lp_load: refreshing parameters from /usr/local/samba/etc/samba/smb.conf params.c:pm_process() - Processing configuration file "/usr/local/samba/etc/samba/smb.conf" Processing section "[globals]" Processing section "[netlogon]" Processing section "[sysvol]" pm_process() returned Yes adding hidden service IPC$ adding hidden service ADMIN$ smbd version 4.0.0alpha2-SVN-build-UNKNOWN started. Copyright Andrew Tridgell and the Samba Team 1992-2007 SHARE backend [ldb] registered. SHARE backend [classic] registered. AUTH backend 'winbind_samba3' registered AUTH backend 'winbind' registered AUTH backend 'name_to_ntstatus' registered AUTH backend 'fixed_challenge' registered AUTH backend 'unix' registered AUTH backend 'anonymous' registered AUTH backend 'sam' registered AUTH backend 'sam_ignoredomain' registered GENSEC backend 'krb5' registered gensec subsystem fake_gssapi_krb5 is disabled GENSEC backend 'schannel' registered GENSEC backend 'spnego' registered gensec subsystem gssapi_spnego is disabled GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'ntlmssp' registered NTPTR backend 'simple_ldb' NTVFS backend 'simple' for type 0 failed version check Failed to register simple backend with name: simple! NTVFS backend 'cifs' for type 0 registered NTVFS backend 'nbench' for type 0 failed version check Failed to register nbench backend! NTVFS backend 'unixuid' for type 0 registered NTVFS backend 'unixuid' for type 1 registered NTVFS backend 'unixuid' for type 2 registered NTVFS backend 'cifsposix' for type 0 failed version check Failed to register cifs posix backend with name: cifsposix! NTVFS backend 'default' for type 2 registered NTVFS backend 'xattr' registered NTVFS backend 'nfs4acl' registered NTVFS backend 'default' for type 1 registered NTVFS backend 'default' for type 0 registered NTVFS backend 'posix' for type 0 registered PROCESS_MODEL 'standard' registered PROCESS_MODEL 'single' registered DCERPC endpoint server 'wkssvc' registered DCERPC endpoint server 'drsuapi' registered DCERPC endpoint server 'spoolss' registered DCERPC endpoint server 'winreg' registered DCERPC endpoint server 'epmapper' registered DCERPC endpoint server 'srvsvc' registered DCERPC endpoint server 'netlogon' registered DCERPC endpoint server 'rpcecho' registered DCERPC endpoint server 'unixinfo' registered DCERPC endpoint server 'samr' registered DCERPC endpoint server 'remote' registered DCERPC endpoint server 'dssetup' registered DCERPC endpoint server 'lsarpc' registered smbd: using 'standard' process model ldb: trying to load partition from /usr/local/samba/lib/samba/ldb/partition.so ldb: trying to load show_deleted from /usr/local/samba/lib/samba/ldb/show_deleted.so ldb: trying to load linked_attributes from /usr/local/samba/lib/samba/ldb/linked_attributes.so ldb: trying to load subtree_delete from /usr/local/samba/lib/samba/ldb/subtree_delete.so ldb: trying to load subtree_rename from /usr/local/samba/lib/samba/ldb/subtree_rename.so ldb: trying to load kludge_acl from /usr/local/samba/lib/samba/ldb/kludge_acl.so ldb: trying to load objectclass from /usr/local/samba/lib/samba/ldb/objectclass.so ldb: trying to load samldb from /usr/local/samba/lib/samba/ldb/samldb.so ldb: trying to load extended_dn from /usr/local/samba/lib/samba/ldb/extended_dn.so ldb: trying to load ranged_results from /usr/local/samba/lib/samba/ldb/ranged_results.so ldb: trying to load rootdse from /usr/local/samba/lib/samba/ldb/rootdse.so ldb: trying to load objectguid from /usr/local/samba/lib/samba/ldb/objectguid.so ldb: trying to load schema_fsmo from /usr/local/samba/lib/samba/ldb/schema_fsmo.so dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]' dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]' dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:' added interface ip=172.16.11.151 nmask=255.255.255.0 ldb: trying to load partition from /usr/local/samba/lib/samba/ldb/partition.so ldb: trying to load show_deleted from /usr/local/samba/lib/samba/ldb/show_deleted.so ldb: trying to load linked_attributes from /usr/local/samba/lib/samba/ldb/linked_attributes.so ldb: trying to load subtree_delete from /usr/local/samba/lib/samba/ldb/subtree_delete.so ldb: trying to load subtree_rename from /usr/local/samba/lib/samba/ldb/subtree_rename.so ldb: trying to load kludge_acl from /usr/local/samba/lib/samba/ldb/kludge_acl.so ldb: trying to load objectclass from /usr/local/samba/lib/samba/ldb/objectclass.so ldb: trying to load samldb from /usr/local/samba/lib/samba/ldb/samldb.so ldb: trying to load extended_dn from /usr/local/samba/lib/samba/ldb/extended_dn.so ldb: trying to load ranged_results from /usr/local/samba/lib/samba/ldb/ranged_results.so ldb: trying to load rootdse from /usr/local/samba/lib/samba/ldb/rootdse.so ldb: trying to load objectguid from /usr/local/samba/lib/samba/ldb/objectguid.so ldb: trying to load schema_fsmo from /usr/local/samba/lib/samba/ldb/schema_fsmo.so Attempting to autogenerate TLS self-signed keys for https Generating private key ldb: schema_fsmo_init: we are master: yes ldb: trying to load naming_fsmo from /usr/local/samba/lib/samba/ldb/naming_fsmo.so ldb: naming_fsmo_init: we are master: yes ldb: trying to load password_hash from /usr/local/samba/lib/samba/ldb/password_hash.so ldb: trying to load pdc_fsmo from /usr/local/samba/lib/samba/ldb/pdc_fsmo.so ldb: pdc_fsmo_init: we are master: yes Attempting to autogenerate TLS self-signed keys for https Generating private key added interface ip=172.16.11.151 nmask=255.255.255.0 ldb: trying to load partition from /usr/local/samba/lib/samba/ldb/partition.so ldb: trying to load show_deleted from /usr/local/samba/lib/samba/ldb/show_deleted.so ldb: trying to load linked_attributes from /usr/local/samba/lib/samba/ldb/linked_attributes.so ldb: trying to load subtree_delete from /usr/local/samba/lib/samba/ldb/subtree_delete.so ldb: trying to load subtree_rename from /usr/local/samba/lib/samba/ldb/subtree_rename.so ldb: trying to load kludge_acl from /usr/local/samba/lib/samba/ldb/kludge_acl.so ldb: trying to load objectclass from /usr/local/samba/lib/samba/ldb/objectclass.so ldb: trying to load samldb from /usr/local/samba/lib/samba/ldb/samldb.so ldb: trying to load extended_dn from /usr/local/samba/lib/samba/ldb/extended_dn.so ldb: trying to load ranged_results from /usr/local/samba/lib/samba/ldb/ranged_results.so ldb: trying to load rootdse from /usr/local/samba/lib/samba/ldb/rootdse.so ldb: trying to load objectguid from /usr/local/samba/lib/samba/ldb/objectguid.so ldb: trying to load schema_fsmo from /usr/local/samba/lib/samba/ldb/schema_fsmo.so ldb: trying to load partition from /usr/local/samba/lib/samba/ldb/partition.so ldb: trying to load show_deleted from /usr/local/samba/lib/samba/ldb/show_deleted.so ldb: trying to load linked_attributes from /usr/local/samba/lib/samba/ldb/linked_attributes.so ldb: trying to load subtree_delete from /usr/local/samba/lib/samba/ldb/subtree_delete.so ldb: trying to load subtree_rename from /usr/local/samba/lib/samba/ldb/subtree_rename.so ldb: trying to load kludge_acl from /usr/local/samba/lib/samba/ldb/kludge_acl.so ldb: trying to load objectclass from /usr/local/samba/lib/samba/ldb/objectclass.so ldb: trying to load samldb from /usr/local/samba/lib/samba/ldb/samldb.so ldb: trying to load extended_dn from /usr/local/samba/lib/samba/ldb/extended_dn.so ldb: trying to load ranged_results from /usr/local/samba/lib/samba/ldb/ranged_results.so ldb: trying to load rootdse from /usr/local/samba/lib/samba/ldb/rootdse.so ldb: trying to load objectguid from /usr/local/samba/lib/samba/ldb/objectguid.so ldb: trying to load schema_fsmo from /usr/local/samba/lib/samba/ldb/schema_fsmo.so ldb: schema_fsmo_init: we are master: yes ldb: trying to load naming_fsmo from /usr/local/samba/lib/samba/ldb/naming_fsmo.so ldb: naming_fsmo_init: we are master: yes ldb: trying to load password_hash from /usr/local/samba/lib/samba/ldb/password_hash.so ldb: trying to load pdc_fsmo from /usr/local/samba/lib/samba/ldb/pdc_fsmo.so ldb: pdc_fsmo_init: we are master: yes added interface ip=172.16.11.151 nmask=255.255.255.0 ldb: trying to load partition from /usr/local/samba/lib/samba/ldb/partition.so ldb: trying to load show_deleted from /usr/local/samba/lib/samba/ldb/show_deleted.so ldb: trying to load linked_attributes from /usr/local/samba/lib/samba/ldb/linked_attributes.so ldb: trying to load subtree_delete from /usr/local/samba/lib/samba/ldb/subtree_delete.so ldb: trying to load subtree_rename from /usr/local/samba/lib/samba/ldb/subtree_rename.so ldb: trying to load kludge_acl from /usr/local/samba/lib/samba/ldb/kludge_acl.so ldb: trying to load objectclass from /usr/local/samba/lib/samba/ldb/objectclass.so ldb: trying to load samldb from /usr/local/samba/lib/samba/ldb/samldb.so ldb: trying to load extended_dn from /usr/local/samba/lib/samba/ldb/extended_dn.so ldb: trying to load ranged_results from /usr/local/samba/lib/samba/ldb/ranged_results.so ldb: trying to load rootdse from /usr/local/samba/lib/samba/ldb/rootdse.so ldb: trying to load objectguid from /usr/local/samba/lib/samba/ldb/objectguid.so ldb: trying to load schema_fsmo from /usr/local/samba/lib/samba/ldb/schema_fsmo.so ldb: schema_fsmo_init: we are master: yes ldb: trying to load naming_fsmo from /usr/local/samba/lib/samba/ldb/naming_fsmo.so ldb: naming_fsmo_init: we are master: yes ldb: trying to load password_hash from /usr/local/samba/lib/samba/ldb/password_hash.so ldb: trying to load pdc_fsmo from /usr/local/samba/lib/samba/ldb/pdc_fsmo.so ldb: pdc_fsmo_init: we are master: yes ldb: schema_fsmo_init: we are master: yes ldb: trying to load naming_fsmo from /usr/local/samba/lib/samba/ldb/naming_fsmo.so ldb: naming_fsmo_init: we are master: yes ldb: trying to load password_hash from /usr/local/samba/lib/samba/ldb/password_hash.so ldb: trying to load pdc_fsmo from /usr/local/samba/lib/samba/ldb/pdc_fsmo.so ldb: pdc_fsmo_init: we are master: yes dreplsrv_partition[CN=Schema,CN=Configuration,DC=samba4,DC=int] loaded dreplsrv_partition[CN=Configuration,DC=samba4,DC=int] loaded dreplsrv_partition[DC=samba4,DC=int] loaded dreplsrv_refresh_partition(DC=samba4,DC=int) dreplsrv_refresh_partition(CN=Configuration,DC=samba4,DC=int) ldb: schema_fsmo_init: we are master: yes ldb: trying to load naming_fsmo from /usr/local/samba/lib/samba/ldb/naming_fsmo.so ldb: naming_fsmo_init: we are master: yes ldb: trying to load password_hash from /usr/local/samba/lib/samba/ldb/password_hash.so ldb: trying to load pdc_fsmo from /usr/local/samba/lib/samba/ldb/pdc_fsmo.so ldb: pdc_fsmo_init: we are master: yes dreplsrv_refresh_partition(CN=Schema,CN=Configuration,DC=samba4,DC=int) dreplsrv_periodic_schedule(15) scheduled for: Sun Dec 9 12:56:52 2007 CET Registered SAMBA4<00> with 172.16.11.151 on interface 172.16.11.255 Registered SAMBA4<03> with 172.16.11.151 on interface 172.16.11.255 Registered SAMBA4<20> with 172.16.11.151 on interface 172.16.11.255 Registered SAMBA4<1b> with 172.16.11.151 on interface 172.16.11.255 Registered SAMBA4<1c> with 172.16.11.151 on interface 172.16.11.255 Registered SAMBA4<00> with 172.16.11.151 on interface 172.16.11.255 Received cldap packet of length 129 from 172.16.11.1:33053 cldap netlogon query domain=SAMBA4.INT host=WIN2000CLIENT user=(null) version=6 guid=(null) dreplsrv_periodic_run(): schedule pull replication dreplsrv_periodic_run(): run pending_ops dreplsrv_periodic_schedule(300) scheduled for: Sun Dec 9 13:01:52 2007 CET Received cldap packet of length 129 from 172.16.11.1:33055 cldap netlogon query domain=SAMBA4.INT host=WIN2000CLIENT user=(null) version=6 guid=(null) Received cldap packet of length 174 from 172.16.11.1:33056 cldap netlogon query domain=SAMBA4.INT host=WIN2000CLIENT user=WIN2000CLIENT$ version=6 guid=(null) Received cldap packet of length 174 from 172.16.11.1:33056 cldap netlogon query domain=SAMBA4.INT host=WIN2000CLIENT user=WIN2000CLIENT$ version=6 guid=(null) smbsrv_accept Shutdown SMB signing switch message SMBnegprot (task_id 11464) Requested protocol [0][PC NETWORK PROGRAM 1.0] Requested protocol [1][LANMAN1.0] Requested protocol [2][Windows for Workgroups 3.1a] Requested protocol [3][LM1.2X002] Requested protocol [4][LANMAN2.1] Requested protocol [5][NT LM 0.12] Starting GENSEC mechanism spnego Starting GENSEC submechanism gssapi_krb5 using SPNEGO Selected protocol [5][NT LM 0.12] Received cldap packet of length 129 from 172.16.11.1:33058 cldap netlogon query domain=SAMBA4.INT host=WIN2000CLIENT user=(null) version=536870918 guid=(null) Kerberos: AS-REQ administrator@SAMBA4.INT from 172.16.11.1 for krbtgt/SAMBA4.INT@SAMBA4.INT LDB_lookup_spn_alias: no alias for service krbtgt applicable authsam_account_ok: Checking SMB password for user administrator@SAMBA4.INT logon_hours_ok: No hours restrictions for user administrator@SAMBA4.INT Kerberos: Client sent patypes: encrypted-timestamp, 128 Kerberos: Looking for PKINIT pa-data -- administrator@SAMBA4.INT Kerberos: Looking for ENC-TS pa-data -- administrator@SAMBA4.INT Kerberos: ENC-TS Pre-authentication succeeded -- administrator@SAMBA4.INT using arcfour-hmac-md5 Kerberos: Client supported enctypes: arcfour-hmac-md5, -133, -128, des-cbc-md5, des-cbc-crc, 24, -135 Kerberos: Using arcfour-hmac-md5/arcfour-hmac-md5 Kerberos: Requested flags: renewable_ok, canonicalize, renewable, forwardable Kerberos: AS-REQ authtime: 2007-12-09T12:56:54 starttime: unset endtime: 2037-09-13T04:48:05 renew till: 2037-09-13T04:48:05 Kerberos: AS-REQ administrator@SAMBA4.INT from 172.16.11.1 for krbtgt/SAMBA4.INT@SAMBA4.INT LDB_lookup_spn_alias: no alias for service krbtgt applicable authsam_account_ok: Checking SMB password for user administrator@SAMBA4.INT logon_hours_ok: No hours restrictions for user administrator@SAMBA4.INT Kerberos: Client sent patypes: encrypted-timestamp, 128 Kerberos: Looking for PKINIT pa-data -- administrator@SAMBA4.INT Kerberos: Looking for ENC-TS pa-data -- administrator@SAMBA4.INT Kerberos: ENC-TS Pre-authentication succeeded -- administrator@SAMBA4.INT using arcfour-hmac-md5 Kerberos: Client supported enctypes: arcfour-hmac-md5, -133, -128, des-cbc-md5, des-cbc-crc, 24, -135 Kerberos: Using arcfour-hmac-md5/arcfour-hmac-md5 Kerberos: Requested flags: renewable_ok, canonicalize, renewable, forwardable Kerberos: AS-REQ authtime: 2007-12-09T12:56:54 starttime: unset endtime: 2037-09-13T04:48:05 renew till: 2037-09-13T04:48:05 Kerberos: TGS-REQ administrator@SAMBA4.INT from 172.16.11.1 for HOST/samba4.samba4.int@SAMBA4.INT [renewable_ok, canonicalize, renewable, forwardable] Kerberos: TGS-REQ authtime: 2007-12-09T12:56:54 starttime: 2007-12-09T12:56:54 endtime: 2037-09-13T04:48:05 renew till: unset single_terminate: reason[NT_STATUS_END_OF_FILE] Kerberos: TGS-REQ administrator@SAMBA4.INT from 172.16.11.1 for krbtgt/SAMBA4.INT@SAMBA4.INT [renewable_ok, canonicalize, renewable, forwarded, forwardable] LDB_lookup_spn_alias: no alias for service krbtgt applicable Kerberos: TGS-REQ authtime: 2007-12-09T12:56:54 starttime: 2007-12-09T12:56:54 endtime: 2037-09-13T04:48:05 renew till: unset switch message SMBsesssetupX (task_id 11464) Starting GENSEC mechanism spnego Starting GENSEC submechanism gssapi_krb5 gensec_gssapi: credentials were delegated GSSAPI Connection will be cryptographicly signed Found account name from PAC: Administrator [] ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes SMB signing enabled! check_signed_incoming_message: BAD SIG (seq: 0): wanted SMB signature of [0000] CB 8D 8C EC CF 3D 24 16 .....=$. check_signed_incoming_message: BAD SIG (seq: 0): got SMB signature of [0000] 42 53 52 53 50 59 4C 20 BSRSPYL signing_good: signing negotiated but not required and peer isn't sending correct signatures. Turning off. Shutdown SMB signing Client did not send a valid signature on SPNEGO session setup - ignored, expect good next time SMB signing enabled! sign_outgoing_message: SENT SIG (seq: 1): sent SMB signature of [0000] A4 66 E0 89 C5 E9 ED 1C .f...... [0000] 80 77 EA F4 59 C4 89 54 .w..Y..T Seen valid packet, so turning signing on Seen valid packet, so marking signing as 'seen valid' switch message SMBtconX (task_id 11464) dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]' dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]' dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:' sign_outgoing_message: SENT SIG (seq: 3): sent SMB signature of [0000] 68 5E C7 A6 DA 8F 01 D9 h^...... [0000] CC 3E 06 A3 63 A7 A0 1E .>..c... switch message SMBntcreateX (task_id 11464) sign_outgoing_message: SENT SIG (seq: 5): sent SMB signature of [0000] F7 BF 8F 0D 07 58 BF A5 .....X.. [0000] 89 72 EC F4 48 30 B9 7E .r..H0.~ switch message SMBtrans (task_id 11464) sign_outgoing_message: SENT SIG (seq: 7): sent SMB signature of [0000] DE 77 5A 27 2A 51 05 B0 .wZ'*Q.. [0000] 58 8A 1B 6F F3 BE 7E 59 X..o..~Y switch message SMBtrans (task_id 11464) ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes sign_outgoing_message: SENT SIG (seq: 9): sent SMB signature of [0000] B6 BA E6 08 87 75 67 B7 .....ug. [0000] 4C C2 AF CE F4 60 83 6E L....`.n switch message SMBtrans (task_id 11464) sign_outgoing_message: SENT SIG (seq: 11): sent SMB signature of [0000] 47 49 E3 71 1F 96 04 C5 GI.q.... [0000] A2 EF A3 AC AD D8 AA 30 .......0 switch message SMBtrans (task_id 11464) sign_outgoing_message: SENT SIG (seq: 13): sent SMB signature of [0000] 7B F5 ED 6E 4A D0 28 D1 {..nJ.(. [0000] 39 B2 91 96 E1 8D E0 06 9....... switch message SMBntcreateX (task_id 11464) sign_outgoing_message: SENT SIG (seq: 15): sent SMB signature of [0000] 67 54 67 C7 46 06 8D 17 gTg.F... [0000] 59 46 69 DB 2E BE 4A 95 YFi...J. switch message SMBtrans (task_id 11464) sign_outgoing_message: SENT SIG (seq: 17): sent SMB signature of [0000] CA 1A 88 60 30 39 83 5A ...`09.Z [0000] 90 44 3B C3 9E A6 07 B9 .D;..... switch message SMBtrans (task_id 11464) ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes sign_outgoing_message: SENT SIG (seq: 19): sent SMB signature of [0000] 9C C3 31 E7 FC 1B 16 EF ..1..... [0000] 25 9E 96 9B 8F 88 12 EF %....... switch message SMBtrans (task_id 11464) sign_outgoing_message: SENT SIG (seq: 21): sent SMB signature of [0000] 5D D3 C8 15 8F BF A6 B3 ]....... [0000] 15 98 A8 AE B8 18 1C 23 .......# switch message SMBtrans (task_id 11464) sign_outgoing_message: SENT SIG (seq: 23): sent SMB signature of [0000] 64 E3 AC 5A 3F B5 3A 4C d..Z?.:L [0000] 10 22 32 7E C1 FD 57 00 ."2~..W. switch message SMBtrans (task_id 11464) sign_outgoing_message: SENT SIG (seq: 25): sent SMB signature of [0000] F4 A5 48 7F D9 B3 1D 52 ..H....R [0000] 40 F8 0A 95 02 0F 4C 8E @.....L. switch message SMBtrans (task_id 11464) ldb: samldb_add_record ldb: no modules required by the db ldb: No modules specified for this database ldb: objectclass_modify ldb: password_hash_modify ldb: objectguid_add_record ldb: rdn_name_add_record ldb: objectclass_add ldb: password_hash_add ldb: objectguid_add_record ldb: objectclass_modify ldb: password_hash_modify ldb: objectguid_add_record sign_outgoing_message: SENT SIG (seq: 27): sent SMB signature of [0000] 3C 83 8C 7D 8A D0 67 BF <..}..g. [0000] E0 F9 06 F6 B8 6E 2D 7F .....n-. switch message SMBtrans (task_id 11464) sign_outgoing_message: SENT SIG (seq: 29): sent SMB signature of [0000] 0F 47 4B 03 5E 86 2D 7D .GK.^.-} [0000] 64 37 A2 D8 8C 2C DD 7C d7...,.| switch message SMBtrans (task_id 11464) sign_outgoing_message: SENT SIG (seq: 31): sent SMB signature of [0000] 63 88 6D CB 79 38 28 08 c.m.y8(. [0000] 64 83 43 A1 09 DA 7C 1C d.C...|. switch message SMBtrans (task_id 11464) ldb: objectclass_modify ldb: password_hash_modify ldb: objectguid_add_record ldb: objectguid_add_record sign_outgoing_message: SENT SIG (seq: 33): sent SMB signature of [0000] DD 9D 2C 1F EA 78 CA 7C ..,..x.| [0000] E5 B6 1A 1C AD 99 1F 46 .......F switch message SMBtrans (task_id 11464) sign_outgoing_message: SENT SIG (seq: 35): sent SMB signature of [0000] 6D CE DC 71 79 34 03 E1 m..qy4.. [0000] 16 12 26 1F CA A2 4A 10 ..&...J. switch message SMBtrans (task_id 11464) sign_outgoing_message: SENT SIG (seq: 37): sent SMB signature of [0000] 0A 71 59 EA A4 2A E7 A9 .qY..*.. [0000] A7 A6 EF 98 33 74 60 79 ....3t`y switch message SMBtrans (task_id 11464) sign_outgoing_message: SENT SIG (seq: 39): sent SMB signature of [0000] 0B 21 93 EC A0 5B 90 A3 .!...[.. [0000] DD 94 30 A0 2B C4 52 14 ..0.+.R. switch message SMBclose (task_id 11464) sign_outgoing_message: SENT SIG (seq: 41): sent SMB signature of [0000] FE 0C BD 70 0E F9 9A DE ...p.... [0000] E9 B1 5F 80 E7 FF 09 57 .._....W switch message SMBntcreateX (task_id 11464) sign_outgoing_message: SENT SIG (seq: 43): sent SMB signature of [0000] 7B 58 3D 10 E0 EE 52 F3 {X=...R. [0000] 1A 0C 8A 3C 3C 08 C9 D1 ...<<... switch message SMBtrans (task_id 11464) sign_outgoing_message: SENT SIG (seq: 45): sent SMB signature of [0000] 6A 71 21 03 32 97 C0 BE jq!.2... [0000] 43 95 97 65 7D 00 EB AB C..e}... switch message SMBtrans (task_id 11464) ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes sign_outgoing_message: SENT SIG (seq: 47): sent SMB signature of [0000] FC E8 EC 14 51 2A 1E 8D ....Q*.. [0000] 19 97 CF 88 F9 A2 F6 8A ........ switch message SMBclose (task_id 11464) sign_outgoing_message: SENT SIG (seq: 49): sent SMB signature of [0000] 70 28 7A 0F DB 48 49 D2 p(z..HI. Received cldap packet of length 254 from 172.16.11.1:33067 cldap netlogon query domain=samba4.int. host=WIN2000CLIENT user=WIN2000CLIENT$ version=6 guid=f429ef38-72dc-4b6d-8b55-13ad4f00ff37 Received cldap packet of length 166 from 172.16.11.1:33068 cldap netlogon query domain=samba4.int. host=WIN2000CLIENT user=(null) version=536870918 guid=f429ef38-72dc-4b6d-8b55-13ad4f00ff37 Received cldap packet of length 254 from 172.16.11.1:33070 cldap netlogon query domain=samba4.int. host=WIN2000CLIENT user=WIN2000CLIENT$ version=6 guid=f429ef38-72dc-4b6d-8b55-13ad4f00ff37 Received cldap packet of length 166 from 172.16.11.1:33074 cldap netlogon query domain=samba4.int. host=WIN2000CLIENT user=(null) version=6 guid=f429ef38-72dc-4b6d-8b55-13ad4f00ff37 Received cldap packet of length 166 from 172.16.11.1:33078 cldap netlogon query domain=samba4.int. host=WIN2000CLIENT user=(null) version=6 guid=f429ef38-72dc-4b6d-8b55-13ad4f00ff37 Received cldap packet of length 166 from 172.16.11.1:33083 cldap netlogon query domain=samba4.int. host=WIN2000CLIENT user=(null) version=6 guid=f429ef38-72dc-4b6d-8b55-13ad4f00ff37 Received cldap packet of length 254 from 172.16.11.1:33085 cldap netlogon query domain=samba4.int. host=WIN2000CLIENT user=WIN2000CLIENT$ version=6 guid=f429ef38-72dc-4b6d-8b55-13ad4f00ff37 [0000] 10 F4 BF 20 6F EE 38 60 ... o.8` switch message SMBsesssetupX (task_id 11464) Starting GENSEC mechanism spnego Starting GENSEC submechanism ntlmssp Got NTLMSSP neg_flags=0xe208b297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_DOMAIN_SUPPLIED NTLMSSP_NEGOTIATE_WORKSTATION_SUPPLIED NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 sign_outgoing_message: SENT SIG (seq: 51): sent SMB signature of [0000] F3 38 69 00 0F CB 45 5F .8i...E_ [0000] A7 D2 EA 3C 56 21 DD 6F ...' '\MAILSLOT\BROWSE' from 172.16.11.120:138 Received dgram packet of length 174 from 172.16.11.120:138 Browse GetBackupListReq (Op 9) on 'PIPPO<1d>' '\MAILSLOT\BROWSE' from 172.16.11.120:138 Received dgram packet of length 174 from 172.16.11.120:138 Browse GetBackupListReq (Op 9) on 'PIPPO<1d>' '\MAILSLOT\BROWSE' from 172.16.11.120:138 Received dgram packet of length 174 from 172.16.11.120:138 Browse GetBackupListReq (Op 9) on 'PIPPO<1d>' '\MAILSLOT\BROWSE' from 172.16.11.120:138 Received dgram packet of length 174 from 172.16.11.120:138 Browse GetBackupListReq (Op 9) on 'PIPPO<1d>' '\MAILSLOT\BROWSE' from 172.16.11.120:138 Received dgram packet of length 174 from 172.16.11.120:138 Browse GetBackupListReq (Op 9) on 'PIPPO<1d>' '\MAILSLOT\BROWSE' from 172.16.11.120:138 [0000] 12 A3 E5 57 E8 AF DE 17 ...W.... switch message SMBtrans (task_id 11464) sign_outgoing_message: SENT SIG (seq: 59): sent SMB signature of [0000] AF 5D 11 58 13 D5 10 CF .].X.... [0000] E9 FC F0 8F 49 88 6A 5D ....I.j] switch message SMBclose (task_id 11464) sign_outgoing_message: SENT SIG (seq: 61): sent SMB signature of [0000] 65 DA 6F EA A1 CD C2 EA e.o..... [0000] 86 CC FD 9F 10 CA 63 6E ......cn switch message SMBulogoffX (task_id 11464) sign_outgoing_message: SENT SIG (seq: 63): sent SMB signature of [0000] B5 97 58 D7 E0 FE 2F 0C ..X.../. [0000] 02 01 F9 0E F7 C4 67 10 ......g. switch message SMBtdis (task_id 11464) 172.16.11.1 closed connection to service IPC$ sign_outgoing_message: SENT SIG (seq: 65): sent SMB signature of [0000] 66 B0 90 8C 73 34 12 96 f...s4.. [0000] 53 A1 B6 5D DB E1 85 D6 S..].... switch message SMBsesssetupX (task_id 11464) Starting GENSEC mechanism spnego Starting GENSEC submechanism ntlmssp Got NTLMSSP neg_flags=0xe208b297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_DOMAIN_SUPPLIED NTLMSSP_NEGOTIATE_WORKSTATION_SUPPLIED NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 sign_outgoing_message: SENT SIG (seq: 67): sent SMB signature of [0000] 11 85 A0 F1 68 35 92 EC ....h5.. [0000] E1 5C D3 8D AA DC 3F 46 .\....?F switch message SMBsesssetupX (task_id 11464) Got user=[] domain=[] workstation=[WIN2000CLIENT] len1=1 len2=0 auth_check_password_send: Checking password for unmapped user []\[]@[WIN2000CLIENT] map_user_info: Mapping user []\[] from workstation [WIN2000CLIENT] auth_check_password_send: mapped user is: [SAMBA4]\[]@[WIN2000CLIENT] auth_get_challenge: returning previous challenge by module random (normal) [0000] E2 5A E0 4A 14 13 A1 34 .Z.J...4 auth_check_password_recv: anonymous authentication for user [NT AUTHORITY\ANONYMOUS LOGON] succeeded sign_outgoing_message: SENT SIG (seq: 69): sent SMB signature of [0000] FB A9 09 30 FA 28 33 61 ...0.(3a [0000] F3 FD FF 8A 35 CC E0 36 ....5..6 switch message SMBtconX (task_id 11464) dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]' dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]' dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:' sign_outgoing_message: SENT SIG (seq: 71): sent SMB signature of [0000] C4 2E F2 CF 24 09 4D 59 ....$.MY [0000] 4D 25 F7 F0 5A EF 90 93 M%..Z... switch message SMBulogoffX (task_id 11464) sign_outgoing_message: SENT SIG (seq: 73): sent SMB signature of [0000] C5 9A 69 3B F6 A7 DC 6F ..i;...o [0000] C8 C1 B6 C1 BA C2 D1 01 ........ switch message SMBtdis (task_id 11464) 172.16.11.1 closed connection to service IPC$ sign_outgoing_message: SENT SIG (seq: 75): sent SMB signature of [0000] 86 E4 6A 76 A3 51 71 3F ..jv.Qq? [0000] C8 6B 03 25 C6 52 DE 38 .k.%.R.8 switch message SMBtdis (task_id 11464) 172.16.11.1 closed connection to service IPC$ sign_outgoing_message: SENT SIG (seq: 77): sent SMB signature of [0000] 86 A5 44 FD 38 8B 01 3C ..D.8..< standard_terminate: reason[NT_STATUS_END_OF_FILE]