02/02 08:19:08.411233, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentVersion] [2018/02/02 08:19:08.411246, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Print] [2018/02/02 08:19:08.411259, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Ports] [2018/02/02 08:19:08.411280, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:132(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Ports], child -> [Print] [2018/02/02 08:19:08.411293, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:149(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [0]) [2018/02/02 08:19:08.411306, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] to tree [2018/02/02 08:19:08.411319, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2018/02/02 08:19:08.411332, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2018/02/02 08:19:08.411345, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.411358, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.411370, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.411383, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.411396, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.411408, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.411422, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.411435, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.411447, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Services] [2018/02/02 08:19:08.411461, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:132(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Services], child -> [Control] [2018/02/02 08:19:08.411474, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:139(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2018/02/02 08:19:08.411487, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:149(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2018/02/02 08:19:08.411499, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [LanmanServer] [2018/02/02 08:19:08.411512, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:115(pathtree_birth_child) pathtree_birth_child: First child of node [Services]! [LanmanServer] [2018/02/02 08:19:08.411525, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Shares] [2018/02/02 08:19:08.411539, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:115(pathtree_birth_child) pathtree_birth_child: First child of node [LanmanServer]! [Shares] [2018/02/02 08:19:08.411552, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] to tree [2018/02/02 08:19:08.411565, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2018/02/02 08:19:08.411587, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2018/02/02 08:19:08.411600, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.411613, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.411626, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.411639, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.411651, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2018/02/02 08:19:08.411664, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Microsoft] [2018/02/02 08:19:08.411677, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Samba] [2018/02/02 08:19:08.411690, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:132(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Samba], child -> [Microsoft] [2018/02/02 08:19:08.411703, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:139(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2018/02/02 08:19:08.411716, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:149(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2018/02/02 08:19:08.411729, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [smbconf] [2018/02/02 08:19:08.411742, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:115(pathtree_birth_child) pathtree_birth_child: First child of node [Samba]! [smbconf] [2018/02/02 08:19:08.411756, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Samba\smbconf] to tree [2018/02/02 08:19:08.411769, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2018/02/02 08:19:08.411782, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2018/02/02 08:19:08.411795, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.411807, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.411820, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.411833, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.411846, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.411858, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.411872, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.411884, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.411904, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.411917, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.411930, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2018/02/02 08:19:08.411942, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Netlogon] [2018/02/02 08:19:08.411956, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:132(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Netlogon], child -> [LanmanServer] [2018/02/02 08:19:08.411973, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:139(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2018/02/02 08:19:08.411987, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:149(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2018/02/02 08:19:08.412003, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Parameters] [2018/02/02 08:19:08.412027, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:115(pathtree_birth_child) pathtree_birth_child: First child of node [Netlogon]! [Parameters] [2018/02/02 08:19:08.412049, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] to tree [2018/02/02 08:19:08.412072, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2018/02/02 08:19:08.412086, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2018/02/02 08:19:08.412098, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.412111, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.412124, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.412136, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.412149, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.412162, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.412175, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.412188, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.412201, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.412214, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Control] [2018/02/02 08:19:08.412226, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Print] [2018/02/02 08:19:08.412239, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [ProductOptions] [2018/02/02 08:19:08.412261, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:132(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [ProductOptions], child -> [Print] [2018/02/02 08:19:08.412274, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:139(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2018/02/02 08:19:08.412287, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:149(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2018/02/02 08:19:08.412300, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] to tree [2018/02/02 08:19:08.412312, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2018/02/02 08:19:08.412326, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2018/02/02 08:19:08.412338, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.412351, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.412364, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.412377, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.412389, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.412402, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.412415, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.412428, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.412441, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.412454, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.412466, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2018/02/02 08:19:08.412479, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2018/02/02 08:19:08.412492, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Tcpip] [2018/02/02 08:19:08.412505, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:132(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Tcpip], child -> [Netlogon] [2018/02/02 08:19:08.412518, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:139(pathtree_birth_child) pathtree_birth_child: storing infant in i == [2] [2018/02/02 08:19:08.412531, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:149(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [2]) [2018/02/02 08:19:08.412543, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Parameters] [2018/02/02 08:19:08.412556, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:115(pathtree_birth_child) pathtree_birth_child: First child of node [Tcpip]! [Parameters] [2018/02/02 08:19:08.412576, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] to tree [2018/02/02 08:19:08.412589, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2018/02/02 08:19:08.412602, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2018/02/02 08:19:08.412615, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.412628, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [HKPT] [2018/02/02 08:19:08.412642, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:132(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [HKPT], child -> [HKLM] [2018/02/02 08:19:08.412655, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:139(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2018/02/02 08:19:08.412668, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:149(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2018/02/02 08:19:08.412680, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKPT] to tree [2018/02/02 08:19:08.412693, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2018/02/02 08:19:08.412706, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2018/02/02 08:19:08.412719, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.412732, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.412745, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.412758, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.412771, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.412783, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2018/02/02 08:19:08.412796, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Microsoft] [2018/02/02 08:19:08.412809, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Samba] [2018/02/02 08:19:08.412822, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Microsoft] [2018/02/02 08:19:08.412834, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Windows NT] [2018/02/02 08:19:08.412847, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Windows NT] [2018/02/02 08:19:08.412860, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentVersion] [2018/02/02 08:19:08.412873, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentVersion] [2018/02/02 08:19:08.412892, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] to tree [2018/02/02 08:19:08.412905, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2018/02/02 08:19:08.412918, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2018/02/02 08:19:08.412931, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.412944, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.412956, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.412985, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.413000, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.413020, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2018/02/02 08:19:08.413029, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Microsoft] [2018/02/02 08:19:08.413039, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Samba] [2018/02/02 08:19:08.413048, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Microsoft] [2018/02/02 08:19:08.413057, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Windows NT] [2018/02/02 08:19:08.413066, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Windows NT] [2018/02/02 08:19:08.413076, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentVersion] [2018/02/02 08:19:08.413085, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentVersion] [2018/02/02 08:19:08.413094, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Ports] [2018/02/02 08:19:08.413104, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Perflib] [2018/02/02 08:19:08.413113, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:132(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Perflib], child -> [Print] [2018/02/02 08:19:08.413123, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:132(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Perflib], child -> [Ports] [2018/02/02 08:19:08.413132, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:149(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [0]) [2018/02/02 08:19:08.413142, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] to tree [2018/02/02 08:19:08.413151, 8, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2018/02/02 08:19:08.413161, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/: [HKLM] (NULL) [2018/02/02 08:19:08.413176, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/: [SOFTWARE] (NULL) [2018/02/02 08:19:08.413187, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SOFTWARE/: [Microsoft] (NULL) [2018/02/02 08:19:08.413196, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/: [Windows NT] (NULL) [2018/02/02 08:19:08.413209, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/: [CurrentVersion] (data) [2018/02/02 08:19:08.413219, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/: [Perflib] (data) [2018/02/02 08:19:08.413229, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/: [Ports] (data) [2018/02/02 08:19:08.413239, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/: [Print] (NULL) [2018/02/02 08:19:08.413248, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/: [Printers] (data) [2018/02/02 08:19:08.413258, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SOFTWARE/: [Samba] (NULL) [2018/02/02 08:19:08.413267, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SOFTWARE/Samba/: [smbconf] (data) [2018/02/02 08:19:08.413277, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/: [SYSTEM] (NULL) [2018/02/02 08:19:08.413287, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SYSTEM/: [CurrentControlSet] (NULL) [2018/02/02 08:19:08.413297, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/: [Control] (NULL) [2018/02/02 08:19:08.413306, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Control/: [Print] (NULL) [2018/02/02 08:19:08.413316, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Control/Print/: [Printers] (data) [2018/02/02 08:19:08.413328, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Control/: [ProductOptions] (data) [2018/02/02 08:19:08.413338, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/: [Services] (NULL) [2018/02/02 08:19:08.413348, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/: [LanmanServer] (NULL) [2018/02/02 08:19:08.413358, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/: [Shares] (data) [2018/02/02 08:19:08.413368, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/: [Netlogon] (NULL) [2018/02/02 08:19:08.413377, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/Netlogon/: [Parameters] (data) [2018/02/02 08:19:08.413387, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/: [Tcpip] (NULL) [2018/02/02 08:19:08.413402, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/Tcpip/: [Parameters] (data) [2018/02/02 08:19:08.413414, 20, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:310(pathtree_print_children) ROOT/: [HKPT] (data) [2018/02/02 08:19:08.413475, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2018/02/02 08:19:08.413489, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2018/02/02 08:19:08.413662, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2018/02/02 08:19:08.413684, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user LOCALHOST\nobody [2018/02/02 08:19:08.413695, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is localhost\nobody [2018/02/02 08:19:08.413835, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/username.c:128(Get_Pwnam_internals) Trying _Get_Pwnam(), username as given is LOCALHOST\nobody [2018/02/02 08:19:08.413873, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/username.c:141(Get_Pwnam_internals) Trying _Get_Pwnam(), username as uppercase is LOCALHOST\NOBODY [2018/02/02 08:19:08.413903, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/username.c:153(Get_Pwnam_internals) Checking combinations of 0 uppercase letters in localhost\nobody [2018/02/02 08:19:08.413915, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals didn't find user [LOCALHOST\nobody]! [2018/02/02 08:19:08.413924, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2018/02/02 08:19:08.413934, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2018/02/02 08:19:08.413945, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2018/02/02 08:19:08.413959, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:224(create_local_nt_token_from_info3) Create local NT token for nobody [2018/02/02 08:19:08.413975, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2018/02/02 08:19:08.413986, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2018/02/02 08:19:08.413996, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2018/02/02 08:19:08.414014, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist) sys_getgrouplist: user [nobody] [2018/02/02 08:19:08.414254, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid) gid 99 -> sid S-1-22-2-99 [2018/02/02 08:19:08.414305, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.414320, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:08.414332, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.414342, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:08.414358, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:08.414382, 3, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:547(finalize_local_nt_token) Failed to fetch domain sid for SAMBA [2018/02/02 08:19:08.414394, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:08.414408, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.414418, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:08.414427, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.414437, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:08.414446, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:08.414462, 3, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:579(finalize_local_nt_token) Failed to fetch domain sid for SAMBA [2018/02/02 08:19:08.414473, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:08.414483, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.414492, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:08.414502, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.414511, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:08.414520, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:08.414561, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:08.414594, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1340105488-494795474-4286701950-501] [2018/02/02 08:19:08.414611, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1340105488-494795474-4286701950-514] [2018/02/02 08:19:08.414624, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-22-2-99] [2018/02/02 08:19:08.414636, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-1-0 Privilege set: 0x0 [2018/02/02 08:19:08.414652, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-2] [2018/02/02 08:19:08.414664, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2018/02/02 08:19:08.414682, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1340105488-494795474-4286701950-501]: value=[99:U] [2018/02/02 08:19:08.414700, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1340105488-494795474-4286701950-501]: id=[99], endptr=[:U] [2018/02/02 08:19:08.414787, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1360(sids_to_unixids) wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE [2018/02/02 08:19:08.414801, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.414811, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:08.414821, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.414831, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:08.414840, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:08.414859, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2018/02/02 08:19:08.414870, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2018/02/02 08:19:08.414880, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2018/02/02 08:19:08.414890, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:08.414899, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:08.414944, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.414959, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:08.414974, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-21-1340105488-494795474-4286701950-514 [2018/02/02 08:19:08.414987, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.414997, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:08.415007, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.415016, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:08.415026, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:08.415042, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2018/02/02 08:19:08.415052, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2018/02/02 08:19:08.415062, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2018/02/02 08:19:08.415077, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:08.415087, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:08.415109, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.415122, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:08.415132, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-21-1340105488-494795474-4286701950-514 [2018/02/02 08:19:08.415142, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.415152, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:08.415161, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.415170, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:08.415179, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:08.415195, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:08.415205, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-1-0 [2018/02/02 08:19:08.415215, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.415225, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:08.415234, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.415243, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:08.415252, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:08.415267, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:08.415277, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-1-0 [2018/02/02 08:19:08.415287, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.415297, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:08.415306, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.415315, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:08.415324, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:08.415346, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:08.415357, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-2 [2018/02/02 08:19:08.415368, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.415378, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:08.415387, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.415397, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:08.415406, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:08.415422, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:08.415432, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-2 [2018/02/02 08:19:08.415442, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.415452, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:08.415461, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.415471, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:08.415480, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:08.415500, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:08.415510, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-32-546 [2018/02/02 08:19:08.415521, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.415530, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:08.415540, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.415550, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:08.415559, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:08.415577, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:08.415588, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-32-546 [2018/02/02 08:19:08.415763, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.415777, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:08.415788, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.415798, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:08.415807, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:08.415840, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:08.415966, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2018/02/02 08:19:08.416045, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2018/02/02 08:19:08.416105, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2018/02/02 08:19:08.416115, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2018/02/02 08:19:08.416125, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.416134, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.416144, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.416154, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.416163, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.416180, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 20) -> 4 [2018/02/02 08:19:08.416193, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 20) -> 4 [2018/02/02 08:19:08.416204, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 16) -> 9 [2018/02/02 08:19:08.416219, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 7) -> 7 [2018/02/02 08:19:08.416240, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 01 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.416267, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 result : WERR_OK [2018/02/02 08:19:08.416313, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 result : WERR_OK [2018/02/02 08:19:08.416358, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 keyname: struct winreg_String name_len : 0x0044 (68) name_size : 0x0044 (68) name : * name : 'SYSTEM\CurrentControlSet\Services' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2018/02/02 08:19:08.416476, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 keyname: struct winreg_String name_len : 0x0044 (68) name_size : 0x0044 (68) name : * name : 'SYSTEM\CurrentControlSet\Services' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2018/02/02 08:19:08.416590, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 01 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.416618, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2018/02/02 08:19:08.416628, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2018/02/02 08:19:08.416637, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.416647, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.416656, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.416666, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2018/02/02 08:19:08.416675, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.416685, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.416695, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.416704, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.416713, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.416725, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.416737, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.416747, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 18) -> 18 [2018/02/02 08:19:08.416762, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.416773, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.416782, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.416792, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.416801, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.416811, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2018/02/02 08:19:08.416820, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.416830, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.416839, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.416854, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2018/02/02 08:19:08.416864, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.416874, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.416884, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.416893, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.416910, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.416923, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.416933, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 17) -> 8 [2018/02/02 08:19:08.416945, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 9) -> 9 [2018/02/02 08:19:08.416959, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.416973, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.416984, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.416993, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.417003, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.417012, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services] [2018/02/02 08:19:08.417022, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.417031, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.417041, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.417050, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2018/02/02 08:19:08.417060, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.417070, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.417079, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2018/02/02 08:19:08.417088, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.417098, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.417108, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.417122, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.417132, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.417143, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.417156, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.417167, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 65) -> 13 [2018/02/02 08:19:08.417178, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 52) -> 9 [2018/02/02 08:19:08.417190, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 43) -> 6 [2018/02/02 08:19:08.417201, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 37) -> 9 [2018/02/02 08:19:08.417213, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 28) -> 8 [2018/02/02 08:19:08.417225, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 20) -> 15 [2018/02/02 08:19:08.417238, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 5) -> 5 [2018/02/02 08:19:08.417254, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 02 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.417280, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 result : WERR_OK [2018/02/02 08:19:08.417321, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 result : WERR_OK [2018/02/02 08:19:08.417364, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2018/02/02 08:19:08.417422, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2018/02/02 08:19:08.417483, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 02 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.417511, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.417525, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.417539, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000007 (7) max_subkeylen : * max_subkeylen : 0x0000001c (28) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000000 (0) max_valnamelen : * max_valnamelen : 0x00000002 (2) max_valbufsize : * max_valbufsize : 0x00000000 (0) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2018/02/02 08:19:08.417648, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000007 (7) max_subkeylen : * max_subkeylen : 0x0000001c (28) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000000 (0) max_valnamelen : * max_valnamelen : 0x00000002 (2) max_valbufsize : * max_valbufsize : 0x00000000 (0) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2018/02/02 08:19:08.417755, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 enum_index : 0x00000000 (0) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2018/02/02 08:19:08.417859, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 enum_index : 0x00000000 (0) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2018/02/02 08:19:08.417950, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 02 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.417982, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x001a (26) size : 0x001e (30) name : * name : 'LanmanServer' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2018/02/02 08:19:08.418064, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x001a (26) size : 0x001e (30) name : * name : 'LanmanServer' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2018/02/02 08:19:08.418150, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 enum_index : 0x00000001 (1) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2018/02/02 08:19:08.418245, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 enum_index : 0x00000001 (1) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2018/02/02 08:19:08.418336, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 02 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.418361, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0012 (18) size : 0x001e (30) name : * name : 'Eventlog' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2018/02/02 08:19:08.418440, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0012 (18) size : 0x001e (30) name : * name : 'Eventlog' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2018/02/02 08:19:08.418529, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 enum_index : 0x00000002 (2) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2018/02/02 08:19:08.418623, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 enum_index : 0x00000002 (2) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2018/02/02 08:19:08.418714, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 02 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.418739, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x000c (12) size : 0x001e (30) name : * name : 'Tcpip' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2018/02/02 08:19:08.418824, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x000c (12) size : 0x001e (30) name : * name : 'Tcpip' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2018/02/02 08:19:08.418903, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 enum_index : 0x00000003 (3) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2018/02/02 08:19:08.419003, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 enum_index : 0x00000003 (3) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2018/02/02 08:19:08.419094, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 02 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.419119, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0012 (18) size : 0x001e (30) name : * name : 'Netlogon' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2018/02/02 08:19:08.419203, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0012 (18) size : 0x001e (30) name : * name : 'Netlogon' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2018/02/02 08:19:08.419282, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 enum_index : 0x00000004 (4) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2018/02/02 08:19:08.419376, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 enum_index : 0x00000004 (4) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2018/02/02 08:19:08.419472, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 02 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.419498, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0010 (16) size : 0x001e (30) name : * name : 'Spooler' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2018/02/02 08:19:08.419576, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0010 (16) size : 0x001e (30) name : * name : 'Spooler' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2018/02/02 08:19:08.419655, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 enum_index : 0x00000005 (5) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2018/02/02 08:19:08.419749, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 enum_index : 0x00000005 (5) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2018/02/02 08:19:08.419846, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 02 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.419871, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x001e (30) size : 0x001e (30) name : * name : 'RemoteRegistry' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2018/02/02 08:19:08.419951, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x001e (30) size : 0x001e (30) name : * name : 'RemoteRegistry' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2018/02/02 08:19:08.420036, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 enum_index : 0x00000006 (6) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2018/02/02 08:19:08.420137, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 enum_index : 0x00000006 (6) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2018/02/02 08:19:08.420228, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 02 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.420253, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x000a (10) size : 0x001e (30) name : * name : 'WINS' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2018/02/02 08:19:08.420331, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x000a (10) size : 0x001e (30) name : * name : 'WINS' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2018/02/02 08:19:08.420415, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0054 (84) name_size : 0x0054 (84) name : * name : 'SYSTEM\CurrentControlSet\Services\Spooler' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2018/02/02 08:19:08.420566, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0054 (84) name_size : 0x0054 (84) name : * name : 'SYSTEM\CurrentControlSet\Services\Spooler' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2018/02/02 08:19:08.420705, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 01 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.420731, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.420741, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.420759, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2018/02/02 08:19:08.420769, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2018/02/02 08:19:08.420779, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.420788, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.420798, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.420808, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2018/02/02 08:19:08.420817, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.420826, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.420836, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.420846, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.420855, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.420867, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.420879, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.420889, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 18) -> 18 [2018/02/02 08:19:08.420902, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.420915, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.420925, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.420934, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.420944, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.420953, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.420963, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2018/02/02 08:19:08.420977, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.420986, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.420996, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.421006, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2018/02/02 08:19:08.421020, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.421030, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.421040, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.421049, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.421061, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.421073, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.421083, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 17) -> 8 [2018/02/02 08:19:08.421095, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 9) -> 9 [2018/02/02 08:19:08.421109, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.421122, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.421132, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.421141, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.421151, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.421160, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.421170, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services] [2018/02/02 08:19:08.421179, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.421189, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.421198, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.421208, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2018/02/02 08:19:08.421217, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.421227, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.421237, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2018/02/02 08:19:08.421246, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.421256, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.421272, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.421281, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.421291, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.421303, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.421316, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.421326, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 65) -> 13 [2018/02/02 08:19:08.421338, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 52) -> 9 [2018/02/02 08:19:08.421350, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 43) -> 6 [2018/02/02 08:19:08.421362, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 37) -> 9 [2018/02/02 08:19:08.421374, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 28) -> 8 [2018/02/02 08:19:08.421386, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 20) -> 15 [2018/02/02 08:19:08.421398, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 5) -> 5 [2018/02/02 08:19:08.421414, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2018/02/02 08:19:08.421425, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services\Spooler] [2018/02/02 08:19:08.421434, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.421444, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.421454, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.421463, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services\Spooler] [2018/02/02 08:19:08.421472, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.421482, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.421492, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.421501, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services\Spooler] [2018/02/02 08:19:08.421511, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.421520, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.421530, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [Spooler] [2018/02/02 08:19:08.421544, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.421555, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.421564, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.421574, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Spooler], new_path => [] [2018/02/02 08:19:08.421583, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2018/02/02 08:19:08.421593, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2018/02/02 08:19:08.421603, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2018/02/02 08:19:08.421612, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Spooler] [2018/02/02 08:19:08.421622, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.421631, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.421643, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 13) -> 4 [2018/02/02 08:19:08.421654, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 13) -> 4 [2018/02/02 08:19:08.421664, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 9) -> 9 [2018/02/02 08:19:08.421679, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 03 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.421704, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-745a-4c65c0580000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2018/02/02 08:19:08.421753, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-745a-4c65c0580000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2018/02/02 08:19:08.421804, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.421901, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.421991, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 03 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.422017, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.422029, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 13) -> 4 [2018/02/02 08:19:08.422042, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 357) -> 4 [2018/02/02 08:19:08.422053, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 353) -> 18 [2018/02/02 08:19:08.422063, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 335) -> 17 [2018/02/02 08:19:08.422074, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 318) -> 25 [2018/02/02 08:19:08.422084, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 293) -> 43 [2018/02/02 08:19:08.422095, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 250) -> 48 [2018/02/02 08:19:08.422106, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 202) -> 76 [2018/02/02 08:19:08.422117, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 126) -> 126 [2018/02/02 08:19:08.422129, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.422152, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.422177, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.422272, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.422357, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 03 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.422382, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.422393, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.422416, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.422440, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.422535, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.422619, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 03 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.422645, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.422656, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.422678, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.422706, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2018/02/02 08:19:08.422889, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2018/02/02 08:19:08.423062, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 03 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.423088, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.423100, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.423122, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.423150, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(28) [0] : 0x50 (80) [1] : 0x00 (0) [2] : 0x72 (114) [3] : 0x00 (0) [4] : 0x69 (105) [5] : 0x00 (0) [6] : 0x6e (110) [7] : 0x00 (0) [8] : 0x74 (116) [9] : 0x00 (0) [10] : 0x20 (32) [11] : 0x00 (0) [12] : 0x53 (83) [13] : 0x00 (0) [14] : 0x70 (112) [15] : 0x00 (0) [16] : 0x6f (111) [17] : 0x00 (0) [18] : 0x6f (111) [19] : 0x00 (0) [20] : 0x6c (108) [21] : 0x00 (0) [22] : 0x65 (101) [23] : 0x00 (0) [24] : 0x72 (114) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) size : 0x0000001c (28) [2018/02/02 08:19:08.423350, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(28) [0] : 0x50 (80) [1] : 0x00 (0) [2] : 0x72 (114) [3] : 0x00 (0) [4] : 0x69 (105) [5] : 0x00 (0) [6] : 0x6e (110) [7] : 0x00 (0) [8] : 0x74 (116) [9] : 0x00 (0) [10] : 0x20 (32) [11] : 0x00 (0) [12] : 0x53 (83) [13] : 0x00 (0) [14] : 0x70 (112) [15] : 0x00 (0) [16] : 0x6f (111) [17] : 0x00 (0) [18] : 0x6f (111) [19] : 0x00 (0) [20] : 0x6c (108) [21] : 0x00 (0) [22] : 0x65 (101) [23] : 0x00 (0) [24] : 0x72 (114) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) size : 0x0000001c (28) [2018/02/02 08:19:08.423541, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 03 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.423567, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.423578, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.423603, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.423629, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(58) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x36 (54) [17] : 0x00 (0) [18] : 0x34 (52) [19] : 0x00 (0) [20] : 0x2f (47) [21] : 0x00 (0) [22] : 0x73 (115) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x6d (109) [27] : 0x00 (0) [28] : 0x62 (98) [29] : 0x00 (0) [30] : 0x61 (97) [31] : 0x00 (0) [32] : 0x2f (47) [33] : 0x00 (0) [34] : 0x73 (115) [35] : 0x00 (0) [36] : 0x76 (118) [37] : 0x00 (0) [38] : 0x63 (99) [39] : 0x00 (0) [40] : 0x63 (99) [41] : 0x00 (0) [42] : 0x74 (116) [43] : 0x00 (0) [44] : 0x6c (108) [45] : 0x00 (0) [46] : 0x2f (47) [47] : 0x00 (0) [48] : 0x73 (115) [49] : 0x00 (0) [50] : 0x6d (109) [51] : 0x00 (0) [52] : 0x62 (98) [53] : 0x00 (0) [54] : 0x64 (100) [55] : 0x00 (0) [56] : 0x00 (0) [57] : 0x00 (0) size : 0x0000003a (58) [2018/02/02 08:19:08.423949, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(58) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x36 (54) [17] : 0x00 (0) [18] : 0x34 (52) [19] : 0x00 (0) [20] : 0x2f (47) [21] : 0x00 (0) [22] : 0x73 (115) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x6d (109) [27] : 0x00 (0) [28] : 0x62 (98) [29] : 0x00 (0) [30] : 0x61 (97) [31] : 0x00 (0) [32] : 0x2f (47) [33] : 0x00 (0) [34] : 0x73 (115) [35] : 0x00 (0) [36] : 0x76 (118) [37] : 0x00 (0) [38] : 0x63 (99) [39] : 0x00 (0) [40] : 0x63 (99) [41] : 0x00 (0) [42] : 0x74 (116) [43] : 0x00 (0) [44] : 0x6c (108) [45] : 0x00 (0) [46] : 0x2f (47) [47] : 0x00 (0) [48] : 0x73 (115) [49] : 0x00 (0) [50] : 0x6d (109) [51] : 0x00 (0) [52] : 0x62 (98) [53] : 0x00 (0) [54] : 0x64 (100) [55] : 0x00 (0) [56] : 0x00 (0) [57] : 0x00 (0) size : 0x0000003a (58) [2018/02/02 08:19:08.424281, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 03 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.424308, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.424320, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.424342, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.424368, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(106) [0] : 0x49 (73) [1] : 0x00 (0) [2] : 0x6e (110) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x6e (110) [11] : 0x00 (0) [12] : 0x61 (97) [13] : 0x00 (0) [14] : 0x6c (108) [15] : 0x00 (0) [16] : 0x20 (32) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x65 (101) [21] : 0x00 (0) [22] : 0x72 (114) [23] : 0x00 (0) [24] : 0x76 (118) [25] : 0x00 (0) [26] : 0x69 (105) [27] : 0x00 (0) [28] : 0x63 (99) [29] : 0x00 (0) [30] : 0x65 (101) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x66 (102) [35] : 0x00 (0) [36] : 0x6f (111) [37] : 0x00 (0) [38] : 0x72 (114) [39] : 0x00 (0) [40] : 0x20 (32) [41] : 0x00 (0) [42] : 0x73 (115) [43] : 0x00 (0) [44] : 0x70 (112) [45] : 0x00 (0) [46] : 0x6f (111) [47] : 0x00 (0) [48] : 0x6f (111) [49] : 0x00 (0) [50] : 0x6c (108) [51] : 0x00 (0) [52] : 0x69 (105) [53] : 0x00 (0) [54] : 0x6e (110) [55] : 0x00 (0) [56] : 0x67 (103) [57] : 0x00 (0) [58] : 0x20 (32) [59] : 0x00 (0) [60] : 0x66 (102) [61] : 0x00 (0) [62] : 0x69 (105) [63] : 0x00 (0) [64] : 0x6c (108) [65] : 0x00 (0) [66] : 0x65 (101) [67] : 0x00 (0) [68] : 0x73 (115) [69] : 0x00 (0) [70] : 0x20 (32) [71] : 0x00 (0) [72] : 0x74 (116) [73] : 0x00 (0) [74] : 0x6f (111) [75] : 0x00 (0) [76] : 0x20 (32) [77] : 0x00 (0) [78] : 0x70 (112) [79] : 0x00 (0) [80] : 0x72 (114) [81] : 0x00 (0) [82] : 0x69 (105) [83] : 0x00 (0) [84] : 0x6e (110) [85] : 0x00 (0) [86] : 0x74 (116) [87] : 0x00 (0) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x64 (100) [91] : 0x00 (0) [92] : 0x65 (101) [93] : 0x00 (0) [94] : 0x76 (118) [95] : 0x00 (0) [96] : 0x69 (105) [97] : 0x00 (0) [98] : 0x63 (99) [99] : 0x00 (0) [100] : 0x65 (101) [101] : 0x00 (0) [102] : 0x73 (115) [103] : 0x00 (0) [104] : 0x00 (0) [105] : 0x00 (0) size : 0x0000006a (106) [2018/02/02 08:19:08.424895, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(106) [0] : 0x49 (73) [1] : 0x00 (0) [2] : 0x6e (110) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x6e (110) [11] : 0x00 (0) [12] : 0x61 (97) [13] : 0x00 (0) [14] : 0x6c (108) [15] : 0x00 (0) [16] : 0x20 (32) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x65 (101) [21] : 0x00 (0) [22] : 0x72 (114) [23] : 0x00 (0) [24] : 0x76 (118) [25] : 0x00 (0) [26] : 0x69 (105) [27] : 0x00 (0) [28] : 0x63 (99) [29] : 0x00 (0) [30] : 0x65 (101) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x66 (102) [35] : 0x00 (0) [36] : 0x6f (111) [37] : 0x00 (0) [38] : 0x72 (114) [39] : 0x00 (0) [40] : 0x20 (32) [41] : 0x00 (0) [42] : 0x73 (115) [43] : 0x00 (0) [44] : 0x70 (112) [45] : 0x00 (0) [46] : 0x6f (111) [47] : 0x00 (0) [48] : 0x6f (111) [49] : 0x00 (0) [50] : 0x6c (108) [51] : 0x00 (0) [52] : 0x69 (105) [53] : 0x00 (0) [54] : 0x6e (110) [55] : 0x00 (0) [56] : 0x67 (103) [57] : 0x00 (0) [58] : 0x20 (32) [59] : 0x00 (0) [60] : 0x66 (102) [61] : 0x00 (0) [62] : 0x69 (105) [63] : 0x00 (0) [64] : 0x6c (108) [65] : 0x00 (0) [66] : 0x65 (101) [67] : 0x00 (0) [68] : 0x73 (115) [69] : 0x00 (0) [70] : 0x20 (32) [71] : 0x00 (0) [72] : 0x74 (116) [73] : 0x00 (0) [74] : 0x6f (111) [75] : 0x00 (0) [76] : 0x20 (32) [77] : 0x00 (0) [78] : 0x70 (112) [79] : 0x00 (0) [80] : 0x72 (114) [81] : 0x00 (0) [82] : 0x69 (105) [83] : 0x00 (0) [84] : 0x6e (110) [85] : 0x00 (0) [86] : 0x74 (116) [87] : 0x00 (0) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x64 (100) [91] : 0x00 (0) [92] : 0x65 (101) [93] : 0x00 (0) [94] : 0x76 (118) [95] : 0x00 (0) [96] : 0x69 (105) [97] : 0x00 (0) [98] : 0x63 (99) [99] : 0x00 (0) [100] : 0x65 (101) [101] : 0x00 (0) [102] : 0x73 (115) [103] : 0x00 (0) [104] : 0x00 (0) [105] : 0x00 (0) size : 0x0000006a (106) [2018/02/02 08:19:08.425373, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 03 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.425395, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.425405, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.425424, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.425447, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.425477, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.425504, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 03 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.425525, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 03 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.425546, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.425579, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.425620, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0066 (102) name_size : 0x0066 (102) name : * name : 'SYSTEM\CurrentControlSet\Services\Spooler\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2018/02/02 08:19:08.425742, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0066 (102) name_size : 0x0066 (102) name : * name : 'SYSTEM\CurrentControlSet\Services\Spooler\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2018/02/02 08:19:08.425859, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 01 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.425885, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.425894, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.425904, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2018/02/02 08:19:08.425912, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2018/02/02 08:19:08.425920, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.425929, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.425937, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.425945, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2018/02/02 08:19:08.425953, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.425961, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.425973, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.425981, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.425989, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.426000, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.426010, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.426018, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 18) -> 18 [2018/02/02 08:19:08.426030, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.426040, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.426048, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.426056, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.426064, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.426073, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.426080, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2018/02/02 08:19:08.426088, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.426096, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.426109, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.426117, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2018/02/02 08:19:08.426125, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.426133, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.426141, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.426149, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.426160, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.426170, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.426179, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 17) -> 8 [2018/02/02 08:19:08.426189, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 9) -> 9 [2018/02/02 08:19:08.426200, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.426211, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.426219, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.426227, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.426235, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.426243, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.426251, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services] [2018/02/02 08:19:08.426259, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.426267, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.426276, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.426284, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2018/02/02 08:19:08.426291, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.426300, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.426308, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2018/02/02 08:19:08.426320, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.426328, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.426336, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.426344, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.426352, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.426362, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.426373, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.426381, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 65) -> 13 [2018/02/02 08:19:08.426391, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 52) -> 9 [2018/02/02 08:19:08.426401, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 43) -> 6 [2018/02/02 08:19:08.426413, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 37) -> 9 [2018/02/02 08:19:08.426424, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 28) -> 8 [2018/02/02 08:19:08.426434, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 20) -> 15 [2018/02/02 08:19:08.426444, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 5) -> 5 [2018/02/02 08:19:08.426456, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.426466, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2018/02/02 08:19:08.426475, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services\Spooler] [2018/02/02 08:19:08.426483, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.426491, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.426499, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.426507, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services\Spooler] [2018/02/02 08:19:08.426515, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.426523, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.426531, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.426539, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services\Spooler] [2018/02/02 08:19:08.426547, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.426560, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.426568, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [Spooler] [2018/02/02 08:19:08.426576, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.426584, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.426592, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.426600, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Spooler], new_path => [] [2018/02/02 08:19:08.426608, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2018/02/02 08:19:08.426617, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2018/02/02 08:19:08.426625, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2018/02/02 08:19:08.426633, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Spooler] [2018/02/02 08:19:08.426641, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.426648, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.426659, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 13) -> 4 [2018/02/02 08:19:08.426669, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 13) -> 4 [2018/02/02 08:19:08.426678, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 9) -> 9 [2018/02/02 08:19:08.426690, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2018/02/02 08:19:08.426699, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services\Spooler\Security] [2018/02/02 08:19:08.426707, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.426716, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.426724, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.426732, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services\Spooler\Security] [2018/02/02 08:19:08.426740, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.426748, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.426756, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.426768, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services\Spooler\Security] [2018/02/02 08:19:08.426776, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.426784, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.426792, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [Spooler\Security] [2018/02/02 08:19:08.426800, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.426808, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.426816, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.426824, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Spooler], new_path => [Security] [2018/02/02 08:19:08.426832, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2018/02/02 08:19:08.426840, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2018/02/02 08:19:08.426848, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2018/02/02 08:19:08.426856, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Spooler] [2018/02/02 08:19:08.426864, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.426872, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.426882, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.426892, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.426903, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 04 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.426923, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000004-0000-0000-745a-4c65c0580000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2018/02/02 08:19:08.426964, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000004-0000-0000-745a-4c65c0580000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2018/02/02 08:19:08.427021, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000004-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2018/02/02 08:19:08.427510, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000004-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2018/02/02 08:19:08.428026, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 04 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.428060, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.428085, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.428096, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 141) -> 4 [2018/02/02 08:19:08.428105, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 137) -> 137 [2018/02/02 08:19:08.428115, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.428135, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.428156, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000004-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.428185, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000004-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.428212, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 04 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.428233, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 04 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.428254, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.428287, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.428328, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0056 (86) name_size : 0x0056 (86) name : * name : 'SYSTEM\CurrentControlSet\Services\NETLOGON' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2018/02/02 08:19:08.428455, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0056 (86) name_size : 0x0056 (86) name : * name : 'SYSTEM\CurrentControlSet\Services\NETLOGON' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2018/02/02 08:19:08.428571, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 01 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.428593, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.428602, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.428612, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2018/02/02 08:19:08.428620, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2018/02/02 08:19:08.428628, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.428641, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.428650, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.428658, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2018/02/02 08:19:08.428666, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.428674, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.428682, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.428690, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.428698, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.428708, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.428718, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.428727, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 18) -> 18 [2018/02/02 08:19:08.428738, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.428748, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.428757, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.428765, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.428773, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.428781, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.428789, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2018/02/02 08:19:08.428797, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.428805, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.428813, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.428821, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2018/02/02 08:19:08.428829, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.428837, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.428845, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.428857, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.428867, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.428877, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.428886, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 17) -> 8 [2018/02/02 08:19:08.428896, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 9) -> 9 [2018/02/02 08:19:08.428908, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.428918, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.428927, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.428934, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.428943, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.428951, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.428959, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services] [2018/02/02 08:19:08.428967, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.428979, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.428988, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.428995, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2018/02/02 08:19:08.429003, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.429012, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.429020, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2018/02/02 08:19:08.429028, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.429036, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.429044, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.429052, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.429060, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.429075, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.429087, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.429096, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 65) -> 13 [2018/02/02 08:19:08.429106, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 52) -> 9 [2018/02/02 08:19:08.429116, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 43) -> 6 [2018/02/02 08:19:08.429126, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 37) -> 9 [2018/02/02 08:19:08.429136, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 28) -> 8 [2018/02/02 08:19:08.429146, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 20) -> 15 [2018/02/02 08:19:08.429157, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 5) -> 5 [2018/02/02 08:19:08.429169, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2018/02/02 08:19:08.429178, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services\NETLOGON] [2018/02/02 08:19:08.429186, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.429194, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.429202, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.429210, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services\NETLOGON] [2018/02/02 08:19:08.429218, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.429226, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.429234, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.429242, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services\NETLOGON] [2018/02/02 08:19:08.429250, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.429258, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.429267, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [NETLOGON] [2018/02/02 08:19:08.429275, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.429283, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.429291, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.429303, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [NETLOGON], new_path => [] [2018/02/02 08:19:08.429312, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2018/02/02 08:19:08.429320, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2018/02/02 08:19:08.429328, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2018/02/02 08:19:08.429336, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [NETLOGON] [2018/02/02 08:19:08.429344, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.429352, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.429363, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 24) -> 4 [2018/02/02 08:19:08.429374, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 24) -> 4 [2018/02/02 08:19:08.429383, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 20) -> 11 [2018/02/02 08:19:08.429392, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 9) -> 9 [2018/02/02 08:19:08.429405, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 05 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.429426, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-745a-4c65c0580000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2018/02/02 08:19:08.429468, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-745a-4c65c0580000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2018/02/02 08:19:08.429511, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.429592, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.429664, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 05 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.429686, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.429696, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 24) -> 4 [2018/02/02 08:19:08.429707, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 407) -> 4 [2018/02/02 08:19:08.429716, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 403) -> 18 [2018/02/02 08:19:08.429724, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 385) -> 17 [2018/02/02 08:19:08.429734, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 368) -> 25 [2018/02/02 08:19:08.429743, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 343) -> 43 [2018/02/02 08:19:08.429752, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 300) -> 40 [2018/02/02 08:19:08.429761, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 260) -> 76 [2018/02/02 08:19:08.429770, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 184) -> 184 [2018/02/02 08:19:08.429780, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.429803, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.429825, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.429905, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.429981, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 05 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.430003, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.430013, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.430032, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.430053, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.430127, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.430203, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 05 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.430225, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.430234, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.430253, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.430275, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2018/02/02 08:19:08.430426, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2018/02/02 08:19:08.430568, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 05 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.430590, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.430599, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.430618, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.430641, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(20) [0] : 0x4e (78) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x20 (32) [7] : 0x00 (0) [8] : 0x4c (76) [9] : 0x00 (0) [10] : 0x6f (111) [11] : 0x00 (0) [12] : 0x67 (103) [13] : 0x00 (0) [14] : 0x6f (111) [15] : 0x00 (0) [16] : 0x6e (110) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) size : 0x00000014 (20) [2018/02/02 08:19:08.430778, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(20) [0] : 0x4e (78) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x20 (32) [7] : 0x00 (0) [8] : 0x4c (76) [9] : 0x00 (0) [10] : 0x6f (111) [11] : 0x00 (0) [12] : 0x67 (103) [13] : 0x00 (0) [14] : 0x6f (111) [15] : 0x00 (0) [16] : 0x6e (110) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) size : 0x00000014 (20) [2018/02/02 08:19:08.430905, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 05 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.430926, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.430936, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.430955, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.430985, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(58) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x36 (54) [17] : 0x00 (0) [18] : 0x34 (52) [19] : 0x00 (0) [20] : 0x2f (47) [21] : 0x00 (0) [22] : 0x73 (115) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x6d (109) [27] : 0x00 (0) [28] : 0x62 (98) [29] : 0x00 (0) [30] : 0x61 (97) [31] : 0x00 (0) [32] : 0x2f (47) [33] : 0x00 (0) [34] : 0x73 (115) [35] : 0x00 (0) [36] : 0x76 (118) [37] : 0x00 (0) [38] : 0x63 (99) [39] : 0x00 (0) [40] : 0x63 (99) [41] : 0x00 (0) [42] : 0x74 (116) [43] : 0x00 (0) [44] : 0x6c (108) [45] : 0x00 (0) [46] : 0x2f (47) [47] : 0x00 (0) [48] : 0x73 (115) [49] : 0x00 (0) [50] : 0x6d (109) [51] : 0x00 (0) [52] : 0x62 (98) [53] : 0x00 (0) [54] : 0x64 (100) [55] : 0x00 (0) [56] : 0x00 (0) [57] : 0x00 (0) size : 0x0000003a (58) [2018/02/02 08:19:08.431257, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(58) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x36 (54) [17] : 0x00 (0) [18] : 0x34 (52) [19] : 0x00 (0) [20] : 0x2f (47) [21] : 0x00 (0) [22] : 0x73 (115) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x6d (109) [27] : 0x00 (0) [28] : 0x62 (98) [29] : 0x00 (0) [30] : 0x61 (97) [31] : 0x00 (0) [32] : 0x2f (47) [33] : 0x00 (0) [34] : 0x73 (115) [35] : 0x00 (0) [36] : 0x76 (118) [37] : 0x00 (0) [38] : 0x63 (99) [39] : 0x00 (0) [40] : 0x63 (99) [41] : 0x00 (0) [42] : 0x74 (116) [43] : 0x00 (0) [44] : 0x6c (108) [45] : 0x00 (0) [46] : 0x2f (47) [47] : 0x00 (0) [48] : 0x73 (115) [49] : 0x00 (0) [50] : 0x6d (109) [51] : 0x00 (0) [52] : 0x62 (98) [53] : 0x00 (0) [54] : 0x64 (100) [55] : 0x00 (0) [56] : 0x00 (0) [57] : 0x00 (0) size : 0x0000003a (58) [2018/02/02 08:19:08.431524, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 05 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.431546, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.431556, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.431575, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.431597, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(164) [0] : 0x46 (70) [1] : 0x00 (0) [2] : 0x69 (105) [3] : 0x00 (0) [4] : 0x6c (108) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x20 (32) [9] : 0x00 (0) [10] : 0x73 (115) [11] : 0x00 (0) [12] : 0x65 (101) [13] : 0x00 (0) [14] : 0x72 (114) [15] : 0x00 (0) [16] : 0x76 (118) [17] : 0x00 (0) [18] : 0x69 (105) [19] : 0x00 (0) [20] : 0x63 (99) [21] : 0x00 (0) [22] : 0x65 (101) [23] : 0x00 (0) [24] : 0x20 (32) [25] : 0x00 (0) [26] : 0x70 (112) [27] : 0x00 (0) [28] : 0x72 (114) [29] : 0x00 (0) [30] : 0x6f (111) [31] : 0x00 (0) [32] : 0x76 (118) [33] : 0x00 (0) [34] : 0x69 (105) [35] : 0x00 (0) [36] : 0x64 (100) [37] : 0x00 (0) [38] : 0x69 (105) [39] : 0x00 (0) [40] : 0x6e (110) [41] : 0x00 (0) [42] : 0x67 (103) [43] : 0x00 (0) [44] : 0x20 (32) [45] : 0x00 (0) [46] : 0x61 (97) [47] : 0x00 (0) [48] : 0x63 (99) [49] : 0x00 (0) [50] : 0x63 (99) [51] : 0x00 (0) [52] : 0x65 (101) [53] : 0x00 (0) [54] : 0x73 (115) [55] : 0x00 (0) [56] : 0x73 (115) [57] : 0x00 (0) [58] : 0x20 (32) [59] : 0x00 (0) [60] : 0x74 (116) [61] : 0x00 (0) [62] : 0x6f (111) [63] : 0x00 (0) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x70 (112) [67] : 0x00 (0) [68] : 0x6f (111) [69] : 0x00 (0) [70] : 0x6c (108) [71] : 0x00 (0) [72] : 0x69 (105) [73] : 0x00 (0) [74] : 0x63 (99) [75] : 0x00 (0) [76] : 0x79 (121) [77] : 0x00 (0) [78] : 0x20 (32) [79] : 0x00 (0) [80] : 0x61 (97) [81] : 0x00 (0) [82] : 0x6e (110) [83] : 0x00 (0) [84] : 0x64 (100) [85] : 0x00 (0) [86] : 0x20 (32) [87] : 0x00 (0) [88] : 0x70 (112) [89] : 0x00 (0) [90] : 0x72 (114) [91] : 0x00 (0) [92] : 0x6f (111) [93] : 0x00 (0) [94] : 0x66 (102) [95] : 0x00 (0) [96] : 0x69 (105) [97] : 0x00 (0) [98] : 0x6c (108) [99] : 0x00 (0) [100] : 0x65 (101) [101] : 0x00 (0) [102] : 0x20 (32) [103] : 0x00 (0) [104] : 0x64 (100) [105] : 0x00 (0) [106] : 0x61 (97) [107] : 0x00 (0) [108] : 0x74 (116) [109] : 0x00 (0) [110] : 0x61 (97) [111] : 0x00 (0) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x28 (40) [115] : 0x00 (0) [116] : 0x6e (110) [117] : 0x00 (0) [118] : 0x6f (111) [119] : 0x00 (0) [120] : 0x74 (116) [121] : 0x00 (0) [122] : 0x72 (114) [123] : 0x00 (0) [124] : 0x65 (101) [125] : 0x00 (0) [126] : 0x6d (109) [127] : 0x00 (0) [128] : 0x6f (111) [129] : 0x00 (0) [130] : 0x74 (116) [131] : 0x00 (0) [132] : 0x65 (101) [133] : 0x00 (0) [134] : 0x6c (108) [135] : 0x00 (0) [136] : 0x79 (121) [137] : 0x00 (0) [138] : 0x20 (32) [139] : 0x00 (0) [140] : 0x6d (109) [141] : 0x00 (0) [142] : 0x61 (97) [143] : 0x00 (0) [144] : 0x6e (110) [145] : 0x00 (0) [146] : 0x61 (97) [147] : 0x00 (0) [148] : 0x67 (103) [149] : 0x00 (0) [150] : 0x65 (101) [151] : 0x00 (0) [152] : 0x61 (97) [153] : 0x00 (0) [154] : 0x62 (98) [155] : 0x00 (0) [156] : 0x6c (108) [157] : 0x00 (0) [158] : 0x65 (101) [159] : 0x00 (0) [160] : 0x29 (41) [161] : 0x00 (0) [162] : 0x00 (0) [163] : 0x00 (0) size : 0x000000a4 (164) [2018/02/02 08:19:08.432267, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(164) [0] : 0x46 (70) [1] : 0x00 (0) [2] : 0x69 (105) [3] : 0x00 (0) [4] : 0x6c (108) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x20 (32) [9] : 0x00 (0) [10] : 0x73 (115) [11] : 0x00 (0) [12] : 0x65 (101) [13] : 0x00 (0) [14] : 0x72 (114) [15] : 0x00 (0) [16] : 0x76 (118) [17] : 0x00 (0) [18] : 0x69 (105) [19] : 0x00 (0) [20] : 0x63 (99) [21] : 0x00 (0) [22] : 0x65 (101) [23] : 0x00 (0) [24] : 0x20 (32) [25] : 0x00 (0) [26] : 0x70 (112) [27] : 0x00 (0) [28] : 0x72 (114) [29] : 0x00 (0) [30] : 0x6f (111) [31] : 0x00 (0) [32] : 0x76 (118) [33] : 0x00 (0) [34] : 0x69 (105) [35] : 0x00 (0) [36] : 0x64 (100) [37] : 0x00 (0) [38] : 0x69 (105) [39] : 0x00 (0) [40] : 0x6e (110) [41] : 0x00 (0) [42] : 0x67 (103) [43] : 0x00 (0) [44] : 0x20 (32) [45] : 0x00 (0) [46] : 0x61 (97) [47] : 0x00 (0) [48] : 0x63 (99) [49] : 0x00 (0) [50] : 0x63 (99) [51] : 0x00 (0) [52] : 0x65 (101) [53] : 0x00 (0) [54] : 0x73 (115) [55] : 0x00 (0) [56] : 0x73 (115) [57] : 0x00 (0) [58] : 0x20 (32) [59] : 0x00 (0) [60] : 0x74 (116) [61] : 0x00 (0) [62] : 0x6f (111) [63] : 0x00 (0) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x70 (112) [67] : 0x00 (0) [68] : 0x6f (111) [69] : 0x00 (0) [70] : 0x6c (108) [71] : 0x00 (0) [72] : 0x69 (105) [73] : 0x00 (0) [74] : 0x63 (99) [75] : 0x00 (0) [76] : 0x79 (121) [77] : 0x00 (0) [78] : 0x20 (32) [79] : 0x00 (0) [80] : 0x61 (97) [81] : 0x00 (0) [82] : 0x6e (110) [83] : 0x00 (0) [84] : 0x64 (100) [85] : 0x00 (0) [86] : 0x20 (32) [87] : 0x00 (0) [88] : 0x70 (112) [89] : 0x00 (0) [90] : 0x72 (114) [91] : 0x00 (0) [92] : 0x6f (111) [93] : 0x00 (0) [94] : 0x66 (102) [95] : 0x00 (0) [96] : 0x69 (105) [97] : 0x00 (0) [98] : 0x6c (108) [99] : 0x00 (0) [100] : 0x65 (101) [101] : 0x00 (0) [102] : 0x20 (32) [103] : 0x00 (0) [104] : 0x64 (100) [105] : 0x00 (0) [106] : 0x61 (97) [107] : 0x00 (0) [108] : 0x74 (116) [109] : 0x00 (0) [110] : 0x61 (97) [111] : 0x00 (0) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x28 (40) [115] : 0x00 (0) [116] : 0x6e (110) [117] : 0x00 (0) [118] : 0x6f (111) [119] : 0x00 (0) [120] : 0x74 (116) [121] : 0x00 (0) [122] : 0x72 (114) [123] : 0x00 (0) [124] : 0x65 (101) [125] : 0x00 (0) [126] : 0x6d (109) [127] : 0x00 (0) [128] : 0x6f (111) [129] : 0x00 (0) [130] : 0x74 (116) [131] : 0x00 (0) [132] : 0x65 (101) [133] : 0x00 (0) [134] : 0x6c (108) [135] : 0x00 (0) [136] : 0x79 (121) [137] : 0x00 (0) [138] : 0x20 (32) [139] : 0x00 (0) [140] : 0x6d (109) [141] : 0x00 (0) [142] : 0x61 (97) [143] : 0x00 (0) [144] : 0x6e (110) [145] : 0x00 (0) [146] : 0x61 (97) [147] : 0x00 (0) [148] : 0x67 (103) [149] : 0x00 (0) [150] : 0x65 (101) [151] : 0x00 (0) [152] : 0x61 (97) [153] : 0x00 (0) [154] : 0x62 (98) [155] : 0x00 (0) [156] : 0x6c (108) [157] : 0x00 (0) [158] : 0x65 (101) [159] : 0x00 (0) [160] : 0x29 (41) [161] : 0x00 (0) [162] : 0x00 (0) [163] : 0x00 (0) size : 0x000000a4 (164) [2018/02/02 08:19:08.432914, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 05 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.432936, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.432946, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.432967, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.432994, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.433024, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.433051, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 05 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.433077, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 05 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.433099, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.433133, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.433169, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0068 (104) name_size : 0x0068 (104) name : * name : 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2018/02/02 08:19:08.433291, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0068 (104) name_size : 0x0068 (104) name : * name : 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2018/02/02 08:19:08.433413, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 01 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.433435, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.433444, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.433454, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2018/02/02 08:19:08.433463, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2018/02/02 08:19:08.433471, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.433479, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.433487, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.433496, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2018/02/02 08:19:08.433504, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.433512, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.433520, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.433528, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.433536, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.433546, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.433556, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.433565, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 18) -> 18 [2018/02/02 08:19:08.433576, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.433591, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.433600, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.433608, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.433616, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.433624, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.433632, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2018/02/02 08:19:08.433640, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.433648, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.433656, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.433664, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2018/02/02 08:19:08.433672, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.433681, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.433689, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.433697, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.433706, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.433716, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.433725, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 17) -> 8 [2018/02/02 08:19:08.433735, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 9) -> 9 [2018/02/02 08:19:08.433747, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.433757, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.433765, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.433773, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.433781, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.433789, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.433801, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services] [2018/02/02 08:19:08.433810, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.433818, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.433826, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.433834, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2018/02/02 08:19:08.433842, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.433850, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.433858, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2018/02/02 08:19:08.433866, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.433874, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.433883, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.433891, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.433898, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.433908, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.433920, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.433931, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 65) -> 13 [2018/02/02 08:19:08.433942, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 52) -> 9 [2018/02/02 08:19:08.433952, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 43) -> 6 [2018/02/02 08:19:08.433962, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 37) -> 9 [2018/02/02 08:19:08.433976, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 28) -> 8 [2018/02/02 08:19:08.433987, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 20) -> 15 [2018/02/02 08:19:08.433997, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 5) -> 5 [2018/02/02 08:19:08.434009, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.434019, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2018/02/02 08:19:08.434028, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services\NETLOGON] [2018/02/02 08:19:08.434036, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.434048, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.434056, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.434064, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services\NETLOGON] [2018/02/02 08:19:08.434072, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.434080, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.434089, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.434096, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services\NETLOGON] [2018/02/02 08:19:08.434105, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.434113, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.434121, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [NETLOGON] [2018/02/02 08:19:08.434129, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.434137, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.434145, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.434153, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [NETLOGON], new_path => [] [2018/02/02 08:19:08.434161, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2018/02/02 08:19:08.434169, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2018/02/02 08:19:08.434177, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2018/02/02 08:19:08.434185, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [NETLOGON] [2018/02/02 08:19:08.434193, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.434201, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.434211, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 24) -> 4 [2018/02/02 08:19:08.434221, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 24) -> 4 [2018/02/02 08:19:08.434229, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 20) -> 11 [2018/02/02 08:19:08.434239, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 9) -> 9 [2018/02/02 08:19:08.434257, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2018/02/02 08:19:08.434266, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2018/02/02 08:19:08.434274, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.434282, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.434290, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.434298, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services\NETLOGON\Security] [2018/02/02 08:19:08.434306, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.434314, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.434323, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.434331, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services\NETLOGON\Security] [2018/02/02 08:19:08.434339, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.434347, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.434355, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [NETLOGON\Security] [2018/02/02 08:19:08.434363, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.434371, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.434379, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.434387, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [NETLOGON], new_path => [Security] [2018/02/02 08:19:08.434395, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2018/02/02 08:19:08.434403, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2018/02/02 08:19:08.434412, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2018/02/02 08:19:08.434420, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [NETLOGON] [2018/02/02 08:19:08.434428, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Security], new_path => [] [2018/02/02 08:19:08.434436, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Parameters] [2018/02/02 08:19:08.434449, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Security] [2018/02/02 08:19:08.434457, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.434465, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.434475, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.434486, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.434497, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 06 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.434518, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000006-0000-0000-745a-4c65c0580000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2018/02/02 08:19:08.434559, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000006-0000-0000-745a-4c65c0580000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2018/02/02 08:19:08.434605, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000006-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2018/02/02 08:19:08.435105, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000006-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2018/02/02 08:19:08.435598, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 06 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.435620, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.435631, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.435642, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 141) -> 4 [2018/02/02 08:19:08.435651, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 137) -> 137 [2018/02/02 08:19:08.435660, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.435680, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.435701, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000006-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.435731, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000006-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.435758, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 06 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.435783, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 06 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.435805, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.435838, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.435874, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0062 (98) name_size : 0x0062 (98) name : * name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2018/02/02 08:19:08.436010, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0062 (98) name_size : 0x0062 (98) name : * name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2018/02/02 08:19:08.436142, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 01 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.436164, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.436173, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.436182, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2018/02/02 08:19:08.436191, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2018/02/02 08:19:08.436199, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.436207, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.436215, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.436223, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2018/02/02 08:19:08.436231, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.436239, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.436247, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.436255, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.436263, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.436273, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.436283, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.436292, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 18) -> 18 [2018/02/02 08:19:08.436303, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.436313, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.436326, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.436334, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.436342, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.436350, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.436358, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2018/02/02 08:19:08.436366, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.436374, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.436382, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.436390, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2018/02/02 08:19:08.436398, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.436407, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.436415, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.436423, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.436432, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.436443, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.436451, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 17) -> 8 [2018/02/02 08:19:08.436461, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 9) -> 9 [2018/02/02 08:19:08.436473, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.436483, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.436491, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.436499, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.436508, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.436516, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.436524, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services] [2018/02/02 08:19:08.436533, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.436543, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.436552, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.436560, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2018/02/02 08:19:08.436568, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.436576, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.436584, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2018/02/02 08:19:08.436592, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.436600, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.436609, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.436617, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.436624, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.436636, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.436648, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.436657, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 65) -> 13 [2018/02/02 08:19:08.436667, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 52) -> 9 [2018/02/02 08:19:08.436677, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 43) -> 6 [2018/02/02 08:19:08.436687, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 37) -> 9 [2018/02/02 08:19:08.436698, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 28) -> 8 [2018/02/02 08:19:08.436708, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 20) -> 15 [2018/02/02 08:19:08.436718, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 5) -> 5 [2018/02/02 08:19:08.436730, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2018/02/02 08:19:08.436739, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2018/02/02 08:19:08.436747, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.436755, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.436769, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.436778, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services\RemoteRegistry] [2018/02/02 08:19:08.436786, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.436794, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.436802, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.436810, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services\RemoteRegistry] [2018/02/02 08:19:08.436818, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.436826, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.436835, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [RemoteRegistry] [2018/02/02 08:19:08.436843, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.436851, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.436859, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.436867, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [RemoteRegistry], new_path => [] [2018/02/02 08:19:08.436875, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2018/02/02 08:19:08.436883, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2018/02/02 08:19:08.436891, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2018/02/02 08:19:08.436899, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [RemoteRegistry] [2018/02/02 08:19:08.436907, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.436915, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.436925, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 13) -> 4 [2018/02/02 08:19:08.436935, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 13) -> 4 [2018/02/02 08:19:08.436944, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 9) -> 9 [2018/02/02 08:19:08.436956, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 07 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.436981, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-745a-4c65c0580000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2018/02/02 08:19:08.437027, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-745a-4c65c0580000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2018/02/02 08:19:08.437070, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.437146, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.437218, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 07 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.437240, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.437251, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 13) -> 4 [2018/02/02 08:19:08.437262, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 397) -> 4 [2018/02/02 08:19:08.437275, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 393) -> 18 [2018/02/02 08:19:08.437284, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 375) -> 17 [2018/02/02 08:19:08.437294, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 358) -> 25 [2018/02/02 08:19:08.437303, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 333) -> 43 [2018/02/02 08:19:08.437312, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 290) -> 68 [2018/02/02 08:19:08.437321, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 222) -> 76 [2018/02/02 08:19:08.437330, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 146) -> 146 [2018/02/02 08:19:08.437340, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.437359, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.437380, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.437456, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.437528, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 07 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.437549, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.437563, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.437582, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.437603, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.437678, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.437749, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 07 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.437771, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.437780, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.437799, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.437820, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2018/02/02 08:19:08.437978, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2018/02/02 08:19:08.438125, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 07 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.438147, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.438157, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.438176, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.438198, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(48) [0] : 0x52 (82) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x6d (109) [5] : 0x00 (0) [6] : 0x6f (111) [7] : 0x00 (0) [8] : 0x74 (116) [9] : 0x00 (0) [10] : 0x65 (101) [11] : 0x00 (0) [12] : 0x20 (32) [13] : 0x00 (0) [14] : 0x52 (82) [15] : 0x00 (0) [16] : 0x65 (101) [17] : 0x00 (0) [18] : 0x67 (103) [19] : 0x00 (0) [20] : 0x69 (105) [21] : 0x00 (0) [22] : 0x73 (115) [23] : 0x00 (0) [24] : 0x74 (116) [25] : 0x00 (0) [26] : 0x72 (114) [27] : 0x00 (0) [28] : 0x79 (121) [29] : 0x00 (0) [30] : 0x20 (32) [31] : 0x00 (0) [32] : 0x53 (83) [33] : 0x00 (0) [34] : 0x65 (101) [35] : 0x00 (0) [36] : 0x72 (114) [37] : 0x00 (0) [38] : 0x76 (118) [39] : 0x00 (0) [40] : 0x69 (105) [41] : 0x00 (0) [42] : 0x63 (99) [43] : 0x00 (0) [44] : 0x65 (101) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) size : 0x00000030 (48) [2018/02/02 08:19:08.438433, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(48) [0] : 0x52 (82) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x6d (109) [5] : 0x00 (0) [6] : 0x6f (111) [7] : 0x00 (0) [8] : 0x74 (116) [9] : 0x00 (0) [10] : 0x65 (101) [11] : 0x00 (0) [12] : 0x20 (32) [13] : 0x00 (0) [14] : 0x52 (82) [15] : 0x00 (0) [16] : 0x65 (101) [17] : 0x00 (0) [18] : 0x67 (103) [19] : 0x00 (0) [20] : 0x69 (105) [21] : 0x00 (0) [22] : 0x73 (115) [23] : 0x00 (0) [24] : 0x74 (116) [25] : 0x00 (0) [26] : 0x72 (114) [27] : 0x00 (0) [28] : 0x79 (121) [29] : 0x00 (0) [30] : 0x20 (32) [31] : 0x00 (0) [32] : 0x53 (83) [33] : 0x00 (0) [34] : 0x65 (101) [35] : 0x00 (0) [36] : 0x72 (114) [37] : 0x00 (0) [38] : 0x76 (118) [39] : 0x00 (0) [40] : 0x69 (105) [41] : 0x00 (0) [42] : 0x63 (99) [43] : 0x00 (0) [44] : 0x65 (101) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) size : 0x00000030 (48) [2018/02/02 08:19:08.438664, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 07 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.438685, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.438695, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.438714, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.438739, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(58) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x36 (54) [17] : 0x00 (0) [18] : 0x34 (52) [19] : 0x00 (0) [20] : 0x2f (47) [21] : 0x00 (0) [22] : 0x73 (115) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x6d (109) [27] : 0x00 (0) [28] : 0x62 (98) [29] : 0x00 (0) [30] : 0x61 (97) [31] : 0x00 (0) [32] : 0x2f (47) [33] : 0x00 (0) [34] : 0x73 (115) [35] : 0x00 (0) [36] : 0x76 (118) [37] : 0x00 (0) [38] : 0x63 (99) [39] : 0x00 (0) [40] : 0x63 (99) [41] : 0x00 (0) [42] : 0x74 (116) [43] : 0x00 (0) [44] : 0x6c (108) [45] : 0x00 (0) [46] : 0x2f (47) [47] : 0x00 (0) [48] : 0x73 (115) [49] : 0x00 (0) [50] : 0x6d (109) [51] : 0x00 (0) [52] : 0x62 (98) [53] : 0x00 (0) [54] : 0x64 (100) [55] : 0x00 (0) [56] : 0x00 (0) [57] : 0x00 (0) size : 0x0000003a (58) [2018/02/02 08:19:08.439013, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(58) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x36 (54) [17] : 0x00 (0) [18] : 0x34 (52) [19] : 0x00 (0) [20] : 0x2f (47) [21] : 0x00 (0) [22] : 0x73 (115) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x6d (109) [27] : 0x00 (0) [28] : 0x62 (98) [29] : 0x00 (0) [30] : 0x61 (97) [31] : 0x00 (0) [32] : 0x2f (47) [33] : 0x00 (0) [34] : 0x73 (115) [35] : 0x00 (0) [36] : 0x76 (118) [37] : 0x00 (0) [38] : 0x63 (99) [39] : 0x00 (0) [40] : 0x63 (99) [41] : 0x00 (0) [42] : 0x74 (116) [43] : 0x00 (0) [44] : 0x6c (108) [45] : 0x00 (0) [46] : 0x2f (47) [47] : 0x00 (0) [48] : 0x73 (115) [49] : 0x00 (0) [50] : 0x6d (109) [51] : 0x00 (0) [52] : 0x62 (98) [53] : 0x00 (0) [54] : 0x64 (100) [55] : 0x00 (0) [56] : 0x00 (0) [57] : 0x00 (0) size : 0x0000003a (58) [2018/02/02 08:19:08.439282, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 07 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.439304, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.439314, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.439335, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.439357, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(126) [0] : 0x49 (73) [1] : 0x00 (0) [2] : 0x6e (110) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x6e (110) [11] : 0x00 (0) [12] : 0x61 (97) [13] : 0x00 (0) [14] : 0x6c (108) [15] : 0x00 (0) [16] : 0x20 (32) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x65 (101) [21] : 0x00 (0) [22] : 0x72 (114) [23] : 0x00 (0) [24] : 0x76 (118) [25] : 0x00 (0) [26] : 0x69 (105) [27] : 0x00 (0) [28] : 0x63 (99) [29] : 0x00 (0) [30] : 0x65 (101) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x70 (112) [35] : 0x00 (0) [36] : 0x72 (114) [37] : 0x00 (0) [38] : 0x6f (111) [39] : 0x00 (0) [40] : 0x76 (118) [41] : 0x00 (0) [42] : 0x69 (105) [43] : 0x00 (0) [44] : 0x64 (100) [45] : 0x00 (0) [46] : 0x69 (105) [47] : 0x00 (0) [48] : 0x6e (110) [49] : 0x00 (0) [50] : 0x67 (103) [51] : 0x00 (0) [52] : 0x20 (32) [53] : 0x00 (0) [54] : 0x72 (114) [55] : 0x00 (0) [56] : 0x65 (101) [57] : 0x00 (0) [58] : 0x6d (109) [59] : 0x00 (0) [60] : 0x6f (111) [61] : 0x00 (0) [62] : 0x74 (116) [63] : 0x00 (0) [64] : 0x65 (101) [65] : 0x00 (0) [66] : 0x20 (32) [67] : 0x00 (0) [68] : 0x61 (97) [69] : 0x00 (0) [70] : 0x63 (99) [71] : 0x00 (0) [72] : 0x63 (99) [73] : 0x00 (0) [74] : 0x65 (101) [75] : 0x00 (0) [76] : 0x73 (115) [77] : 0x00 (0) [78] : 0x73 (115) [79] : 0x00 (0) [80] : 0x20 (32) [81] : 0x00 (0) [82] : 0x74 (116) [83] : 0x00 (0) [84] : 0x6f (111) [85] : 0x00 (0) [86] : 0x20 (32) [87] : 0x00 (0) [88] : 0x74 (116) [89] : 0x00 (0) [90] : 0x68 (104) [91] : 0x00 (0) [92] : 0x65 (101) [93] : 0x00 (0) [94] : 0x20 (32) [95] : 0x00 (0) [96] : 0x53 (83) [97] : 0x00 (0) [98] : 0x61 (97) [99] : 0x00 (0) [100] : 0x6d (109) [101] : 0x00 (0) [102] : 0x62 (98) [103] : 0x00 (0) [104] : 0x61 (97) [105] : 0x00 (0) [106] : 0x20 (32) [107] : 0x00 (0) [108] : 0x72 (114) [109] : 0x00 (0) [110] : 0x65 (101) [111] : 0x00 (0) [112] : 0x67 (103) [113] : 0x00 (0) [114] : 0x69 (105) [115] : 0x00 (0) [116] : 0x73 (115) [117] : 0x00 (0) [118] : 0x74 (116) [119] : 0x00 (0) [120] : 0x72 (114) [121] : 0x00 (0) [122] : 0x79 (121) [123] : 0x00 (0) [124] : 0x00 (0) [125] : 0x00 (0) size : 0x0000007e (126) [2018/02/02 08:19:08.439875, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(126) [0] : 0x49 (73) [1] : 0x00 (0) [2] : 0x6e (110) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x6e (110) [11] : 0x00 (0) [12] : 0x61 (97) [13] : 0x00 (0) [14] : 0x6c (108) [15] : 0x00 (0) [16] : 0x20 (32) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x65 (101) [21] : 0x00 (0) [22] : 0x72 (114) [23] : 0x00 (0) [24] : 0x76 (118) [25] : 0x00 (0) [26] : 0x69 (105) [27] : 0x00 (0) [28] : 0x63 (99) [29] : 0x00 (0) [30] : 0x65 (101) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x70 (112) [35] : 0x00 (0) [36] : 0x72 (114) [37] : 0x00 (0) [38] : 0x6f (111) [39] : 0x00 (0) [40] : 0x76 (118) [41] : 0x00 (0) [42] : 0x69 (105) [43] : 0x00 (0) [44] : 0x64 (100) [45] : 0x00 (0) [46] : 0x69 (105) [47] : 0x00 (0) [48] : 0x6e (110) [49] : 0x00 (0) [50] : 0x67 (103) [51] : 0x00 (0) [52] : 0x20 (32) [53] : 0x00 (0) [54] : 0x72 (114) [55] : 0x00 (0) [56] : 0x65 (101) [57] : 0x00 (0) [58] : 0x6d (109) [59] : 0x00 (0) [60] : 0x6f (111) [61] : 0x00 (0) [62] : 0x74 (116) [63] : 0x00 (0) [64] : 0x65 (101) [65] : 0x00 (0) [66] : 0x20 (32) [67] : 0x00 (0) [68] : 0x61 (97) [69] : 0x00 (0) [70] : 0x63 (99) [71] : 0x00 (0) [72] : 0x63 (99) [73] : 0x00 (0) [74] : 0x65 (101) [75] : 0x00 (0) [76] : 0x73 (115) [77] : 0x00 (0) [78] : 0x73 (115) [79] : 0x00 (0) [80] : 0x20 (32) [81] : 0x00 (0) [82] : 0x74 (116) [83] : 0x00 (0) [84] : 0x6f (111) [85] : 0x00 (0) [86] : 0x20 (32) [87] : 0x00 (0) [88] : 0x74 (116) [89] : 0x00 (0) [90] : 0x68 (104) [91] : 0x00 (0) [92] : 0x65 (101) [93] : 0x00 (0) [94] : 0x20 (32) [95] : 0x00 (0) [96] : 0x53 (83) [97] : 0x00 (0) [98] : 0x61 (97) [99] : 0x00 (0) [100] : 0x6d (109) [101] : 0x00 (0) [102] : 0x62 (98) [103] : 0x00 (0) [104] : 0x61 (97) [105] : 0x00 (0) [106] : 0x20 (32) [107] : 0x00 (0) [108] : 0x72 (114) [109] : 0x00 (0) [110] : 0x65 (101) [111] : 0x00 (0) [112] : 0x67 (103) [113] : 0x00 (0) [114] : 0x69 (105) [115] : 0x00 (0) [116] : 0x73 (115) [117] : 0x00 (0) [118] : 0x74 (116) [119] : 0x00 (0) [120] : 0x72 (114) [121] : 0x00 (0) [122] : 0x79 (121) [123] : 0x00 (0) [124] : 0x00 (0) [125] : 0x00 (0) size : 0x0000007e (126) [2018/02/02 08:19:08.440428, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 07 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.440450, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.440460, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.440479, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.440501, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.440536, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.440563, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 07 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.440583, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 07 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.440605, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.440638, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.440674, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0074 (116) name_size : 0x0074 (116) name : * name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2018/02/02 08:19:08.440800, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0074 (116) name_size : 0x0074 (116) name : * name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2018/02/02 08:19:08.440917, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 01 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.440938, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.440947, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.440957, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2018/02/02 08:19:08.440966, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2018/02/02 08:19:08.440978, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.440986, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.440994, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.441003, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2018/02/02 08:19:08.441011, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.441019, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.441027, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.441040, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.441049, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.441059, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.441070, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.441078, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 18) -> 18 [2018/02/02 08:19:08.441090, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.441100, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.441108, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.441117, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.441125, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.441133, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.441141, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2018/02/02 08:19:08.441149, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.441157, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.441166, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.441174, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2018/02/02 08:19:08.441182, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.441191, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.441199, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.441206, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.441216, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.441226, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.441235, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 17) -> 8 [2018/02/02 08:19:08.441244, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 9) -> 9 [2018/02/02 08:19:08.441256, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.441266, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.441279, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.441287, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.441296, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.441304, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.441312, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services] [2018/02/02 08:19:08.441320, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.441328, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.441336, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.441344, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2018/02/02 08:19:08.441352, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.441360, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.441369, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2018/02/02 08:19:08.441377, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.441385, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.441393, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.441401, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.441409, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.441419, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.441430, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.441439, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 65) -> 13 [2018/02/02 08:19:08.441449, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 52) -> 9 [2018/02/02 08:19:08.441459, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 43) -> 6 [2018/02/02 08:19:08.441469, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 37) -> 9 [2018/02/02 08:19:08.441479, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 28) -> 8 [2018/02/02 08:19:08.441490, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 20) -> 15 [2018/02/02 08:19:08.441504, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 5) -> 5 [2018/02/02 08:19:08.441516, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.441527, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2018/02/02 08:19:08.441535, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2018/02/02 08:19:08.441543, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.441552, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.441560, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.441568, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services\RemoteRegistry] [2018/02/02 08:19:08.441576, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.441584, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.441592, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.441600, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services\RemoteRegistry] [2018/02/02 08:19:08.441608, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.441617, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.441625, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [RemoteRegistry] [2018/02/02 08:19:08.441633, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.441641, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.441649, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.441657, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [RemoteRegistry], new_path => [] [2018/02/02 08:19:08.441665, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2018/02/02 08:19:08.441673, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2018/02/02 08:19:08.441681, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2018/02/02 08:19:08.441689, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [RemoteRegistry] [2018/02/02 08:19:08.441702, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.441710, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.441720, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 13) -> 4 [2018/02/02 08:19:08.441731, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 13) -> 4 [2018/02/02 08:19:08.441739, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 9) -> 9 [2018/02/02 08:19:08.441752, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2018/02/02 08:19:08.441761, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2018/02/02 08:19:08.441770, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.441778, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.441786, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.441794, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services\RemoteRegistry\Security] [2018/02/02 08:19:08.441802, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.441810, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.441818, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.441826, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services\RemoteRegistry\Security] [2018/02/02 08:19:08.441835, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.441843, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.441851, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [RemoteRegistry\Security] [2018/02/02 08:19:08.441859, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.441867, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.441875, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.441883, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [RemoteRegistry], new_path => [Security] [2018/02/02 08:19:08.441891, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2018/02/02 08:19:08.441899, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2018/02/02 08:19:08.441912, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2018/02/02 08:19:08.441920, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [RemoteRegistry] [2018/02/02 08:19:08.441928, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.441936, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.441946, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.441956, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.441967, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 08 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.441992, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000008-0000-0000-745a-4c65c0580000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2018/02/02 08:19:08.442033, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000008-0000-0000-745a-4c65c0580000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2018/02/02 08:19:08.442080, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000008-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2018/02/02 08:19:08.442576, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000008-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2018/02/02 08:19:08.443070, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 08 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.443092, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.443103, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.443114, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 141) -> 4 [2018/02/02 08:19:08.443123, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 137) -> 137 [2018/02/02 08:19:08.443133, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.443153, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.443174, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000008-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.443203, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000008-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.443235, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 08 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.443256, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 08 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.443277, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.443310, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.443347, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x004e (78) name_size : 0x004e (78) name : * name : 'SYSTEM\CurrentControlSet\Services\WINS' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2018/02/02 08:19:08.443468, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x004e (78) name_size : 0x004e (78) name : * name : 'SYSTEM\CurrentControlSet\Services\WINS' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2018/02/02 08:19:08.443590, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 01 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.443612, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.443620, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.443630, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2018/02/02 08:19:08.443639, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2018/02/02 08:19:08.443647, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.443655, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.443663, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.443671, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2018/02/02 08:19:08.443679, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.443687, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.443696, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.443704, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.443711, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.443721, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.443731, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.443740, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 18) -> 18 [2018/02/02 08:19:08.443755, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.443766, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.443774, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.443782, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.443790, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.443799, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.443807, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2018/02/02 08:19:08.443815, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.443823, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.443831, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.443839, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2018/02/02 08:19:08.443847, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.443855, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.443863, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.443871, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.443881, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.443891, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.443899, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 17) -> 8 [2018/02/02 08:19:08.443911, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 9) -> 9 [2018/02/02 08:19:08.443923, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.443933, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.443942, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.443950, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.443958, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.443966, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.443984, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services] [2018/02/02 08:19:08.444001, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.444010, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.444028, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.444046, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2018/02/02 08:19:08.444054, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.444071, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.444080, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2018/02/02 08:19:08.444088, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.444096, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.444104, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.444112, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.444120, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.444130, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.444142, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.444150, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 65) -> 13 [2018/02/02 08:19:08.444160, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 52) -> 9 [2018/02/02 08:19:08.444171, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 43) -> 6 [2018/02/02 08:19:08.444181, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 37) -> 9 [2018/02/02 08:19:08.444191, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 28) -> 8 [2018/02/02 08:19:08.444201, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 20) -> 15 [2018/02/02 08:19:08.444211, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 5) -> 5 [2018/02/02 08:19:08.444224, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2018/02/02 08:19:08.444232, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services\WINS] [2018/02/02 08:19:08.444240, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.444254, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.444263, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.444271, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services\WINS] [2018/02/02 08:19:08.444279, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.444287, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.444295, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.444303, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services\WINS] [2018/02/02 08:19:08.444311, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.444320, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.444328, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [WINS] [2018/02/02 08:19:08.444336, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.444344, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.444352, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.444361, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [WINS], new_path => [] [2018/02/02 08:19:08.444369, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2018/02/02 08:19:08.444377, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2018/02/02 08:19:08.444386, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2018/02/02 08:19:08.444394, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [WINS] [2018/02/02 08:19:08.444402, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.444409, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.444419, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 13) -> 4 [2018/02/02 08:19:08.444429, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 13) -> 4 [2018/02/02 08:19:08.444438, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 9) -> 9 [2018/02/02 08:19:08.444450, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 09 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.444475, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-745a-4c65c0580000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2018/02/02 08:19:08.444517, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-745a-4c65c0580000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2018/02/02 08:19:08.444563, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.444639, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.444711, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 09 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.444732, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.444743, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 13) -> 4 [2018/02/02 08:19:08.444759, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 475) -> 4 [2018/02/02 08:19:08.444768, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 471) -> 18 [2018/02/02 08:19:08.444777, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 453) -> 17 [2018/02/02 08:19:08.444786, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 436) -> 25 [2018/02/02 08:19:08.444795, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 411) -> 43 [2018/02/02 08:19:08.444804, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 368) -> 94 [2018/02/02 08:19:08.444813, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 274) -> 76 [2018/02/02 08:19:08.444822, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 198) -> 198 [2018/02/02 08:19:08.444833, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.444852, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.444873, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.444949, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.445025, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 09 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.445051, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.445061, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.445080, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.445101, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.445177, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2018/02/02 08:19:08.445248, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 09 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.445269, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.445279, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.445297, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.445319, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2018/02/02 08:19:08.445468, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2018/02/02 08:19:08.445614, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 09 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.445635, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.445645, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.445664, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.445686, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(74) [0] : 0x57 (87) [1] : 0x00 (0) [2] : 0x69 (105) [3] : 0x00 (0) [4] : 0x6e (110) [5] : 0x00 (0) [6] : 0x64 (100) [7] : 0x00 (0) [8] : 0x6f (111) [9] : 0x00 (0) [10] : 0x77 (119) [11] : 0x00 (0) [12] : 0x73 (115) [13] : 0x00 (0) [14] : 0x20 (32) [15] : 0x00 (0) [16] : 0x49 (73) [17] : 0x00 (0) [18] : 0x6e (110) [19] : 0x00 (0) [20] : 0x74 (116) [21] : 0x00 (0) [22] : 0x65 (101) [23] : 0x00 (0) [24] : 0x72 (114) [25] : 0x00 (0) [26] : 0x6e (110) [27] : 0x00 (0) [28] : 0x65 (101) [29] : 0x00 (0) [30] : 0x74 (116) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x4e (78) [35] : 0x00 (0) [36] : 0x61 (97) [37] : 0x00 (0) [38] : 0x6d (109) [39] : 0x00 (0) [40] : 0x65 (101) [41] : 0x00 (0) [42] : 0x20 (32) [43] : 0x00 (0) [44] : 0x53 (83) [45] : 0x00 (0) [46] : 0x65 (101) [47] : 0x00 (0) [48] : 0x72 (114) [49] : 0x00 (0) [50] : 0x76 (118) [51] : 0x00 (0) [52] : 0x69 (105) [53] : 0x00 (0) [54] : 0x63 (99) [55] : 0x00 (0) [56] : 0x65 (101) [57] : 0x00 (0) [58] : 0x20 (32) [59] : 0x00 (0) [60] : 0x28 (40) [61] : 0x00 (0) [62] : 0x57 (87) [63] : 0x00 (0) [64] : 0x49 (73) [65] : 0x00 (0) [66] : 0x4e (78) [67] : 0x00 (0) [68] : 0x53 (83) [69] : 0x00 (0) [70] : 0x29 (41) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) size : 0x0000004a (74) [2018/02/02 08:19:08.446017, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(74) [0] : 0x57 (87) [1] : 0x00 (0) [2] : 0x69 (105) [3] : 0x00 (0) [4] : 0x6e (110) [5] : 0x00 (0) [6] : 0x64 (100) [7] : 0x00 (0) [8] : 0x6f (111) [9] : 0x00 (0) [10] : 0x77 (119) [11] : 0x00 (0) [12] : 0x73 (115) [13] : 0x00 (0) [14] : 0x20 (32) [15] : 0x00 (0) [16] : 0x49 (73) [17] : 0x00 (0) [18] : 0x6e (110) [19] : 0x00 (0) [20] : 0x74 (116) [21] : 0x00 (0) [22] : 0x65 (101) [23] : 0x00 (0) [24] : 0x72 (114) [25] : 0x00 (0) [26] : 0x6e (110) [27] : 0x00 (0) [28] : 0x65 (101) [29] : 0x00 (0) [30] : 0x74 (116) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x4e (78) [35] : 0x00 (0) [36] : 0x61 (97) [37] : 0x00 (0) [38] : 0x6d (109) [39] : 0x00 (0) [40] : 0x65 (101) [41] : 0x00 (0) [42] : 0x20 (32) [43] : 0x00 (0) [44] : 0x53 (83) [45] : 0x00 (0) [46] : 0x65 (101) [47] : 0x00 (0) [48] : 0x72 (114) [49] : 0x00 (0) [50] : 0x76 (118) [51] : 0x00 (0) [52] : 0x69 (105) [53] : 0x00 (0) [54] : 0x63 (99) [55] : 0x00 (0) [56] : 0x65 (101) [57] : 0x00 (0) [58] : 0x20 (32) [59] : 0x00 (0) [60] : 0x28 (40) [61] : 0x00 (0) [62] : 0x57 (87) [63] : 0x00 (0) [64] : 0x49 (73) [65] : 0x00 (0) [66] : 0x4e (78) [67] : 0x00 (0) [68] : 0x53 (83) [69] : 0x00 (0) [70] : 0x29 (41) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) size : 0x0000004a (74) [2018/02/02 08:19:08.446340, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 09 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.446362, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.446375, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.446396, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.446418, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(58) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x36 (54) [17] : 0x00 (0) [18] : 0x34 (52) [19] : 0x00 (0) [20] : 0x2f (47) [21] : 0x00 (0) [22] : 0x73 (115) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x6d (109) [27] : 0x00 (0) [28] : 0x62 (98) [29] : 0x00 (0) [30] : 0x61 (97) [31] : 0x00 (0) [32] : 0x2f (47) [33] : 0x00 (0) [34] : 0x73 (115) [35] : 0x00 (0) [36] : 0x76 (118) [37] : 0x00 (0) [38] : 0x63 (99) [39] : 0x00 (0) [40] : 0x63 (99) [41] : 0x00 (0) [42] : 0x74 (116) [43] : 0x00 (0) [44] : 0x6c (108) [45] : 0x00 (0) [46] : 0x2f (47) [47] : 0x00 (0) [48] : 0x6e (110) [49] : 0x00 (0) [50] : 0x6d (109) [51] : 0x00 (0) [52] : 0x62 (98) [53] : 0x00 (0) [54] : 0x64 (100) [55] : 0x00 (0) [56] : 0x00 (0) [57] : 0x00 (0) size : 0x0000003a (58) [2018/02/02 08:19:08.446688, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(58) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x36 (54) [17] : 0x00 (0) [18] : 0x34 (52) [19] : 0x00 (0) [20] : 0x2f (47) [21] : 0x00 (0) [22] : 0x73 (115) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x6d (109) [27] : 0x00 (0) [28] : 0x62 (98) [29] : 0x00 (0) [30] : 0x61 (97) [31] : 0x00 (0) [32] : 0x2f (47) [33] : 0x00 (0) [34] : 0x73 (115) [35] : 0x00 (0) [36] : 0x76 (118) [37] : 0x00 (0) [38] : 0x63 (99) [39] : 0x00 (0) [40] : 0x63 (99) [41] : 0x00 (0) [42] : 0x74 (116) [43] : 0x00 (0) [44] : 0x6c (108) [45] : 0x00 (0) [46] : 0x2f (47) [47] : 0x00 (0) [48] : 0x6e (110) [49] : 0x00 (0) [50] : 0x6d (109) [51] : 0x00 (0) [52] : 0x62 (98) [53] : 0x00 (0) [54] : 0x64 (100) [55] : 0x00 (0) [56] : 0x00 (0) [57] : 0x00 (0) size : 0x0000003a (58) [2018/02/02 08:19:08.446953, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 09 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.446978, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.446988, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.447007, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.447029, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(178) [0] : 0x49 (73) [1] : 0x00 (0) [2] : 0x6e (110) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x6e (110) [11] : 0x00 (0) [12] : 0x61 (97) [13] : 0x00 (0) [14] : 0x6c (108) [15] : 0x00 (0) [16] : 0x20 (32) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x65 (101) [21] : 0x00 (0) [22] : 0x72 (114) [23] : 0x00 (0) [24] : 0x76 (118) [25] : 0x00 (0) [26] : 0x69 (105) [27] : 0x00 (0) [28] : 0x63 (99) [29] : 0x00 (0) [30] : 0x65 (101) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x70 (112) [35] : 0x00 (0) [36] : 0x72 (114) [37] : 0x00 (0) [38] : 0x6f (111) [39] : 0x00 (0) [40] : 0x76 (118) [41] : 0x00 (0) [42] : 0x69 (105) [43] : 0x00 (0) [44] : 0x64 (100) [45] : 0x00 (0) [46] : 0x69 (105) [47] : 0x00 (0) [48] : 0x6e (110) [49] : 0x00 (0) [50] : 0x67 (103) [51] : 0x00 (0) [52] : 0x20 (32) [53] : 0x00 (0) [54] : 0x61 (97) [55] : 0x00 (0) [56] : 0x20 (32) [57] : 0x00 (0) [58] : 0x4e (78) [59] : 0x00 (0) [60] : 0x65 (101) [61] : 0x00 (0) [62] : 0x74 (116) [63] : 0x00 (0) [64] : 0x42 (66) [65] : 0x00 (0) [66] : 0x49 (73) [67] : 0x00 (0) [68] : 0x4f (79) [69] : 0x00 (0) [70] : 0x53 (83) [71] : 0x00 (0) [72] : 0x20 (32) [73] : 0x00 (0) [74] : 0x70 (112) [75] : 0x00 (0) [76] : 0x6f (111) [77] : 0x00 (0) [78] : 0x69 (105) [79] : 0x00 (0) [80] : 0x6e (110) [81] : 0x00 (0) [82] : 0x74 (116) [83] : 0x00 (0) [84] : 0x2d (45) [85] : 0x00 (0) [86] : 0x74 (116) [87] : 0x00 (0) [88] : 0x6f (111) [89] : 0x00 (0) [90] : 0x2d (45) [91] : 0x00 (0) [92] : 0x70 (112) [93] : 0x00 (0) [94] : 0x6f (111) [95] : 0x00 (0) [96] : 0x69 (105) [97] : 0x00 (0) [98] : 0x6e (110) [99] : 0x00 (0) [100] : 0x74 (116) [101] : 0x00 (0) [102] : 0x20 (32) [103] : 0x00 (0) [104] : 0x6e (110) [105] : 0x00 (0) [106] : 0x61 (97) [107] : 0x00 (0) [108] : 0x6d (109) [109] : 0x00 (0) [110] : 0x65 (101) [111] : 0x00 (0) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x73 (115) [115] : 0x00 (0) [116] : 0x65 (101) [117] : 0x00 (0) [118] : 0x72 (114) [119] : 0x00 (0) [120] : 0x76 (118) [121] : 0x00 (0) [122] : 0x65 (101) [123] : 0x00 (0) [124] : 0x72 (114) [125] : 0x00 (0) [126] : 0x28 (40) [127] : 0x00 (0) [128] : 0x6e (110) [129] : 0x00 (0) [130] : 0x6f (111) [131] : 0x00 (0) [132] : 0x74 (116) [133] : 0x00 (0) [134] : 0x20 (32) [135] : 0x00 (0) [136] : 0x72 (114) [137] : 0x00 (0) [138] : 0x65 (101) [139] : 0x00 (0) [140] : 0x6d (109) [141] : 0x00 (0) [142] : 0x6f (111) [143] : 0x00 (0) [144] : 0x74 (116) [145] : 0x00 (0) [146] : 0x65 (101) [147] : 0x00 (0) [148] : 0x6c (108) [149] : 0x00 (0) [150] : 0x79 (121) [151] : 0x00 (0) [152] : 0x20 (32) [153] : 0x00 (0) [154] : 0x6d (109) [155] : 0x00 (0) [156] : 0x61 (97) [157] : 0x00 (0) [158] : 0x6e (110) [159] : 0x00 (0) [160] : 0x61 (97) [161] : 0x00 (0) [162] : 0x67 (103) [163] : 0x00 (0) [164] : 0x65 (101) [165] : 0x00 (0) [166] : 0x61 (97) [167] : 0x00 (0) [168] : 0x62 (98) [169] : 0x00 (0) [170] : 0x6c (108) [171] : 0x00 (0) [172] : 0x65 (101) [173] : 0x00 (0) [174] : 0x29 (41) [175] : 0x00 (0) [176] : 0x00 (0) [177] : 0x00 (0) size : 0x000000b2 (178) [2018/02/02 08:19:08.447733, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(178) [0] : 0x49 (73) [1] : 0x00 (0) [2] : 0x6e (110) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x6e (110) [11] : 0x00 (0) [12] : 0x61 (97) [13] : 0x00 (0) [14] : 0x6c (108) [15] : 0x00 (0) [16] : 0x20 (32) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x65 (101) [21] : 0x00 (0) [22] : 0x72 (114) [23] : 0x00 (0) [24] : 0x76 (118) [25] : 0x00 (0) [26] : 0x69 (105) [27] : 0x00 (0) [28] : 0x63 (99) [29] : 0x00 (0) [30] : 0x65 (101) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x70 (112) [35] : 0x00 (0) [36] : 0x72 (114) [37] : 0x00 (0) [38] : 0x6f (111) [39] : 0x00 (0) [40] : 0x76 (118) [41] : 0x00 (0) [42] : 0x69 (105) [43] : 0x00 (0) [44] : 0x64 (100) [45] : 0x00 (0) [46] : 0x69 (105) [47] : 0x00 (0) [48] : 0x6e (110) [49] : 0x00 (0) [50] : 0x67 (103) [51] : 0x00 (0) [52] : 0x20 (32) [53] : 0x00 (0) [54] : 0x61 (97) [55] : 0x00 (0) [56] : 0x20 (32) [57] : 0x00 (0) [58] : 0x4e (78) [59] : 0x00 (0) [60] : 0x65 (101) [61] : 0x00 (0) [62] : 0x74 (116) [63] : 0x00 (0) [64] : 0x42 (66) [65] : 0x00 (0) [66] : 0x49 (73) [67] : 0x00 (0) [68] : 0x4f (79) [69] : 0x00 (0) [70] : 0x53 (83) [71] : 0x00 (0) [72] : 0x20 (32) [73] : 0x00 (0) [74] : 0x70 (112) [75] : 0x00 (0) [76] : 0x6f (111) [77] : 0x00 (0) [78] : 0x69 (105) [79] : 0x00 (0) [80] : 0x6e (110) [81] : 0x00 (0) [82] : 0x74 (116) [83] : 0x00 (0) [84] : 0x2d (45) [85] : 0x00 (0) [86] : 0x74 (116) [87] : 0x00 (0) [88] : 0x6f (111) [89] : 0x00 (0) [90] : 0x2d (45) [91] : 0x00 (0) [92] : 0x70 (112) [93] : 0x00 (0) [94] : 0x6f (111) [95] : 0x00 (0) [96] : 0x69 (105) [97] : 0x00 (0) [98] : 0x6e (110) [99] : 0x00 (0) [100] : 0x74 (116) [101] : 0x00 (0) [102] : 0x20 (32) [103] : 0x00 (0) [104] : 0x6e (110) [105] : 0x00 (0) [106] : 0x61 (97) [107] : 0x00 (0) [108] : 0x6d (109) [109] : 0x00 (0) [110] : 0x65 (101) [111] : 0x00 (0) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x73 (115) [115] : 0x00 (0) [116] : 0x65 (101) [117] : 0x00 (0) [118] : 0x72 (114) [119] : 0x00 (0) [120] : 0x76 (118) [121] : 0x00 (0) [122] : 0x65 (101) [123] : 0x00 (0) [124] : 0x72 (114) [125] : 0x00 (0) [126] : 0x28 (40) [127] : 0x00 (0) [128] : 0x6e (110) [129] : 0x00 (0) [130] : 0x6f (111) [131] : 0x00 (0) [132] : 0x74 (116) [133] : 0x00 (0) [134] : 0x20 (32) [135] : 0x00 (0) [136] : 0x72 (114) [137] : 0x00 (0) [138] : 0x65 (101) [139] : 0x00 (0) [140] : 0x6d (109) [141] : 0x00 (0) [142] : 0x6f (111) [143] : 0x00 (0) [144] : 0x74 (116) [145] : 0x00 (0) [146] : 0x65 (101) [147] : 0x00 (0) [148] : 0x6c (108) [149] : 0x00 (0) [150] : 0x79 (121) [151] : 0x00 (0) [152] : 0x20 (32) [153] : 0x00 (0) [154] : 0x6d (109) [155] : 0x00 (0) [156] : 0x61 (97) [157] : 0x00 (0) [158] : 0x6e (110) [159] : 0x00 (0) [160] : 0x61 (97) [161] : 0x00 (0) [162] : 0x67 (103) [163] : 0x00 (0) [164] : 0x65 (101) [165] : 0x00 (0) [166] : 0x61 (97) [167] : 0x00 (0) [168] : 0x62 (98) [169] : 0x00 (0) [170] : 0x6c (108) [171] : 0x00 (0) [172] : 0x65 (101) [173] : 0x00 (0) [174] : 0x29 (41) [175] : 0x00 (0) [176] : 0x00 (0) [177] : 0x00 (0) size : 0x000000b2 (178) [2018/02/02 08:19:08.448473, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 09 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.448496, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.448506, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.448525, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.448547, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.448577, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.448604, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 09 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.448624, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 09 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.448645, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.448679, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.448714, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0060 (96) name_size : 0x0060 (96) name : * name : 'SYSTEM\CurrentControlSet\Services\WINS\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2018/02/02 08:19:08.448841, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0060 (96) name_size : 0x0060 (96) name : * name : 'SYSTEM\CurrentControlSet\Services\WINS\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2018/02/02 08:19:08.448958, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 01 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.448984, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.448993, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.449003, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2018/02/02 08:19:08.449011, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2018/02/02 08:19:08.449019, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.449032, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.449040, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.449048, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2018/02/02 08:19:08.449056, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.449065, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.449073, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.449081, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.449089, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.449099, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.449109, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.449117, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 18) -> 18 [2018/02/02 08:19:08.449129, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.449139, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.449147, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.449155, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.449163, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.449172, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.449180, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2018/02/02 08:19:08.449188, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.449196, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.449204, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.449212, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2018/02/02 08:19:08.449220, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.449229, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.449241, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.449249, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.449259, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.449269, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.449277, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 17) -> 8 [2018/02/02 08:19:08.449287, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 9) -> 9 [2018/02/02 08:19:08.449301, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.449311, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.449320, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.449328, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.449336, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.449344, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.449352, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services] [2018/02/02 08:19:08.449360, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.449368, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.449376, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.449384, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2018/02/02 08:19:08.449393, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.449401, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.449409, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2018/02/02 08:19:08.449417, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.449425, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.449434, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.449442, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.449449, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.449464, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.449475, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.449484, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 65) -> 13 [2018/02/02 08:19:08.449494, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 52) -> 9 [2018/02/02 08:19:08.449504, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 43) -> 6 [2018/02/02 08:19:08.449514, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 37) -> 9 [2018/02/02 08:19:08.449524, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 28) -> 8 [2018/02/02 08:19:08.449535, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 20) -> 15 [2018/02/02 08:19:08.449545, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 5) -> 5 [2018/02/02 08:19:08.449556, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 2 [2018/02/02 08:19:08.449567, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2018/02/02 08:19:08.449575, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services\WINS] [2018/02/02 08:19:08.449583, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.449591, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.449599, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.449607, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services\WINS] [2018/02/02 08:19:08.449615, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.449624, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.449632, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.449640, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services\WINS] [2018/02/02 08:19:08.449648, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.449656, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.449664, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [WINS] [2018/02/02 08:19:08.449672, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.449680, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.449692, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.449701, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [WINS], new_path => [] [2018/02/02 08:19:08.449709, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2018/02/02 08:19:08.449717, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2018/02/02 08:19:08.449725, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2018/02/02 08:19:08.449733, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [WINS] [2018/02/02 08:19:08.449741, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.449748, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.449758, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 13) -> 4 [2018/02/02 08:19:08.449769, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 13) -> 4 [2018/02/02 08:19:08.449777, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 9) -> 9 [2018/02/02 08:19:08.449790, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2018/02/02 08:19:08.449799, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services\WINS\Security] [2018/02/02 08:19:08.449807, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.449815, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.449823, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.449831, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services\WINS\Security] [2018/02/02 08:19:08.449839, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.449847, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.449855, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.449864, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services\WINS\Security] [2018/02/02 08:19:08.449872, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.449880, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.449888, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [WINS\Security] [2018/02/02 08:19:08.449900, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.449909, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.449917, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.449925, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [WINS], new_path => [Security] [2018/02/02 08:19:08.449933, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2018/02/02 08:19:08.449941, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2018/02/02 08:19:08.449949, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2018/02/02 08:19:08.449957, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [WINS] [2018/02/02 08:19:08.449965, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.449976, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.449986, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.449997, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.450007, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.450028, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000a-0000-0000-745a-4c65c0580000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2018/02/02 08:19:08.450070, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000a-0000-0000-745a-4c65c0580000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2018/02/02 08:19:08.450115, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000a-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2018/02/02 08:19:08.450615, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000a-0000-0000-745a-4c65c0580000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2018/02/02 08:19:08.451112, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.451134, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/var/lib/samba/registry.tdb): tdb_transaction_start: nesting 1 [2018/02/02 08:19:08.451145, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.451156, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 141) -> 4 [2018/02/02 08:19:08.451165, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 137) -> 137 [2018/02/02 08:19:08.451175, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.451194, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2018/02/02 08:19:08.451221, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000a-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.451250, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000a-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.451277, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.451298, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.451319, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.451352, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.451387, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.451416, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.451443, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 02 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.451464, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 02 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.451485, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.451522, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.451596, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2018/02/02 08:19:08.451648, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2018/02/02 08:19:08.451698, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.451707, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:08.451715, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.451723, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:08.451731, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:08.451759, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:08.451772, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2018/02/02 08:19:08.451781, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2018/02/02 08:19:08.451789, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.451797, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.451805, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.451819, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.451827, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.451838, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 20) -> 4 [2018/02/02 08:19:08.451850, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 20) -> 4 [2018/02/02 08:19:08.451858, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 16) -> 9 [2018/02/02 08:19:08.451869, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 7) -> 7 [2018/02/02 08:19:08.451880, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.451901, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000b-0000-0000-745a-4c65c0580000 result : WERR_OK [2018/02/02 08:19:08.451935, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000b-0000-0000-745a-4c65c0580000 result : WERR_OK [2018/02/02 08:19:08.451976, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000b-0000-0000-745a-4c65c0580000 keyname: struct winreg_String name_len : 0x0056 (86) name_size : 0x0056 (86) name : * name : 'SYSTEM\CurrentControlSet\Services\Eventlog' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2018/02/02 08:19:08.452112, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000b-0000-0000-745a-4c65c0580000 keyname: struct winreg_String name_len : 0x0056 (86) name_size : 0x0056 (86) name : * name : 'SYSTEM\CurrentControlSet\Services\Eventlog' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2018/02/02 08:19:08.452208, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.452231, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2018/02/02 08:19:08.452239, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2018/02/02 08:19:08.452247, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.452256, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.452264, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.452272, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2018/02/02 08:19:08.452280, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.452288, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.452296, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.452304, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.452312, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.452323, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.452334, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 22) -> 4 [2018/02/02 08:19:08.452343, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 18) -> 18 [2018/02/02 08:19:08.452355, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.452364, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet] [2018/02/02 08:19:08.452372, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.452380, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.452392, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.452400, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2018/02/02 08:19:08.452409, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.452417, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.452425, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.452433, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2018/02/02 08:19:08.452441, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.452449, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.452457, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.452465, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.452476, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.452487, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 21) -> 4 [2018/02/02 08:19:08.452496, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 17) -> 8 [2018/02/02 08:19:08.452506, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 9) -> 9 [2018/02/02 08:19:08.452518, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.452527, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services] [2018/02/02 08:19:08.452535, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.452543, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.452551, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.452559, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services] [2018/02/02 08:19:08.452567, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.452575, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.452583, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.452591, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2018/02/02 08:19:08.452603, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.452612, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.452620, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2018/02/02 08:19:08.452628, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.452636, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.452644, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.452652, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.452660, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.452671, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.452682, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.452691, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 65) -> 13 [2018/02/02 08:19:08.452701, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 52) -> 9 [2018/02/02 08:19:08.452711, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 43) -> 6 [2018/02/02 08:19:08.452721, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 37) -> 9 [2018/02/02 08:19:08.452731, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 28) -> 8 [2018/02/02 08:19:08.452741, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 20) -> 15 [2018/02/02 08:19:08.452752, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(f, 5) -> 5 [2018/02/02 08:19:08.452763, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2018/02/02 08:19:08.452772, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM\CurrentControlSet\Services\Eventlog] [2018/02/02 08:19:08.452780, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2018/02/02 08:19:08.452788, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2018/02/02 08:19:08.452796, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [HKLM] [2018/02/02 08:19:08.452804, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet\Services\Eventlog] [2018/02/02 08:19:08.452812, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2018/02/02 08:19:08.452820, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2018/02/02 08:19:08.452828, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2018/02/02 08:19:08.452840, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services\Eventlog] [2018/02/02 08:19:08.452849, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2018/02/02 08:19:08.452857, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2018/02/02 08:19:08.452865, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [Eventlog] [2018/02/02 08:19:08.452873, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Control] [2018/02/02 08:19:08.452882, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [Services] [2018/02/02 08:19:08.452890, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Found [Services] [2018/02/02 08:19:08.452898, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:413(pathtree_find) pathtree_find: [loop] base => [Eventlog], new_path => [] [2018/02/02 08:19:08.452906, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:184(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2018/02/02 08:19:08.452914, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:200(pathtree_find_child) pathtree_find_child: Did not find [Eventlog] [2018/02/02 08:19:08.452922, 11, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:436(pathtree_find) pathtree_find: Found data_p! [2018/02/02 08:19:08.452930, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2018/02/02 08:19:08.452941, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.452952, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.452963, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.452988, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000c-0000-0000-745a-4c65c0580000 result : WERR_OK [2018/02/02 08:19:08.453024, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000c-0000-0000-745a-4c65c0580000 result : WERR_OK [2018/02/02 08:19:08.453061, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000c-0000-0000-745a-4c65c0580000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2018/02/02 08:19:08.453113, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000c-0000-0000-745a-4c65c0580000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2018/02/02 08:19:08.453159, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.453183, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.453195, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 69) -> 4 [2018/02/02 08:19:08.453204, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 65) -> 40 [2018/02/02 08:19:08.453212, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(fdB, 25) -> 25 [2018/02/02 08:19:08.453224, 18, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(d, 4) -> 4 [2018/02/02 08:19:08.453238, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000000 (0) max_subkeylen : * max_subkeylen : 0x00000000 (0) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000002 (2) max_valnamelen : * max_valnamelen : 0x0000001a (26) max_valbufsize : * max_valbufsize : 0x00000014 (20) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2018/02/02 08:19:08.453327, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000000 (0) max_subkeylen : * max_subkeylen : 0x00000000 (0) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000002 (2) max_valnamelen : * max_valnamelen : 0x0000001a (26) max_valbufsize : * max_valbufsize : 0x00000014 (20) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2018/02/02 08:19:08.453424, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000c-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.453454, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000c-0000-0000-745a-4c65c0580000 [2018/02/02 08:19:08.453481, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.453501, 6, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 74 5A 4C 65 ........ ....tZLe [0010] C0 58 00 00 .X.. [2018/02/02 08:19:08.453523, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.453556, 1, pid=22720, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:450(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2018/02/02 08:19:08.453638, 0, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/become_daemon.c:124(daemon_ready) STATUS=daemon 'smbd' finished starting up and ready to serve connections [2018/02/02 08:19:08.453777, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 515 - private_data=(nil) [2018/02/02 08:19:08.453806, 3, pid=22720, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:328(start_background_queue) start_background_queue: Starting background LPQ thread [2018/02/02 08:19:08.454450, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) bind succeeded on port 445 [2018/02/02 08:19:08.454451, 5, pid=22723, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:364(start_background_queue) [2018/02/02 08:19:08.454491, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: start_background_queue: background LPQ thread started SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:19:08.454570, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: [2018/02/02 08:19:08.454573, 10, pid=22723, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) SO_KEEPALIVE = 1 msg_dgm_ref_destructor: refs=(nil) SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:19:08.454652, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) bind succeeded on port 139 [2018/02/02 08:19:08.454671, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:19:08.454738, 10, pid=22723, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) [2018/02/02 08:19:08.454745, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 messaging_dgm_ref: messaging_dgm_init returned Success SO_BROADCAST = 0 TCP_NODELAY = 1 [2018/02/02 08:19:08.454764, 10, pid=22723, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) TCP_KEEPCNT = 9 messaging_dgm_ref: unique = 6845939307834180081 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:19:08.454810, 10, pid=22723, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(print_queue_housekeeping) 0x5578978c12b0 [2018/02/02 08:19:08.454820, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) bind succeeded on port 445 [2018/02/02 08:19:08.454826, 5, pid=22723, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:19:08.454832, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 [2018/02/02 08:19:08.454839, 10, pid=22723, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) SO_REUSEADDR = 1 lock order: 1: 2:/var/lib/samba/lock/serverid.tdb 3: SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 [2018/02/02 08:19:08.454852, 10, pid=22723, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) TCP_KEEPIDLE = 7200 Locking key C358000000000000FFFFFFFF TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 [2018/02/02 08:19:08.454868, 10, pid=22723, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) SO_REUSEPORT = 1 Allocated locked data 0x0x5578978c14f0 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:19:08.454908, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 [2018/02/02 08:19:08.454933, 10, pid=22723, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) IPTOS_THROUGHPUT = 0 Unlocking key C358000000000000FFFFFFFF SO_REUSEPORT = 1 SO_SNDBUF = 16384 [2018/02/02 08:19:08.454948, 5, pid=22723, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) SO_RCVBUF = 87380 release lock order 2 for /var/lib/samba/lock/serverid.tdb SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 [2018/02/02 08:19:08.454959, 10, pid=22723, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) SO_SNDTIMEO = 0 lock order: 1: 2: 3: SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:19:08.454987, 5, pid=22723, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) [2018/02/02 08:19:08.454988, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) Registering messaging pointer for type 33 - private_data=0x5578978bf8a0 bind succeeded on port 139 [2018/02/02 08:19:08.455000, 5, pid=22723, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) [2018/02/02 08:19:08.455003, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Registering messaging pointer for type 517 - private_data=(nil) Socket options: SO_KEEPALIVE = 1 [2018/02/02 08:19:08.455012, 5, pid=22723, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) SO_REUSEADDR = 1 Deregistering messaging pointer for type 515 - private_data=(nil) SO_BROADCAST = 0 TCP_NODELAY = 0 [2018/02/02 08:19:08.455022, 5, pid=22723, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) TCP_KEEPCNT = 9 Registering messaging pointer for type 515 - private_data=(nil) TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 [2018/02/02 08:19:08.455038, 3, pid=22723, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:140(pcap_cache_reload) IPTOS_THROUGHPUT = 0 reloading printcap cache SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 [2018/02/02 08:19:08.455052, 5, pid=22723, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:456(cups_pcap_load_async) SO_RCVLOWAT = 1 cups_pcap_load_async: asynchronously loading cups printers SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:19:08.455077, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:19:08.455140, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:19:08.455152, 10, pid=22720, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/lib/samba/lock/serverid.tdb 3: [2018/02/02 08:19:08.455173, 10, pid=22720, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key C058000000000000FFFFFFFF [2018/02/02 08:19:08.455185, 10, pid=22720, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978c1290 [2018/02/02 08:19:08.455222, 10, pid=22720, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key C058000000000000FFFFFFFF [2018/02/02 08:19:08.455240, 5, pid=22720, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:19:08.455258, 10, pid=22720, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:19:08.455267, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 13 - private_data=(nil) [2018/02/02 08:19:08.455277, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 33 - private_data=0x5578978aba20 [2018/02/02 08:19:08.455285, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 783 - private_data=(nil) [2018/02/02 08:19:08.455294, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2018/02/02 08:19:08.455302, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:371(messaging_register) Overriding messaging pointer for type 1 - private_data=(nil) [2018/02/02 08:19:08.455313, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 770 - private_data=(nil) [2018/02/02 08:19:08.455322, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 790 - private_data=(nil) [2018/02/02 08:19:08.455331, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 791 - private_data=(nil) [2018/02/02 08:19:08.455339, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2018/02/02 08:19:08.455349, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 16 - private_data=(nil) [2018/02/02 08:19:08.455357, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 799 - private_data=(nil) [2018/02/02 08:19:08.455372, 1, pid=22720, effective(0, 0), real(0, 0)] ../source3/printing/printer_list.c:234(printer_list_get_last_refresh) Failed to fetch record! [2018/02/02 08:19:08.455393, 2, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1382(smbd_parent_loop) waiting for connections [2018/02/02 08:19:08.455410, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0x31f len 0 (num_fds:0) from 22721 [2018/02/02 08:19:08.455442, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.455464, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:08.455473, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.455482, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:08.455501, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:08.455517, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 22722 [2018/02/02 08:19:08.455537, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:08.455558, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) [2018/02/02 08:19:08.455553, 10, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 messaging_recv_cb: Received message 0x31f len 0 (num_fds:0) from 22720 [2018/02/02 08:19:08.455575, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:08.455585, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:08.455594, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:08.455602, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:08.455599, 10, pid=22723, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:473(cups_pcap_load_async) [2018/02/02 08:19:08.455614, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 22721 cups_pcap_load_async: child pid = 22724 [2018/02/02 08:19:08.455628, 10, pid=22723, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:594(cups_cache_reload) [2018/02/02 08:19:08.455629, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) cups_cache_reload: async read on fd 16 pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:08.455643, 3, pid=22723, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:189(pcap_cache_reload) reload status: ok [2018/02/02 08:19:08.455642, 10, pid=22721, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) [2018/02/02 08:19:08.455654, 5, pid=22723, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:424(start_background_queue) start_background_queue: background LPQ thread waiting for messages messaging_recv_cb: Received message 0x31f len 0 (num_fds:0) from 22720 [2018/02/02 08:19:08.455794, 10, pid=22724, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:19:08.456099, 10, pid=22724, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2018/02/02 08:19:08.456145, 10, pid=22724, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 10418177174774626453 [2018/02/02 08:19:08.456173, 5, pid=22724, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:325(cups_cache_reload_async) reloading cups printcap cache [2018/02/02 08:19:08.456607, 10, pid=22724, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:137(cups_connect) connecting to cups server localhost:631 [2018/02/02 08:19:08.457024, 3, pid=22724, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:158(cups_connect) Unable to connect to CUPS server localhost:631 - Bad file descriptor [2018/02/02 08:19:08.457079, 10, pid=22724, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:178(send_pcap_blob) successfully sent blob of len 12 [2018/02/02 08:19:08.457109, 10, pid=22724, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:19:08.457117, 5, pid=22723, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:520(cups_async_callback) cups_async_callback: callback received for printer data. fd = 16 [2018/02/02 08:19:08.457169, 10, pid=22723, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:203(recv_pcap_blob) successfully recvd blob of len 12 [2018/02/02 08:19:08.457211, 3, pid=22723, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:536(cups_async_callback) failed to retrieve printer list: NT_STATUS_UNSUCCESSFUL [2018/02/02 08:19:08.457988, 6, pid=22723, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:265(bq_sig_chld_handler) Bq child process 22724 terminated with 0 [2018/02/02 08:19:09.646099, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:19:09.646485, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2018/02/02 08:19:09.646547, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 9713296150799708201 [2018/02/02 08:19:09.646773, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:533(smbXsrv_client_create) [2018/02/02 08:19:09.646797, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:541(smbXsrv_client_create) smbXsrv_client_create: client_guid[00000000-0000-0000-0000-000000000000] stored [2018/02/02 08:19:09.646835, 1, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &client_blob: struct smbXsrv_clientB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_clientU(case 0) info0 : * info0: struct smbXsrv_client table : * ev_ctx : * msg_ctx : * global : * [2018/02/02 08:19:09.646894, 10, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) global: struct smbXsrv_client_global0 msg_dgm_ref_destructor: refs=(nil) db_rec : NULL server_id: struct server_id pid : 0x00000000000058c5 (22725) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x86cc8f62ca95f029 (-8733447922909843415) local_address : NULL remote_address : NULL remote_name : NULL initial_connect_time : Fri Feb 2 08:19:10 AM 2018 EST client_guid : 00000000-0000-0000-0000-000000000000 stored : 0x00 (0) sconn : NULL session_table : NULL last_session_id : 0x0000000000000000 (0) tcon_table : NULL open_table : NULL connections : NULL server_multi_channel_enabled: 0x00 (0) [2018/02/02 08:19:09.647226, 10, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) [2018/02/02 08:19:09.647232, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/lib/samba/lock/serverid.tdb messaging_dgm_ref: messaging_dgm_init returned Success [2018/02/02 08:19:09.647272, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) [2018/02/02 08:19:09.647278, 10, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) lock order: 1: 2:/var/lib/samba/lock/serverid.tdb 3: messaging_dgm_ref: unique = 18328131833487111284 [2018/02/02 08:19:09.647320, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key C558000000000000FFFFFFFF [2018/02/02 08:19:09.647352, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978c4710 [2018/02/02 08:19:09.647399, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key C558000000000000FFFFFFFF [2018/02/02 08:19:09.647423, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:19:09.647429, 10, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:533(smbXsrv_client_create) [2018/02/02 08:19:09.647444, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) [2018/02/02 08:19:09.647454, 10, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:541(smbXsrv_client_create) lock order: 1: 2: 3: smbXsrv_client_create: client_guid[00000000-0000-0000-0000-000000000000] stored [2018/02/02 08:19:09.647489, 1, pid=22726, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) [2018/02/02 08:19:09.647493, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: &client_blob: struct smbXsrv_clientB SO_KEEPALIVE = 1 SO_REUSEADDR = 1 version : SMBXSRV_VERSION_0 (0) SO_BROADCAST = 0 reserved : 0x00000000 (0) TCP_NODELAY = 1 info : union smbXsrv_clientU(case 0) TCP_KEEPCNT = 9 info0 : * TCP_KEEPIDLE = 7200 info0: struct smbXsrv_client TCP_KEEPINTVL = 75 table : * IPTOS_LOWDELAY = 0 ev_ctx : * IPTOS_THROUGHPUT = 0 msg_ctx : * SO_REUSEPORT = 1 global : * SO_SNDBUF = 87040 global: struct smbXsrv_client_global0 SO_RCVBUF = 374400 db_rec : NULL SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 server_id: struct server_id SO_RCVTIMEO = 0 pid : 0x00000000000058c6 (22726) TCP_QUICKACK = 1 task_id : 0x00000000 (0) TCP_DEFER_ACCEPT = 0 vnn : 0xffffffff (4294967295) unique_id : 0xfe5a9acbc3873474 (-118612240222440332) [2018/02/02 08:19:09.647707, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) local_address : NULL Socket options: remote_address : NULL SO_KEEPALIVE = 1 remote_name : NULL SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 initial_connect_time : Fri Feb 2 08:19:10 AM 2018 EST TCP_KEEPCNT = 9 client_guid : 00000000-0000-0000-0000-000000000000 TCP_KEEPIDLE = 7200 stored : 0x00 (0) TCP_KEEPINTVL = 75 sconn : NULL IPTOS_LOWDELAY = 0 session_table : NULL IPTOS_THROUGHPUT = 0 last_session_id : 0x0000000000000000 (0) SO_REUSEPORT = 1 tcon_table : NULL SO_SNDBUF = 87040 open_table : NULL SO_RCVBUF = 374400 connections : NULL SO_SNDLOWAT = 1 server_multi_channel_enabled: 0x00 (0) SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 [2018/02/02 08:19:09.647895, 5, pid=22726, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) TCP_QUICKACK = 1 check lock order 2 for /var/lib/samba/lock/serverid.tdb TCP_DEFER_ACCEPT = 0 [2018/02/02 08:19:09.647930, 10, pid=22726, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/lib/samba/lock/serverid.tdb 3: [2018/02/02 08:19:09.647958, 10, pid=22726, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key C658000000000000FFFFFFFF [2018/02/02 08:19:09.647998, 10, pid=22726, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) [2018/02/02 08:19:09.648001, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allocated locked data 0x0x5578978c4710 Allowed connection from 192.168.122.213 (192.168.122.213) [2018/02/02 08:19:09.648034, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:3837(smbd_add_connection) [2018/02/02 08:19:09.648051, 10, pid=22726, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Connection allowed from ipv4:192.168.122.213:50346 to ipv4:10.167.133.33:445 Unlocking key C658000000000000FFFFFFFF [2018/02/02 08:19:09.648080, 5, pid=22726, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:19:09.648100, 10, pid=22726, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:19:09.648120, 6, pid=22725, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() [2018/02/02 08:19:09.648136, 5, pid=22726, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Feb 2 08:16:14 2018 SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 [2018/02/02 08:19:09.648194, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) TCP_KEEPINTVL = 75 Registering messaging pointer for type 774 - private_data=0x5578978ac380 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 [2018/02/02 08:19:09.648219, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) SO_REUSEPORT = 1 Registering messaging pointer for type 778 - private_data=0x5578978ac380 SO_SNDBUF = 87040 SO_RCVBUF = 374400 [2018/02/02 08:19:09.648242, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) SO_SNDLOWAT = 1 Registering messaging pointer for type 770 - private_data=0x5578978ac380 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 [2018/02/02 08:19:09.648266, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) SO_RCVTIMEO = 0 Registering messaging pointer for type 787 - private_data=0x5578978ac380 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:19:09.648290, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 779 - private_data=0x5578978ac380 [2018/02/02 08:19:09.648303, 5, pid=22726, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: [2018/02/02 08:19:09.648312, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) SO_KEEPALIVE = 1 Registering messaging pointer for type 15 - private_data=(nil) SO_REUSEADDR = 1 SO_BROADCAST = 0 [2018/02/02 08:19:09.648337, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:371(messaging_register) TCP_NODELAY = 1 Overriding messaging pointer for type 15 - private_data=(nil) TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 [2018/02/02 08:19:09.648361, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) TCP_KEEPINTVL = 75 Deregistering messaging pointer for type 16 - private_data=(nil) IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 [2018/02/02 08:19:09.648399, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) SO_REUSEPORT = 1 Registering messaging pointer for type 16 - private_data=0x5578978ac380 SO_SNDBUF = 87040 SO_RCVBUF = 374400 [2018/02/02 08:19:09.648423, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) SO_SNDLOWAT = 1 Deregistering messaging pointer for type 33 - private_data=0x5578978aba20 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 [2018/02/02 08:19:09.648447, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) SO_RCVTIMEO = 0 Registering messaging pointer for type 33 - private_data=0x5578978ac380 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:19:09.648470, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 790 - private_data=(nil) [2018/02/02 08:19:09.648492, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 790 - private_data=0x5578978ac380 [2018/02/02 08:19:09.648512, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 791 - private_data=(nil) [2018/02/02 08:19:09.648532, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) [2018/02/02 08:19:09.648530, 3, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Deregistering messaging pointer for type 1 - private_data=(nil) Allowed connection from 192.168.122.213 (192.168.122.213) [2018/02/02 08:19:09.648556, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) [2018/02/02 08:19:09.648560, 10, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:3837(smbd_add_connection) Registering messaging pointer for type 1 - private_data=(nil) Connection allowed from ipv4:192.168.122.213:50348 to ipv4:10.167.133.33:445 [2018/02/02 08:19:09.648582, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(keepalive) 0x5578978c7ab0 [2018/02/02 08:19:09.648614, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(deadtime) 0x5578978c51d0 [2018/02/02 08:19:09.648637, 6, pid=22726, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) [2018/02/02 08:19:09.648641, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) lp_file_list_changed() event_add_idle: idle_evt(housekeeping) 0x5578978c5420 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Feb 2 08:16:14 2018 [2018/02/02 08:19:09.648701, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 774 - private_data=0x5578978ac380 [2018/02/02 08:19:09.648724, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 778 - private_data=0x5578978ac380 [2018/02/02 08:19:09.648744, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 770 - private_data=0x5578978ac380 [2018/02/02 08:19:09.648763, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 787 - private_data=0x5578978ac380 [2018/02/02 08:19:09.648782, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 779 - private_data=0x5578978ac380 [2018/02/02 08:19:09.648818, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2018/02/02 08:19:09.648840, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:371(messaging_register) Overriding messaging pointer for type 15 - private_data=(nil) [2018/02/02 08:19:09.648859, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 16 - private_data=(nil) [2018/02/02 08:19:09.648879, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 16 - private_data=0x5578978ac380 [2018/02/02 08:19:09.648900, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 33 - private_data=0x5578978aba20 [2018/02/02 08:19:09.648919, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 33 - private_data=0x5578978ac380 [2018/02/02 08:19:09.648939, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 790 - private_data=(nil) [2018/02/02 08:19:09.648958, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 790 - private_data=0x5578978ac380 [2018/02/02 08:19:09.648988, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 791 - private_data=(nil) [2018/02/02 08:19:09.649009, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2018/02/02 08:19:09.649029, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2018/02/02 08:19:09.649051, 10, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(keepalive) 0x5578978c7ab0 [2018/02/02 08:19:09.649079, 10, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(deadtime) 0x5578978c51d0 [2018/02/02 08:19:09.649104, 10, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x5578978c5420 [2018/02/02 08:19:09.694245, 10, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:19:09.694549, 10, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2018/02/02 08:19:09.694601, 10, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 7865889763691013927 [2018/02/02 08:19:09.694723, 10, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:533(smbXsrv_client_create) [2018/02/02 08:19:09.694744, 10, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:541(smbXsrv_client_create) smbXsrv_client_create: client_guid[00000000-0000-0000-0000-000000000000] stored [2018/02/02 08:19:09.694778, 1, pid=22727, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &client_blob: struct smbXsrv_clientB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_clientU(case 0) info0 : * info0: struct smbXsrv_client table : * ev_ctx : * msg_ctx : * global : * global: struct smbXsrv_client_global0 db_rec : NULL server_id: struct server_id pid : 0x00000000000058c7 (22727) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x6d294110972f2727 (7865889763691013927) local_address : NULL remote_address : NULL remote_name : NULL initial_connect_time : Fri Feb 2 08:19:10 AM 2018 EST client_guid : 00000000-0000-0000-0000-000000000000 stored : 0x00 (0) sconn : NULL session_table : NULL last_session_id : 0x0000000000000000 (0) tcon_table : NULL open_table : NULL connections : NULL server_multi_channel_enabled: 0x00 (0) [2018/02/02 08:19:09.695157, 5, pid=22727, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:19:09.695188, 10, pid=22727, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/lib/samba/lock/serverid.tdb 3: [2018/02/02 08:19:09.695216, 10, pid=22727, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key C758000000000000FFFFFFFF [2018/02/02 08:19:09.695244, 10, pid=22727, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978c4710 [2018/02/02 08:19:09.695289, 10, pid=22727, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key C758000000000000FFFFFFFF [2018/02/02 08:19:09.695313, 5, pid=22727, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:19:09.695333, 10, pid=22727, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:19:09.695369, 5, pid=22727, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1062000 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:19:09.695508, 5, pid=22727, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1062000 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:19:09.695687, 3, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.167.133.33 (10.167.133.33) [2018/02/02 08:19:09.695712, 10, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:3837(smbd_add_connection) Connection allowed from ipv4:10.167.133.33:44328 to ipv4:10.167.133.33:445 [2018/02/02 08:19:09.695783, 6, pid=22727, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Feb 2 08:16:14 2018 [2018/02/02 08:19:09.695859, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 774 - private_data=0x5578978ac380 [2018/02/02 08:19:09.695883, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 778 - private_data=0x5578978ac380 [2018/02/02 08:19:09.695904, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 770 - private_data=0x5578978ac380 [2018/02/02 08:19:09.695924, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 787 - private_data=0x5578978ac380 [2018/02/02 08:19:09.695944, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 779 - private_data=0x5578978ac380 [2018/02/02 08:19:09.695964, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2018/02/02 08:19:09.695996, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:371(messaging_register) Overriding messaging pointer for type 15 - private_data=(nil) [2018/02/02 08:19:09.696016, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 16 - private_data=(nil) [2018/02/02 08:19:09.696037, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 16 - private_data=0x5578978ac380 [2018/02/02 08:19:09.696058, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 33 - private_data=0x5578978aba20 [2018/02/02 08:19:09.696078, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 33 - private_data=0x5578978ac380 [2018/02/02 08:19:09.696098, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 790 - private_data=(nil) [2018/02/02 08:19:09.696118, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 790 - private_data=0x5578978ac380 [2018/02/02 08:19:09.696139, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 791 - private_data=(nil) [2018/02/02 08:19:09.696159, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2018/02/02 08:19:09.696179, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2018/02/02 08:19:09.696202, 10, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(keepalive) 0x5578978c7ab0 [2018/02/02 08:19:09.696230, 10, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(deadtime) 0x5578978c51d0 [2018/02/02 08:19:09.696256, 10, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x5578978c5420 [2018/02/02 08:19:14.438843, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 78 [2018/02/02 08:19:14.455705, 6, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x4e [2018/02/02 08:19:14.455743, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 0 of length 82 (0 toread) [2018/02/02 08:19:14.455799, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:14.455817, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:181(show_msg) size=78 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=51201 smb_tid=0 smb_pid=5101 smb_uid=0 smb_mid=8570 smt_wct=0 smb_bcc=43 [2018/02/02 08:19:14.455893, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM [0010] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 [0020] 32 00 02 50 4F 53 49 58 20 32 00 2..POSIX 2. [2018/02/02 08:19:14.456009, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBnegprot (pid 22725) conn 0x0 [2018/02/02 08:19:14.456084, 0, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBnegprot.3.req len 82 [2018/02/02 08:19:14.456171, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.456203, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.456235, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.456287, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:19:14.457196, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:603(reply_negprot) Requested protocol [LM1.2X002] [2018/02/02 08:19:14.457236, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:603(reply_negprot) Requested protocol [LANMAN2.1] [2018/02/02 08:19:14.457262, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:603(reply_negprot) Requested protocol [NT LM 0.12] [2018/02/02 08:19:14.457283, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:603(reply_negprot) Requested protocol [POSIX 2] [2018/02/02 08:19:14.457305, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1325(set_remote_arch) set_remote_arch: Client arch is 'CIFSFS' [2018/02/02 08:19:14.457358, 6, pid=22725, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Feb 2 08:16:14 2018 [2018/02/02 08:19:14.457408, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:19:14.457429, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/lib/samba/lock/serverid.tdb 3: [2018/02/02 08:19:14.457454, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key C558000000000000FFFFFFFF [2018/02/02 08:19:14.457482, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978c8320 [2018/02/02 08:19:14.457520, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key C558000000000000FFFFFFFF [2018/02/02 08:19:14.457543, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:19:14.457563, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:19:14.457626, 6, pid=22725, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Feb 2 08:16:14 2018 [2018/02/02 08:19:14.457986, 3, pid=22725, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'gssapi_spnego' registered [2018/02/02 08:19:14.458024, 3, pid=22725, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'gssapi_krb5' registered [2018/02/02 08:19:14.458047, 3, pid=22725, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'gssapi_krb5_sasl' registered [2018/02/02 08:19:14.458069, 3, pid=22725, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'spnego' registered [2018/02/02 08:19:14.458091, 3, pid=22725, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'schannel' registered [2018/02/02 08:19:14.458112, 3, pid=22725, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'naclrpc_as_system' registered [2018/02/02 08:19:14.458133, 3, pid=22725, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'sasl-EXTERNAL' registered [2018/02/02 08:19:14.458155, 3, pid=22725, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'ntlmssp' registered [2018/02/02 08:19:14.458176, 3, pid=22725, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'ntlmssp_resume_ccache' registered [2018/02/02 08:19:14.458198, 3, pid=22725, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'http_basic' registered [2018/02/02 08:19:14.458219, 3, pid=22725, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:908(gensec_register) GENSEC backend 'http_ntlm' registered [2018/02/02 08:19:14.458274, 5, pid=22725, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC mechanism spnego [2018/02/02 08:19:14.458317, 5, pid=22725, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2018/02/02 08:19:14.458373, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:394(reply_nt1) using SPNEGO [2018/02/02 08:19:14.458397, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:730(reply_negprot) Selected protocol NT LM 0.12 [2018/02/02 08:19:14.458416, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:737(reply_negprot) negprot index=2 [2018/02/02 08:19:14.458436, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:14.458449, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:181(show_msg) size=159 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51201 smb_tid=0 smb_pid=5101 smb_uid=0 smb_mid=8570 smt_wct=17 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=50432 (0xC500) smb_vwv[ 8]= 88 (0x58) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=52352 (0xCC80) smb_vwv[12]=50443 (0xC50B) smb_vwv[13]=10347 (0x286B) smb_vwv[14]=54172 (0xD39C) smb_vwv[15]=11265 (0x2C01) smb_vwv[16]= 1 (0x1) smb_bcc=90 [2018/02/02 08:19:14.458633, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 6C 6F 63 61 6C 68 6F 73 74 00 00 00 00 00 00 00 localhos t....... [0010] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<.. [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 2A 0...+... ..7....* [0030] 30 28 A0 26 1B 24 6E 6F 74 5F 64 65 66 69 6E 65 0(.&.$no t_define [0040] 64 5F 69 6E 5F 52 46 43 34 31 37 38 40 70 6C 65 d_in_RFC 4178@ple [0050] 61 73 65 5F 69 67 6E 6F 72 65 ase_igno re [2018/02/02 08:19:14.459185, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 216 [2018/02/02 08:19:14.459240, 6, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0xd8 [2018/02/02 08:19:14.459264, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 1 of length 220 (0 toread) [2018/02/02 08:19:14.459284, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:14.459297, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:181(show_msg) size=216 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=55297 smb_tid=0 smb_pid=5101 smb_uid=0 smb_mid=8571 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=16468 (0x4054) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 32 (0x20) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53468 (0xD0DC) smb_vwv[11]=32896 (0x8080) smb_bcc=157 [2018/02/02 08:19:14.459450, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 4E 54 4C 4D 53 53 50 00 01 00 00 00 05 02 08 A0 NTLMSSP. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 4C 00 69 00 6E 00 75 00 78 00 20 00 76 00 65 .L.i.n.u .x. .v.e [0030] 00 72 00 73 00 69 00 6F 00 6E 00 20 00 33 00 2E .r.s.i.o .n. .3.. [0040] 00 31 00 30 00 2E 00 30 00 2D 00 35 00 31 00 34 .1.0...0 .-.5.1.4 [0050] 00 2E 00 65 00 6C 00 37 00 2E 00 78 00 38 00 36 ...e.l.7 ...x.8.6 [0060] 00 5F 00 36 00 34 00 00 00 43 00 49 00 46 00 53 ._.6.4.. .C.I.F.S [0070] 00 20 00 56 00 46 00 53 00 20 00 43 00 6C 00 69 . .V.F.S . .C.l.i [0080] 00 65 00 6E 00 74 00 20 00 66 00 6F 00 72 00 20 .e.n.t. .f.o.r. [0090] 00 4C 00 69 00 6E 00 75 00 78 00 00 00 .L.i.n.u .x... [2018/02/02 08:19:14.459663, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBsesssetupX (pid 22725) conn 0x0 [2018/02/02 08:19:14.459718, 0, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBsesssetupX.5.req len 220 [2018/02/02 08:19:14.459785, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.459808, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.459834, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.459867, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:19:14.459896, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:623(reply_sesssetup_and_X) wct=12 flg2=0xd801 [2018/02/02 08:19:14.459917, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:140(reply_sesssetup_and_X_spnego) Doing spnego session setup [2018/02/02 08:19:14.459946, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:181(reply_sesssetup_and_X_spnego) NativeOS=[Linux version 3.10.0-514.el7.x86_64] NativeLanMan=[CIFS VFS Client for Linux] PrimaryDomain=[] [2018/02/02 08:19:14.460000, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2018/02/02 08:19:14.460025, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/lib/samba/lock/smbXsrv_session_global.tdb 2: 3: [2018/02/02 08:19:14.460072, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 392C1EEC [2018/02/02 08:19:14.460103, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978d2250 [2018/02/02 08:19:14.460324, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2018/02/02 08:19:14.460346, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key '392C1EEC' stored [2018/02/02 08:19:14.460369, 1, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x392c1eec (959192812) session_wire_id : 0x0000000000004d01 (19713) creation_time : Fri Feb 2 08:19:14 AM 2018 EST expiration_time : Wed Dec 31 07:00:00 PM 1969 EST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x00000000000058c5 (22725) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x86cc8f62ca95f029 (-8733447922909843415) local_address : 'ipv4:10.167.133.33:445' remote_address : 'ipv4:192.168.122.213:50346' remote_name : '192.168.122.213' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2018/02/02 08:19:14.460740, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2018/02/02 08:19:14.460762, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:19:14.460786, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 392C1EEC [2018/02/02 08:19:14.460810, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1310(smbXsrv_session_create) [2018/02/02 08:19:14.460823, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1318(smbXsrv_session_create) smbXsrv_session_create: global_id (0x392c1eec) stored [2018/02/02 08:19:14.460857, 1, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x00004d01 (19713) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x392c1eec (959192812) session_wire_id : 0x0000000000004d01 (19713) creation_time : Fri Feb 2 08:19:14 AM 2018 EST expiration_time : Wed Dec 31 07:00:00 PM 1969 EST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x00000000000058c5 (22725) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x86cc8f62ca95f029 (-8733447922909843415) local_address : 'ipv4:10.167.133.33:445' remote_address : 'ipv4:192.168.122.213:50346' remote_name : '192.168.122.213' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Fri Feb 2 08:19:14 AM 2018 EST nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : NULL pending_auth : NULL [2018/02/02 08:19:14.461400, 5, pid=22725, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC mechanism spnego [2018/02/02 08:19:14.461429, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.461451, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:14.461484, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.461504, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.461523, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.461569, 5, pid=22725, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:681(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2018/02/02 08:19:14.461600, 3, pid=22725, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0xa0080205 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_56 [2018/02/02 08:19:14.461672, 1, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0xa0080205 (2684879365) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 0: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 0: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 0: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0000 (0) DomainNameMaxLen : 0x0000 (0) DomainName : NULL WorkstationLen : 0x0000 (0) WorkstationMaxLen : 0x0000 (0) Workstation : NULL [2018/02/02 08:19:14.462032, 6, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr_string.c:171(ndr_pull_string) short string '', sent with NULL termination despite NOTERM flag in IDL [2018/02/02 08:19:14.462066, 1, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x0012 (18) TargetNameMaxLen : 0x0012 (18) TargetName : * TargetName : 'LOCALHOST' NegotiateFlags : 0xa28a0205 (2726953477) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 0: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 0: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 0: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 ServerChallenge : e6c747e49d49c0f3 Reserved : 0000000000000000 TargetInfoLen : 0x0058 (88) TargetInfoMaxLen : 0x0058 (88) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000006 (6) pair: ARRAY(6) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x0012 (18) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LOCALHOST' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0012 (18) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LOCALHOST' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0002 (2) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x0012 (18) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'localhost' pair: struct AV_PAIR AvId : MsvAvTimestamp (0x7) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x7) AvTimestamp : Fri Feb 2 08:19:14 AM 2018 EST pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (0x6) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (0x1) ProductBuild : 0x0000 (0) Reserved : 000000 NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (0xF) [2018/02/02 08:19:14.462739, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.462778, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:14.462792, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:181(show_msg) size=266 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=128 smb_flg2=51203 smb_tid=0 smb_pid=5101 smb_uid=19713 smb_mid=8571 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 162 (0xA2) smb_bcc=223 [2018/02/02 08:19:14.462911, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 4E 54 4C 4D 53 53 50 00 02 00 00 00 12 00 12 00 NTLMSSP. ........ [0010] 38 00 00 00 05 02 8A A2 E6 C7 47 E4 9D 49 C0 F3 8....... ..G..I.. [0020] 00 00 00 00 00 00 00 00 58 00 58 00 4A 00 00 00 ........ X.X.J... [0030] 06 01 00 00 00 00 00 0F 4C 00 4F 00 43 00 41 00 ........ L.O.C.A. [0040] 4C 00 48 00 4F 00 53 00 54 00 02 00 12 00 4C 00 L.H.O.S. T.....L. [0050] 4F 00 43 00 41 00 4C 00 48 00 4F 00 53 00 54 00 O.C.A.L. H.O.S.T. [0060] 01 00 12 00 4C 00 4F 00 43 00 41 00 4C 00 48 00 ....L.O. C.A.L.H. [0070] 4F 00 53 00 54 00 04 00 02 00 00 00 03 00 12 00 O.S.T... ........ [0080] 6C 00 6F 00 63 00 61 00 6C 00 68 00 6F 00 73 00 l.o.c.a. l.h.o.s. [0090] 74 00 07 00 08 00 36 A4 C5 6B 28 9C D3 01 00 00 t.....6. .k(..... [00A0] 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 ...W.i.n .d.o.w.s [00B0] 00 20 00 36 00 2E 00 31 00 00 00 53 00 61 00 6D . .6...1 ...S.a.m [00C0] 00 62 00 61 00 20 00 34 00 2E 00 35 00 2E 00 38 .b.a. .4 ...5...8 [00D0] 00 00 00 53 00 41 00 4D 00 42 00 41 00 00 00 ...S.A.M .B.A... [2018/02/02 08:19:14.463620, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 424 [2018/02/02 08:19:14.463674, 6, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x1a8 [2018/02/02 08:19:14.463697, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 2 of length 428 (0 toread) [2018/02/02 08:19:14.463718, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:14.463731, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:181(show_msg) size=424 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=55297 smb_tid=0 smb_pid=5101 smb_uid=19713 smb_mid=8572 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=16468 (0x4054) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 240 (0xF0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53468 (0xD0DC) smb_vwv[11]=32896 (0x8080) smb_bcc=365 [2018/02/02 08:19:14.463884, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 00 00 00 00 NTLMSSP. ........ [0010] 40 00 00 00 84 00 84 00 40 00 00 00 12 00 12 00 @....... @....... [0020] C4 00 00 00 08 00 08 00 D6 00 00 00 00 00 00 00 ........ ........ [0030] DE 00 00 00 10 00 10 00 E0 00 00 00 05 02 88 A0 ........ ........ [0040] DB A0 21 10 B1 49 21 07 44 33 20 8A EE 0E CE 6D ..!..I!. D3 ....m [0050] 01 01 00 00 00 00 00 00 36 A4 C5 6B 28 9C D3 01 ........ 6..k(... [0060] 5A 69 E1 E0 2D DA 60 EC 00 00 00 00 02 00 12 00 Zi..-.`. ........ [0070] 4C 00 4F 00 43 00 41 00 4C 00 48 00 4F 00 53 00 L.O.C.A. L.H.O.S. [0080] 54 00 01 00 12 00 4C 00 4F 00 43 00 41 00 4C 00 T.....L. O.C.A.L. [0090] 48 00 4F 00 53 00 54 00 04 00 02 00 00 00 03 00 H.O.S.T. ........ [00A0] 12 00 6C 00 6F 00 63 00 61 00 6C 00 68 00 6F 00 ..l.o.c. a.l.h.o. [00B0] 73 00 74 00 07 00 08 00 36 A4 C5 6B 28 9C D3 01 s.t..... 6..k(... [00C0] 00 00 00 00 4C 00 4F 00 43 00 41 00 4C 00 48 00 ....L.O. C.A.L.H. [00D0] 4F 00 53 00 54 00 6A 00 61 00 6E 00 65 00 00 00 O.S.T.j. a.n.e... [00E0] 71 9B 09 27 2A 55 B5 6B EE 57 76 B4 EB B3 BD 27 q..'*U.k .Wv....' [00F0] 00 4C 00 69 00 6E 00 75 00 78 00 20 00 76 00 65 .L.i.n.u .x. .v.e [0100] 00 72 00 73 00 69 00 6F 00 6E 00 20 00 33 00 2E .r.s.i.o .n. .3.. [0110] 00 31 00 30 00 2E 00 30 00 2D 00 35 00 31 00 34 .1.0...0 .-.5.1.4 [0120] 00 2E 00 65 00 6C 00 37 00 2E 00 78 00 38 00 36 ...e.l.7 ...x.8.6 [0130] 00 5F 00 36 00 34 00 00 00 43 00 49 00 46 00 53 ._.6.4.. .C.I.F.S [0140] 00 20 00 56 00 46 00 53 00 20 00 43 00 6C 00 69 . .V.F.S . .C.l.i [0150] 00 65 00 6E 00 74 00 20 00 66 00 6F 00 72 00 20 .e.n.t. .f.o.r. [0160] 00 4C 00 69 00 6E 00 75 00 78 00 00 00 .L.i.n.u .x... [2018/02/02 08:19:14.464407, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBsesssetupX (pid 22725) conn 0x0 [2018/02/02 08:19:14.464467, 0, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBsesssetupX.6.req len 428 [2018/02/02 08:19:14.464526, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.464549, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.464569, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.464601, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:19:14.464623, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2018/02/02 08:19:14.464644, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/lib/samba/lock/smbXsrv_session_global.tdb 2: 3: [2018/02/02 08:19:14.464670, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 392C1EEC [2018/02/02 08:19:14.464696, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978d34b0 [2018/02/02 08:19:14.464734, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2018/02/02 08:19:14.464750, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key '392C1EEC' stored [2018/02/02 08:19:14.464771, 1, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000002 (2) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x392c1eec (959192812) session_wire_id : 0x0000000000004d01 (19713) creation_time : Fri Feb 2 08:19:14 AM 2018 EST expiration_time : Wed Dec 31 07:00:00 PM 1969 EST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x00000000000058c5 (22725) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x86cc8f62ca95f029 (-8733447922909843415) local_address : 'ipv4:10.167.133.33:445' remote_address : 'ipv4:192.168.122.213:50346' remote_name : '192.168.122.213' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x8000 (32768) [2018/02/02 08:19:14.465148, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2018/02/02 08:19:14.465170, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:19:14.465193, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 392C1EEC [2018/02/02 08:19:14.465216, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1405(smbXsrv_session_update) [2018/02/02 08:19:14.465230, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1413(smbXsrv_session_update) smbXsrv_session_update: global_id (0x392c1eec) stored [2018/02/02 08:19:14.465249, 1, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x00004d01 (19713) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x392c1eec (959192812) session_wire_id : 0x0000000000004d01 (19713) creation_time : Fri Feb 2 08:19:14 AM 2018 EST expiration_time : Wed Dec 31 07:00:00 PM 1969 EST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x00000000000058c5 (22725) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x86cc8f62ca95f029 (-8733447922909843415) local_address : 'ipv4:10.167.133.33:445' remote_address : 'ipv4:192.168.122.213:50346' remote_name : '192.168.122.213' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x8000 (32768) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Fri Feb 2 08:19:14 AM 2018 EST nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : NULL pending_auth : * pending_auth: struct smbXsrv_session_auth0 prev : * next : NULL session : * connection : * gensec : * preauth : NULL in_flags : 0x00 (0) in_security_mode : 0x00 (0) creation_time : Fri Feb 2 08:19:14 AM 2018 EST idle_time : Fri Feb 2 08:19:14 AM 2018 EST [2018/02/02 08:19:14.465845, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:623(reply_sesssetup_and_X) wct=12 flg2=0xd801 [2018/02/02 08:19:14.465866, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:140(reply_sesssetup_and_X_spnego) Doing spnego session setup [2018/02/02 08:19:14.465889, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:181(reply_sesssetup_and_X_spnego) NativeOS=[Linux version 3.10.0-514.el7.x86_64] NativeLanMan=[CIFS VFS Client for Linux] PrimaryDomain=[] [2018/02/02 08:19:14.465916, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.465936, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:14.465956, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.465984, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.466004, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.466067, 6, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr_string.c:171(ndr_pull_string) short string '', sent with NULL termination despite NOTERM flag in IDL [2018/02/02 08:19:14.466105, 1, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0000 (0) LmChallengeResponseMaxLen: 0x0000 (0) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 0) NtChallengeResponseLen : 0x0084 (132) NtChallengeResponseMaxLen: 0x0084 (132) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 132) v2: struct NTLMv2_RESPONSE Response : dba02110b14921074433208aee0ece6d Challenge: struct NTLMv2_CLIENT_CHALLENGE RespType : 0x01 (1) HiRespType : 0x01 (1) Reserved1 : 0x0000 (0) Reserved2 : 0x00000000 (0) TimeStamp : Fri Feb 2 08:19:14 AM 2018 EST ChallengeFromClient : 5a69e1e02dda60ec Reserved3 : 0x00000000 (0) AvPairs: struct AV_PAIR_LIST count : 0x00000006 (6) pair: ARRAY(6) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x0012 (18) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LOCALHOST' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0012 (18) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LOCALHOST' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0002 (2) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x0012 (18) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'localhost' pair: struct AV_PAIR AvId : MsvAvTimestamp (0x7) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x7) AvTimestamp : Fri Feb 2 08:19:14 AM 2018 EST pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) DomainNameLen : 0x0012 (18) DomainNameMaxLen : 0x0012 (18) DomainName : * DomainName : 'LOCALHOST' UserNameLen : 0x0008 (8) UserNameMaxLen : 0x0008 (8) UserName : * UserName : 'jane' WorkstationLen : 0x0000 (0) WorkstationMaxLen : 0x0000 (0) Workstation : * Workstation : '' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [0000] 71 9B 09 27 2A 55 B5 6B EE 57 76 B4 EB B3 BD 27 q..'*U.k .Wv....' NegotiateFlags : 0xa0880205 (2693267973) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 0: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 0: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 0: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 [2018/02/02 08:19:14.466982, 3, pid=22725, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:452(ntlmssp_server_preauth) Got user=[jane] domain=[LOCALHOST] workstation=[] len1=0 len2=132 [2018/02/02 08:19:14.467015, 6, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr_string.c:171(ndr_pull_string) short string '', sent with NULL termination despite NOTERM flag in IDL [2018/02/02 08:19:14.467041, 10, pid=22725, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:483(ntlmssp_server_preauth) [2018/02/02 08:19:14.467055, 1, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &v2_resp: struct NTLMv2_RESPONSE Response : dba02110b14921074433208aee0ece6d Challenge: struct NTLMv2_CLIENT_CHALLENGE RespType : 0x01 (1) HiRespType : 0x01 (1) Reserved1 : 0x0000 (0) Reserved2 : 0x00000000 (0) TimeStamp : Fri Feb 2 08:19:14 AM 2018 EST ChallengeFromClient : 5a69e1e02dda60ec Reserved3 : 0x00000000 (0) AvPairs: struct AV_PAIR_LIST count : 0x00000006 (6) pair: ARRAY(6) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x0012 (18) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LOCALHOST' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0012 (18) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LOCALHOST' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0002 (2) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x0012 (18) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'localhost' pair: struct AV_PAIR AvId : MsvAvTimestamp (0x7) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x7) AvTimestamp : Fri Feb 2 08:19:14 AM 2018 EST pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2018/02/02 08:19:14.467461, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3739(lp_load_ex) lp_load_ex: refreshing parameters [2018/02/02 08:19:14.467485, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1312(free_param_opts) Freeing parametrics: [2018/02/02 08:19:14.467568, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:542(init_globals) Initialising global parameters [2018/02/02 08:19:14.467670, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2668(lp_do_section) Processing section "[global]" doing parameter workgroup = SAMBA doing parameter security = user doing parameter passdb backend = tdbsam doing parameter printing = cups doing parameter printcap name = cups doing parameter load printers = yes doing parameter cups options = raw doing parameter log level = all:100 [2018/02/02 08:19:14.467825, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/util/debug.c:642(debug_dump_status) INFO: Current debug levels: all: 100 tdb: 0 printdrivers: 0 lanman: 0 smb: 0 rpc_parse: 0 rpc_srv: 0 rpc_cli: 0 passdb: 0 sam: 0 auth: 0 winbind: 0 vfs: 0 idmap: 0 quota: 0 acls: 0 locking: 0 msdfs: 0 dmapi: 0 registry: 0 scavenger: 0 dns: 0 ldb: 0 tevent: 0 doing parameter log file = /home/fujitsu/samba_log [2018/02/02 08:19:14.468012, 2, pid=22725, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[homes]" doing parameter comment = Home Directories doing parameter valid users = %S, %D%w%S doing parameter browseable = No doing parameter read only = No doing parameter inherit acls = Yes [2018/02/02 08:19:14.468114, 2, pid=22725, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[printers]" doing parameter comment = All Printers doing parameter path = /var/tmp doing parameter printable = Yes doing parameter create mask = 0600 doing parameter browseable = No [2018/02/02 08:19:14.468167, 2, pid=22725, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[print$]" doing parameter comment = Printer Drivers doing parameter path = /var/lib/samba/drivers doing parameter write list = root doing parameter create mask = 0664 doing parameter directory mask = 0775 [2018/02/02 08:19:14.468215, 2, pid=22725, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2685(lp_do_section) Processing section "[project3]" doing parameter comment = Project 3 doing parameter path = /home/jane doing parameter read only = No doing parameter browseable = Yes doing parameter writable = yes [2018/02/02 08:19:14.468255, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3780(lp_load_ex) pm_process() returned Yes [2018/02/02 08:19:14.468270, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1585(lp_add_ipc) adding IPC service [2018/02/02 08:19:14.468292, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] E6 C7 47 E4 9D 49 C0 F3 ..G..I.. [2018/02/02 08:19:14.468309, 8, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1239(is_myname) is_myname("LOCALHOST") returns 1 [2018/02/02 08:19:14.468320, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2018/02/02 08:19:14.468328, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2018/02/02 08:19:14.468342, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2018/02/02 08:19:14.468351, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.468358, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.468388, 18, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 187) -> 187 [2018/02/02 08:19:14.468403, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/substitute.c:435(automount_server) Home server: localhost [2018/02/02 08:19:14.468416, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/substitute.c:435(automount_server) Home server: localhost [2018/02/02 08:19:14.468427, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 [2018/02/02 08:19:14.468435, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 2 [2018/02/02 08:19:14.468443, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 [2018/02/02 08:19:14.468451, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.468458, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.468477, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get) account_policy_get: name: password history, val: 0 [2018/02/02 08:19:14.468488, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 [2018/02/02 08:19:14.468500, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 [2018/02/02 08:19:14.468508, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 2 [2018/02/02 08:19:14.468516, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 [2018/02/02 08:19:14.468524, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.468532, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.468545, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2018/02/02 08:19:14.468555, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 [2018/02/02 08:19:14.468566, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user jane [2018/02/02 08:19:14.468574, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is jane [2018/02/02 08:19:14.468601, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [jane]! [2018/02/02 08:19:14.468636, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid) gid 70 -> sid S-1-22-2-70 [2018/02/02 08:19:14.468661, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1645(get_primary_group_sid) Forcing Primary Group to 'Domain Users' for jane [2018/02/02 08:19:14.468672, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 [2018/02/02 08:19:14.468680, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 2 [2018/02/02 08:19:14.468688, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 [2018/02/02 08:19:14.468696, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.468704, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.468718, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get) account_policy_get: name: password history, val: 0 [2018/02/02 08:19:14.468728, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 [2018/02/02 08:19:14.468738, 18, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:127(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 187 [2018/02/02 08:19:14.468746, 18, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:127(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 187) -> 187 [2018/02/02 08:19:14.468755, 18, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:286(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 187) -> 187 [2018/02/02 08:19:14.468765, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/substitute.c:435(automount_server) Home server: localhost [2018/02/02 08:19:14.468776, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/substitute.c:435(automount_server) Home server: localhost [2018/02/02 08:19:14.468787, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 [2018/02/02 08:19:14.468795, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 2 [2018/02/02 08:19:14.468803, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 [2018/02/02 08:19:14.468811, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.468818, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.468832, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get) account_policy_get: name: password history, val: 0 [2018/02/02 08:19:14.468842, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 [2018/02/02 08:19:14.468855, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.468866, 4, pid=22725, effective(0, 0), real(0, 0)] ../libcli/auth/ntlm_check.c:359(ntlm_password_check) ntlm_password_check: Checking NTLMv2 password with domain [LOCALHOST] [2018/02/02 08:19:14.468886, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2018/02/02 08:19:14.468895, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2018/02/02 08:19:14.468908, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2018/02/02 08:19:14.468917, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.468925, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.468939, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2018/02/02 08:19:14.468949, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.468958, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2018/02/02 08:19:14.468966, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2018/02/02 08:19:14.468978, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2018/02/02 08:19:14.468986, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.468994, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.469006, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user jane [2018/02/02 08:19:14.469015, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is jane [2018/02/02 08:19:14.469023, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [jane]! [2018/02/02 08:19:14.469033, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 [2018/02/02 08:19:14.469041, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 2 [2018/02/02 08:19:14.469049, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 [2018/02/02 08:19:14.469057, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.469065, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.469078, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get) account_policy_get: name: minimum password age, val: 0 [2018/02/02 08:19:14.469087, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 [2018/02/02 08:19:14.469096, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 [2018/02/02 08:19:14.469104, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 2 [2018/02/02 08:19:14.469111, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 [2018/02/02 08:19:14.469119, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.469131, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.469145, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2018/02/02 08:19:14.469155, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 [2018/02/02 08:19:14.469164, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user jane [2018/02/02 08:19:14.469172, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is jane [2018/02/02 08:19:14.469181, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [jane]! [2018/02/02 08:19:14.469197, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist) sys_getgrouplist: user [jane] [2018/02/02 08:19:14.469253, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid) gid 70 -> sid S-1-22-2-70 [2018/02/02 08:19:14.469269, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.469281, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2018/02/02 08:19:14.469289, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2018/02/02 08:19:14.469297, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2018/02/02 08:19:14.469305, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.469313, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.469326, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.469335, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:215(auth3_check_password) Got NT session key of length 16 [2018/02/02 08:19:14.469343, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:222(auth3_check_password) Got LM session key of length 8 [2018/02/02 08:19:14.469352, 10, pid=22725, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:858(ntlmssp_server_postauth) ntlmssp_server_auth: Using unmodified nt session key. [2018/02/02 08:19:14.469364, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.469377, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:224(create_local_nt_token_from_info3) Create local NT token for jane [2018/02/02 08:19:14.469393, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1340105488-494795474-4286701950-1003]: value=[70:U] [2018/02/02 08:19:14.469403, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1340105488-494795474-4286701950-1003]: id=[70], endptr=[:U] [2018/02/02 08:19:14.469412, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1468(sid_to_uid) sid S-1-5-21-1340105488-494795474-4286701950-1003 -> uid 70 [2018/02/02 08:19:14.469440, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist) sys_getgrouplist: user [jane] [2018/02/02 08:19:14.469486, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid) gid 70 -> sid S-1-22-2-70 [2018/02/02 08:19:14.469504, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.469513, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:14.469521, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.469529, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.469536, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.469557, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:547(finalize_local_nt_token) Failed to fetch domain sid for SAMBA [2018/02/02 08:19:14.469567, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.469578, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.469587, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:14.469594, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.469602, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.469610, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.469624, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:579(finalize_local_nt_token) Failed to fetch domain sid for SAMBA [2018/02/02 08:19:14.469633, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.469642, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.469650, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:14.469657, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.469665, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.469673, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.469706, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.469718, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1340105488-494795474-4286701950-1003] [2018/02/02 08:19:14.469729, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1340105488-494795474-4286701950-513] [2018/02/02 08:19:14.469740, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-22-2-70] [2018/02/02 08:19:14.469755, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-1-0 Privilege set: 0x0 [2018/02/02 08:19:14.469769, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-2] [2018/02/02 08:19:14.469779, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-11] [2018/02/02 08:19:14.469791, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1340105488-494795474-4286701950-1003]: value=[70:U] [2018/02/02 08:19:14.469800, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1340105488-494795474-4286701950-1003]: id=[70], endptr=[:U] [2018/02/02 08:19:14.469855, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1360(sids_to_unixids) wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE [2018/02/02 08:19:14.469867, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.469875, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:14.469883, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.469891, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.469898, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.469913, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2018/02/02 08:19:14.469921, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2018/02/02 08:19:14.469929, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2018/02/02 08:19:14.469937, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.469945, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.469964, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.469979, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.469988, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-21-1340105488-494795474-4286701950-513 [2018/02/02 08:19:14.469998, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.470006, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:14.470013, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.470026, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.470035, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.470048, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2018/02/02 08:19:14.470056, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2018/02/02 08:19:14.470064, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2018/02/02 08:19:14.470072, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.470079, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.470098, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.470109, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.470117, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-21-1340105488-494795474-4286701950-513 [2018/02/02 08:19:14.470126, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.470134, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:14.470142, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.470149, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.470157, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.470171, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.470179, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-1-0 [2018/02/02 08:19:14.470188, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.470196, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:14.470203, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.470211, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.470219, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.470231, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.470240, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-1-0 [2018/02/02 08:19:14.470256, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.470265, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:14.470272, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.470280, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.470288, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.470301, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.470310, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-2 [2018/02/02 08:19:14.470318, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.470326, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:14.470334, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.470342, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.470349, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.470362, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.470370, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-2 [2018/02/02 08:19:14.470379, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.470386, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:14.470394, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.470402, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.470409, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.470422, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.470430, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-11 [2018/02/02 08:19:14.470438, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.470446, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:14.470454, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.470467, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.470475, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.470488, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.470496, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-11 [2018/02/02 08:19:14.470513, 7, pid=22725, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4096(lp_servicenumber) lp_servicenumber: couldn't find jane [2018/02/02 08:19:14.470523, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user jane [2018/02/02 08:19:14.470531, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is jane [2018/02/02 08:19:14.470540, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [jane]! [2018/02/02 08:19:14.470548, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/password.c:144(register_homes_share) Adding homes service for user 'jane' using home directory: '/home/jane' [2018/02/02 08:19:14.470570, 8, pid=22725, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1428(add_a_service) add_a_service: Creating snum = 5 for jane [2018/02/02 08:19:14.470580, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1478(hash_a_service) hash_a_service: hashing index 5 for service name jane [2018/02/02 08:19:14.470590, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1536(lp_add_home) adding home's share [jane] for user 'jane' at '/home/jane' [2018/02/02 08:19:14.470605, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2018/02/02 08:19:14.470614, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/lib/samba/lock/smbXsrv_session_global.tdb 2: 3: [2018/02/02 08:19:14.470625, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 392C1EEC [2018/02/02 08:19:14.470635, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978a8890 [2018/02/02 08:19:14.470657, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2018/02/02 08:19:14.470664, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key '392C1EEC' stored [2018/02/02 08:19:14.470673, 1, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000003 (3) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x392c1eec (959192812) session_wire_id : 0x0000000000004d01 (19713) creation_time : Fri Feb 2 08:19:14 AM 2018 EST expiration_time : Wed Dec 31 07:00:00 PM 1969 EST auth_time : Fri Feb 2 08:19:14 AM 2018 EST auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x00000007 (7) sids: ARRAY(7) sids : S-1-5-21-1340105488-494795474-4286701950-1003 sids : S-1-5-21-1340105488-494795474-4286701950-513 sids : S-1-22-2-70 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-22-1-70 privilege_mask : 0x0000000000000000 (0) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 0: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT 0: SEC_PRIV_BACKUP_BIT 0: SEC_PRIV_RESTORE_BIT 0: SEC_PRIV_TAKE_OWNERSHIP_BIT 0: SEC_PRIV_INCREASE_QUOTA_BIT 0: SEC_PRIV_SECURITY_BIT 0: SEC_PRIV_LOAD_DRIVER_BIT 0: SEC_PRIV_SYSTEM_PROFILE_BIT 0: SEC_PRIV_SYSTEMTIME_BIT 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 0: SEC_PRIV_CREATE_PAGEFILE_BIT 0: SEC_PRIV_SHUTDOWN_BIT 0: SEC_PRIV_DEBUG_BIT 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 0: SEC_PRIV_CHANGE_NOTIFY_BIT 0: SEC_PRIV_UNDOCK_BIT 0: SEC_PRIV_ENABLE_DELEGATION_BIT 0: SEC_PRIV_MANAGE_VOLUME_BIT 0: SEC_PRIV_IMPERSONATE_BIT 0: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x0000000000000046 (70) gid : 0x0000000000000046 (70) ngroups : 0x00000001 (1) groups: ARRAY(1) groups : 0x0000000000000046 (70) info : * info: struct auth_user_info account_name : * account_name : 'jane' user_principal_name : NULL user_principal_constructed: 0x00 (0) domain_name : * domain_name : 'LOCALHOST' dns_domain_name : NULL full_name : * full_name : '' logon_script : * logon_script : '' profile_path : * profile_path : '\\localhost\jane\profile' home_directory : * home_directory : '\\localhost\jane' home_drive : * home_drive : '' logon_server : * logon_server : 'LOCALHOST' last_logon : NTTIME(0) last_logoff : Wed Sep 13 10:48:05 PM 30828 EDT acct_expiry : Wed Sep 13 10:48:05 PM 30828 EDT last_password_change : Thu Jan 25 02:48:31 AM 2018 EST allow_password_change : Thu Jan 25 02:48:31 AM 2018 EST force_password_change : Wed Sep 13 10:48:05 PM 30828 EDT logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000010 (16) authenticated : 0x01 (1) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'jane' sanitized_username : * sanitized_username : 'jane' torture : NULL credentials : NULL connection_dialect : 0x0000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x00000000000058c5 (22725) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x86cc8f62ca95f029 (-8733447922909843415) local_address : 'ipv4:10.167.133.33:445' remote_address : 'ipv4:192.168.122.213:50346' remote_name : '192.168.122.213' auth_session_info_seqnum : 0x00000001 (1) connection : * encryption_cipher : 0x8000 (32768) [2018/02/02 08:19:14.471221, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2018/02/02 08:19:14.471230, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:19:14.471240, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 392C1EEC [2018/02/02 08:19:14.471249, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1405(smbXsrv_session_update) [2018/02/02 08:19:14.471254, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1413(smbXsrv_session_update) smbXsrv_session_update: global_id (0x392c1eec) stored [2018/02/02 08:19:14.471262, 1, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x00004d01 (19713) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x392c1eec (959192812) session_wire_id : 0x0000000000004d01 (19713) creation_time : Fri Feb 2 08:19:14 AM 2018 EST expiration_time : Wed Dec 31 07:00:00 PM 1969 EST auth_time : Fri Feb 2 08:19:14 AM 2018 EST auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x00000007 (7) sids: ARRAY(7) sids : S-1-5-21-1340105488-494795474-4286701950-1003 sids : S-1-5-21-1340105488-494795474-4286701950-513 sids : S-1-22-2-70 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-22-1-70 privilege_mask : 0x0000000000000000 (0) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 0: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT 0: SEC_PRIV_BACKUP_BIT 0: SEC_PRIV_RESTORE_BIT 0: SEC_PRIV_TAKE_OWNERSHIP_BIT 0: SEC_PRIV_INCREASE_QUOTA_BIT 0: SEC_PRIV_SECURITY_BIT 0: SEC_PRIV_LOAD_DRIVER_BIT 0: SEC_PRIV_SYSTEM_PROFILE_BIT 0: SEC_PRIV_SYSTEMTIME_BIT 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 0: SEC_PRIV_CREATE_PAGEFILE_BIT 0: SEC_PRIV_SHUTDOWN_BIT 0: SEC_PRIV_DEBUG_BIT 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 0: SEC_PRIV_CHANGE_NOTIFY_BIT 0: SEC_PRIV_UNDOCK_BIT 0: SEC_PRIV_ENABLE_DELEGATION_BIT 0: SEC_PRIV_MANAGE_VOLUME_BIT 0: SEC_PRIV_IMPERSONATE_BIT 0: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x0000000000000046 (70) gid : 0x0000000000000046 (70) ngroups : 0x00000001 (1) groups: ARRAY(1) groups : 0x0000000000000046 (70) info : * info: struct auth_user_info account_name : * account_name : 'jane' user_principal_name : NULL user_principal_constructed: 0x00 (0) domain_name : * domain_name : 'LOCALHOST' dns_domain_name : NULL full_name : * full_name : '' logon_script : * logon_script : '' profile_path : * profile_path : '\\localhost\jane\profile' home_directory : * home_directory : '\\localhost\jane' home_drive : * home_drive : '' logon_server : * logon_server : 'LOCALHOST' last_logon : NTTIME(0) last_logoff : Wed Sep 13 10:48:05 PM 30828 EDT acct_expiry : Wed Sep 13 10:48:05 PM 30828 EDT last_password_change : Thu Jan 25 02:48:31 AM 2018 EST allow_password_change : Thu Jan 25 02:48:31 AM 2018 EST force_password_change : Wed Sep 13 10:48:05 PM 30828 EDT logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000010 (16) authenticated : 0x01 (1) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'jane' sanitized_username : * sanitized_username : 'jane' torture : NULL credentials : NULL connection_dialect : 0x0000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x00000000000058c5 (22725) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x86cc8f62ca95f029 (-8733447922909843415) local_address : 'ipv4:10.167.133.33:445' remote_address : 'ipv4:192.168.122.213:50346' remote_name : '192.168.122.213' auth_session_info_seqnum : 0x00000001 (1) connection : * encryption_cipher : 0x8000 (32768) status : NT_STATUS_OK idle_time : Fri Feb 2 08:19:14 AM 2018 EST nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : * tcon_table : NULL pending_auth : * pending_auth: struct smbXsrv_session_auth0 prev : * next : NULL session : * connection : * gensec : * preauth : NULL in_flags : 0x00 (0) in_security_mode : 0x00 (0) creation_time : Fri Feb 2 08:19:14 AM 2018 EST idle_time : Fri Feb 2 08:19:14 AM 2018 EST [2018/02/02 08:19:14.471930, 6, pid=22725, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Feb 2 08:16:14 2018 [2018/02/02 08:19:14.471962, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:14.471968, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:181(show_msg) size=104 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=0 smb_pid=5101 smb_uid=19713 smb_mid=8572 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_bcc=61 [2018/02/02 08:19:14.472025, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [0010] 00 36 00 2E 00 31 00 00 00 53 00 61 00 6D 00 62 .6...1.. .S.a.m.b [0020] 00 61 00 20 00 34 00 2E 00 35 00 2E 00 38 00 00 .a. .4.. .5...8.. [0030] 00 53 00 41 00 4D 00 42 00 41 00 00 00 .S.A.M.B .A... [2018/02/02 08:19:14.472401, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 100 [2018/02/02 08:19:14.472448, 6, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x64 [2018/02/02 08:19:14.472457, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 3 of length 104 (0 toread) [2018/02/02 08:19:14.472466, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:14.472471, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:181(show_msg) size=100 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=53249 smb_tid=0 smb_pid=5101 smb_uid=19713 smb_mid=8573 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=57 [2018/02/02 08:19:14.472514, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 5C 00 5C 00 31 00 30 00 2E 00 31 00 36 00 37 .\.\.1.0 ...1.6.7 [0010] 00 2E 00 31 00 33 00 33 00 2E 00 33 00 33 00 5C ...1.3.3 ...3.3.\ [0020] 00 70 00 72 00 6F 00 6A 00 65 00 63 00 74 00 33 .p.r.o.j .e.c.t.3 [0030] 00 00 00 3F 3F 3F 3F 3F 00 ...????? . [2018/02/02 08:19:14.472553, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtconX (pid 22725) conn 0x0 [2018/02/02 08:19:14.472574, 0, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtconX.3.req len 104 [2018/02/02 08:19:14.472608, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.472618, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.472626, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.472639, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:19:14.472648, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2018/02/02 08:19:14.472657, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/lib/samba/lock/smbXsrv_session_global.tdb 2: 3: [2018/02/02 08:19:14.472667, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 392C1EEC [2018/02/02 08:19:14.472678, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978cbe40 [2018/02/02 08:19:14.472697, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:943(smbXsrv_session_global_store) [2018/02/02 08:19:14.472704, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:945(smbXsrv_session_global_store) smbXsrv_session_global_store: key '392C1EEC' stored [2018/02/02 08:19:14.472713, 1, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000004 (4) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x392c1eec (959192812) session_wire_id : 0x0000000000004d01 (19713) creation_time : Fri Feb 2 08:19:14 AM 2018 EST expiration_time : Wed Dec 31 07:00:00 PM 1969 EST auth_time : Fri Feb 2 08:19:14 AM 2018 EST auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x00000007 (7) sids: ARRAY(7) sids : S-1-5-21-1340105488-494795474-4286701950-1003 sids : S-1-5-21-1340105488-494795474-4286701950-513 sids : S-1-22-2-70 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-22-1-70 privilege_mask : 0x0000000000000000 (0) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 0: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT 0: SEC_PRIV_BACKUP_BIT 0: SEC_PRIV_RESTORE_BIT 0: SEC_PRIV_TAKE_OWNERSHIP_BIT 0: SEC_PRIV_INCREASE_QUOTA_BIT 0: SEC_PRIV_SECURITY_BIT 0: SEC_PRIV_LOAD_DRIVER_BIT 0: SEC_PRIV_SYSTEM_PROFILE_BIT 0: SEC_PRIV_SYSTEMTIME_BIT 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 0: SEC_PRIV_CREATE_PAGEFILE_BIT 0: SEC_PRIV_SHUTDOWN_BIT 0: SEC_PRIV_DEBUG_BIT 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 0: SEC_PRIV_CHANGE_NOTIFY_BIT 0: SEC_PRIV_UNDOCK_BIT 0: SEC_PRIV_ENABLE_DELEGATION_BIT 0: SEC_PRIV_MANAGE_VOLUME_BIT 0: SEC_PRIV_IMPERSONATE_BIT 0: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x0000000000000046 (70) gid : 0x0000000000000046 (70) ngroups : 0x00000001 (1) groups: ARRAY(1) groups : 0x0000000000000046 (70) info : * info: struct auth_user_info account_name : * account_name : 'jane' user_principal_name : NULL user_principal_constructed: 0x00 (0) domain_name : * domain_name : 'LOCALHOST' dns_domain_name : NULL full_name : * full_name : '' logon_script : * logon_script : '' profile_path : * profile_path : '\\localhost\jane\profile' home_directory : * home_directory : '\\localhost\jane' home_drive : * home_drive : '' logon_server : * logon_server : 'LOCALHOST' last_logon : NTTIME(0) last_logoff : Wed Sep 13 10:48:05 PM 30828 EDT acct_expiry : Wed Sep 13 10:48:05 PM 30828 EDT last_password_change : Thu Jan 25 02:48:31 AM 2018 EST allow_password_change : Thu Jan 25 02:48:31 AM 2018 EST force_password_change : Wed Sep 13 10:48:05 PM 30828 EDT logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000010 (16) authenticated : 0x01 (1) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'jane' sanitized_username : * sanitized_username : 'jane' torture : NULL credentials : NULL connection_dialect : 0x0000 (0) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x00000000000058c5 (22725) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x86cc8f62ca95f029 (-8733447922909843415) local_address : 'ipv4:10.167.133.33:445' remote_address : 'ipv4:192.168.122.213:50346' remote_name : '192.168.122.213' auth_session_info_seqnum : 0x00000001 (1) connection : * encryption_cipher : 0x8000 (32768) [2018/02/02 08:19:14.473282, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/lib/samba/lock/smbXsrv_session_global.tdb [2018/02/02 08:19:14.473291, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:19:14.473300, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 392C1EEC [2018/02/02 08:19:14.473310, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1405(smbXsrv_session_update) [2018/02/02 08:19:14.473315, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1413(smbXsrv_session_update) smbXsrv_session_update: global_id (0x392c1eec) stored [2018/02/02 08:19:14.473328, 1, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x00004d01 (19713) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x392c1eec (959192812) session_wire_id : 0x0000000000004d01 (19713) creation_time : Fri Feb 2 08:19:14 AM 2018 EST expiration_time : Wed Dec 31 07:00:00 PM 1969 EST auth_time : Fri Feb 2 08:19:14 AM 2018 EST auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x00000007 (7) sids: ARRAY(7) sids : S-1-5-21-1340105488-494795474-4286701950-1003 sids : S-1-5-21-1340105488-494795474-4286701950-513 sids : S-1-22-2-70 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-22-1-70 privilege_mask : 0x0000000000000000 (0) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 0: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT 0: SEC_PRIV_BACKUP_BIT 0: SEC_PRIV_RESTORE_BIT 0: SEC_PRIV_TAKE_OWNERSHIP_BIT 0: SEC_PRIV_INCREASE_QUOTA_BIT 0: SEC_PRIV_SECURITY_BIT 0: SEC_PRIV_LOAD_DRIVER_BIT 0: SEC_PRIV_SYSTEM_PROFILE_BIT 0: SEC_PRIV_SYSTEMTIME_BIT 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 0: SEC_PRIV_CREATE_PAGEFILE_BIT 0: SEC_PRIV_SHUTDOWN_BIT 0: SEC_PRIV_DEBUG_BIT 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 0: SEC_PRIV_CHANGE_NOTIFY_BIT 0: SEC_PRIV_UNDOCK_BIT 0: SEC_PRIV_ENABLE_DELEGATION_BIT 0: SEC_PRIV_MANAGE_VOLUME_BIT 0: SEC_PRIV_IMPERSONATE_BIT 0: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x0000000000000046 (70) gid : 0x0000000000000046 (70) ngroups : 0x00000001 (1) groups: ARRAY(1) groups : 0x0000000000000046 (70) info : * info: struct auth_user_info account_name : * account_name : 'jane' user_principal_name : NULL user_principal_constructed: 0x00 (0) domain_name : * domain_name : 'LOCALHOST' dns_domain_name : NULL full_name : * full_name : '' logon_script : * logon_script : '' profile_path : * profile_path : '\\localhost\jane\profile' home_directory : * home_directory : '\\localhost\jane' home_drive : * home_drive : '' logon_server : * logon_server : 'LOCALHOST' last_logon : NTTIME(0) last_logoff : Wed Sep 13 10:48:05 PM 30828 EDT acct_expiry : Wed Sep 13 10:48:05 PM 30828 EDT last_password_change : Thu Jan 25 02:48:31 AM 2018 EST allow_password_change : Thu Jan 25 02:48:31 AM 2018 EST force_password_change : Wed Sep 13 10:48:05 PM 30828 EDT logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000010 (16) authenticated : 0x01 (1) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'jane' sanitized_username : * sanitized_username : 'jane' torture : NULL credentials : NULL connection_dialect : 0x0000 (0) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x00000000000058c5 (22725) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x86cc8f62ca95f029 (-8733447922909843415) local_address : 'ipv4:10.167.133.33:445' remote_address : 'ipv4:192.168.122.213:50346' remote_name : '192.168.122.213' auth_session_info_seqnum : 0x00000001 (1) connection : * encryption_cipher : 0x8000 (32768) status : NT_STATUS_OK idle_time : Fri Feb 2 08:19:14 AM 2018 EST nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : * tcon_table : NULL pending_auth : * pending_auth: struct smbXsrv_session_auth0 prev : * next : NULL session : * connection : * gensec : * preauth : NULL in_flags : 0x00 (0) in_security_mode : 0x00 (0) creation_time : Fri Feb 2 08:19:14 AM 2018 EST idle_time : Fri Feb 2 08:19:14 AM 2018 EST [2018/02/02 08:19:14.473984, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/reply.c:972(reply_tcon_and_X) Client requested device type [?????] for share [project3] [2018/02/02 08:19:14.474006, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:1074(make_connection) making a connection to 'normal' service project3 [2018/02/02 08:19:14.474019, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/lib/samba/lock/smbXsrv_tcon_global.tdb [2018/02/02 08:19:14.474027, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/lib/samba/lock/smbXsrv_tcon_global.tdb 2: 3: [2018/02/02 08:19:14.474037, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 863E8B5A [2018/02/02 08:19:14.474048, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978c6dd0 [2018/02/02 08:19:14.474115, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2018/02/02 08:19:14.474123, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '863E8B5A' stored [2018/02/02 08:19:14.474133, 1, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x863e8b5a (2252245850) tcon_wire_id : 0x00002eb9 (11961) server_id: struct server_id pid : 0x00000000000058c5 (22725) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x86cc8f62ca95f029 (-8733447922909843415) creation_time : Fri Feb 2 08:19:14 AM 2018 EST share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2018/02/02 08:19:14.474230, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 863E8B5A [2018/02/02 08:19:14.474239, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/lib/samba/lock/smbXsrv_tcon_global.tdb [2018/02/02 08:19:14.474247, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:19:14.474256, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:831(smbXsrv_tcon_create) [2018/02/02 08:19:14.474262, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:839(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0x863e8b5a) stored [2018/02/02 08:19:14.474270, 1, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x00002eb9 (11961) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x863e8b5a (2252245850) tcon_wire_id : 0x00002eb9 (11961) server_id: struct server_id pid : 0x00000000000058c5 (22725) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x86cc8f62ca95f029 (-8733447922909843415) creation_time : Fri Feb 2 08:19:14 AM 2018 EST share_name : NULL encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x00000000 (0) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_INTERNAL_ERROR idle_time : Fri Feb 2 08:19:14 AM 2018 EST compat : NULL [2018/02/02 08:19:14.474406, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 192.168.122.213 (192.168.122.213) [2018/02/02 08:19:14.474419, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:221(user_ok_token) user_ok_token: share project3 is ok for unix user jane [2018/02/02 08:19:14.474447, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:67(set_conn_connectpath) set_conn_connectpath: service project3, connectpath = /home/jane [2018/02/02 08:19:14.474459, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:576(make_connection_snum) Connect path is '/home/jane' for service [project3] [2018/02/02 08:19:14.474468, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:221(user_ok_token) user_ok_token: share project3 is ok for unix user jane [2018/02/02 08:19:14.474477, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:268(is_share_read_only_for_token) is_share_read_only_for_user: share project3 is read-write for unix user jane [2018/02/02 08:19:14.474495, 10, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/access_check.c:337(se_file_access_check) se_file_access_check: MAX desired = 0x2000000 mapped to 0x1f01ff [2018/02/02 08:19:14.474531, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/notify_msg.c:80(notify_init) notify_init: notifyd=22721 [2018/02/02 08:19:14.474544, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 784 - private_data=0x5578978cfe90 [2018/02/02 08:19:14.474553, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 793 - private_data=0x5578978ac380 [2018/02/02 08:19:14.474561, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 799 - private_data=0x5578978ac380 [2018/02/02 08:19:14.474576, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:67(set_conn_connectpath) set_conn_connectpath: service project3, connectpath = /home/jane [2018/02/02 08:19:14.474592, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:221(user_ok_token) user_ok_token: share project3 is ok for unix user jane [2018/02/02 08:19:14.474602, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:268(is_share_read_only_for_token) is_share_read_only_for_user: share project3 is read-write for unix user jane [2018/02/02 08:19:14.474614, 10, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/access_check.c:337(se_file_access_check) se_file_access_check: MAX desired = 0x2000000 mapped to 0x1f01ff [2018/02/02 08:19:14.474638, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (70, 70) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.474648, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (7): SID[ 0]: S-1-5-21-1340105488-494795474-4286701950-1003 SID[ 1]: S-1-5-21-1340105488-494795474-4286701950-513 SID[ 2]: S-1-22-2-70 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-11 SID[ 6]: S-1-22-1-70 Privileges (0x 0): Rights (0x 0): [2018/02/02 08:19:14.474685, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 70 Primary group is 70 and contains 1 supplementary groups Group[ 0]: 70 [2018/02/02 08:19:14.474718, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(70,70), gid=(0,70) [2018/02/02 08:19:14.474731, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.474739, 5, pid=22725, effective(70, 70), real(70, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.474747, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.474760, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:19:14.474771, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:67(set_conn_connectpath) set_conn_connectpath: service project3, connectpath = /home/jane [2018/02/02 08:19:14.474791, 2, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:822(make_connection_snum) (ipv4:192.168.122.213:50346) connect to service project3 initially as user jane (uid=70, gid=70) (pid 22725) [2018/02/02 08:19:14.474808, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/lib/samba/lock/smbXsrv_tcon_global.tdb [2018/02/02 08:19:14.474817, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/lib/samba/lock/smbXsrv_tcon_global.tdb 2: 3: [2018/02/02 08:19:14.474826, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 863E8B5A [2018/02/02 08:19:14.474836, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978d0d30 [2018/02/02 08:19:14.474848, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2018/02/02 08:19:14.474854, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '863E8B5A' stored [2018/02/02 08:19:14.474863, 1, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000002 (2) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x863e8b5a (2252245850) tcon_wire_id : 0x00002eb9 (11961) server_id: struct server_id pid : 0x00000000000058c5 (22725) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x86cc8f62ca95f029 (-8733447922909843415) creation_time : Fri Feb 2 08:19:14 AM 2018 EST share_name : 'project3' encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x392c1eec (959192812) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2018/02/02 08:19:14.474967, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 863E8B5A [2018/02/02 08:19:14.474981, 5, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/lib/samba/lock/smbXsrv_tcon_global.tdb [2018/02/02 08:19:14.474990, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:19:14.474999, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:876(smbXsrv_tcon_update) [2018/02/02 08:19:14.475004, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:884(smbXsrv_tcon_update) smbXsrv_tcon_update: global_id (0x863e8b5a) stored [2018/02/02 08:19:14.475012, 1, pid=22725, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x00002eb9 (11961) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x863e8b5a (2252245850) tcon_wire_id : 0x00002eb9 (11961) server_id: struct server_id pid : 0x00000000000058c5 (22725) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x86cc8f62ca95f029 (-8733447922909843415) creation_time : Fri Feb 2 08:19:14 AM 2018 EST share_name : 'project3' encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x392c1eec (959192812) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_OK idle_time : Fri Feb 2 08:19:14 AM 2018 EST compat : * [2018/02/02 08:19:14.475147, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/reply.c:1139(reply_tcon_and_X) tconX service=project3 [2018/02/02 08:19:14.475156, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:14.475161, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:181(show_msg) size=62 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5101 smb_uid=19713 smb_mid=8573 smt_wct=7 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_vwv[ 3]= 511 (0x1FF) smb_vwv[ 4]= 31 (0x1F) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_bcc=13 [2018/02/02 08:19:14.475211, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 41 3A 00 4E 00 54 00 46 00 53 00 00 00 A:.N.T.F .S... [2018/02/02 08:19:14.475549, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 68 [2018/02/02 08:19:14.475596, 6, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x44 [2018/02/02 08:19:14.475606, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 4 of length 72 (0 toread) [2018/02/02 08:19:14.475614, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:14.475620, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:181(show_msg) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=49153 smb_tid=11961 smb_pid=5101 smb_uid=19713 smb_mid=8574 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 100 (0x64) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 66 (0x42) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=3 [2018/02/02 08:19:14.475690, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 02 ... [2018/02/02 08:19:14.475704, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtrans2 (pid 22725) conn 0x5578978d13a0 [2018/02/02 08:19:14.475737, 0, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtrans2.15.req len 72 [2018/02/02 08:19:14.475765, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (70, 70) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.475776, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (7): SID[ 0]: S-1-5-21-1340105488-494795474-4286701950-1003 SID[ 1]: S-1-5-21-1340105488-494795474-4286701950-513 SID[ 2]: S-1-22-2-70 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-11 SID[ 6]: S-1-22-1-70 Privileges (0x 0): Rights (0x 0): [2018/02/02 08:19:14.475813, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 70 Primary group is 70 and contains 1 supplementary groups Group[ 0]: 70 [2018/02/02 08:19:14.475841, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(70,70), gid=(0,70) [2018/02/02 08:19:14.475860, 5, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/lib/samba/lock/smbXsrv_tcon_global.tdb [2018/02/02 08:19:14.475870, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/lib/samba/lock/smbXsrv_tcon_global.tdb 2: 3: [2018/02/02 08:19:14.475880, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 863E8B5A [2018/02/02 08:19:14.475890, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978d0d30 [2018/02/02 08:19:14.475903, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/smbXsrv_tcon.c:709(smbXsrv_tcon_global_store) [2018/02/02 08:19:14.475909, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/smbXsrv_tcon.c:711(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '863E8B5A' stored [2018/02/02 08:19:14.475918, 1, pid=22725, effective(70, 70), real(70, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000003 (3) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x863e8b5a (2252245850) tcon_wire_id : 0x00002eb9 (11961) server_id: struct server_id pid : 0x00000000000058c5 (22725) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x86cc8f62ca95f029 (-8733447922909843415) creation_time : Fri Feb 2 08:19:14 AM 2018 EST share_name : 'project3' encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x392c1eec (959192812) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET [2018/02/02 08:19:14.476054, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 863E8B5A [2018/02/02 08:19:14.476064, 5, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/lib/samba/lock/smbXsrv_tcon_global.tdb [2018/02/02 08:19:14.476073, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:19:14.476082, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/smbXsrv_tcon.c:876(smbXsrv_tcon_update) [2018/02/02 08:19:14.476087, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/smbXsrv_tcon.c:884(smbXsrv_tcon_update) smbXsrv_tcon_update: global_id (0x863e8b5a) stored [2018/02/02 08:19:14.476095, 1, pid=22725, effective(70, 70), real(70, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x00002eb9 (11961) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x863e8b5a (2252245850) tcon_wire_id : 0x00002eb9 (11961) server_id: struct server_id pid : 0x00000000000058c5 (22725) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x86cc8f62ca95f029 (-8733447922909843415) creation_time : Fri Feb 2 08:19:14 AM 2018 EST share_name : 'project3' encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET session_global_id : 0x392c1eec (959192812) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET status : NT_STATUS_OK idle_time : Fri Feb 2 08:19:14 AM 2018 EST compat : * [2018/02/02 08:19:14.476231, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4109(call_trans2qfsinfo) call_trans2qfsinfo: level = 512 [2018/02/02 08:19:14.476242, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:3408(smbd_do_qfsinfo) smbd_do_qfsinfo: level = 512 [2018/02/02 08:19:14.476255, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1111(send_trans2_replies) t2_rep: params_sent_thistime = 0, data_sent_thistime = 12, useable_space = 16408 [2018/02/02 08:19:14.476263, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1113(send_trans2_replies) t2_rep: params_to_send = 0, data_to_send = 12, paramsize = 0, datasize = 12 [2018/02/02 08:19:14.476272, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:14.476277, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5101 smb_uid=19713 smb_mid=8574 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 12 (0xC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 12 (0xC) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2018/02/02 08:19:14.476334, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 01 00 00 00 7B 01 00 00 00 00 00 00 .....{.. ..... [2018/02/02 08:19:14.476360, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4127(call_trans2qfsinfo) SMBtrans2 info_level = 512 [2018/02/02 08:19:14.476660, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 82 [2018/02/02 08:19:14.476708, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x52 [2018/02/02 08:19:14.476717, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 5 of length 86 (0 toread) [2018/02/02 08:19:14.476735, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:14.476741, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=82 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=49153 smb_tid=11961 smb_pid=5101 smb_uid=19713 smb_mid=8575 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 12 (0xC) smb_vwv[ 2]= 4 (0x4) smb_vwv[ 3]= 100 (0x64) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 66 (0x42) smb_vwv[11]= 12 (0xC) smb_vwv[12]= 70 (0x46) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 4 (0x4) smb_bcc=17 [2018/02/02 08:19:14.476810, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 02 01 00 00 00 5B 01 00 00 00 00 00 ........ .[...... [0010] 00 . [2018/02/02 08:19:14.476832, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtrans2 (pid 22725) conn 0x5578978d13a0 [2018/02/02 08:19:14.476863, 0, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtrans2.16.req len 86 [2018/02/02 08:19:14.476884, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2018/02/02 08:19:14.476895, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4148(call_trans2setfsinfo) call_trans2setfsinfo: for service [project3] [2018/02/02 08:19:14.476905, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4214(call_trans2setfsinfo) call_trans2setfsinfo: set unix_info info. major = 1, minor = 0 cap_low = 0x15b, cap_high = 0x0nsize=55 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5101 smb_uid=19713 smb_mid=8575 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=0 [2018/02/02 08:19:14.476993, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [2018/02/02 08:19:14.477322, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 82 [2018/02/02 08:19:14.477373, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x52 [2018/02/02 08:19:14.477382, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 6 of length 86 (0 toread) [2018/02/02 08:19:14.477391, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:14.477396, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=82 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=49153 smb_tid=11961 smb_pid=5101 smb_uid=19713 smb_mid=8576 smt_wct=15 smb_vwv[ 0]= 16 (0x10) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 4000 (0xFA0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 16 (0x10) smb_vwv[10]= 66 (0x42) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=17 [2018/02/02 08:19:14.477467, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 02 00 00 00 00 2F 00 61 00 61 00 61 00 00 ......./ .a.a.a.. [0010] 00 . [2018/02/02 08:19:14.477488, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtrans2 (pid 22725) conn 0x5578978d13a0 [2018/02/02 08:19:14.477529, 0, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtrans2.17.req len 86 [2018/02/02 08:19:14.477551, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2018/02/02 08:19:14.477562, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5761(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 512 [2018/02/02 08:19:14.477573, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:443(unix_convert) unix_convert called on file "aaa" [2018/02/02 08:19:14.477582, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:644(unix_convert) unix_convert begin: name = aaa, dirpath = , start = aaa [2018/02/02 08:19:14.477602, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5887(call_trans2qfilepathinfo) call_trans2qfilepathinfo: SMB_VFS_LSTAT of aaa failed (No such file or directory) [2018/02/02 08:19:14.477616, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/error.c:82(error_packet_set) NT error packet at ../source3/smbd/trans2.c(5889) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2018/02/02 08:19:14.477626, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:14.477632, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5101 smb_uid=19713 smb_mid=8576 smt_wct=0 smb_bcc=0 [2018/02/02 08:19:14.477664, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [2018/02/02 08:19:14.477945, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 102 [2018/02/02 08:19:14.478005, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x66 [2018/02/02 08:19:14.478014, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 7 of length 106 (0 toread) [2018/02/02 08:19:14.478023, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:14.478028, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=102 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=49153 smb_tid=11961 smb_pid=5101 smb_uid=19713 smb_mid=8577 smt_wct=15 smb_vwv[ 0]= 16 (0x10) smb_vwv[ 1]= 18 (0x12) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 1000 (0x3E8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 16 (0x10) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 18 (0x12) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 6 (0x6) smb_bcc=37 [2018/02/02 08:19:14.478098, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 09 02 00 00 00 00 2F 00 61 00 61 00 61 ........ ./.a.a.a [0010] 00 00 00 00 00 00 00 10 02 00 00 ED 01 00 00 00 ........ ........ [0020] 00 00 00 00 02 ..... [2018/02/02 08:19:14.478128, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtrans2 (pid 22725) conn 0x5578978d13a0 [2018/02/02 08:19:14.478160, 0, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtrans2.18.req len 106 [2018/02/02 08:19:14.478180, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2018/02/02 08:19:14.478191, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:443(unix_convert) unix_convert called on file "aaa" [2018/02/02 08:19:14.478207, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:644(unix_convert) unix_convert begin: name = aaa, dirpath = , start = aaa [2018/02/02 08:19:14.478222, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:8819(call_trans2setfilepathinfo) call_trans2setfilepathinfo(6) aaa (fnum [fsp is NULL]) info_level=521 totdata=18 [2018/02/02 08:19:14.478232, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:8379(smbd_do_setfilepathinfo) smbd_do_setfilepathinfo: aaa (fnum [fsp is NULL]) info_level=521 totdata=18 [2018/02/02 08:19:14.478241, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:7905(smb_posix_mkdir) smb_posix_mkdir: file aaa, mode 0755 [2018/02/02 08:19:14.478250, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/open.c:5336(create_file_default) create_file: access_mask = 0x80 file_attributes = 0x10001ed, share_access = 0x0, create_disposition = 0x2 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = aaa [2018/02/02 08:19:14.478260, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/open.c:4809(create_file_unixpath) create_file_unixpath: access_mask = 0x80 file_attributes = 0x10001ed, share_access = 0x0, create_disposition = 0x2 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = aaa [2018/02/02 08:19:14.478270, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/open.c:3738(open_directory) open_directory: opening directory aaa, access_mask = 0x80, share_access = 0x0 create_options = 0x1, create_disposition = 0x2, file_attributes = 0x10001ed [2018/02/02 08:19:14.478301, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/passdb/lookup_sid.c:1251(uid_to_sid) uid 70 -> sid S-1-5-21-1340105488-494795474-4286701950-1003 [2018/02/02 08:19:14.478316, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid) gid 70 -> sid S-1-22-2-70 [2018/02/02 08:19:14.478383, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/notify_msg.c:217(notify_trigger) notify_trigger called action=0x1, filter=0x2, dir=/home/jane, name=aaa [2018/02/02 08:19:14.478397, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(70, 70) : sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.478406, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(19713) : conn_ctx_stack_ndx = 0 [2018/02/02 08:19:14.478415, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:19:14.478424, 5, pid=22725, effective(70, 70), real(70, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:19:14.478432, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:19:14.478448, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 22721 [2018/02/02 08:19:14.478469, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (70, 70) - sec_ctx_stack_ndx = 0 [2018/02/02 08:19:14.478480, 10, pid=22721, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) [2018/02/02 08:19:14.478489, 5, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) messaging_recv_cb: Received message 0x31b len 39 (num_fds:0) from 22725 check lock order 1 for /var/lib/samba/lock/smbXsrv_open_global.tdb [2018/02/02 08:19:14.478508, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/lib/samba/lock/smbXsrv_open_global.tdb 2: 3: [2018/02/02 08:19:14.478522, 10, pid=22721, effective(0, 0), real(0, 0)] ../source3/smbd/notifyd/notifyd.c:678(notifyd_trigger) notifyd_trigger: Got trigger_msg action=1, filter=2, path=/home/jane/aaa [2018/02/02 08:19:14.478535, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 714CDBC3 [2018/02/02 08:19:14.478543, 10, pid=22721, effective(0, 0), real(0, 0)] ../source3/smbd/notifyd/notifyd.c:695(notifyd_trigger) notifyd_trigger: Trying path /home [2018/02/02 08:19:14.478556, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) [2018/02/02 08:19:14.478559, 10, pid=22721, effective(0, 0), real(0, 0)] ../source3/smbd/notifyd/notifyd.c:695(notifyd_trigger) Allocated locked data 0x0x5578978d03a0 notifyd_trigger: Trying path /home/jane [2018/02/02 08:19:14.478573, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/smbXsrv_open.c:624(smbXsrv_open_global_verify_record) smbXsrv_open_global_verify_record: empty value [2018/02/02 08:19:14.478654, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/smbXsrv_open.c:743(smbXsrv_open_global_store) smbXsrv_open_global_store: key '714CDBC3' stored [2018/02/02 08:19:14.478666, 1, pid=22725, effective(70, 70), real(70, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x00000000000058c5 (22725) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x86cc8f62ca95f029 (-8733447922909843415) open_global_id : 0x714cdbc3 (1900862403) open_persistent_id : 0x00000000714cdbc3 (1900862403) open_volatile_id : 0x0000000000008c5d (35933) open_owner : S-1-5-21-1340105488-494795474-4286701950-1003 open_time : Fri Feb 2 08:19:14 AM 2018 EST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 channel_sequence : 0x0000000000000000 (0) [2018/02/02 08:19:14.478768, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 714CDBC3 [2018/02/02 08:19:14.478778, 5, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/lib/samba/lock/smbXsrv_open_global.tdb [2018/02/02 08:19:14.478786, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:19:14.478795, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/smbXsrv_open.c:910(smbXsrv_open_create) smbXsrv_open_create: global_id (0x714cdbc3) stored [2018/02/02 08:19:14.478803, 1, pid=22725, effective(70, 70), real(70, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x00008c5d (35933) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x00000000000058c5 (22725) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x86cc8f62ca95f029 (-8733447922909843415) open_global_id : 0x714cdbc3 (1900862403) open_persistent_id : 0x00000000714cdbc3 (1900862403) open_volatile_id : 0x0000000000008c5d (35933) open_owner : S-1-5-21-1340105488-494795474-4286701950-1003 open_time : Fri Feb 2 08:19:14 AM 2018 EST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 channel_sequence : 0x0000000000000000 (0) status : NT_STATUS_OK idle_time : Fri Feb 2 08:19:14 AM 2018 EST compat : NULL flags : 0x00 (0) 0: SMBXSRV_OPEN_NEED_REPLAY_CACHE 0: SMBXSRV_OPEN_HAVE_REPLAY_CACHE create_action : 0x00000000 (0) request_count : 0x0000000000000000 (0) pre_request_count : 0x0000000000000000 (0) [2018/02/02 08:19:14.478960, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/files.c:128(file_new) allocated file structure fnum 35933 (1 used) [2018/02/02 08:19:14.478975, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/files.c:756(file_name_hash) file_name_hash: /home/jane/aaa hash 0x3bde0c6f [2018/02/02 08:19:14.478985, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/open.c:3946(open_directory) Not opening Directory aaa [2018/02/02 08:19:14.478999, 5, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/lib/samba/lock/locking.tdb [2018/02/02 08:19:14.479008, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/lib/samba/lock/locking.tdb 2: 3: [2018/02/02 08:19:14.479019, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 2D00000000000000E44CAB00000000000000000000000000 [2018/02/02 08:19:14.479032, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978ce850 [2018/02/02 08:19:14.479044, 1, pid=22725, effective(70, 70), real(70, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) d: struct share_mode_data sequence_number : 0x63a24f196934bd87 (7179387726539832711) servicepath : * servicepath : '/home/jane' base_name : * base_name : 'aaa' stream_name : NULL num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x00000000000058c5 (22725) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x86cc8f62ca95f029 (-8733447922909843415) op_mid : 0x0000000000002181 (8577) op_type : 0x0000 (0) lease_idx : 0xffffffff (4294967295) access_mask : 0x00000080 (128) share_access : 0x00000000 (0) private_options : 0x00000000 (0) time : Fri Feb 2 08:19:14 AM 2018 EST.478486 id: struct file_id devid : 0x000000000000002d (45) inode : 0x0000000000ab4ce4 (11226340) extid : 0x0000000000000000 (0) share_file_id : 0x0000000023e3abdb (602123227) uid : 0x00000046 (70) flags : 0x0001 (1) name_hash : 0x3bde0c6f (1004407919) stale : 0x00 (0) lease : NULL num_leases : 0x00000000 (0) leases: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Wed Dec 31 07:00:00 PM 1969 EST.0 changed_write_time : Wed Dec 31 07:00:00 PM 1969 EST.0 fresh : 0x01 (1) modified : 0x01 (1) record : * id: struct file_id devid : 0x000000000000002d (45) inode : 0x0000000000ab4ce4 (11226340) extid : 0x0000000000000000 (0) [2018/02/02 08:19:14.479298, 5, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/lib/samba/lock/locking.tdb [2018/02/02 08:19:14.479310, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:19:14.479322, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 2D00000000000000E44CAB00000000000000000000000000 [2018/02/02 08:19:14.479333, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/open.c:5143(create_file_unixpath) create_file_unixpath: info=2 [2018/02/02 08:19:14.479343, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/open.c:5424(create_file_default) create_file: info=2 [2018/02/02 08:19:14.479352, 5, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/lib/samba/lock/locking.tdb [2018/02/02 08:19:14.479360, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/lib/samba/lock/locking.tdb 2: 3: [2018/02/02 08:19:14.479372, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 2D00000000000000E44CAB00000000000000000000000000 [2018/02/02 08:19:14.479382, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978d19c0 [2018/02/02 08:19:14.479393, 1, pid=22725, effective(70, 70), real(70, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) d: struct share_mode_data sequence_number : 0x63a24f196934bd88 (7179387726539832712) servicepath : * servicepath : '/home/jane' base_name : * base_name : 'aaa' stream_name : NULL num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_leases : 0x00000000 (0) leases: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Wed Dec 31 07:00:00 PM 1969 EST.0 changed_write_time : Wed Dec 31 07:00:00 PM 1969 EST.0 fresh : 0x00 (0) modified : 0x01 (1) record : * id: struct file_id devid : 0x000000000000002d (45) inode : 0x0000000000ab4ce4 (11226340) extid : 0x0000000000000000 (0) [2018/02/02 08:19:14.479483, 5, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/lib/samba/lock/locking.tdb [2018/02/02 08:19:14.479492, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:19:14.479503, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 2D00000000000000E44CAB00000000000000000000000000 [2018/02/02 08:19:14.479513, 5, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 1 for /var/lib/samba/lock/smbXsrv_open_global.tdb [2018/02/02 08:19:14.479522, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1:/var/lib/samba/lock/smbXsrv_open_global.tdb 2: 3: [2018/02/02 08:19:14.479531, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 714CDBC3 [2018/02/02 08:19:14.479540, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978cc090 [2018/02/02 08:19:14.479551, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 714CDBC3 [2018/02/02 08:19:14.479560, 5, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 1 for /var/lib/samba/lock/smbXsrv_open_global.tdb [2018/02/02 08:19:14.479568, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:19:14.479579, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/files.c:565(file_free) freed files structure 35933 (0 used) [2018/02/02 08:19:14.479588, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:14.479596, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40755 [2018/02/02 08:19:14.479606, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1111(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 112, useable_space = 16406 [2018/02/02 08:19:14.479614, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1113(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 112, paramsize = 2, datasize = 112 [2018/02/02 08:19:14.479622, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:14.479628, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=172 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5101 smb_uid=19713 smb_mid=8577 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 112 (0x70) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 112 (0x70) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=117 [2018/02/02 08:19:14.479693, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 02 00 00 00 00 02 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 D6 16 C8 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 ....k(.. ....k(.. [0030] 01 D6 16 C8 6B 28 9C D3 01 46 00 00 00 00 00 00 ....k(.. .F...... [0040] 00 46 00 00 00 00 00 00 00 01 00 00 00 00 00 00 .F...... ........ [0050] 00 00 00 00 00 2D 00 00 00 00 00 00 00 E4 4C AB .....-.. ......L. [0060] 00 00 00 00 00 ED 01 00 00 00 00 00 00 01 00 00 ........ ........ [0070] 00 00 00 00 00 ..... [2018/02/02 08:19:16.286069, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 84 [2018/02/02 08:19:16.286141, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x54 [2018/02/02 08:19:16.286157, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 8 of length 88 (0 toread) [2018/02/02 08:19:16.286171, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:16.286179, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=49153 smb_tid=11961 smb_pid=5102 smb_uid=19713 smb_mid=8578 smt_wct=15 smb_vwv[ 0]= 18 (0x12) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 18 (0x12) smb_vwv[10]= 66 (0x42) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=19 [2018/02/02 08:19:16.286286, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 17 00 96 00 06 00 02 02 00 00 00 00 2F 00 2A ........ ...../.* [0010] 00 00 00 ... [2018/02/02 08:19:16.286325, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtrans2 (pid 22725) conn 0x5578978d13a0 [2018/02/02 08:19:16.286397, 0, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtrans2.19.req len 88 [2018/02/02 08:19:16.286437, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2018/02/02 08:19:16.286459, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2618(call_trans2findfirst) call_trans2findfirst: dirtype = 17, maxentries = 150, close_after_first=0, close_if_end = 1 requires_resume_key = 1 backup_priv = 0 level = 0x202, max_data_bytes = 16384 [2018/02/02 08:19:16.286481, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:443(unix_convert) unix_convert called on file "*" [2018/02/02 08:19:16.286495, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:644(unix_convert) unix_convert begin: name = *, dirpath = , start = * [2018/02/02 08:19:16.286523, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2736(call_trans2findfirst) dir=., mask = * [2018/02/02 08:19:16.286548, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:474(dptr_create) dptr_create dir=. [2018/02/02 08:19:16.286590, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/passdb/lookup_sid.c:1251(uid_to_sid) uid 70 -> sid S-1-5-21-1340105488-494795474-4286701950-1003 [2018/02/02 08:19:16.286631, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid) gid 70 -> sid S-1-22-2-70 [2018/02/02 08:19:16.286659, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/open.c:174(smbd_check_access_rights) smbd_check_access_rights: file . requesting 0x1 returning 0x1 (NT_STATUS_OK) [2018/02/02 08:19:16.286702, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:656(dptr_create) creating new dirptr 256 for path ., expect_close = 1 [2018/02/02 08:19:16.286718, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2820(call_trans2findfirst) dptr_num is 256, wcard = *, attr = 23 [2018/02/02 08:19:16.286731, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2829(call_trans2findfirst) dirpath=<.> dontdescend=<> [2018/02/02 08:19:16.286749, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 0 [2018/02/02 08:19:16.286768, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: . [2018/02/02 08:19:16.286782, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.286796, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.286809, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found . fname=. (.) [2018/02/02 08:19:16.286827, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16384 [2018/02/02 08:19:16.286840, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.286853, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.286865, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.286882, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2147483648 [2018/02/02 08:19:16.286899, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: .. [2018/02/02 08:19:16.286912, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.286924, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.286937, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found .. fname=.. (..) [2018/02/02 08:19:16.286950, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16272 [2018/02/02 08:19:16.286962, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.287020, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.287037, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40755 [2018/02/02 08:19:16.287084, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2337 [2018/02/02 08:19:16.287121, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_xlog [2018/02/02 08:19:16.287139, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.287156, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.287172, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_xlog fname=pg_xlog (pg_xlog) [2018/02/02 08:19:16.287190, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16156 [2018/02/02 08:19:16.287206, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.287221, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.287236, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.287258, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2338 [2018/02/02 08:19:16.287278, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: global [2018/02/02 08:19:16.287295, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.287312, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.287327, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found global fname=global (global) [2018/02/02 08:19:16.287345, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16032 [2018/02/02 08:19:16.287361, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.287376, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.287391, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.287411, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2339 [2018/02/02 08:19:16.287431, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_clog [2018/02/02 08:19:16.287448, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.287465, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.287480, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_clog fname=pg_clog (pg_clog) [2018/02/02 08:19:16.287498, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 15908 [2018/02/02 08:19:16.287524, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.287540, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.287555, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.287576, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2340 [2018/02/02 08:19:16.287597, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_notify [2018/02/02 08:19:16.287614, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.287630, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.287646, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_notify fname=pg_notify (pg_notify) [2018/02/02 08:19:16.287664, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 15784 [2018/02/02 08:19:16.287680, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.287694, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.287709, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.287729, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2341 [2018/02/02 08:19:16.287750, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_serial [2018/02/02 08:19:16.287766, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.287783, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.287798, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_serial fname=pg_serial (pg_serial) [2018/02/02 08:19:16.287816, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 15656 [2018/02/02 08:19:16.287831, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.287846, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.287861, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.287881, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2342 [2018/02/02 08:19:16.287902, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_snapshots [2018/02/02 08:19:16.287927, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.287945, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.287960, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_snapshots fname=pg_snapshots (pg_snapshots) [2018/02/02 08:19:16.287987, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 15528 [2018/02/02 08:19:16.288003, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.288019, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.288034, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.288055, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2343 [2018/02/02 08:19:16.288076, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_subtrans [2018/02/02 08:19:16.288092, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.288109, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.288125, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_subtrans fname=pg_subtrans (pg_subtrans) [2018/02/02 08:19:16.288143, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 15392 [2018/02/02 08:19:16.288159, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.288174, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.288189, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.288211, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2344 [2018/02/02 08:19:16.288233, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_twophase [2018/02/02 08:19:16.288249, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.288266, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.288282, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_twophase fname=pg_twophase (pg_twophase) [2018/02/02 08:19:16.288299, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 15260 [2018/02/02 08:19:16.288327, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.288344, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.288359, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.288380, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2345 [2018/02/02 08:19:16.288401, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_multixact [2018/02/02 08:19:16.288418, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.288434, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.288450, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_multixact fname=pg_multixact (pg_multixact) [2018/02/02 08:19:16.288468, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 15128 [2018/02/02 08:19:16.288484, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.288499, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.288514, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.288534, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2346 [2018/02/02 08:19:16.288555, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: base [2018/02/02 08:19:16.288573, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.288590, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.288606, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found base fname=base (base) [2018/02/02 08:19:16.288623, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 14992 [2018/02/02 08:19:16.288639, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.288654, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.288669, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.288689, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2347 [2018/02/02 08:19:16.288709, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_tblspc [2018/02/02 08:19:16.288736, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.288753, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.288769, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_tblspc fname=pg_tblspc (pg_tblspc) [2018/02/02 08:19:16.288786, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 14872 [2018/02/02 08:19:16.288802, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.288818, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.288832, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.288854, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2348 [2018/02/02 08:19:16.288875, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_stat_tmp [2018/02/02 08:19:16.288892, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.288909, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.288924, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_stat_tmp fname=pg_stat_tmp (pg_stat_tmp) [2018/02/02 08:19:16.288942, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 14744 [2018/02/02 08:19:16.288958, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.288979, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.288995, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.289017, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2349 [2018/02/02 08:19:16.289038, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: PG_VERSION [2018/02/02 08:19:16.289054, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x0): "" [2018/02/02 08:19:16.289071, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x80): "" [2018/02/02 08:19:16.289087, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found PG_VERSION fname=PG_VERSION (PG_VERSION) [2018/02/02 08:19:16.289106, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 14612 [2018/02/02 08:19:16.289122, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.289146, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.289162, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=100600 [2018/02/02 08:19:16.289183, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2352 [2018/02/02 08:19:16.289205, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: postgresql.conf [2018/02/02 08:19:16.289221, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x0): "" [2018/02/02 08:19:16.289238, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x80): "" [2018/02/02 08:19:16.289254, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found postgresql.conf fname=postgresql.conf (postgresql.conf) [2018/02/02 08:19:16.289272, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 14480 [2018/02/02 08:19:16.289288, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.289303, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.289318, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=100600 [2018/02/02 08:19:16.289338, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2353 [2018/02/02 08:19:16.289359, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_hba.conf [2018/02/02 08:19:16.289376, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x0): "" [2018/02/02 08:19:16.289392, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x80): "" [2018/02/02 08:19:16.289408, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_hba.conf fname=pg_hba.conf (pg_hba.conf) [2018/02/02 08:19:16.289425, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 14340 [2018/02/02 08:19:16.289441, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.289456, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.289471, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=100600 [2018/02/02 08:19:16.289491, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2369 [2018/02/02 08:19:16.289512, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_ident.conf [2018/02/02 08:19:16.289528, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x0): "" [2018/02/02 08:19:16.289554, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x80): "" [2018/02/02 08:19:16.289571, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_ident.conf fname=pg_ident.conf (pg_ident.conf) [2018/02/02 08:19:16.289589, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 14208 [2018/02/02 08:19:16.289605, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.289620, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.289635, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=100600 [2018/02/02 08:19:16.289656, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2370 [2018/02/02 08:19:16.289677, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: postmaster.pid [2018/02/02 08:19:16.289694, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x0): "" [2018/02/02 08:19:16.289710, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x80): "" [2018/02/02 08:19:16.289727, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found postmaster.pid fname=postmaster.pid (postmaster.pid) [2018/02/02 08:19:16.289744, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 14072 [2018/02/02 08:19:16.289760, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.289775, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.289790, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=100600 [2018/02/02 08:19:16.289811, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2372 [2018/02/02 08:19:16.289832, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: postmaster.opts [2018/02/02 08:19:16.289848, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x0): "" [2018/02/02 08:19:16.289864, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x80): "" [2018/02/02 08:19:16.289880, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found postmaster.opts fname=postmaster.opts (postmaster.opts) [2018/02/02 08:19:16.289898, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 13932 [2018/02/02 08:19:16.289914, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.289938, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.289953, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=100600 [2018/02/02 08:19:16.289982, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2147483647 [2018/02/02 08:19:16.290013, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: aaa [2018/02/02 08:19:16.290027, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.290052, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.290069, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found aaa fname=aaa (aaa) [2018/02/02 08:19:16.290087, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 13792 [2018/02/02 08:19:16.290122, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.290137, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.290152, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40755 [2018/02/02 08:19:16.290175, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset -1 [2018/02/02 08:19:16.290193, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2899(call_trans2findfirst) call_trans2findfirst - (2) closing dptr_num 256 [2018/02/02 08:19:16.290209, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:233(dptr_close_internal) closing dptr key 256 [2018/02/02 08:19:16.290233, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1111(send_trans2_replies) t2_rep: params_sent_thistime = 10, data_sent_thistime = 2708, useable_space = 16406 [2018/02/02 08:19:16.290251, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1113(send_trans2_replies) t2_rep: params_to_send = 10, data_to_send = 2708, paramsize = 10, datasize = 2708 [2018/02/02 08:19:16.290267, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:16.290277, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=2776 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5102 smb_uid=19713 smb_mid=8578 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 2708 (0xA94) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 2708 (0xA94) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=2721 [2018/02/02 08:19:16.290388, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 FD FF 15 00 01 00 00 00 20 0A 00 00 70 00 00 ........ . ...p.. [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 D6 16 C8 6B 28 9C D3 01 07 33 D0 ........ k(....3. [0030] 5B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 46 00 00 [(...... k(...F.. [0040] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [0050] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [0060] 00 B7 25 A8 00 00 00 00 00 C0 01 00 00 00 00 00 ..%..... ........ [0070] 00 01 00 00 00 00 00 00 00 2E 00 00 00 74 00 00 ........ .....t.. [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 A4 2D D9 53 B0 95 D3 01 D5 BE 27 ......-. S......' [00A0] 92 0E 98 D3 01 A4 2D D9 53 B0 95 D3 01 00 00 00 ......-. S....... [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [00D0] 00 00 01 00 00 00 00 00 00 ED 01 00 00 00 00 00 ........ ........ [00E0] 00 01 00 00 00 00 00 00 00 2E 00 2E 00 00 00 00 ........ ........ [00F0] 00 7C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .|...... ........ [0100] 00 00 00 00 00 00 00 00 00 9A 85 F6 2B 1D 9C D3 ........ ....+... [0110] 01 E8 08 44 2C 1D 9C D3 01 9A 85 F6 2B 1D 9C D3 ...D,... ....+... [0120] 01 46 00 00 00 00 00 00 00 46 00 00 00 00 00 00 .F...... .F...... [0130] 00 01 00 00 00 00 00 00 00 00 00 00 00 2D 00 00 ........ .....-.. [0140] 00 00 00 00 00 85 47 AB 00 00 00 00 00 C0 01 00 ......G. ........ [0150] 00 00 00 00 00 01 00 00 00 00 00 00 00 70 00 67 ........ .....p.g [0160] 00 5F 00 78 00 6C 00 6F 00 67 00 00 00 7C 00 00 ._.x.l.o .g...|.. [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 F6 0E C3 2E 1D 9C D3 01 E0 0D D2 ........ ........ [0190] 2B 1D 9C D3 01 F6 0E C3 2E 1D 9C D3 01 46 00 00 +....... .....F.. [01A0] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [01B0] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [01C0] 00 86 47 AB 00 00 00 00 00 C0 01 00 00 00 00 00 ..G..... ........ [01D0] 00 01 00 00 00 00 00 00 00 67 00 6C 00 6F 00 62 ........ .g.l.o.b [01E0] 00 61 00 6C 00 00 00 00 00 7C 00 00 00 00 00 00 .a.l.... .|...... [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 AA AC F6 2B 1D 9C D3 01 6C A6 56 2C 1D 9C D3 ....+... .l.V,... [0210] 01 AA AC F6 2B 1D 9C D3 01 46 00 00 00 00 00 00 ....+... .F...... [0220] 00 46 00 00 00 00 00 00 00 01 00 00 00 00 00 00 .F...... ........ [0230] 00 00 00 00 00 2D 00 00 00 00 00 00 00 88 47 AB .....-.. ......G. [0240] 00 00 00 00 00 C0 01 00 00 00 00 00 00 01 00 00 ........ ........ [0250] 00 00 00 00 00 70 00 67 00 5F 00 63 00 6C 00 6F .....p.g ._.c.l.o [0260] 00 67 00 00 00 80 00 00 00 00 00 00 00 00 00 00 .g...... ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 64 43 4D ........ .....dCM [0280] 2E 1D 9C D3 01 45 F5 4C 2E 1D 9C D3 01 64 43 4D .....E.L .....dCM [0290] 2E 1D 9C D3 01 46 00 00 00 00 00 00 00 46 00 00 .....F.. .....F.. [02A0] 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 2D 00 00 00 00 00 00 00 89 47 AB 00 00 00 00 .-...... ..G..... [02C0] 00 C0 01 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [02D0] 00 70 00 67 00 5F 00 6E 00 6F 00 74 00 69 00 66 .p.g._.n .o.t.i.f [02E0] 00 79 00 00 00 80 00 00 00 00 00 00 00 00 00 00 .y...... ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 10 83 D2 ........ ........ [0300] 2B 1D 9C D3 01 10 83 D2 2B 1D 9C D3 01 10 83 D2 +....... +....... [0310] 2B 1D 9C D3 01 46 00 00 00 00 00 00 00 46 00 00 +....F.. .....F.. [0320] 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 2D 00 00 00 00 00 00 00 8A 47 AB 00 00 00 00 .-...... ..G..... [0340] 00 C0 01 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0350] 00 70 00 67 00 5F 00 73 00 65 00 72 00 69 00 61 .p.g._.s .e.r.i.a [0360] 00 6C 00 00 00 88 00 00 00 00 00 00 00 00 00 00 .l...... ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 1F AA D2 ........ ........ [0380] 2B 1D 9C D3 01 1F AA D2 2B 1D 9C D3 01 1F AA D2 +....... +....... [0390] 2B 1D 9C D3 01 46 00 00 00 00 00 00 00 46 00 00 +....F.. .....F.. [03A0] 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 2D 00 00 00 00 00 00 00 8B 47 AB 00 00 00 00 .-...... ..G..... [03C0] 00 C0 01 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [03D0] 00 70 00 67 00 5F 00 73 00 6E 00 61 00 70 00 73 .p.g._.s .n.a.p.s [03E0] 00 68 00 6F 00 74 00 73 00 00 00 00 00 84 00 00 .h.o.t.s ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 BA D3 F6 2B 1D 9C D3 01 E8 08 44 ........ +......D [0410] 2C 1D 9C D3 01 BA D3 F6 2B 1D 9C D3 01 46 00 00 ,....... +....F.. [0420] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [0430] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [0440] 00 8C 47 AB 00 00 00 00 00 C0 01 00 00 00 00 00 ..G..... ........ [0450] 00 01 00 00 00 00 00 00 00 70 00 67 00 5F 00 73 ........ .p.g._.s [0460] 00 75 00 62 00 74 00 72 00 61 00 6E 00 73 00 00 .u.b.t.r .a.n.s.. [0470] 00 84 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0480] 00 00 00 00 00 00 00 00 00 2F D1 D2 2B 1D 9C D3 ........ ./..+... [0490] 01 DA 21 F7 2B 1D 9C D3 01 2F D1 D2 2B 1D 9C D3 ..!.+... ./..+... [04A0] 01 46 00 00 00 00 00 00 00 46 00 00 00 00 00 00 .F...... .F...... [04B0] 00 01 00 00 00 00 00 00 00 00 00 00 00 2D 00 00 ........ .....-.. [04C0] 00 00 00 00 00 8D 47 AB 00 00 00 00 00 C0 01 00 ......G. ........ [04D0] 00 00 00 00 00 01 00 00 00 00 00 00 00 70 00 67 ........ .....p.g [04E0] 00 5F 00 74 00 77 00 6F 00 70 00 68 00 61 00 73 ._.t.w.o .p.h.a.s [04F0] 00 65 00 00 00 88 00 00 00 00 00 00 00 00 00 00 .e...... ........ [0500] 00 00 00 00 00 00 00 00 00 00 00 00 00 DD 7E D4 ........ ......~. [0510] 2B 1D 9C D3 01 3F F8 D2 2B 1D 9C D3 01 DD 7E D4 +....?.. +.....~. [0520] 2B 1D 9C D3 01 46 00 00 00 00 00 00 00 46 00 00 +....F.. .....F.. [0530] 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ........ ........ [0540] 00 2D 00 00 00 00 00 00 00 8E 47 AB 00 00 00 00 .-...... ..G..... [0550] 00 C0 01 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0560] 00 70 00 67 00 5F 00 6D 00 75 00 6C 00 74 00 69 .p.g._.m .u.l.t.i [0570] 00 78 00 61 00 63 00 74 00 00 00 00 00 78 00 00 .x.a.c.t .....x.. [0580] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0590] 00 00 00 00 00 78 B3 38 2F 1D 9C D3 01 B3 06 4E .....x.8 /......N [05A0] 2E 1D 9C D3 01 78 B3 38 2F 1D 9C D3 01 46 00 00 .....x.8 /....F.. [05B0] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [05C0] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [05D0] 00 91 47 AB 00 00 00 00 00 C0 01 00 00 00 00 00 ..G..... ........ [05E0] 00 01 00 00 00 00 00 00 00 62 00 61 00 73 00 65 ........ .b.a.s.e [05F0] 00 00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 ........ ........ [0600] 00 00 00 00 00 00 00 00 00 00 00 00 00 0C F4 D4 ........ ........ [0610] 2B 1D 9C D3 01 CA FA F6 2B 1D 9C D3 01 0C F4 D4 +....... +....... [0620] 2B 1D 9C D3 01 46 00 00 00 00 00 00 00 46 00 00 +....F.. .....F.. [0630] 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ........ ........ [0640] 00 2D 00 00 00 00 00 00 00 93 47 AB 00 00 00 00 .-...... ..G..... [0650] 00 C0 01 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0660] 00 70 00 67 00 5F 00 74 00 62 00 6C 00 73 00 70 .p.g._.t .b.l.s.p [0670] 00 63 00 00 00 84 00 00 00 00 00 00 00 00 00 00 .c...... ........ [0680] 00 00 00 00 00 00 00 00 00 00 00 00 00 5D 25 52 ........ .....]%R [0690] 2E 1D 9C D3 01 0C F4 D4 2B 1D 9C D3 01 5D 25 52 ........ +....]%R [06A0] 2E 1D 9C D3 01 46 00 00 00 00 00 00 00 46 00 00 .....F.. .....F.. [06B0] 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ........ ........ [06C0] 00 2D 00 00 00 00 00 00 00 94 47 AB 00 00 00 00 .-...... ..G..... [06D0] 00 C0 01 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [06E0] 00 70 00 67 00 5F 00 73 00 74 00 61 00 74 00 5F .p.g._.s .t.a.t._ [06F0] 00 74 00 6D 00 70 00 00 00 84 00 00 00 00 00 00 .t.m.p.. ........ [0700] 00 04 00 00 00 00 00 00 00 00 10 00 00 00 00 00 ........ ........ [0710] 00 2C 42 D5 2B 1D 9C D3 01 D9 EF D6 2B 1D 9C D3 .,B.+... ....+... [0720] 01 2C 42 D5 2B 1D 9C D3 01 46 00 00 00 00 00 00 .,B.+... .F...... [0730] 00 46 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .F...... ........ [0740] 00 00 00 00 00 2D 00 00 00 00 00 00 00 95 47 AB .....-.. ......G. [0750] 00 00 00 00 00 80 01 00 00 00 00 00 00 01 00 00 ........ ........ [0760] 00 00 00 00 00 50 00 47 00 5F 00 56 00 45 00 52 .....P.G ._.V.E.R [0770] 00 53 00 49 00 4F 00 4E 00 00 00 00 00 8C 00 00 .S.I.O.N ........ [0780] 00 00 00 00 00 B0 4C 00 00 00 00 00 00 00 50 00 ......L. ......P. [0790] 00 00 00 00 00 47 48 EE 2B 1D 9C D3 01 92 7C F1 .....GH. +.....|. [07A0] 2B 1D 9C D3 01 37 21 EE 2B 1D 9C D3 01 46 00 00 +....7!. +....F.. [07B0] 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 .....F.. ........ [07C0] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [07D0] 00 96 47 AB 00 00 00 00 00 80 01 00 00 00 00 00 ..G..... ........ [07E0] 00 01 00 00 00 00 00 00 00 70 00 6F 00 73 00 74 ........ .p.o.s.t [07F0] 00 67 00 72 00 65 00 73 00 71 00 6C 00 2E 00 63 .g.r.e.s .q.l...c [0800] 00 6F 00 6E 00 66 00 00 00 84 00 00 00 00 00 00 .o.n.f.. ........ [0810] 00 92 11 00 00 00 00 00 00 00 20 00 00 00 00 00 ........ .. ..... [0820] 00 00 AD 24 2E 1D 9C D3 01 61 B4 4F 2E 1D 9C D3 ...$.... .a.O.... [0830] 01 00 AD 24 2E 1D 9C D3 01 46 00 00 00 00 00 00 ...$.... .F...... [0840] 00 46 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .F...... ........ [0850] 00 00 00 00 00 2D 00 00 00 00 00 00 00 9B 47 AB .....-.. ......G. [0860] 00 00 00 00 00 80 01 00 00 00 00 00 00 01 00 00 ........ ........ [0870] 00 00 00 00 00 70 00 67 00 5F 00 68 00 62 00 61 .....p.g ._.h.b.a [0880] 00 2E 00 63 00 6F 00 6E 00 66 00 00 00 88 00 00 ...c.o.n .f...... [0890] 00 00 00 00 00 64 06 00 00 00 00 00 00 00 10 00 .....d.. ........ [08A0] 00 00 00 00 00 76 BD EE 2B 1D 9C D3 01 71 DB 4F .....v.. +....q.O [08B0] 2E 1D 9C D3 01 76 BD EE 2B 1D 9C D3 01 46 00 00 .....v.. +....F.. [08C0] 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 .....F.. ........ [08D0] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [08E0] 00 9C 47 AB 00 00 00 00 00 80 01 00 00 00 00 00 ..G..... ........ [08F0] 00 01 00 00 00 00 00 00 00 70 00 67 00 5F 00 69 ........ .p.g._.i [0900] 00 64 00 65 00 6E 00 74 00 2E 00 63 00 6F 00 6E .d.e.n.t ...c.o.n [0910] 00 66 00 00 00 8C 00 00 00 00 00 00 00 5E 00 00 .f...... .....^.. [0920] 00 00 00 00 00 00 10 00 00 00 00 00 00 E6 0A 4C ........ .......L [0930] 2E 1D 9C D3 01 6C 3E BF 2E 1D 9C D3 01 E6 0A 4C .....l>. .......L [0940] 2E 1D 9C D3 01 46 00 00 00 00 00 00 00 46 00 00 .....F.. .....F.. [0950] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0960] 00 2D 00 00 00 00 00 00 00 E5 4B AB 00 00 00 00 .-...... ..K..... [0970] 00 80 01 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0980] 00 70 00 6F 00 73 00 74 00 6D 00 61 00 73 00 74 .p.o.s.t .m.a.s.t [0990] 00 65 00 72 00 2E 00 70 00 69 00 64 00 00 00 00 .e.r...p .i.d.... [09A0] 00 8C 00 00 00 00 00 00 00 67 00 00 00 00 00 00 ........ .g...... [09B0] 00 00 10 00 00 00 00 00 00 A4 DF 4D 2E 1D 9C D3 ........ ...M.... [09C0] 01 84 91 4D 2E 1D 9C D3 01 A4 DF 4D 2E 1D 9C D3 ...M.... ...M.... [09D0] 01 46 00 00 00 00 00 00 00 46 00 00 00 00 00 00 .F...... .F...... [09E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 2D 00 00 ........ .....-.. [09F0] 00 00 00 00 00 E7 4B AB 00 00 00 00 00 80 01 00 ......K. ........ [0A00] 00 00 00 00 00 01 00 00 00 00 00 00 00 70 00 6F ........ .....p.o [0A10] 00 73 00 74 00 6D 00 61 00 73 00 74 00 65 00 72 .s.t.m.a .s.t.e.r [0A20] 00 2E 00 6F 00 70 00 74 00 73 00 00 00 74 00 00 ...o.p.t .s...t.. [0A30] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A40] 00 00 00 00 00 D6 16 C8 6B 28 9C D3 01 D6 16 C8 ........ k(...... [0A50] 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 46 00 00 k(...... k(...F.. [0A60] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [0A70] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [0A80] 00 E4 4C AB 00 00 00 00 00 ED 01 00 00 00 00 00 ..L..... ........ [0A90] 00 01 00 00 00 00 00 00 00 61 00 61 00 61 00 00 ........ .a.a.a.. [0AA0] 00 . [2018/02/02 08:19:16.293152, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2943(call_trans2findfirst) SMBtrans2 mask=* directory=. dirtype=23 numentries=21 [2018/02/02 08:19:16.293506, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 84 [2018/02/02 08:19:16.293559, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x54 [2018/02/02 08:19:16.293579, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 9 of length 88 (0 toread) [2018/02/02 08:19:16.293595, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:16.293606, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=49153 smb_tid=11961 smb_pid=5102 smb_uid=19713 smb_mid=8579 smt_wct=15 smb_vwv[ 0]= 18 (0x12) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 18 (0x12) smb_vwv[10]= 66 (0x42) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=19 [2018/02/02 08:19:16.293742, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 17 00 96 00 06 00 02 02 00 00 00 00 2F 00 2A ........ ...../.* [0010] 00 00 00 ... [2018/02/02 08:19:16.293785, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtrans2 (pid 22725) conn 0x5578978d13a0 [2018/02/02 08:19:16.293851, 0, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtrans2.20.req len 88 [2018/02/02 08:19:16.293905, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2018/02/02 08:19:16.293928, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2618(call_trans2findfirst) call_trans2findfirst: dirtype = 17, maxentries = 150, close_after_first=0, close_if_end = 1 requires_resume_key = 1 backup_priv = 0 level = 0x202, max_data_bytes = 16384 [2018/02/02 08:19:16.293950, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:443(unix_convert) unix_convert called on file "*" [2018/02/02 08:19:16.293968, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:644(unix_convert) unix_convert begin: name = *, dirpath = , start = * [2018/02/02 08:19:16.294028, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2736(call_trans2findfirst) dir=., mask = * [2018/02/02 08:19:16.294045, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:474(dptr_create) dptr_create dir=. [2018/02/02 08:19:16.294093, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/passdb/lookup_sid.c:1251(uid_to_sid) uid 70 -> sid S-1-5-21-1340105488-494795474-4286701950-1003 [2018/02/02 08:19:16.294137, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid) gid 70 -> sid S-1-22-2-70 [2018/02/02 08:19:16.294167, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/open.c:174(smbd_check_access_rights) smbd_check_access_rights: file . requesting 0x1 returning 0x1 (NT_STATUS_OK) [2018/02/02 08:19:16.294203, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:656(dptr_create) creating new dirptr 256 for path ., expect_close = 1 [2018/02/02 08:19:16.294221, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2820(call_trans2findfirst) dptr_num is 256, wcard = *, attr = 23 [2018/02/02 08:19:16.294237, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2829(call_trans2findfirst) dirpath=<.> dontdescend=<> [2018/02/02 08:19:16.294257, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 0 [2018/02/02 08:19:16.294280, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: . [2018/02/02 08:19:16.294297, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.294314, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.294331, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found . fname=. (.) [2018/02/02 08:19:16.294350, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16384 [2018/02/02 08:19:16.294366, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.294382, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.294398, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.294417, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2147483648 [2018/02/02 08:19:16.294439, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: .. [2018/02/02 08:19:16.294456, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.294473, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.294488, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found .. fname=.. (..) [2018/02/02 08:19:16.294506, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16272 [2018/02/02 08:19:16.294522, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.294537, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.294552, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40755 [2018/02/02 08:19:16.294588, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2337 [2018/02/02 08:19:16.294623, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_xlog [2018/02/02 08:19:16.294640, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.294658, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.294674, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_xlog fname=pg_xlog (pg_xlog) [2018/02/02 08:19:16.294692, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16156 [2018/02/02 08:19:16.294707, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.294722, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.294737, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.294758, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2338 [2018/02/02 08:19:16.294779, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: global [2018/02/02 08:19:16.294795, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.294812, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.294828, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found global fname=global (global) [2018/02/02 08:19:16.294846, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16032 [2018/02/02 08:19:16.294861, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.294877, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.294891, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.294911, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2339 [2018/02/02 08:19:16.294932, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_clog [2018/02/02 08:19:16.294949, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.294965, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.294991, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_clog fname=pg_clog (pg_clog) [2018/02/02 08:19:16.295009, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 15908 [2018/02/02 08:19:16.295035, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.295051, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.295066, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.295087, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2340 [2018/02/02 08:19:16.295109, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_notify [2018/02/02 08:19:16.295125, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.295142, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.295158, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_notify fname=pg_notify (pg_notify) [2018/02/02 08:19:16.295176, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 15784 [2018/02/02 08:19:16.295191, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.295207, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.295221, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.295241, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2341 [2018/02/02 08:19:16.295262, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_serial [2018/02/02 08:19:16.295278, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.295295, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.295311, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_serial fname=pg_serial (pg_serial) [2018/02/02 08:19:16.295328, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 15656 [2018/02/02 08:19:16.295344, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.295359, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.295374, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.295394, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2342 [2018/02/02 08:19:16.295423, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_snapshots [2018/02/02 08:19:16.295442, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.295459, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.295474, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_snapshots fname=pg_snapshots (pg_snapshots) [2018/02/02 08:19:16.295492, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 15528 [2018/02/02 08:19:16.295508, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.295523, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.295539, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.295559, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2343 [2018/02/02 08:19:16.295580, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_subtrans [2018/02/02 08:19:16.295596, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.295613, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.295629, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_subtrans fname=pg_subtrans (pg_subtrans) [2018/02/02 08:19:16.295647, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 15392 [2018/02/02 08:19:16.295662, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.295677, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.295692, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.295714, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2344 [2018/02/02 08:19:16.295736, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_twophase [2018/02/02 08:19:16.295753, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.295770, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.295785, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_twophase fname=pg_twophase (pg_twophase) [2018/02/02 08:19:16.295803, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 15260 [2018/02/02 08:19:16.295828, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.295844, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.295859, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.295879, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2345 [2018/02/02 08:19:16.295900, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_multixact [2018/02/02 08:19:16.295916, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.295933, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.295949, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_multixact fname=pg_multixact (pg_multixact) [2018/02/02 08:19:16.295967, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 15128 [2018/02/02 08:19:16.295990, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.296005, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.296020, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.296040, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2346 [2018/02/02 08:19:16.296061, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: base [2018/02/02 08:19:16.296078, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.296094, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.296110, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found base fname=base (base) [2018/02/02 08:19:16.296128, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 14992 [2018/02/02 08:19:16.296143, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.296158, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.296173, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.296193, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2347 [2018/02/02 08:19:16.296213, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_tblspc [2018/02/02 08:19:16.296240, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.296257, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.296273, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_tblspc fname=pg_tblspc (pg_tblspc) [2018/02/02 08:19:16.296291, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 14872 [2018/02/02 08:19:16.296307, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.296322, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.296337, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.296359, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2348 [2018/02/02 08:19:16.296380, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_stat_tmp [2018/02/02 08:19:16.296397, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.296413, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.296429, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_stat_tmp fname=pg_stat_tmp (pg_stat_tmp) [2018/02/02 08:19:16.296447, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 14744 [2018/02/02 08:19:16.296462, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.296478, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.296492, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40700 [2018/02/02 08:19:16.296513, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2349 [2018/02/02 08:19:16.296534, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: PG_VERSION [2018/02/02 08:19:16.296550, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x0): "" [2018/02/02 08:19:16.296567, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x80): "" [2018/02/02 08:19:16.296583, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found PG_VERSION fname=PG_VERSION (PG_VERSION) [2018/02/02 08:19:16.296601, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 14612 [2018/02/02 08:19:16.296617, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.296642, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.296658, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=100600 [2018/02/02 08:19:16.296679, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2352 [2018/02/02 08:19:16.296700, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: postgresql.conf [2018/02/02 08:19:16.296717, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x0): "" [2018/02/02 08:19:16.296733, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x80): "" [2018/02/02 08:19:16.296749, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found postgresql.conf fname=postgresql.conf (postgresql.conf) [2018/02/02 08:19:16.296768, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 14480 [2018/02/02 08:19:16.296783, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.296798, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.296813, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=100600 [2018/02/02 08:19:16.296834, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2353 [2018/02/02 08:19:16.296855, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_hba.conf [2018/02/02 08:19:16.296871, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x0): "" [2018/02/02 08:19:16.296888, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x80): "" [2018/02/02 08:19:16.296904, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_hba.conf fname=pg_hba.conf (pg_hba.conf) [2018/02/02 08:19:16.296921, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 14340 [2018/02/02 08:19:16.296937, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.296952, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.296967, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=100600 [2018/02/02 08:19:16.296995, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2369 [2018/02/02 08:19:16.297016, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: pg_ident.conf [2018/02/02 08:19:16.297033, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x0): "" [2018/02/02 08:19:16.297059, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x80): "" [2018/02/02 08:19:16.297076, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found pg_ident.conf fname=pg_ident.conf (pg_ident.conf) [2018/02/02 08:19:16.297094, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 14208 [2018/02/02 08:19:16.297110, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.297125, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.297140, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=100600 [2018/02/02 08:19:16.297161, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2370 [2018/02/02 08:19:16.297183, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: postmaster.pid [2018/02/02 08:19:16.297199, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x0): "" [2018/02/02 08:19:16.297216, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x80): "" [2018/02/02 08:19:16.297232, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found postmaster.pid fname=postmaster.pid (postmaster.pid) [2018/02/02 08:19:16.297250, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 14072 [2018/02/02 08:19:16.297266, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.297281, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.297296, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=100600 [2018/02/02 08:19:16.297317, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2372 [2018/02/02 08:19:16.297337, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: postmaster.opts [2018/02/02 08:19:16.297354, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x0): "" [2018/02/02 08:19:16.297370, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x80): "" [2018/02/02 08:19:16.297386, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found postmaster.opts fname=postmaster.opts (postmaster.opts) [2018/02/02 08:19:16.297404, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 13932 [2018/02/02 08:19:16.297420, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.297444, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.297459, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=100600 [2018/02/02 08:19:16.297481, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset 2147483647 [2018/02/02 08:19:16.297502, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: aaa [2018/02/02 08:19:16.297519, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:16.297535, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:16.297551, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1227(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found aaa fname=aaa (aaa) [2018/02/02 08:19:16.297569, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1807(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 13792 [2018/02/02 08:19:16.297584, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2342(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_UNIX [2018/02/02 08:19:16.297599, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:16.297614, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40755 [2018/02/02 08:19:16.297637, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:1136(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x5578978cfc40 now at offset -1 [2018/02/02 08:19:16.297655, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2899(call_trans2findfirst) call_trans2findfirst - (2) closing dptr_num 256 [2018/02/02 08:19:16.297671, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dir.c:233(dptr_close_internal) closing dptr key 256 [2018/02/02 08:19:16.297693, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1111(send_trans2_replies) t2_rep: params_sent_thistime = 10, data_sent_thistime = 2708, useable_space = 16406 [2018/02/02 08:19:16.297711, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1113(send_trans2_replies) t2_rep: params_to_send = 10, data_to_send = 2708, paramsize = 10, datasize = 2708 [2018/02/02 08:19:16.297727, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:16.297737, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=2776 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5102 smb_uid=19713 smb_mid=8579 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 2708 (0xA94) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 2708 (0xA94) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=2721 [2018/02/02 08:19:16.297849, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 FD FF 15 00 01 00 00 00 20 0A 00 00 70 00 00 ........ . ...p.. [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 D6 16 C8 6B 28 9C D3 01 4D 1D DC ........ k(...M.. [0030] 6C 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 46 00 00 l(...... k(...F.. [0040] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [0050] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [0060] 00 B7 25 A8 00 00 00 00 00 C0 01 00 00 00 00 00 ..%..... ........ [0070] 00 01 00 00 00 00 00 00 00 2E 00 00 00 74 00 00 ........ .....t.. [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 A4 2D D9 53 B0 95 D3 01 D5 BE 27 ......-. S......' [00A0] 92 0E 98 D3 01 A4 2D D9 53 B0 95 D3 01 00 00 00 ......-. S....... [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [00D0] 00 00 01 00 00 00 00 00 00 ED 01 00 00 00 00 00 ........ ........ [00E0] 00 01 00 00 00 00 00 00 00 2E 00 2E 00 00 00 00 ........ ........ [00F0] 00 7C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .|...... ........ [0100] 00 00 00 00 00 00 00 00 00 9A 85 F6 2B 1D 9C D3 ........ ....+... [0110] 01 E8 08 44 2C 1D 9C D3 01 9A 85 F6 2B 1D 9C D3 ...D,... ....+... [0120] 01 46 00 00 00 00 00 00 00 46 00 00 00 00 00 00 .F...... .F...... [0130] 00 01 00 00 00 00 00 00 00 00 00 00 00 2D 00 00 ........ .....-.. [0140] 00 00 00 00 00 85 47 AB 00 00 00 00 00 C0 01 00 ......G. ........ [0150] 00 00 00 00 00 01 00 00 00 00 00 00 00 70 00 67 ........ .....p.g [0160] 00 5F 00 78 00 6C 00 6F 00 67 00 00 00 7C 00 00 ._.x.l.o .g...|.. [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 F6 0E C3 2E 1D 9C D3 01 E0 0D D2 ........ ........ [0190] 2B 1D 9C D3 01 F6 0E C3 2E 1D 9C D3 01 46 00 00 +....... .....F.. [01A0] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [01B0] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [01C0] 00 86 47 AB 00 00 00 00 00 C0 01 00 00 00 00 00 ..G..... ........ [01D0] 00 01 00 00 00 00 00 00 00 67 00 6C 00 6F 00 62 ........ .g.l.o.b [01E0] 00 61 00 6C 00 00 00 00 00 7C 00 00 00 00 00 00 .a.l.... .|...... [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 AA AC F6 2B 1D 9C D3 01 6C A6 56 2C 1D 9C D3 ....+... .l.V,... [0210] 01 AA AC F6 2B 1D 9C D3 01 46 00 00 00 00 00 00 ....+... .F...... [0220] 00 46 00 00 00 00 00 00 00 01 00 00 00 00 00 00 .F...... ........ [0230] 00 00 00 00 00 2D 00 00 00 00 00 00 00 88 47 AB .....-.. ......G. [0240] 00 00 00 00 00 C0 01 00 00 00 00 00 00 01 00 00 ........ ........ [0250] 00 00 00 00 00 70 00 67 00 5F 00 63 00 6C 00 6F .....p.g ._.c.l.o [0260] 00 67 00 00 00 80 00 00 00 00 00 00 00 00 00 00 .g...... ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 64 43 4D ........ .....dCM [0280] 2E 1D 9C D3 01 45 F5 4C 2E 1D 9C D3 01 64 43 4D .....E.L .....dCM [0290] 2E 1D 9C D3 01 46 00 00 00 00 00 00 00 46 00 00 .....F.. .....F.. [02A0] 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 2D 00 00 00 00 00 00 00 89 47 AB 00 00 00 00 .-...... ..G..... [02C0] 00 C0 01 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [02D0] 00 70 00 67 00 5F 00 6E 00 6F 00 74 00 69 00 66 .p.g._.n .o.t.i.f [02E0] 00 79 00 00 00 80 00 00 00 00 00 00 00 00 00 00 .y...... ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 10 83 D2 ........ ........ [0300] 2B 1D 9C D3 01 10 83 D2 2B 1D 9C D3 01 10 83 D2 +....... +....... [0310] 2B 1D 9C D3 01 46 00 00 00 00 00 00 00 46 00 00 +....F.. .....F.. [0320] 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 2D 00 00 00 00 00 00 00 8A 47 AB 00 00 00 00 .-...... ..G..... [0340] 00 C0 01 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0350] 00 70 00 67 00 5F 00 73 00 65 00 72 00 69 00 61 .p.g._.s .e.r.i.a [0360] 00 6C 00 00 00 88 00 00 00 00 00 00 00 00 00 00 .l...... ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 1F AA D2 ........ ........ [0380] 2B 1D 9C D3 01 1F AA D2 2B 1D 9C D3 01 1F AA D2 +....... +....... [0390] 2B 1D 9C D3 01 46 00 00 00 00 00 00 00 46 00 00 +....F.. .....F.. [03A0] 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 2D 00 00 00 00 00 00 00 8B 47 AB 00 00 00 00 .-...... ..G..... [03C0] 00 C0 01 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [03D0] 00 70 00 67 00 5F 00 73 00 6E 00 61 00 70 00 73 .p.g._.s .n.a.p.s [03E0] 00 68 00 6F 00 74 00 73 00 00 00 00 00 84 00 00 .h.o.t.s ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 BA D3 F6 2B 1D 9C D3 01 E8 08 44 ........ +......D [0410] 2C 1D 9C D3 01 BA D3 F6 2B 1D 9C D3 01 46 00 00 ,....... +....F.. [0420] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [0430] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [0440] 00 8C 47 AB 00 00 00 00 00 C0 01 00 00 00 00 00 ..G..... ........ [0450] 00 01 00 00 00 00 00 00 00 70 00 67 00 5F 00 73 ........ .p.g._.s [0460] 00 75 00 62 00 74 00 72 00 61 00 6E 00 73 00 00 .u.b.t.r .a.n.s.. [0470] 00 84 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0480] 00 00 00 00 00 00 00 00 00 2F D1 D2 2B 1D 9C D3 ........ ./..+... [0490] 01 DA 21 F7 2B 1D 9C D3 01 2F D1 D2 2B 1D 9C D3 ..!.+... ./..+... [04A0] 01 46 00 00 00 00 00 00 00 46 00 00 00 00 00 00 .F...... .F...... [04B0] 00 01 00 00 00 00 00 00 00 00 00 00 00 2D 00 00 ........ .....-.. [04C0] 00 00 00 00 00 8D 47 AB 00 00 00 00 00 C0 01 00 ......G. ........ [04D0] 00 00 00 00 00 01 00 00 00 00 00 00 00 70 00 67 ........ .....p.g [04E0] 00 5F 00 74 00 77 00 6F 00 70 00 68 00 61 00 73 ._.t.w.o .p.h.a.s [04F0] 00 65 00 00 00 88 00 00 00 00 00 00 00 00 00 00 .e...... ........ [0500] 00 00 00 00 00 00 00 00 00 00 00 00 00 DD 7E D4 ........ ......~. [0510] 2B 1D 9C D3 01 3F F8 D2 2B 1D 9C D3 01 DD 7E D4 +....?.. +.....~. [0520] 2B 1D 9C D3 01 46 00 00 00 00 00 00 00 46 00 00 +....F.. .....F.. [0530] 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ........ ........ [0540] 00 2D 00 00 00 00 00 00 00 8E 47 AB 00 00 00 00 .-...... ..G..... [0550] 00 C0 01 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0560] 00 70 00 67 00 5F 00 6D 00 75 00 6C 00 74 00 69 .p.g._.m .u.l.t.i [0570] 00 78 00 61 00 63 00 74 00 00 00 00 00 78 00 00 .x.a.c.t .....x.. [0580] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0590] 00 00 00 00 00 78 B3 38 2F 1D 9C D3 01 B3 06 4E .....x.8 /......N [05A0] 2E 1D 9C D3 01 78 B3 38 2F 1D 9C D3 01 46 00 00 .....x.8 /....F.. [05B0] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [05C0] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [05D0] 00 91 47 AB 00 00 00 00 00 C0 01 00 00 00 00 00 ..G..... ........ [05E0] 00 01 00 00 00 00 00 00 00 62 00 61 00 73 00 65 ........ .b.a.s.e [05F0] 00 00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 ........ ........ [0600] 00 00 00 00 00 00 00 00 00 00 00 00 00 0C F4 D4 ........ ........ [0610] 2B 1D 9C D3 01 CA FA F6 2B 1D 9C D3 01 0C F4 D4 +....... +....... [0620] 2B 1D 9C D3 01 46 00 00 00 00 00 00 00 46 00 00 +....F.. .....F.. [0630] 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ........ ........ [0640] 00 2D 00 00 00 00 00 00 00 93 47 AB 00 00 00 00 .-...... ..G..... [0650] 00 C0 01 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0660] 00 70 00 67 00 5F 00 74 00 62 00 6C 00 73 00 70 .p.g._.t .b.l.s.p [0670] 00 63 00 00 00 84 00 00 00 00 00 00 00 00 00 00 .c...... ........ [0680] 00 00 00 00 00 00 00 00 00 00 00 00 00 5D 25 52 ........ .....]%R [0690] 2E 1D 9C D3 01 0C F4 D4 2B 1D 9C D3 01 5D 25 52 ........ +....]%R [06A0] 2E 1D 9C D3 01 46 00 00 00 00 00 00 00 46 00 00 .....F.. .....F.. [06B0] 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ........ ........ [06C0] 00 2D 00 00 00 00 00 00 00 94 47 AB 00 00 00 00 .-...... ..G..... [06D0] 00 C0 01 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [06E0] 00 70 00 67 00 5F 00 73 00 74 00 61 00 74 00 5F .p.g._.s .t.a.t._ [06F0] 00 74 00 6D 00 70 00 00 00 84 00 00 00 00 00 00 .t.m.p.. ........ [0700] 00 04 00 00 00 00 00 00 00 00 10 00 00 00 00 00 ........ ........ [0710] 00 2C 42 D5 2B 1D 9C D3 01 D9 EF D6 2B 1D 9C D3 .,B.+... ....+... [0720] 01 2C 42 D5 2B 1D 9C D3 01 46 00 00 00 00 00 00 .,B.+... .F...... [0730] 00 46 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .F...... ........ [0740] 00 00 00 00 00 2D 00 00 00 00 00 00 00 95 47 AB .....-.. ......G. [0750] 00 00 00 00 00 80 01 00 00 00 00 00 00 01 00 00 ........ ........ [0760] 00 00 00 00 00 50 00 47 00 5F 00 56 00 45 00 52 .....P.G ._.V.E.R [0770] 00 53 00 49 00 4F 00 4E 00 00 00 00 00 8C 00 00 .S.I.O.N ........ [0780] 00 00 00 00 00 B0 4C 00 00 00 00 00 00 00 50 00 ......L. ......P. [0790] 00 00 00 00 00 47 48 EE 2B 1D 9C D3 01 92 7C F1 .....GH. +.....|. [07A0] 2B 1D 9C D3 01 37 21 EE 2B 1D 9C D3 01 46 00 00 +....7!. +....F.. [07B0] 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 .....F.. ........ [07C0] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [07D0] 00 96 47 AB 00 00 00 00 00 80 01 00 00 00 00 00 ..G..... ........ [07E0] 00 01 00 00 00 00 00 00 00 70 00 6F 00 73 00 74 ........ .p.o.s.t [07F0] 00 67 00 72 00 65 00 73 00 71 00 6C 00 2E 00 63 .g.r.e.s .q.l...c [0800] 00 6F 00 6E 00 66 00 00 00 84 00 00 00 00 00 00 .o.n.f.. ........ [0810] 00 92 11 00 00 00 00 00 00 00 20 00 00 00 00 00 ........ .. ..... [0820] 00 00 AD 24 2E 1D 9C D3 01 61 B4 4F 2E 1D 9C D3 ...$.... .a.O.... [0830] 01 00 AD 24 2E 1D 9C D3 01 46 00 00 00 00 00 00 ...$.... .F...... [0840] 00 46 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .F...... ........ [0850] 00 00 00 00 00 2D 00 00 00 00 00 00 00 9B 47 AB .....-.. ......G. [0860] 00 00 00 00 00 80 01 00 00 00 00 00 00 01 00 00 ........ ........ [0870] 00 00 00 00 00 70 00 67 00 5F 00 68 00 62 00 61 .....p.g ._.h.b.a [0880] 00 2E 00 63 00 6F 00 6E 00 66 00 00 00 88 00 00 ...c.o.n .f...... [0890] 00 00 00 00 00 64 06 00 00 00 00 00 00 00 10 00 .....d.. ........ [08A0] 00 00 00 00 00 76 BD EE 2B 1D 9C D3 01 71 DB 4F .....v.. +....q.O [08B0] 2E 1D 9C D3 01 76 BD EE 2B 1D 9C D3 01 46 00 00 .....v.. +....F.. [08C0] 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 .....F.. ........ [08D0] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [08E0] 00 9C 47 AB 00 00 00 00 00 80 01 00 00 00 00 00 ..G..... ........ [08F0] 00 01 00 00 00 00 00 00 00 70 00 67 00 5F 00 69 ........ .p.g._.i [0900] 00 64 00 65 00 6E 00 74 00 2E 00 63 00 6F 00 6E .d.e.n.t ...c.o.n [0910] 00 66 00 00 00 8C 00 00 00 00 00 00 00 5E 00 00 .f...... .....^.. [0920] 00 00 00 00 00 00 10 00 00 00 00 00 00 E6 0A 4C ........ .......L [0930] 2E 1D 9C D3 01 6C 3E BF 2E 1D 9C D3 01 E6 0A 4C .....l>. .......L [0940] 2E 1D 9C D3 01 46 00 00 00 00 00 00 00 46 00 00 .....F.. .....F.. [0950] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0960] 00 2D 00 00 00 00 00 00 00 E5 4B AB 00 00 00 00 .-...... ..K..... [0970] 00 80 01 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0980] 00 70 00 6F 00 73 00 74 00 6D 00 61 00 73 00 74 .p.o.s.t .m.a.s.t [0990] 00 65 00 72 00 2E 00 70 00 69 00 64 00 00 00 00 .e.r...p .i.d.... [09A0] 00 8C 00 00 00 00 00 00 00 67 00 00 00 00 00 00 ........ .g...... [09B0] 00 00 10 00 00 00 00 00 00 A4 DF 4D 2E 1D 9C D3 ........ ...M.... [09C0] 01 84 91 4D 2E 1D 9C D3 01 A4 DF 4D 2E 1D 9C D3 ...M.... ...M.... [09D0] 01 46 00 00 00 00 00 00 00 46 00 00 00 00 00 00 .F...... .F...... [09E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 2D 00 00 ........ .....-.. [09F0] 00 00 00 00 00 E7 4B AB 00 00 00 00 00 80 01 00 ......K. ........ [0A00] 00 00 00 00 00 01 00 00 00 00 00 00 00 70 00 6F ........ .....p.o [0A10] 00 73 00 74 00 6D 00 61 00 73 00 74 00 65 00 72 .s.t.m.a .s.t.e.r [0A20] 00 2E 00 6F 00 70 00 74 00 73 00 00 00 74 00 00 ...o.p.t .s...t.. [0A30] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A40] 00 00 00 00 00 D6 16 C8 6B 28 9C D3 01 D6 16 C8 ........ k(...... [0A50] 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 46 00 00 k(...... k(...F.. [0A60] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [0A70] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [0A80] 00 E4 4C AB 00 00 00 00 00 ED 01 00 00 00 00 00 ..L..... ........ [0A90] 00 01 00 00 00 00 00 00 00 61 00 61 00 61 00 00 ........ .a.a.a.. [0AA0] 00 . [2018/02/02 08:19:16.299432, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:2943(call_trans2findfirst) SMBtrans2 mask=* directory=. dirtype=23 numentries=21 [2018/02/02 08:19:25.064961, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 82 [2018/02/02 08:19:25.065068, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x52 [2018/02/02 08:19:25.065096, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 10 of length 86 (0 toread) [2018/02/02 08:19:25.065110, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:25.065119, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=82 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=49153 smb_tid=11961 smb_pid=5106 smb_uid=19713 smb_mid=8580 smt_wct=15 smb_vwv[ 0]= 16 (0x10) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 4000 (0xFA0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 16 (0x10) smb_vwv[10]= 66 (0x42) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=17 [2018/02/02 08:19:25.065259, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 02 00 00 00 00 2F 00 61 00 61 00 61 00 00 ......./ .a.a.a.. [0010] 00 . [2018/02/02 08:19:25.065337, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtrans2 (pid 22725) conn 0x5578978d13a0 [2018/02/02 08:19:25.065446, 0, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtrans2.21.req len 86 [2018/02/02 08:19:25.065510, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2018/02/02 08:19:25.065544, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5761(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 512 [2018/02/02 08:19:25.065566, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:443(unix_convert) unix_convert called on file "aaa" [2018/02/02 08:19:25.065583, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:644(unix_convert) unix_convert begin: name = aaa, dirpath = , start = aaa [2018/02/02 08:19:25.065604, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:667(unix_convert) conversion of base_name finished aaa -> aaa [2018/02/02 08:19:25.065636, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/files.c:756(file_name_hash) file_name_hash: /home/jane/aaa hash 0x3bde0c6f [2018/02/02 08:19:25.065665, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5924(call_trans2qfilepathinfo) call_trans2qfilepathinfo aaa (fnum [fsp is NULL]) level=512 call=5 total_data=0 [2018/02/02 08:19:25.065704, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4827(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: aaa (fnum [fsp is NULL]) level=512 max_data=4000 [2018/02/02 08:19:25.065722, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: aaa [2018/02/02 08:19:25.065740, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:19:25.065757, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:19:25.065777, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:25.065794, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40755 [2018/02/02 08:19:25.065811, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5392(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:19:25.065826, 4, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] D6 16 C8 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 ...k(... ...k(... [0020] D6 16 C8 6B 28 9C D3 01 46 00 00 00 00 00 00 00 ...k(... F....... [0030] 46 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 F....... ........ [0040] 00 00 00 00 2D 00 00 00 00 00 00 00 E4 4C AB 00 ....-... .....L.. [0050] 00 00 00 00 ED 01 00 00 00 00 00 00 01 00 00 00 ........ ........ [0060] 00 00 00 00 .... [2018/02/02 08:19:25.065964, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1111(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 100, useable_space = 16406 [2018/02/02 08:19:25.065991, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1113(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 100, paramsize = 2, datasize = 100 [2018/02/02 08:19:25.066015, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:19:25.066023, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=160 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5106 smb_uid=19713 smb_mid=8580 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=105 [2018/02/02 08:19:25.066135, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 D6 16 C8 6B 28 9C D3 01 D6 16 C8 ........ k(...... [0020] 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 46 00 00 k(...... k(...F.. [0030] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [0040] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [0050] 00 E4 4C AB 00 00 00 00 00 ED 01 00 00 00 00 00 ..L..... ........ [0060] 00 01 00 00 00 00 00 00 00 ........ . [2018/02/02 08:20:09.651728, 10, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:42(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) called [2018/02/02 08:20:09.651807, 2, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:2876(deadtime_fn) Closing idle connection [2018/02/02 08:20:09.651849, 4, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:20:09.651902, 4, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:20:09.651929, 4, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:20:09.651956, 5, pid=22726, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:20:09.652013, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:20:09.652072, 10, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 22726 [2018/02/02 08:20:09.652132, 4, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:20:09.652156, 10, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:46(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) stopped [2018/02/02 08:20:09.652188, 10, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:42(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) called [2018/02/02 08:20:09.652209, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:2895(housekeeping_fn) housekeeping [2018/02/02 08:20:09.652228, 4, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:20:09.652247, 5, pid=22726, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:20:09.652266, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:20:09.652294, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:20:09.652323, 10, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:53(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled [2018/02/02 08:20:09.652369, 10, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0xd len 0 (num_fds:0) from 22726 [2018/02/02 08:20:09.652398, 3, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:156(msg_exit_server) got a SHUTDOWN message [2018/02/02 08:20:09.652424, 4, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:20:09.652445, 5, pid=22726, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:20:09.652464, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:20:09.652492, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:20:09.652512, 4, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:20:09.652531, 5, pid=22726, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:20:09.652549, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:20:09.652590, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:20:09.652613, 4, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:20:09.652633, 5, pid=22726, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:20:09.652652, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:20:09.652679, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:20:09.652700, 10, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1755(smbXsrv_session_logoff_all) smbXsrv_session_logoff_all: empty session_table, nothing to do. [2018/02/02 08:20:09.652719, 4, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:20:09.652738, 5, pid=22726, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:20:09.652757, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:20:09.652787, 5, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:20:09.652841, 10, pid=22726, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:20:09.653135, 3, pid=22726, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:246(exit_server_common) Server exit (normal exit) [2018/02/02 08:20:09.657073, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:20:09.657126, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:20:09.657149, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:20:09.657170, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:20:09.657190, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:20:09.657232, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 22722 [2018/02/02 08:20:09.657280, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:20:09.657325, 10, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0x314 len 0 (num_fds:0) from 22720 [2018/02/02 08:20:09.657533, 3, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/util_procid.c:54(pid_to_procid) pid_to_procid: messaging_dgm_get_unique failed: No such file or directory [2018/02/02 08:20:09.657719, 5, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:20:09.657754, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/lib/samba/lock/serverid.tdb 3: [2018/02/02 08:20:09.657802, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key C658000000000000FFFFFFFF [2018/02/02 08:20:09.657829, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978b8750 [2018/02/02 08:20:09.657873, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key C658000000000000FFFFFFFF [2018/02/02 08:20:09.657902, 5, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:20:09.657923, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:20:09.657944, 10, pid=22722, effective(0, 0), real(0, 0)] ../source3/smbd/smbd_cleanupd.c:210(smbd_cleanupd_process_exited) smbd_cleanupd_process_exited: cleaned up pid 22726 [2018/02/02 08:20:09.658451, 10, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:20:09.658763, 10, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2018/02/02 08:20:09.658815, 10, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 13874171037562042844 [2018/02/02 08:20:09.658937, 10, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:533(smbXsrv_client_create) [2018/02/02 08:20:09.658958, 10, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:541(smbXsrv_client_create) smbXsrv_client_create: client_guid[00000000-0000-0000-0000-000000000000] stored [2018/02/02 08:20:09.659009, 1, pid=22740, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &client_blob: struct smbXsrv_clientB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_clientU(case 0) info0 : * info0: struct smbXsrv_client table : * ev_ctx : * msg_ctx : * global : * global: struct smbXsrv_client_global0 db_rec : NULL server_id: struct server_id pid : 0x00000000000058d4 (22740) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xc08af50cd6e5f9dc (-4572573036147508772) local_address : NULL remote_address : NULL remote_name : NULL initial_connect_time : Fri Feb 2 08:20:10 AM 2018 EST client_guid : 00000000-0000-0000-0000-000000000000 stored : 0x00 (0) sconn : NULL session_table : NULL last_session_id : 0x0000000000000000 (0) tcon_table : NULL open_table : NULL connections : NULL server_multi_channel_enabled: 0x00 (0) [2018/02/02 08:20:09.659360, 5, pid=22740, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:20:09.659390, 10, pid=22740, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/lib/samba/lock/serverid.tdb 3: [2018/02/02 08:20:09.659434, 10, pid=22740, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key D458000000000000FFFFFFFF [2018/02/02 08:20:09.659462, 10, pid=22740, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978b41a0 [2018/02/02 08:20:09.659508, 10, pid=22740, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key D458000000000000FFFFFFFF [2018/02/02 08:20:09.659532, 5, pid=22740, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:20:09.659552, 10, pid=22740, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:20:09.659589, 5, pid=22740, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 87040 SO_RCVBUF = 374400 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:20:09.659732, 5, pid=22740, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 87040 SO_RCVBUF = 374400 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:20:09.659924, 3, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 192.168.122.213 (192.168.122.213) [2018/02/02 08:20:09.659951, 10, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:3837(smbd_add_connection) Connection allowed from ipv4:192.168.122.213:50350 to ipv4:10.167.133.33:445 [2018/02/02 08:20:09.660057, 6, pid=22740, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Feb 2 08:16:14 2018 [2018/02/02 08:20:09.660126, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 774 - private_data=0x5578978ac6c0 [2018/02/02 08:20:09.660149, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 778 - private_data=0x5578978ac6c0 [2018/02/02 08:20:09.660169, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 770 - private_data=0x5578978ac6c0 [2018/02/02 08:20:09.660188, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 787 - private_data=0x5578978ac6c0 [2018/02/02 08:20:09.660208, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 779 - private_data=0x5578978ac6c0 [2018/02/02 08:20:09.660227, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2018/02/02 08:20:09.660246, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:371(messaging_register) Overriding messaging pointer for type 15 - private_data=(nil) [2018/02/02 08:20:09.660266, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 16 - private_data=(nil) [2018/02/02 08:20:09.660308, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 16 - private_data=0x5578978ac6c0 [2018/02/02 08:20:09.660330, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 33 - private_data=0x5578978aba20 [2018/02/02 08:20:09.660350, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 33 - private_data=0x5578978ac6c0 [2018/02/02 08:20:09.660370, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 790 - private_data=(nil) [2018/02/02 08:20:09.660389, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 790 - private_data=0x5578978ac6c0 [2018/02/02 08:20:09.660409, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 791 - private_data=(nil) [2018/02/02 08:20:09.660429, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2018/02/02 08:20:09.660448, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2018/02/02 08:20:09.660471, 10, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(keepalive) 0x5578978c5380 [2018/02/02 08:20:09.660493, 10, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(deadtime) 0x5578978c55d0 [2018/02/02 08:20:09.660518, 10, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x5578978c5820 [2018/02/02 08:20:09.694001, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_event.c:42(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) called [2018/02/02 08:20:09.694054, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_event.c:53(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) rescheduled [2018/02/02 08:20:09.694085, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_event.c:42(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) called [2018/02/02 08:20:09.694107, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:2895(housekeeping_fn) housekeeping [2018/02/02 08:20:09.694129, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:20:09.694151, 5, pid=22725, effective(70, 70), real(70, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:20:09.694171, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:20:09.694213, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:20:09.694247, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:53(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled [2018/02/02 08:20:09.756443, 10, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:42(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) called [2018/02/02 08:20:09.756499, 2, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:2876(deadtime_fn) Closing idle connection [2018/02/02 08:20:09.756557, 4, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:20:09.756589, 4, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:20:09.756615, 4, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:20:09.756641, 5, pid=22727, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:20:09.756670, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:20:09.756715, 10, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 22727 [2018/02/02 08:20:09.756762, 4, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:20:09.756787, 10, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:46(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) stopped [2018/02/02 08:20:09.756816, 10, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:42(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) called [2018/02/02 08:20:09.756838, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:2895(housekeeping_fn) housekeeping [2018/02/02 08:20:09.756858, 4, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:20:09.756878, 5, pid=22727, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:20:09.756898, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:20:09.756927, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:20:09.756956, 10, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:53(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled [2018/02/02 08:20:09.757028, 10, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0xd len 0 (num_fds:0) from 22727 [2018/02/02 08:20:09.757059, 3, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:156(msg_exit_server) got a SHUTDOWN message [2018/02/02 08:20:09.757086, 4, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:20:09.757108, 5, pid=22727, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:20:09.757128, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:20:09.757158, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:20:09.757180, 4, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:20:09.757200, 5, pid=22727, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:20:09.757219, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:20:09.757264, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:20:09.757285, 4, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:20:09.757304, 5, pid=22727, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:20:09.757323, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:20:09.757350, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:20:09.757371, 10, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1755(smbXsrv_session_logoff_all) smbXsrv_session_logoff_all: empty session_table, nothing to do. [2018/02/02 08:20:09.757390, 4, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:20:09.757409, 5, pid=22727, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:20:09.757427, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:20:09.757458, 5, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:20:09.757510, 10, pid=22727, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:20:09.757722, 3, pid=22727, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:246(exit_server_common) Server exit (normal exit) [2018/02/02 08:20:09.760791, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:20:09.760879, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:20:09.760922, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:20:09.760959, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:20:09.761009, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:20:09.761050, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 22722 [2018/02/02 08:20:09.761093, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:20:09.761136, 10, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0x314 len 0 (num_fds:0) from 22720 [2018/02/02 08:20:09.761249, 3, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/util_procid.c:54(pid_to_procid) pid_to_procid: messaging_dgm_get_unique failed: No such file or directory [2018/02/02 08:20:09.761301, 5, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:20:09.761325, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/lib/samba/lock/serverid.tdb 3: [2018/02/02 08:20:09.761373, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key C758000000000000FFFFFFFF [2018/02/02 08:20:09.761399, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978b8850 [2018/02/02 08:20:09.761429, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key C758000000000000FFFFFFFF [2018/02/02 08:20:09.761451, 5, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:20:09.761471, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:20:09.761493, 10, pid=22722, effective(0, 0), real(0, 0)] ../source3/smbd/smbd_cleanupd.c:210(smbd_cleanupd_process_exited) smbd_cleanupd_process_exited: cleaned up pid 22727 [2018/02/02 08:20:09.762221, 10, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:20:09.762530, 10, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2018/02/02 08:20:09.762579, 10, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 3092030525107985828 [2018/02/02 08:20:09.762704, 10, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:533(smbXsrv_client_create) [2018/02/02 08:20:09.762724, 10, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:541(smbXsrv_client_create) smbXsrv_client_create: client_guid[00000000-0000-0000-0000-000000000000] stored [2018/02/02 08:20:09.762758, 1, pid=22741, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &client_blob: struct smbXsrv_clientB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_clientU(case 0) info0 : * info0: struct smbXsrv_client table : * ev_ctx : * msg_ctx : * global : * global: struct smbXsrv_client_global0 db_rec : NULL server_id: struct server_id pid : 0x00000000000058d5 (22741) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x2ae919615bb9dda4 (3092030525107985828) local_address : NULL remote_address : NULL remote_name : NULL initial_connect_time : Fri Feb 2 08:20:10 AM 2018 EST client_guid : 00000000-0000-0000-0000-000000000000 stored : 0x00 (0) sconn : NULL session_table : NULL last_session_id : 0x0000000000000000 (0) tcon_table : NULL open_table : NULL connections : NULL server_multi_channel_enabled: 0x00 (0) [2018/02/02 08:20:09.763117, 5, pid=22741, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:20:09.763164, 10, pid=22741, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/lib/samba/lock/serverid.tdb 3: [2018/02/02 08:20:09.763192, 10, pid=22741, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key D558000000000000FFFFFFFF [2018/02/02 08:20:09.763219, 10, pid=22741, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978b41a0 [2018/02/02 08:20:09.763265, 10, pid=22741, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key D558000000000000FFFFFFFF [2018/02/02 08:20:09.763289, 5, pid=22741, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:20:09.763310, 10, pid=22741, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:20:09.763346, 5, pid=22741, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1062000 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:20:09.763489, 5, pid=22741, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1062000 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:20:09.763676, 3, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.167.133.33 (10.167.133.33) [2018/02/02 08:20:09.763702, 10, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:3837(smbd_add_connection) Connection allowed from ipv4:10.167.133.33:44330 to ipv4:10.167.133.33:445 [2018/02/02 08:20:09.763774, 6, pid=22741, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Feb 2 08:16:14 2018 [2018/02/02 08:20:09.763835, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 774 - private_data=0x5578978ac6c0 [2018/02/02 08:20:09.763858, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 778 - private_data=0x5578978ac6c0 [2018/02/02 08:20:09.763878, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 770 - private_data=0x5578978ac6c0 [2018/02/02 08:20:09.763897, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 787 - private_data=0x5578978ac6c0 [2018/02/02 08:20:09.763916, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 779 - private_data=0x5578978ac6c0 [2018/02/02 08:20:09.763935, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2018/02/02 08:20:09.763954, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:371(messaging_register) Overriding messaging pointer for type 15 - private_data=(nil) [2018/02/02 08:20:09.764004, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 16 - private_data=(nil) [2018/02/02 08:20:09.764035, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 16 - private_data=0x5578978ac6c0 [2018/02/02 08:20:09.764056, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 33 - private_data=0x5578978aba20 [2018/02/02 08:20:09.764075, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 33 - private_data=0x5578978ac6c0 [2018/02/02 08:20:09.764095, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 790 - private_data=(nil) [2018/02/02 08:20:09.764115, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 790 - private_data=0x5578978ac6c0 [2018/02/02 08:20:09.764135, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 791 - private_data=(nil) [2018/02/02 08:20:09.764154, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2018/02/02 08:20:09.764174, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2018/02/02 08:20:09.764197, 10, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(keepalive) 0x5578978c5380 [2018/02/02 08:20:09.764219, 10, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(deadtime) 0x5578978c55d0 [2018/02/02 08:20:09.764244, 10, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x5578978c5820 [2018/02/02 08:20:38.929543, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 82 [2018/02/02 08:20:38.945086, 6, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x52 [2018/02/02 08:20:38.945129, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 11 of length 86 (0 toread) [2018/02/02 08:20:38.945147, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:38.945168, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:181(show_msg) size=82 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=49153 smb_tid=11961 smb_pid=5148 smb_uid=19713 smb_mid=8581 smt_wct=15 smb_vwv[ 0]= 16 (0x10) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 4000 (0xFA0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 16 (0x10) smb_vwv[10]= 66 (0x42) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=17 [2018/02/02 08:20:38.945333, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 02 00 00 00 00 2F 00 61 00 61 00 61 00 00 ......./ .a.a.a.. [0010] 00 . [2018/02/02 08:20:38.945390, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtrans2 (pid 22725) conn 0x5578978d13a0 [2018/02/02 08:20:38.945514, 0, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtrans2.22.req len 86 [2018/02/02 08:20:38.945623, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (70, 70) - sec_ctx_stack_ndx = 0 [2018/02/02 08:20:38.945666, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (7): SID[ 0]: S-1-5-21-1340105488-494795474-4286701950-1003 SID[ 1]: S-1-5-21-1340105488-494795474-4286701950-513 SID[ 2]: S-1-22-2-70 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-11 SID[ 6]: S-1-22-1-70 Privileges (0x 0): Rights (0x 0): [2018/02/02 08:20:38.945818, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 70 Primary group is 70 and contains 1 supplementary groups Group[ 0]: 70 [2018/02/02 08:20:38.945900, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(70,70), gid=(0,70) [2018/02/02 08:20:38.945949, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5761(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 512 [2018/02/02 08:20:38.946033, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:443(unix_convert) unix_convert called on file "aaa" [2018/02/02 08:20:38.946071, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:644(unix_convert) unix_convert begin: name = aaa, dirpath = , start = aaa [2018/02/02 08:20:38.946111, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:667(unix_convert) conversion of base_name finished aaa -> aaa [2018/02/02 08:20:38.946164, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/files.c:756(file_name_hash) file_name_hash: /home/jane/aaa hash 0x3bde0c6f [2018/02/02 08:20:38.946216, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5924(call_trans2qfilepathinfo) call_trans2qfilepathinfo aaa (fnum [fsp is NULL]) level=512 call=5 total_data=0 [2018/02/02 08:20:38.946256, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4827(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: aaa (fnum [fsp is NULL]) level=512 max_data=4000 [2018/02/02 08:20:38.946291, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: aaa [2018/02/02 08:20:38.946327, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:20:38.946363, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:20:38.946404, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:38.946441, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40755 [2018/02/02 08:20:38.946478, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5392(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:38.946515, 4, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] D6 16 C8 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 ...k(... ...k(... [0020] D6 16 C8 6B 28 9C D3 01 46 00 00 00 00 00 00 00 ...k(... F....... [0030] 46 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 F....... ........ [0040] 00 00 00 00 2D 00 00 00 00 00 00 00 E4 4C AB 00 ....-... .....L.. [0050] 00 00 00 00 ED 01 00 00 00 00 00 00 01 00 00 00 ........ ........ [0060] 00 00 00 00 .... [2018/02/02 08:20:38.946796, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1111(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 100, useable_space = 16406 [2018/02/02 08:20:38.946849, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1113(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 100, paramsize = 2, datasize = 100 [2018/02/02 08:20:38.946872, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:38.946885, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=160 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5148 smb_uid=19713 smb_mid=8581 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=105 [2018/02/02 08:20:38.947038, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 D6 16 C8 6B 28 9C D3 01 D6 16 C8 ........ k(...... [0020] 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 46 00 00 k(...... k(...F.. [0030] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [0040] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [0050] 00 E4 4C AB 00 00 00 00 00 ED 01 00 00 00 00 00 ..L..... ........ [0060] 00 01 00 00 00 00 00 00 00 ........ . [2018/02/02 08:20:40.111850, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 82 [2018/02/02 08:20:40.111940, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x52 [2018/02/02 08:20:40.112004, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 12 of length 86 (0 toread) [2018/02/02 08:20:40.112034, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:40.112044, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=82 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=49153 smb_tid=11961 smb_pid=5156 smb_uid=19713 smb_mid=8582 smt_wct=15 smb_vwv[ 0]= 16 (0x10) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 4000 (0xFA0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 16 (0x10) smb_vwv[10]= 66 (0x42) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=17 [2018/02/02 08:20:40.112178, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 02 00 00 00 00 2F 00 61 00 61 00 61 00 00 ......./ .a.a.a.. [0010] 00 . [2018/02/02 08:20:40.112217, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtrans2 (pid 22725) conn 0x5578978d13a0 [2018/02/02 08:20:40.112322, 0, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtrans2.23.req len 86 [2018/02/02 08:20:40.112372, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2018/02/02 08:20:40.112393, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5761(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 512 [2018/02/02 08:20:40.112413, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:443(unix_convert) unix_convert called on file "aaa" [2018/02/02 08:20:40.112448, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:644(unix_convert) unix_convert begin: name = aaa, dirpath = , start = aaa [2018/02/02 08:20:40.112471, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:667(unix_convert) conversion of base_name finished aaa -> aaa [2018/02/02 08:20:40.112495, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/files.c:756(file_name_hash) file_name_hash: /home/jane/aaa hash 0x3bde0c6f [2018/02/02 08:20:40.112518, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5924(call_trans2qfilepathinfo) call_trans2qfilepathinfo aaa (fnum [fsp is NULL]) level=512 call=5 total_data=0 [2018/02/02 08:20:40.112534, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4827(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: aaa (fnum [fsp is NULL]) level=512 max_data=4000 [2018/02/02 08:20:40.112548, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: aaa [2018/02/02 08:20:40.112562, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:20:40.112578, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:20:40.112595, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:40.112608, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40755 [2018/02/02 08:20:40.112622, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5392(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:40.112635, 4, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] D6 16 C8 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 ...k(... ...k(... [0020] D6 16 C8 6B 28 9C D3 01 46 00 00 00 00 00 00 00 ...k(... F....... [0030] 46 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 F....... ........ [0040] 00 00 00 00 2D 00 00 00 00 00 00 00 E4 4C AB 00 ....-... .....L.. [0050] 00 00 00 00 ED 01 00 00 00 00 00 00 01 00 00 00 ........ ........ [0060] 00 00 00 00 .... [2018/02/02 08:20:40.112730, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1111(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 100, useable_space = 16406 [2018/02/02 08:20:40.112743, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1113(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 100, paramsize = 2, datasize = 100 [2018/02/02 08:20:40.112756, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:40.112764, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=160 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5156 smb_uid=19713 smb_mid=8582 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=105 [2018/02/02 08:20:40.112869, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 D6 16 C8 6B 28 9C D3 01 D6 16 C8 ........ k(...... [0020] 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 46 00 00 k(...... k(...F.. [0030] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [0040] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [0050] 00 E4 4C AB 00 00 00 00 00 ED 01 00 00 00 00 00 ..L..... ........ [0060] 00 01 00 00 00 00 00 00 00 ........ . [2018/02/02 08:20:41.324511, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 82 [2018/02/02 08:20:41.324611, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x52 [2018/02/02 08:20:41.324650, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 13 of length 86 (0 toread) [2018/02/02 08:20:41.324673, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:41.324687, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=82 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=49153 smb_tid=11961 smb_pid=5168 smb_uid=19713 smb_mid=8583 smt_wct=15 smb_vwv[ 0]= 16 (0x10) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 4000 (0xFA0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 16 (0x10) smb_vwv[10]= 66 (0x42) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=17 [2018/02/02 08:20:41.324861, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 02 00 00 00 00 2F 00 61 00 61 00 61 00 00 ......./ .a.a.a.. [0010] 00 . [2018/02/02 08:20:41.324920, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtrans2 (pid 22725) conn 0x5578978d13a0 [2018/02/02 08:20:41.325068, 0, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtrans2.24.req len 86 [2018/02/02 08:20:41.325134, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2018/02/02 08:20:41.325164, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5761(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 512 [2018/02/02 08:20:41.325193, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:443(unix_convert) unix_convert called on file "aaa" [2018/02/02 08:20:41.325228, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:644(unix_convert) unix_convert begin: name = aaa, dirpath = , start = aaa [2018/02/02 08:20:41.325261, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:667(unix_convert) conversion of base_name finished aaa -> aaa [2018/02/02 08:20:41.325297, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/files.c:756(file_name_hash) file_name_hash: /home/jane/aaa hash 0x3bde0c6f [2018/02/02 08:20:41.325331, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5924(call_trans2qfilepathinfo) call_trans2qfilepathinfo aaa (fnum [fsp is NULL]) level=512 call=5 total_data=0 [2018/02/02 08:20:41.325355, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4827(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: aaa (fnum [fsp is NULL]) level=512 max_data=4000 [2018/02/02 08:20:41.325376, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: aaa [2018/02/02 08:20:41.325399, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:20:41.325422, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:20:41.325448, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:41.325498, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40755 [2018/02/02 08:20:41.325521, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5392(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:41.325541, 4, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] D6 16 C8 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 ...k(... ...k(... [0020] D6 16 C8 6B 28 9C D3 01 46 00 00 00 00 00 00 00 ...k(... F....... [0030] 46 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 F....... ........ [0040] 00 00 00 00 2D 00 00 00 00 00 00 00 E4 4C AB 00 ....-... .....L.. [0050] 00 00 00 00 ED 01 00 00 00 00 00 00 01 00 00 00 ........ ........ [0060] 00 00 00 00 .... [2018/02/02 08:20:41.325691, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1111(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 100, useable_space = 16406 [2018/02/02 08:20:41.325712, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1113(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 100, paramsize = 2, datasize = 100 [2018/02/02 08:20:41.325732, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:41.325745, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=160 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5168 smb_uid=19713 smb_mid=8583 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=105 [2018/02/02 08:20:41.325883, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 D6 16 C8 6B 28 9C D3 01 D6 16 C8 ........ k(...... [0020] 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 46 00 00 k(...... k(...F.. [0030] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [0040] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [0050] 00 E4 4C AB 00 00 00 00 00 ED 01 00 00 00 00 00 ..L..... ........ [0060] 00 01 00 00 00 00 00 00 00 ........ . [2018/02/02 08:20:42.552085, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 82 [2018/02/02 08:20:42.552184, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x52 [2018/02/02 08:20:42.552235, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 14 of length 86 (0 toread) [2018/02/02 08:20:42.552275, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:42.552300, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=82 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=49153 smb_tid=11961 smb_pid=5180 smb_uid=19713 smb_mid=8584 smt_wct=15 smb_vwv[ 0]= 16 (0x10) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 4000 (0xFA0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 16 (0x10) smb_vwv[10]= 66 (0x42) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=17 [2018/02/02 08:20:42.552512, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 02 00 00 00 00 2F 00 61 00 61 00 61 00 00 ......./ .a.a.a.. [0010] 00 . [2018/02/02 08:20:42.552583, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtrans2 (pid 22725) conn 0x5578978d13a0 [2018/02/02 08:20:42.552707, 0, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtrans2.25.req len 86 [2018/02/02 08:20:42.552777, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2018/02/02 08:20:42.552807, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5761(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 512 [2018/02/02 08:20:42.552835, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:443(unix_convert) unix_convert called on file "aaa" [2018/02/02 08:20:42.552857, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:644(unix_convert) unix_convert begin: name = aaa, dirpath = , start = aaa [2018/02/02 08:20:42.552884, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:667(unix_convert) conversion of base_name finished aaa -> aaa [2018/02/02 08:20:42.552918, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/files.c:756(file_name_hash) file_name_hash: /home/jane/aaa hash 0x3bde0c6f [2018/02/02 08:20:42.552952, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5924(call_trans2qfilepathinfo) call_trans2qfilepathinfo aaa (fnum [fsp is NULL]) level=512 call=5 total_data=0 [2018/02/02 08:20:42.553021, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4827(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: aaa (fnum [fsp is NULL]) level=512 max_data=4000 [2018/02/02 08:20:42.553051, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: aaa [2018/02/02 08:20:42.553074, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:20:42.553097, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:20:42.553124, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:42.553145, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40755 [2018/02/02 08:20:42.553168, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5392(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:42.553201, 4, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] D6 16 C8 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 ...k(... ...k(... [0020] D6 16 C8 6B 28 9C D3 01 46 00 00 00 00 00 00 00 ...k(... F....... [0030] 46 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 F....... ........ [0040] 00 00 00 00 2D 00 00 00 00 00 00 00 E4 4C AB 00 ....-... .....L.. [0050] 00 00 00 00 ED 01 00 00 00 00 00 00 01 00 00 00 ........ ........ [0060] 00 00 00 00 .... [2018/02/02 08:20:42.553403, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1111(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 100, useable_space = 16406 [2018/02/02 08:20:42.553427, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1113(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 100, paramsize = 2, datasize = 100 [2018/02/02 08:20:42.553465, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:42.553478, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=160 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5180 smb_uid=19713 smb_mid=8584 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=105 [2018/02/02 08:20:42.553616, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 D6 16 C8 6B 28 9C D3 01 D6 16 C8 ........ k(...... [0020] 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 46 00 00 k(...... k(...F.. [0030] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [0040] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [0050] 00 E4 4C AB 00 00 00 00 00 ED 01 00 00 00 00 00 ..L..... ........ [0060] 00 01 00 00 00 00 00 00 00 ........ . [2018/02/02 08:20:43.759861, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 82 [2018/02/02 08:20:43.759985, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x52 [2018/02/02 08:20:43.760028, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 15 of length 86 (0 toread) [2018/02/02 08:20:43.760071, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:43.760094, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=82 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=49153 smb_tid=11961 smb_pid=5192 smb_uid=19713 smb_mid=8585 smt_wct=15 smb_vwv[ 0]= 16 (0x10) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 4000 (0xFA0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 16 (0x10) smb_vwv[10]= 66 (0x42) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=17 [2018/02/02 08:20:43.760337, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 02 00 00 00 00 2F 00 61 00 61 00 61 00 00 ......./ .a.a.a.. [0010] 00 . [2018/02/02 08:20:43.760415, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtrans2 (pid 22725) conn 0x5578978d13a0 [2018/02/02 08:20:43.760545, 0, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtrans2.26.req len 86 [2018/02/02 08:20:43.760610, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2018/02/02 08:20:43.760640, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5761(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 512 [2018/02/02 08:20:43.760669, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:443(unix_convert) unix_convert called on file "aaa" [2018/02/02 08:20:43.760691, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:644(unix_convert) unix_convert begin: name = aaa, dirpath = , start = aaa [2018/02/02 08:20:43.760718, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:667(unix_convert) conversion of base_name finished aaa -> aaa [2018/02/02 08:20:43.760784, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/files.c:756(file_name_hash) file_name_hash: /home/jane/aaa hash 0x3bde0c6f [2018/02/02 08:20:43.760820, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5924(call_trans2qfilepathinfo) call_trans2qfilepathinfo aaa (fnum [fsp is NULL]) level=512 call=5 total_data=0 [2018/02/02 08:20:43.760845, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4827(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: aaa (fnum [fsp is NULL]) level=512 max_data=4000 [2018/02/02 08:20:43.760866, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: aaa [2018/02/02 08:20:43.760888, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:20:43.760911, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:20:43.760937, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:43.760957, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40755 [2018/02/02 08:20:43.761007, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5392(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:43.761029, 4, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] D6 16 C8 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 ...k(... ...k(... [0020] D6 16 C8 6B 28 9C D3 01 46 00 00 00 00 00 00 00 ...k(... F....... [0030] 46 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 F....... ........ [0040] 00 00 00 00 2D 00 00 00 00 00 00 00 E4 4C AB 00 ....-... .....L.. [0050] 00 00 00 00 ED 01 00 00 00 00 00 00 01 00 00 00 ........ ........ [0060] 00 00 00 00 .... [2018/02/02 08:20:43.761237, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1111(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 100, useable_space = 16406 [2018/02/02 08:20:43.761261, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1113(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 100, paramsize = 2, datasize = 100 [2018/02/02 08:20:43.761282, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:43.761295, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=160 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5192 smb_uid=19713 smb_mid=8585 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=105 [2018/02/02 08:20:43.761433, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 D6 16 C8 6B 28 9C D3 01 D6 16 C8 ........ k(...... [0020] 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 46 00 00 k(...... k(...F.. [0030] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [0040] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [0050] 00 E4 4C AB 00 00 00 00 00 ED 01 00 00 00 00 00 ..L..... ........ [0060] 00 01 00 00 00 00 00 00 00 ........ . [2018/02/02 08:20:45.001485, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 82 [2018/02/02 08:20:45.001611, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x52 [2018/02/02 08:20:45.001641, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 16 of length 86 (0 toread) [2018/02/02 08:20:45.001663, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:45.001677, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=82 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=49153 smb_tid=11961 smb_pid=5204 smb_uid=19713 smb_mid=8586 smt_wct=15 smb_vwv[ 0]= 16 (0x10) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 4000 (0xFA0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 16 (0x10) smb_vwv[10]= 66 (0x42) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=17 [2018/02/02 08:20:45.001848, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 02 00 00 00 00 2F 00 61 00 61 00 61 00 00 ......./ .a.a.a.. [0010] 00 . [2018/02/02 08:20:45.001908, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtrans2 (pid 22725) conn 0x5578978d13a0 [2018/02/02 08:20:45.002052, 0, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtrans2.27.req len 86 [2018/02/02 08:20:45.002124, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2018/02/02 08:20:45.002171, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5761(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 512 [2018/02/02 08:20:45.002209, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:443(unix_convert) unix_convert called on file "aaa" [2018/02/02 08:20:45.002232, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:644(unix_convert) unix_convert begin: name = aaa, dirpath = , start = aaa [2018/02/02 08:20:45.002259, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:667(unix_convert) conversion of base_name finished aaa -> aaa [2018/02/02 08:20:45.002294, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/files.c:756(file_name_hash) file_name_hash: /home/jane/aaa hash 0x3bde0c6f [2018/02/02 08:20:45.002328, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5924(call_trans2qfilepathinfo) call_trans2qfilepathinfo aaa (fnum [fsp is NULL]) level=512 call=5 total_data=0 [2018/02/02 08:20:45.002353, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4827(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: aaa (fnum [fsp is NULL]) level=512 max_data=4000 [2018/02/02 08:20:45.002373, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: aaa [2018/02/02 08:20:45.002396, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:20:45.002419, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:20:45.002445, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:45.002465, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40755 [2018/02/02 08:20:45.002509, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5392(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:45.002531, 4, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] D6 16 C8 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 ...k(... ...k(... [0020] D6 16 C8 6B 28 9C D3 01 46 00 00 00 00 00 00 00 ...k(... F....... [0030] 46 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 F....... ........ [0040] 00 00 00 00 2D 00 00 00 00 00 00 00 E4 4C AB 00 ....-... .....L.. [0050] 00 00 00 00 ED 01 00 00 00 00 00 00 01 00 00 00 ........ ........ [0060] 00 00 00 00 .... [2018/02/02 08:20:45.002685, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1111(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 100, useable_space = 16406 [2018/02/02 08:20:45.002707, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1113(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 100, paramsize = 2, datasize = 100 [2018/02/02 08:20:45.002727, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:45.002741, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=160 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5204 smb_uid=19713 smb_mid=8586 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=105 [2018/02/02 08:20:45.002888, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 D6 16 C8 6B 28 9C D3 01 D6 16 C8 ........ k(...... [0020] 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 46 00 00 k(...... k(...F.. [0030] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [0040] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [0050] 00 E4 4C AB 00 00 00 00 00 ED 01 00 00 00 00 00 ..L..... ........ [0060] 00 01 00 00 00 00 00 00 00 ........ . [2018/02/02 08:20:46.240533, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 82 [2018/02/02 08:20:46.240645, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x52 [2018/02/02 08:20:46.240680, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 17 of length 86 (0 toread) [2018/02/02 08:20:46.240697, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:46.240708, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=82 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=49153 smb_tid=11961 smb_pid=5216 smb_uid=19713 smb_mid=8587 smt_wct=15 smb_vwv[ 0]= 16 (0x10) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 4000 (0xFA0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 16 (0x10) smb_vwv[10]= 66 (0x42) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=17 [2018/02/02 08:20:46.240879, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 02 00 00 00 00 2F 00 61 00 61 00 61 00 00 ......./ .a.a.a.. [0010] 00 . [2018/02/02 08:20:46.240966, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtrans2 (pid 22725) conn 0x5578978d13a0 [2018/02/02 08:20:46.241144, 0, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtrans2.28.req len 86 [2018/02/02 08:20:46.241223, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2018/02/02 08:20:46.241263, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5761(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 512 [2018/02/02 08:20:46.241290, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:443(unix_convert) unix_convert called on file "aaa" [2018/02/02 08:20:46.241310, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:644(unix_convert) unix_convert begin: name = aaa, dirpath = , start = aaa [2018/02/02 08:20:46.241336, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:667(unix_convert) conversion of base_name finished aaa -> aaa [2018/02/02 08:20:46.241369, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/files.c:756(file_name_hash) file_name_hash: /home/jane/aaa hash 0x3bde0c6f [2018/02/02 08:20:46.241401, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5924(call_trans2qfilepathinfo) call_trans2qfilepathinfo aaa (fnum [fsp is NULL]) level=512 call=5 total_data=0 [2018/02/02 08:20:46.241424, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4827(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: aaa (fnum [fsp is NULL]) level=512 max_data=4000 [2018/02/02 08:20:46.241444, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: aaa [2018/02/02 08:20:46.241465, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:20:46.241486, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:20:46.241511, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:46.241529, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40755 [2018/02/02 08:20:46.241550, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5392(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:46.241569, 4, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] D6 16 C8 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 ...k(... ...k(... [0020] D6 16 C8 6B 28 9C D3 01 46 00 00 00 00 00 00 00 ...k(... F....... [0030] 46 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 F....... ........ [0040] 00 00 00 00 2D 00 00 00 00 00 00 00 E4 4C AB 00 ....-... .....L.. [0050] 00 00 00 00 ED 01 00 00 00 00 00 00 01 00 00 00 ........ ........ [0060] 00 00 00 00 .... [2018/02/02 08:20:46.241725, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1111(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 100, useable_space = 16406 [2018/02/02 08:20:46.241748, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1113(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 100, paramsize = 2, datasize = 100 [2018/02/02 08:20:46.241767, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:46.241779, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=160 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5216 smb_uid=19713 smb_mid=8587 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=105 [2018/02/02 08:20:46.241934, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 D6 16 C8 6B 28 9C D3 01 D6 16 C8 ........ k(...... [0020] 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 46 00 00 k(...... k(...F.. [0030] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [0040] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [0050] 00 E4 4C AB 00 00 00 00 00 ED 01 00 00 00 00 00 ..L..... ........ [0060] 00 01 00 00 00 00 00 00 00 ........ . [2018/02/02 08:20:47.515870, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 82 [2018/02/02 08:20:47.516012, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x52 [2018/02/02 08:20:47.516063, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 18 of length 86 (0 toread) [2018/02/02 08:20:47.516111, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:47.516137, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=82 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=49153 smb_tid=11961 smb_pid=5228 smb_uid=19713 smb_mid=8588 smt_wct=15 smb_vwv[ 0]= 16 (0x10) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 4000 (0xFA0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 16 (0x10) smb_vwv[10]= 66 (0x42) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=17 [2018/02/02 08:20:47.516320, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 02 00 00 00 00 2F 00 61 00 61 00 61 00 00 ......./ .a.a.a.. [0010] 00 . [2018/02/02 08:20:47.516380, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtrans2 (pid 22725) conn 0x5578978d13a0 [2018/02/02 08:20:47.516506, 0, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtrans2.29.req len 86 [2018/02/02 08:20:47.516569, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2018/02/02 08:20:47.516598, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5761(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 512 [2018/02/02 08:20:47.516626, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:443(unix_convert) unix_convert called on file "aaa" [2018/02/02 08:20:47.516647, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:644(unix_convert) unix_convert begin: name = aaa, dirpath = , start = aaa [2018/02/02 08:20:47.516673, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:667(unix_convert) conversion of base_name finished aaa -> aaa [2018/02/02 08:20:47.516708, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/files.c:756(file_name_hash) file_name_hash: /home/jane/aaa hash 0x3bde0c6f [2018/02/02 08:20:47.516741, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5924(call_trans2qfilepathinfo) call_trans2qfilepathinfo aaa (fnum [fsp is NULL]) level=512 call=5 total_data=0 [2018/02/02 08:20:47.516799, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4827(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: aaa (fnum [fsp is NULL]) level=512 max_data=4000 [2018/02/02 08:20:47.516823, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: aaa [2018/02/02 08:20:47.516846, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:20:47.516870, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:20:47.516897, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:47.516918, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40755 [2018/02/02 08:20:47.516941, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5392(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:47.516961, 4, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] D6 16 C8 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 ...k(... ...k(... [0020] D6 16 C8 6B 28 9C D3 01 46 00 00 00 00 00 00 00 ...k(... F....... [0030] 46 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 F....... ........ [0040] 00 00 00 00 2D 00 00 00 00 00 00 00 E4 4C AB 00 ....-... .....L.. [0050] 00 00 00 00 ED 01 00 00 00 00 00 00 01 00 00 00 ........ ........ [0060] 00 00 00 00 .... [2018/02/02 08:20:47.517127, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1111(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 100, useable_space = 16406 [2018/02/02 08:20:47.517149, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1113(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 100, paramsize = 2, datasize = 100 [2018/02/02 08:20:47.517172, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:47.517185, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=160 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5228 smb_uid=19713 smb_mid=8588 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=105 [2018/02/02 08:20:47.517331, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 D6 16 C8 6B 28 9C D3 01 D6 16 C8 ........ k(...... [0020] 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 46 00 00 k(...... k(...F.. [0030] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [0040] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [0050] 00 E4 4C AB 00 00 00 00 00 ED 01 00 00 00 00 00 ..L..... ........ [0060] 00 01 00 00 00 00 00 00 00 ........ . [2018/02/02 08:20:48.759511, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 82 [2018/02/02 08:20:48.759625, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x52 [2018/02/02 08:20:48.759701, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 19 of length 86 (0 toread) [2018/02/02 08:20:48.759740, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:48.759766, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=82 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=49153 smb_tid=11961 smb_pid=5240 smb_uid=19713 smb_mid=8589 smt_wct=15 smb_vwv[ 0]= 16 (0x10) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 4000 (0xFA0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 16 (0x10) smb_vwv[10]= 66 (0x42) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=17 [2018/02/02 08:20:48.760016, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 02 00 00 00 00 2F 00 61 00 61 00 61 00 00 ......./ .a.a.a.. [0010] 00 . [2018/02/02 08:20:48.760079, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtrans2 (pid 22725) conn 0x5578978d13a0 [2018/02/02 08:20:48.760203, 0, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtrans2.30.req len 86 [2018/02/02 08:20:48.760264, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2018/02/02 08:20:48.760293, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5761(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 512 [2018/02/02 08:20:48.760321, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:443(unix_convert) unix_convert called on file "aaa" [2018/02/02 08:20:48.760342, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:644(unix_convert) unix_convert begin: name = aaa, dirpath = , start = aaa [2018/02/02 08:20:48.760368, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:667(unix_convert) conversion of base_name finished aaa -> aaa [2018/02/02 08:20:48.760402, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/files.c:756(file_name_hash) file_name_hash: /home/jane/aaa hash 0x3bde0c6f [2018/02/02 08:20:48.760434, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5924(call_trans2qfilepathinfo) call_trans2qfilepathinfo aaa (fnum [fsp is NULL]) level=512 call=5 total_data=0 [2018/02/02 08:20:48.760459, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4827(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: aaa (fnum [fsp is NULL]) level=512 max_data=4000 [2018/02/02 08:20:48.760479, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: aaa [2018/02/02 08:20:48.760501, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:20:48.760524, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:20:48.760549, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:48.760569, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40755 [2018/02/02 08:20:48.760591, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5392(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:48.760611, 4, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] D6 16 C8 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 ...k(... ...k(... [0020] D6 16 C8 6B 28 9C D3 01 46 00 00 00 00 00 00 00 ...k(... F....... [0030] 46 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 F....... ........ [0040] 00 00 00 00 2D 00 00 00 00 00 00 00 E4 4C AB 00 ....-... .....L.. [0050] 00 00 00 00 ED 01 00 00 00 00 00 00 01 00 00 00 ........ ........ [0060] 00 00 00 00 .... [2018/02/02 08:20:48.760782, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1111(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 100, useable_space = 16406 [2018/02/02 08:20:48.760804, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1113(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 100, paramsize = 2, datasize = 100 [2018/02/02 08:20:48.760825, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:48.760838, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=160 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5240 smb_uid=19713 smb_mid=8589 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=105 [2018/02/02 08:20:48.760998, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 D6 16 C8 6B 28 9C D3 01 D6 16 C8 ........ k(...... [0020] 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 46 00 00 k(...... k(...F.. [0030] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [0040] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [0050] 00 E4 4C AB 00 00 00 00 00 ED 01 00 00 00 00 00 ..L..... ........ [0060] 00 01 00 00 00 00 00 00 00 ........ . [2018/02/02 08:20:49.967677, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 82 [2018/02/02 08:20:49.967792, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x52 [2018/02/02 08:20:49.967840, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 20 of length 86 (0 toread) [2018/02/02 08:20:49.967865, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:49.967879, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=82 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=49153 smb_tid=11961 smb_pid=5252 smb_uid=19713 smb_mid=8590 smt_wct=15 smb_vwv[ 0]= 16 (0x10) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 4000 (0xFA0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 16 (0x10) smb_vwv[10]= 66 (0x42) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=17 [2018/02/02 08:20:49.968131, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 02 00 00 00 00 2F 00 61 00 61 00 61 00 00 ......./ .a.a.a.. [0010] 00 . [2018/02/02 08:20:49.968194, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtrans2 (pid 22725) conn 0x5578978d13a0 [2018/02/02 08:20:49.968321, 0, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtrans2.31.req len 86 [2018/02/02 08:20:49.968412, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2018/02/02 08:20:49.968442, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5761(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 512 [2018/02/02 08:20:49.968471, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:443(unix_convert) unix_convert called on file "aaa" [2018/02/02 08:20:49.968494, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:644(unix_convert) unix_convert begin: name = aaa, dirpath = , start = aaa [2018/02/02 08:20:49.968520, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:667(unix_convert) conversion of base_name finished aaa -> aaa [2018/02/02 08:20:49.968563, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/files.c:756(file_name_hash) file_name_hash: /home/jane/aaa hash 0x3bde0c6f [2018/02/02 08:20:49.968600, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5924(call_trans2qfilepathinfo) call_trans2qfilepathinfo aaa (fnum [fsp is NULL]) level=512 call=5 total_data=0 [2018/02/02 08:20:49.968625, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4827(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: aaa (fnum [fsp is NULL]) level=512 max_data=4000 [2018/02/02 08:20:49.968647, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: aaa [2018/02/02 08:20:49.968670, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:20:49.968694, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:20:49.968721, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:49.968742, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40755 [2018/02/02 08:20:49.968764, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5392(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:49.968785, 4, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] D6 16 C8 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 ...k(... ...k(... [0020] D6 16 C8 6B 28 9C D3 01 46 00 00 00 00 00 00 00 ...k(... F....... [0030] 46 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 F....... ........ [0040] 00 00 00 00 2D 00 00 00 00 00 00 00 E4 4C AB 00 ....-... .....L.. [0050] 00 00 00 00 ED 01 00 00 00 00 00 00 01 00 00 00 ........ ........ [0060] 00 00 00 00 .... [2018/02/02 08:20:49.968938, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1111(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 100, useable_space = 16406 [2018/02/02 08:20:49.968959, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1113(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 100, paramsize = 2, datasize = 100 [2018/02/02 08:20:49.968991, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:49.969005, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=160 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5252 smb_uid=19713 smb_mid=8590 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=105 [2018/02/02 08:20:49.969167, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 D6 16 C8 6B 28 9C D3 01 D6 16 C8 ........ k(...... [0020] 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 46 00 00 k(...... k(...F.. [0030] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [0040] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [0050] 00 E4 4C AB 00 00 00 00 00 ED 01 00 00 00 00 00 ..L..... ........ [0060] 00 01 00 00 00 00 00 00 00 ........ . [2018/02/02 08:20:51.223594, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 82 [2018/02/02 08:20:51.223680, 6, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x52 [2018/02/02 08:20:51.223724, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 21 of length 86 (0 toread) [2018/02/02 08:20:51.223756, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:51.223775, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=82 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=49153 smb_tid=11961 smb_pid=5264 smb_uid=19713 smb_mid=8591 smt_wct=15 smb_vwv[ 0]= 16 (0x10) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 4000 (0xFA0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 16 (0x10) smb_vwv[10]= 66 (0x42) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=17 [2018/02/02 08:20:51.224082, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 02 00 00 00 00 2F 00 61 00 61 00 61 00 00 ......./ .a.a.a.. [0010] 00 . [2018/02/02 08:20:51.224147, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBtrans2 (pid 22725) conn 0x5578978d13a0 [2018/02/02 08:20:51.224270, 0, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBtrans2.32.req len 86 [2018/02/02 08:20:51.224334, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2018/02/02 08:20:51.224363, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5761(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 512 [2018/02/02 08:20:51.224392, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:443(unix_convert) unix_convert called on file "aaa" [2018/02/02 08:20:51.224413, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:644(unix_convert) unix_convert begin: name = aaa, dirpath = , start = aaa [2018/02/02 08:20:51.224440, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/filename.c:667(unix_convert) conversion of base_name finished aaa -> aaa [2018/02/02 08:20:51.224475, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/files.c:756(file_name_hash) file_name_hash: /home/jane/aaa hash 0x3bde0c6f [2018/02/02 08:20:51.224510, 3, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5924(call_trans2qfilepathinfo) call_trans2qfilepathinfo aaa (fnum [fsp is NULL]) level=512 call=5 total_data=0 [2018/02/02 08:20:51.224534, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4827(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: aaa (fnum [fsp is NULL]) level=512 max_data=4000 [2018/02/02 08:20:51.224580, 8, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:611(dos_mode) dos_mode: aaa [2018/02/02 08:20:51.224603, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" [2018/02/02 08:20:51.224626, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/02 08:20:51.224653, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4467(store_file_unix_basic) store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:51.224673, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:4468(store_file_unix_basic) store_file_unix_basic: st_mode=40755 [2018/02/02 08:20:51.224696, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:5392(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_QUERY_FILE_UNIX_BASIC [2018/02/02 08:20:51.224715, 4, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] D6 16 C8 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 ...k(... ...k(... [0020] D6 16 C8 6B 28 9C D3 01 46 00 00 00 00 00 00 00 ...k(... F....... [0030] 46 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 F....... ........ [0040] 00 00 00 00 2D 00 00 00 00 00 00 00 E4 4C AB 00 ....-... .....L.. [0050] 00 00 00 00 ED 01 00 00 00 00 00 00 01 00 00 00 ........ ........ [0060] 00 00 00 00 .... [2018/02/02 08:20:51.224866, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1111(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 100, useable_space = 16406 [2018/02/02 08:20:51.224887, 9, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/trans2.c:1113(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 100, paramsize = 2, datasize = 100 [2018/02/02 08:20:51.224907, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:20:51.224919, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util.c:181(show_msg) size=160 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=51203 smb_tid=11961 smb_pid=5264 smb_uid=19713 smb_mid=8591 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=105 [2018/02/02 08:20:51.225108, 10, pid=22725, effective(70, 70), real(70, 0)] ../lib/util/util.c:555(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 D6 16 C8 6B 28 9C D3 01 D6 16 C8 ........ k(...... [0020] 6B 28 9C D3 01 D6 16 C8 6B 28 9C D3 01 46 00 00 k(...... k(...F.. [0030] 00 00 00 00 00 46 00 00 00 00 00 00 00 01 00 00 .....F.. ........ [0040] 00 00 00 00 00 00 00 00 00 2D 00 00 00 00 00 00 ........ .-...... [0050] 00 E4 4C AB 00 00 00 00 00 ED 01 00 00 00 00 00 ..L..... ........ [0060] 00 01 00 00 00 00 00 00 00 ........ . [2018/02/02 08:21:09.712882, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_event.c:42(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) called [2018/02/02 08:21:09.712955, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_event.c:53(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) rescheduled [2018/02/02 08:21:09.713021, 10, pid=22725, effective(70, 70), real(70, 0)] ../source3/lib/util_event.c:42(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) called [2018/02/02 08:21:09.713078, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/process.c:2895(housekeeping_fn) housekeeping [2018/02/02 08:21:09.713106, 4, pid=22725, effective(70, 70), real(70, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:21:09.713128, 5, pid=22725, effective(70, 70), real(70, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:21:09.713148, 5, pid=22725, effective(70, 70), real(70, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:21:09.713192, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:21:09.713219, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:53(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled [2018/02/02 08:21:09.720716, 10, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:42(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) called [2018/02/02 08:21:09.720768, 2, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:2876(deadtime_fn) Closing idle connection [2018/02/02 08:21:09.720808, 4, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:21:09.720836, 4, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:21:09.720862, 4, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:21:09.720888, 5, pid=22740, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:21:09.720918, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:21:09.720965, 10, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 22740 [2018/02/02 08:21:09.721048, 4, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:21:09.721073, 10, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:46(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) stopped [2018/02/02 08:21:09.721102, 10, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:42(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) called [2018/02/02 08:21:09.721123, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:2895(housekeeping_fn) housekeeping [2018/02/02 08:21:09.721142, 4, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:21:09.721161, 5, pid=22740, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:21:09.721179, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:21:09.721207, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:21:09.721235, 10, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:53(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled [2018/02/02 08:21:09.721278, 10, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0xd len 0 (num_fds:0) from 22740 [2018/02/02 08:21:09.721328, 3, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:156(msg_exit_server) got a SHUTDOWN message [2018/02/02 08:21:09.721356, 4, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:21:09.721377, 5, pid=22740, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:21:09.721396, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:21:09.721425, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:21:09.721446, 4, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:21:09.721465, 5, pid=22740, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:21:09.721484, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:21:09.721512, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:21:09.721532, 4, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:21:09.721552, 5, pid=22740, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:21:09.721570, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:21:09.721598, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:21:09.721619, 10, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1755(smbXsrv_session_logoff_all) smbXsrv_session_logoff_all: empty session_table, nothing to do. [2018/02/02 08:21:09.721638, 4, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:21:09.721657, 5, pid=22740, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:21:09.721675, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:21:09.721703, 5, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:21:09.721758, 10, pid=22740, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:21:09.722036, 3, pid=22740, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:246(exit_server_common) Server exit (normal exit) [2018/02/02 08:21:09.725391, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:21:09.725460, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:21:09.725486, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:21:09.725532, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:21:09.725553, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:21:09.725592, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 22722 [2018/02/02 08:21:09.725636, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:21:09.725682, 10, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0x314 len 0 (num_fds:0) from 22720 [2018/02/02 08:21:09.725820, 3, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/util_procid.c:54(pid_to_procid) pid_to_procid: messaging_dgm_get_unique failed: No such file or directory [2018/02/02 08:21:09.725903, 5, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:21:09.725928, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/lib/samba/lock/serverid.tdb 3: [2018/02/02 08:21:09.725955, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key D458000000000000FFFFFFFF [2018/02/02 08:21:09.726027, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978b8850 [2018/02/02 08:21:09.726101, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key D458000000000000FFFFFFFF [2018/02/02 08:21:09.726130, 5, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:21:09.726151, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:21:09.726172, 10, pid=22722, effective(0, 0), real(0, 0)] ../source3/smbd/smbd_cleanupd.c:210(smbd_cleanupd_process_exited) smbd_cleanupd_process_exited: cleaned up pid 22740 [2018/02/02 08:21:09.726920, 10, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:21:09.727260, 10, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2018/02/02 08:21:09.727312, 10, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 15663818202224614972 [2018/02/02 08:21:09.727448, 10, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:533(smbXsrv_client_create) [2018/02/02 08:21:09.727470, 10, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:541(smbXsrv_client_create) smbXsrv_client_create: client_guid[00000000-0000-0000-0000-000000000000] stored [2018/02/02 08:21:09.727505, 1, pid=22764, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &client_blob: struct smbXsrv_clientB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_clientU(case 0) info0 : * info0: struct smbXsrv_client table : * ev_ctx : * msg_ctx : * global : * global: struct smbXsrv_client_global0 db_rec : NULL server_id: struct server_id pid : 0x00000000000058ec (22764) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xd9610faa19e55e3c (-2782925871484936644) local_address : NULL remote_address : NULL remote_name : NULL initial_connect_time : Fri Feb 2 08:21:10 AM 2018 EST client_guid : 00000000-0000-0000-0000-000000000000 stored : 0x00 (0) sconn : NULL session_table : NULL last_session_id : 0x0000000000000000 (0) tcon_table : NULL open_table : NULL connections : NULL server_multi_channel_enabled: 0x00 (0) [2018/02/02 08:21:09.727875, 5, pid=22764, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:21:09.727906, 10, pid=22764, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/lib/samba/lock/serverid.tdb 3: [2018/02/02 08:21:09.727933, 10, pid=22764, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key EC58000000000000FFFFFFFF [2018/02/02 08:21:09.727960, 10, pid=22764, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978b41a0 [2018/02/02 08:21:09.728019, 10, pid=22764, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key EC58000000000000FFFFFFFF [2018/02/02 08:21:09.728044, 5, pid=22764, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:21:09.728065, 10, pid=22764, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:21:09.728104, 5, pid=22764, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 87040 SO_RCVBUF = 374400 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:21:09.728257, 5, pid=22764, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 87040 SO_RCVBUF = 374400 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:21:09.728458, 3, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 192.168.122.213 (192.168.122.213) [2018/02/02 08:21:09.728486, 10, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:3837(smbd_add_connection) Connection allowed from ipv4:192.168.122.213:50352 to ipv4:10.167.133.33:445 [2018/02/02 08:21:09.728561, 6, pid=22764, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Feb 2 08:16:14 2018 [2018/02/02 08:21:09.728644, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 774 - private_data=0x5578978ac6c0 [2018/02/02 08:21:09.728668, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 778 - private_data=0x5578978ac6c0 [2018/02/02 08:21:09.728688, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 770 - private_data=0x5578978ac6c0 [2018/02/02 08:21:09.728707, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 787 - private_data=0x5578978ac6c0 [2018/02/02 08:21:09.728727, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 779 - private_data=0x5578978ac6c0 [2018/02/02 08:21:09.728746, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2018/02/02 08:21:09.728766, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:371(messaging_register) Overriding messaging pointer for type 15 - private_data=(nil) [2018/02/02 08:21:09.728785, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 16 - private_data=(nil) [2018/02/02 08:21:09.728811, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 16 - private_data=0x5578978ac6c0 [2018/02/02 08:21:09.728832, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 33 - private_data=0x5578978aba20 [2018/02/02 08:21:09.728851, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 33 - private_data=0x5578978ac6c0 [2018/02/02 08:21:09.728871, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 790 - private_data=(nil) [2018/02/02 08:21:09.728890, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 790 - private_data=0x5578978ac6c0 [2018/02/02 08:21:09.728910, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 791 - private_data=(nil) [2018/02/02 08:21:09.728930, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2018/02/02 08:21:09.728950, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2018/02/02 08:21:09.728996, 10, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(keepalive) 0x5578978c5380 [2018/02/02 08:21:09.729022, 10, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(deadtime) 0x5578978c55d0 [2018/02/02 08:21:09.729048, 10, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x5578978c5820 [2018/02/02 08:21:09.813488, 10, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:42(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) called [2018/02/02 08:21:09.813548, 2, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:2876(deadtime_fn) Closing idle connection [2018/02/02 08:21:09.813587, 4, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:21:09.813640, 4, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:21:09.813667, 4, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:21:09.813693, 5, pid=22741, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:21:09.813722, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:21:09.813766, 10, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 22741 [2018/02/02 08:21:09.813813, 4, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:21:09.813837, 10, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:46(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) stopped [2018/02/02 08:21:09.813865, 10, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:42(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) called [2018/02/02 08:21:09.813886, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:2895(housekeeping_fn) housekeeping [2018/02/02 08:21:09.813906, 4, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:21:09.813925, 5, pid=22741, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:21:09.813944, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:21:09.813999, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:21:09.814032, 10, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:53(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled [2018/02/02 08:21:09.814076, 10, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0xd len 0 (num_fds:0) from 22741 [2018/02/02 08:21:09.814105, 3, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:156(msg_exit_server) got a SHUTDOWN message [2018/02/02 08:21:09.814132, 4, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:21:09.814153, 5, pid=22741, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:21:09.814172, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:21:09.814201, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:21:09.814221, 4, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:21:09.814240, 5, pid=22741, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:21:09.814258, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:21:09.814300, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:21:09.814322, 4, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:21:09.814342, 5, pid=22741, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:21:09.814360, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:21:09.814388, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:21:09.814408, 10, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1755(smbXsrv_session_logoff_all) smbXsrv_session_logoff_all: empty session_table, nothing to do. [2018/02/02 08:21:09.814427, 4, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:21:09.814447, 5, pid=22741, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:21:09.814465, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:21:09.814493, 5, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:21:09.814545, 10, pid=22741, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:21:09.814760, 3, pid=22741, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:246(exit_server_common) Server exit (normal exit) [2018/02/02 08:21:09.817744, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:21:09.817830, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:21:09.817873, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:21:09.817908, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:21:09.817929, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:21:09.817968, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 22722 [2018/02/02 08:21:09.818040, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:21:09.818081, 10, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0x314 len 0 (num_fds:0) from 22720 [2018/02/02 08:21:09.818191, 3, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/util_procid.c:54(pid_to_procid) pid_to_procid: messaging_dgm_get_unique failed: No such file or directory [2018/02/02 08:21:09.818243, 5, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:21:09.818267, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/lib/samba/lock/serverid.tdb 3: [2018/02/02 08:21:09.818315, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key D558000000000000FFFFFFFF [2018/02/02 08:21:09.818341, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978b8850 [2018/02/02 08:21:09.818371, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key D558000000000000FFFFFFFF [2018/02/02 08:21:09.818393, 5, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:21:09.818413, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:21:09.818434, 10, pid=22722, effective(0, 0), real(0, 0)] ../source3/smbd/smbd_cleanupd.c:210(smbd_cleanupd_process_exited) smbd_cleanupd_process_exited: cleaned up pid 22741 [2018/02/02 08:21:09.819181, 10, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:21:09.819515, 10, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2018/02/02 08:21:09.819567, 10, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 471018857432303630 [2018/02/02 08:21:09.819693, 10, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:533(smbXsrv_client_create) [2018/02/02 08:21:09.819713, 10, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:541(smbXsrv_client_create) smbXsrv_client_create: client_guid[00000000-0000-0000-0000-000000000000] stored [2018/02/02 08:21:09.819747, 1, pid=22765, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &client_blob: struct smbXsrv_clientB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_clientU(case 0) info0 : * info0: struct smbXsrv_client table : * ev_ctx : * msg_ctx : * global : * global: struct smbXsrv_client_global0 db_rec : NULL server_id: struct server_id pid : 0x00000000000058ed (22765) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x06896527bfc3480e (471018857432303630) local_address : NULL remote_address : NULL remote_name : NULL initial_connect_time : Fri Feb 2 08:21:10 AM 2018 EST client_guid : 00000000-0000-0000-0000-000000000000 stored : 0x00 (0) sconn : NULL session_table : NULL last_session_id : 0x0000000000000000 (0) tcon_table : NULL open_table : NULL connections : NULL server_multi_channel_enabled: 0x00 (0) [2018/02/02 08:21:09.820107, 5, pid=22765, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:21:09.820137, 10, pid=22765, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/lib/samba/lock/serverid.tdb 3: [2018/02/02 08:21:09.820181, 10, pid=22765, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key ED58000000000000FFFFFFFF [2018/02/02 08:21:09.820210, 10, pid=22765, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978b41a0 [2018/02/02 08:21:09.820256, 10, pid=22765, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key ED58000000000000FFFFFFFF [2018/02/02 08:21:09.820280, 5, pid=22765, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:21:09.820300, 10, pid=22765, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:21:09.820337, 5, pid=22765, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1062000 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:21:09.820479, 5, pid=22765, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1062000 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:21:09.820670, 3, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.167.133.33 (10.167.133.33) [2018/02/02 08:21:09.820696, 10, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:3837(smbd_add_connection) Connection allowed from ipv4:10.167.133.33:44332 to ipv4:10.167.133.33:445 [2018/02/02 08:21:09.820766, 6, pid=22765, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Feb 2 08:16:14 2018 [2018/02/02 08:21:09.820828, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 774 - private_data=0x5578978ac6c0 [2018/02/02 08:21:09.820851, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 778 - private_data=0x5578978ac6c0 [2018/02/02 08:21:09.820871, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 770 - private_data=0x5578978ac6c0 [2018/02/02 08:21:09.820891, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 787 - private_data=0x5578978ac6c0 [2018/02/02 08:21:09.820910, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 779 - private_data=0x5578978ac6c0 [2018/02/02 08:21:09.820929, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2018/02/02 08:21:09.820948, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:371(messaging_register) Overriding messaging pointer for type 15 - private_data=(nil) [2018/02/02 08:21:09.820968, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 16 - private_data=(nil) [2018/02/02 08:21:09.821020, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 16 - private_data=0x5578978ac6c0 [2018/02/02 08:21:09.821042, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 33 - private_data=0x5578978aba20 [2018/02/02 08:21:09.821061, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 33 - private_data=0x5578978ac6c0 [2018/02/02 08:21:09.821081, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 790 - private_data=(nil) [2018/02/02 08:21:09.821100, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 790 - private_data=0x5578978ac6c0 [2018/02/02 08:21:09.821120, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 791 - private_data=(nil) [2018/02/02 08:21:09.821140, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2018/02/02 08:21:09.821159, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2018/02/02 08:21:09.821182, 10, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(keepalive) 0x5578978c5380 [2018/02/02 08:21:09.821204, 10, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(deadtime) 0x5578978c55d0 [2018/02/02 08:21:09.821229, 10, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x5578978c5820 [2018/02/02 08:22:09.773342, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:42(smbd_idle_event_handler) [2018/02/02 08:22:09.789221, 10, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:42(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) called smbd_idle_event_handler: idle_evt(deadtime) (nil) called [2018/02/02 08:22:09.793160, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:53(smbd_idle_event_handler) [2018/02/02 08:22:09.793169, 2, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:2876(deadtime_fn) smbd_idle_event_handler: idle_evt(deadtime) (nil) rescheduled Closing idle connection [2018/02/02 08:22:09.793214, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:42(smbd_idle_event_handler) [2018/02/02 08:22:09.793223, 4, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) smbd_idle_event_handler: idle_evt(housekeeping) (nil) called push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:22:09.793253, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:2895(housekeeping_fn) [2018/02/02 08:22:09.793264, 4, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) housekeeping push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:22:09.793294, 4, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) [2018/02/02 08:22:09.793292, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:22:09.793327, 5, pid=22764, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) [2018/02/02 08:22:09.793329, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) Security token: (NULL) [2018/02/02 08:22:09.793395, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) [2018/02/02 08:22:09.793398, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:22:09.793460, 10, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) [2018/02/02 08:22:09.793460, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) messaging_dgm_send: Sending message to 22764 change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:22:09.793494, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:53(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled [2018/02/02 08:22:09.793516, 4, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:22:09.793540, 10, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:46(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) stopped [2018/02/02 08:22:09.793570, 10, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:42(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) called [2018/02/02 08:22:09.793591, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:2895(housekeeping_fn) housekeeping [2018/02/02 08:22:09.793610, 4, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:22:09.793629, 5, pid=22764, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:22:09.793648, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:22:09.793676, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:22:09.793704, 10, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:53(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled [2018/02/02 08:22:09.793749, 10, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0xd len 0 (num_fds:0) from 22764 [2018/02/02 08:22:09.793779, 3, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:156(msg_exit_server) got a SHUTDOWN message [2018/02/02 08:22:09.793807, 4, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:22:09.793827, 5, pid=22764, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:22:09.793846, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:22:09.793875, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:22:09.793895, 4, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:22:09.793914, 5, pid=22764, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:22:09.793932, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:22:09.794011, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:22:09.794035, 4, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:22:09.794055, 5, pid=22764, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:22:09.794073, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:22:09.794101, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:22:09.794122, 10, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1755(smbXsrv_session_logoff_all) smbXsrv_session_logoff_all: empty session_table, nothing to do. [2018/02/02 08:22:09.794142, 4, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:22:09.794161, 5, pid=22764, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:22:09.794179, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:22:09.794207, 5, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:22:09.794264, 10, pid=22764, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:22:09.794563, 3, pid=22764, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:246(exit_server_common) Server exit (normal exit) [2018/02/02 08:22:09.797949, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:22:09.798073, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:22:09.798096, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:22:09.798117, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:22:09.798137, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:22:09.798177, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 22722 [2018/02/02 08:22:09.798221, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:22:09.798266, 10, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0x314 len 0 (num_fds:0) from 22720 [2018/02/02 08:22:09.798410, 3, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/util_procid.c:54(pid_to_procid) pid_to_procid: messaging_dgm_get_unique failed: No such file or directory [2018/02/02 08:22:09.798491, 5, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:22:09.798517, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/lib/samba/lock/serverid.tdb 3: [2018/02/02 08:22:09.798566, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key EC58000000000000FFFFFFFF [2018/02/02 08:22:09.798593, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978b8850 [2018/02/02 08:22:09.798637, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key EC58000000000000FFFFFFFF [2018/02/02 08:22:09.798660, 5, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:22:09.798681, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:22:09.798701, 10, pid=22722, effective(0, 0), real(0, 0)] ../source3/smbd/smbd_cleanupd.c:210(smbd_cleanupd_process_exited) smbd_cleanupd_process_exited: cleaned up pid 22764 [2018/02/02 08:22:09.799538, 10, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:22:09.799865, 10, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2018/02/02 08:22:09.799916, 10, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 2529070761973787574 [2018/02/02 08:22:09.800062, 10, pid=22777, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:533(smbXsrv_client_create) [2018/02/02 08:22:09.800084, 10, pid=22777, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:541(smbXsrv_client_create) smbXsrv_client_create: client_guid[00000000-0000-0000-0000-000000000000] stored [2018/02/02 08:22:09.800119, 1, pid=22777, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &client_blob: struct smbXsrv_clientB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_clientU(case 0) info0 : * info0: struct smbXsrv_client table : * ev_ctx : * msg_ctx : * global : * global: struct smbXsrv_client_global0 db_rec : NULL server_id: struct server_id pid : 0x00000000000058f9 (22777) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x231910755b462bb6 (2529070761973787574) local_address : NULL remote_address : NULL remote_name : NULL initial_connect_time : Fri Feb 2 08:22:10 AM 2018 EST client_guid : 00000000-0000-0000-0000-000000000000 stored : 0x00 (0) sconn : NULL session_table : NULL last_session_id : 0x0000000000000000 (0) tcon_table : NULL open_table : NULL connections : NULL server_multi_channel_enabled: 0x00 (0) [2018/02/02 08:22:09.800482, 5, pid=22777, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:22:09.800531, 10, pid=22777, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/lib/samba/lock/serverid.tdb 3: [2018/02/02 08:22:09.800562, 10, pid=22777, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key F958000000000000FFFFFFFF [2018/02/02 08:22:09.800590, 10, pid=22777, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978b41a0 [2018/02/02 08:22:09.800636, 10, pid=22777, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key F958000000000000FFFFFFFF [2018/02/02 08:22:09.800661, 5, pid=22777, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:22:09.800682, 10, pid=22777, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:22:09.800721, 5, pid=22777, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 87040 SO_RCVBUF = 374400 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:22:09.800874, 5, pid=22777, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 87040 SO_RCVBUF = 374400 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:22:09.801108, 3, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 192.168.122.213 (192.168.122.213) [2018/02/02 08:22:09.801137, 10, pid=22777, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:3837(smbd_add_connection) Connection allowed from ipv4:192.168.122.213:50354 to ipv4:10.167.133.33:445 [2018/02/02 08:22:09.801211, 6, pid=22777, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Feb 2 08:16:14 2018 [2018/02/02 08:22:09.801277, 5, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 774 - private_data=0x5578978ac6c0 [2018/02/02 08:22:09.801301, 5, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 778 - private_data=0x5578978ac6c0 [2018/02/02 08:22:09.801322, 5, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 770 - private_data=0x5578978ac6c0 [2018/02/02 08:22:09.801342, 5, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 787 - private_data=0x5578978ac6c0 [2018/02/02 08:22:09.801363, 5, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 779 - private_data=0x5578978ac6c0 [2018/02/02 08:22:09.801383, 5, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2018/02/02 08:22:09.801403, 5, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:371(messaging_register) Overriding messaging pointer for type 15 - private_data=(nil) [2018/02/02 08:22:09.801438, 5, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 16 - private_data=(nil) [2018/02/02 08:22:09.801466, 5, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 16 - private_data=0x5578978ac6c0 [2018/02/02 08:22:09.801487, 5, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 33 - private_data=0x5578978aba20 [2018/02/02 08:22:09.801507, 5, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 33 - private_data=0x5578978ac6c0 [2018/02/02 08:22:09.801527, 5, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 790 - private_data=(nil) [2018/02/02 08:22:09.801546, 5, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 790 - private_data=0x5578978ac6c0 [2018/02/02 08:22:09.801566, 5, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 791 - private_data=(nil) [2018/02/02 08:22:09.801586, 5, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2018/02/02 08:22:09.801606, 5, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2018/02/02 08:22:09.801629, 10, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(keepalive) 0x5578978c5380 [2018/02/02 08:22:09.801650, 10, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(deadtime) 0x5578978c55d0 [2018/02/02 08:22:09.801676, 10, pid=22777, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x5578978c5820 [2018/02/02 08:22:09.881422, 10, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:42(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) called [2018/02/02 08:22:09.881473, 2, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:2876(deadtime_fn) Closing idle connection [2018/02/02 08:22:09.881508, 4, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:22:09.881536, 4, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:22:09.881560, 4, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:22:09.881586, 5, pid=22765, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:22:09.881615, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:22:09.881660, 10, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 22765 [2018/02/02 08:22:09.881707, 4, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:22:09.881731, 10, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:46(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) stopped [2018/02/02 08:22:09.881759, 10, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:42(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) called [2018/02/02 08:22:09.881800, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:2895(housekeeping_fn) housekeeping [2018/02/02 08:22:09.881821, 4, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:22:09.881840, 5, pid=22765, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:22:09.881859, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:22:09.881888, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:22:09.881916, 10, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:53(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled [2018/02/02 08:22:09.881960, 10, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0xd len 0 (num_fds:0) from 22765 [2018/02/02 08:22:09.882018, 3, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:156(msg_exit_server) got a SHUTDOWN message [2018/02/02 08:22:09.882046, 4, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:22:09.882068, 5, pid=22765, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:22:09.882086, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:22:09.882116, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:22:09.882136, 4, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:22:09.882156, 5, pid=22765, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:22:09.882174, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:22:09.882202, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:22:09.882222, 4, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:22:09.882241, 5, pid=22765, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:22:09.882259, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:22:09.882287, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:22:09.882308, 10, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1755(smbXsrv_session_logoff_all) smbXsrv_session_logoff_all: empty session_table, nothing to do. [2018/02/02 08:22:09.882327, 4, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:22:09.882346, 5, pid=22765, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:22:09.882379, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:22:09.882409, 5, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:22:09.882462, 10, pid=22765, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:22:09.882673, 3, pid=22765, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:246(exit_server_common) Server exit (normal exit) [2018/02/02 08:22:09.885701, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2018/02/02 08:22:09.885758, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2018/02/02 08:22:09.885780, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2018/02/02 08:22:09.885800, 5, pid=22720, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:22:09.885820, 5, pid=22720, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:22:09.885855, 10, pid=22720, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 22722 [2018/02/02 08:22:09.885893, 4, pid=22720, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:22:09.885934, 10, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:152(messaging_recv_cb) messaging_recv_cb: Received message 0x314 len 0 (num_fds:0) from 22720 [2018/02/02 08:22:09.886079, 3, pid=22722, effective(0, 0), real(0, 0)] ../source3/lib/util_procid.c:54(pid_to_procid) pid_to_procid: messaging_dgm_get_unique failed: No such file or directory [2018/02/02 08:22:09.886133, 5, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:22:09.886157, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/lib/samba/lock/serverid.tdb 3: [2018/02/02 08:22:09.886184, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key ED58000000000000FFFFFFFF [2018/02/02 08:22:09.886208, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978b8850 [2018/02/02 08:22:09.886239, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key ED58000000000000FFFFFFFF [2018/02/02 08:22:09.886261, 5, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:22:09.886281, 10, pid=22722, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:22:09.886302, 10, pid=22722, effective(0, 0), real(0, 0)] ../source3/smbd/smbd_cleanupd.c:210(smbd_cleanupd_process_exited) smbd_cleanupd_process_exited: cleaned up pid 22765 [2018/02/02 08:22:09.887010, 10, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2018/02/02 08:22:09.887325, 10, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2018/02/02 08:22:09.887390, 10, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 8101901804308407241 [2018/02/02 08:22:09.887518, 10, pid=22778, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:533(smbXsrv_client_create) [2018/02/02 08:22:09.887539, 10, pid=22778, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:541(smbXsrv_client_create) smbXsrv_client_create: client_guid[00000000-0000-0000-0000-000000000000] stored [2018/02/02 08:22:09.887573, 1, pid=22778, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:413(ndr_print_debug) &client_blob: struct smbXsrv_clientB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_clientU(case 0) info0 : * info0: struct smbXsrv_client table : * ev_ctx : * msg_ctx : * global : * global: struct smbXsrv_client_global0 db_rec : NULL server_id: struct server_id pid : 0x00000000000058fa (22778) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x706fbcc3eae623c9 (8101901804308407241) local_address : NULL remote_address : NULL remote_name : NULL initial_connect_time : Fri Feb 2 08:22:10 AM 2018 EST client_guid : 00000000-0000-0000-0000-000000000000 stored : 0x00 (0) sconn : NULL session_table : NULL last_session_id : 0x0000000000000000 (0) tcon_table : NULL open_table : NULL connections : NULL server_multi_channel_enabled: 0x00 (0) [2018/02/02 08:22:09.887920, 5, pid=22778, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order) check lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:22:09.887950, 10, pid=22778, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2:/var/lib/samba/lock/serverid.tdb 3: [2018/02/02 08:22:09.887988, 10, pid=22778, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key FA58000000000000FFFFFFFF [2018/02/02 08:22:09.888017, 10, pid=22778, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x5578978b41a0 [2018/02/02 08:22:09.888062, 10, pid=22778, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key FA58000000000000FFFFFFFF [2018/02/02 08:22:09.888086, 5, pid=22778, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor) release lock order 2 for /var/lib/samba/lock/serverid.tdb [2018/02/02 08:22:09.888106, 10, pid=22778, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order) lock order: 1: 2: 3: [2018/02/02 08:22:09.888142, 5, pid=22778, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1062000 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:22:09.888300, 5, pid=22778, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1057(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 2626560 SO_RCVBUF = 1062000 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2018/02/02 08:22:09.888495, 3, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 10.167.133.33 (10.167.133.33) [2018/02/02 08:22:09.888522, 10, pid=22778, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:3837(smbd_add_connection) Connection allowed from ipv4:10.167.133.33:44334 to ipv4:10.167.133.33:445 [2018/02/02 08:22:09.888591, 6, pid=22778, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2223(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Feb 2 08:16:14 2018 [2018/02/02 08:22:09.888653, 5, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 774 - private_data=0x5578978ac6c0 [2018/02/02 08:22:09.888676, 5, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 778 - private_data=0x5578978ac6c0 [2018/02/02 08:22:09.888696, 5, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 770 - private_data=0x5578978ac6c0 [2018/02/02 08:22:09.888715, 5, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 787 - private_data=0x5578978ac6c0 [2018/02/02 08:22:09.888734, 5, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 779 - private_data=0x5578978ac6c0 [2018/02/02 08:22:09.888754, 5, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2018/02/02 08:22:09.888773, 5, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:371(messaging_register) Overriding messaging pointer for type 15 - private_data=(nil) [2018/02/02 08:22:09.888792, 5, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 16 - private_data=(nil) [2018/02/02 08:22:09.888818, 5, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 16 - private_data=0x5578978ac6c0 [2018/02/02 08:22:09.888839, 5, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 33 - private_data=0x5578978aba20 [2018/02/02 08:22:09.888858, 5, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 33 - private_data=0x5578978ac6c0 [2018/02/02 08:22:09.888877, 5, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 790 - private_data=(nil) [2018/02/02 08:22:09.888897, 5, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 790 - private_data=0x5578978ac6c0 [2018/02/02 08:22:09.888917, 5, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 791 - private_data=(nil) [2018/02/02 08:22:09.888937, 5, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:403(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2018/02/02 08:22:09.888980, 5, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:356(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2018/02/02 08:22:09.889027, 10, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(keepalive) 0x5578978c5380 [2018/02/02 08:22:09.889054, 10, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(deadtime) 0x5578978c55d0 [2018/02/02 08:22:09.889080, 10, pid=22778, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x5578978c5820 [2018/02/02 08:22:10.282395, 10, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 38 [2018/02/02 08:22:10.282464, 6, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x26 [2018/02/02 08:22:10.282480, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 22 of length 42 (0 toread) [2018/02/02 08:22:10.282493, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:22:10.282501, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:181(show_msg) size=38 smb_com=0x2b smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=1 smb_tid=65535 smb_pid=3020 smb_uid=0 smb_mid=0 smt_wct=1 smb_vwv[ 0]= 1 (0x1) smb_bcc=1 [2018/02/02 08:22:10.282575, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 61 a [2018/02/02 08:22:10.282602, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBecho (pid 22725) conn 0x0 [2018/02/02 08:22:10.282646, 0, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1428(smb_dump) created /tmp/SMBecho.1.req len 42 [2018/02/02 08:22:10.282687, 4, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2018/02/02 08:22:10.282702, 5, pid=22725, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2018/02/02 08:22:10.282714, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2018/02/02 08:22:10.282738, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2018/02/02 08:22:10.282754, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:171(show_msg) [2018/02/02 08:22:10.282762, 5, pid=22725, effective(0, 0), real(0, 0)] ../source3/lib/util.c:181(show_msg) size=38 smb_com=0x2b smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=128 smb_flg2=18435 smb_tid=65535 smb_pid=3020 smb_uid=0 smb_mid=0 smt_wct=1 smb_vwv[ 0]= 1 (0x1) smb_bcc=1 [2018/02/02 08:22:10.282814, 10, pid=22725, effective(0, 0), real(0, 0)] ../lib/util/util.c:555(dump_data) [0000] 61 a [2018/02/02 08:22:10.282859, 3, pid=22725, effective(0, 0), real(0, 0)] ../source3/smbd/reply.c:5789(reply_echo) echo 1 times