lp_load: refreshing parameters from /usr/local/samba/etc/samba/smb.conf params.c:pm_process() - Processing configuration file "/usr/local/samba/etc/samba/smb.conf" Processing section "[globals]" Processing section "[netlogon]" Processing section "[sysvol]" pm_process() returned Yes adding hidden service IPC$ adding hidden service ADMIN$ smbd version 4.0.0alpha2-SVN-build-UNKNOWN started. Copyright Andrew Tridgell and the Samba Team 1992-2007 SHARE backend [ldb] registered. SHARE backend [classic] registered. AUTH backend 'winbind_samba3' registered AUTH backend 'winbind' registered AUTH backend 'name_to_ntstatus' registered AUTH backend 'fixed_challenge' registered AUTH backend 'unix' registered AUTH backend 'anonymous' registered AUTH backend 'sam' registered AUTH backend 'sam_ignoredomain' registered GENSEC backend 'krb5' registered gensec subsystem fake_gssapi_krb5 is disabled GENSEC backend 'schannel' registered GENSEC backend 'spnego' registered gensec subsystem gssapi_spnego is disabled GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'ntlmssp' registered NTPTR backend 'simple_ldb' NTVFS backend 'simple' for type 0 failed version check Failed to register simple backend with name: simple! NTVFS backend 'cifs' for type 0 registered NTVFS backend 'nbench' for type 0 failed version check Failed to register nbench backend! NTVFS backend 'unixuid' for type 0 registered NTVFS backend 'unixuid' for type 1 registered NTVFS backend 'unixuid' for type 2 registered NTVFS backend 'cifsposix' for type 0 failed version check Failed to register cifs posix backend with name: cifsposix! NTVFS backend 'default' for type 2 registered NTVFS backend 'xattr' registered NTVFS backend 'nfs4acl' registered NTVFS backend 'default' for type 1 registered NTVFS backend 'default' for type 0 registered NTVFS backend 'posix' for type 0 registered PROCESS_MODEL 'standard' registered PROCESS_MODEL 'single' registered DCERPC endpoint server 'wkssvc' registered DCERPC endpoint server 'drsuapi' registered DCERPC endpoint server 'spoolss' registered DCERPC endpoint server 'winreg' registered DCERPC endpoint server 'epmapper' registered DCERPC endpoint server 'srvsvc' registered DCERPC endpoint server 'netlogon' registered DCERPC endpoint server 'rpcecho' registered DCERPC endpoint server 'unixinfo' registered DCERPC endpoint server 'samr' registered DCERPC endpoint server 'remote' registered DCERPC endpoint server 'dssetup' registered DCERPC endpoint server 'lsarpc' registered smbd: using 'standard' process model ldb: trying to load partition from /usr/local/samba/lib/samba/ldb/partition.so ldb: trying to load show_deleted from /usr/local/samba/lib/samba/ldb/show_deleted.so ldb: trying to load linked_attributes from /usr/local/samba/lib/samba/ldb/linked_attributes.so ldb: trying to load subtree_delete from /usr/local/samba/lib/samba/ldb/subtree_delete.so ldb: trying to load subtree_rename from /usr/local/samba/lib/samba/ldb/subtree_rename.so ldb: trying to load kludge_acl from /usr/local/samba/lib/samba/ldb/kludge_acl.so ldb: trying to load objectclass from /usr/local/samba/lib/samba/ldb/objectclass.so ldb: trying to load samldb from /usr/local/samba/lib/samba/ldb/samldb.so ldb: trying to load extended_dn from /usr/local/samba/lib/samba/ldb/extended_dn.so ldb: trying to load ranged_results from /usr/local/samba/lib/samba/ldb/ranged_results.so ldb: trying to load rootdse from /usr/local/samba/lib/samba/ldb/rootdse.so ldb: trying to load objectguid from /usr/local/samba/lib/samba/ldb/objectguid.so ldb: trying to load schema_fsmo from /usr/local/samba/lib/samba/ldb/schema_fsmo.so dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]' dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]' dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:' added interface ip=172.16.11.151 nmask=255.255.255.0 ldb: trying to load partition from /usr/local/samba/lib/samba/ldb/partition.so ldb: trying to load show_deleted from /usr/local/samba/lib/samba/ldb/show_deleted.so ldb: trying to load linked_attributes from /usr/local/samba/lib/samba/ldb/linked_attributes.so ldb: trying to load subtree_delete from /usr/local/samba/lib/samba/ldb/subtree_delete.so ldb: trying to load subtree_rename from /usr/local/samba/lib/samba/ldb/subtree_rename.so ldb: trying to load kludge_acl from /usr/local/samba/lib/samba/ldb/kludge_acl.so ldb: trying to load objectclass from /usr/local/samba/lib/samba/ldb/objectclass.so ldb: trying to load samldb from /usr/local/samba/lib/samba/ldb/samldb.so ldb: trying to load extended_dn from /usr/local/samba/lib/samba/ldb/extended_dn.so ldb: trying to load ranged_results from /usr/local/samba/lib/samba/ldb/ranged_results.so ldb: trying to load rootdse from /usr/local/samba/lib/samba/ldb/rootdse.so ldb: trying to load objectguid from /usr/local/samba/lib/samba/ldb/objectguid.so ldb: trying to load schema_fsmo from /usr/local/samba/lib/samba/ldb/schema_fsmo.so Attempting to autogenerate TLS self-signed keys for https Generating private key ldb: schema_fsmo_init: we are master: yes ldb: trying to load naming_fsmo from /usr/local/samba/lib/samba/ldb/naming_fsmo.so ldb: naming_fsmo_init: we are master: yes ldb: trying to load password_hash from /usr/local/samba/lib/samba/ldb/password_hash.so ldb: trying to load pdc_fsmo from /usr/local/samba/lib/samba/ldb/pdc_fsmo.so ldb: pdc_fsmo_init: we are master: yes ldb: schema_fsmo_init: we are master: yes ldb: trying to load naming_fsmo from /usr/local/samba/lib/samba/ldb/naming_fsmo.so ldb: naming_fsmo_init: we are master: yes ldb: trying to load password_hash from /usr/local/samba/lib/samba/ldb/password_hash.so ldb: trying to load pdc_fsmo from /usr/local/samba/lib/samba/ldb/pdc_fsmo.so added interface ip=172.16.11.151 nmask=255.255.255.0 ldb: trying to load partition from /usr/local/samba/lib/samba/ldb/partition.so ldb: trying to load show_deleted from /usr/local/samba/lib/samba/ldb/show_deleted.so ldb: trying to load linked_attributes from /usr/local/samba/lib/samba/ldb/linked_attributes.so ldb: trying to load subtree_delete from /usr/local/samba/lib/samba/ldb/subtree_delete.so Attempting to autogenerate TLS self-signed keys for https Generating private key added interface ip=172.16.11.151 nmask=255.255.255.0 ldb: trying to load partition from /usr/local/samba/lib/samba/ldb/partition.so ldb: trying to load show_deleted from /usr/local/samba/lib/samba/ldb/show_deleted.so ldb: trying to load linked_attributes from /usr/local/samba/lib/samba/ldb/linked_attributes.so ldb: trying to load subtree_delete from /usr/local/samba/lib/samba/ldb/subtree_delete.so ldb: trying to load subtree_rename from /usr/local/samba/lib/samba/ldb/subtree_rename.so ldb: trying to load kludge_acl from /usr/local/samba/lib/samba/ldb/kludge_acl.so ldb: trying to load objectclass from /usr/local/samba/lib/samba/ldb/objectclass.so ldb: trying to load samldb from /usr/local/samba/lib/samba/ldb/samldb.so ldb: trying to load extended_dn from /usr/local/samba/lib/samba/ldb/extended_dn.so ldb: trying to load ranged_results from /usr/local/samba/lib/samba/ldb/ranged_results.so ldb: trying to load rootdse from /usr/local/samba/lib/samba/ldb/rootdse.so ldb: trying to load objectguid from /usr/local/samba/lib/samba/ldb/objectguid.so ldb: trying to load schema_fsmo from /usr/local/samba/lib/samba/ldb/schema_fsmo.so ldb: trying to load partition from /usr/local/samba/lib/samba/ldb/partition.so ldb: trying to load show_deleted from /usr/local/samba/lib/samba/ldb/show_deleted.so ldb: trying to load linked_attributes from /usr/local/samba/lib/samba/ldb/linked_attributes.so ldb: trying to load subtree_delete from /usr/local/samba/lib/samba/ldb/subtree_delete.so ldb: trying to load subtree_rename from /usr/local/samba/lib/samba/ldb/subtree_rename.so ldb: trying to load kludge_acl from /usr/local/samba/lib/samba/ldb/kludge_acl.so ldb: trying to load objectclass from /usr/local/samba/lib/samba/ldb/objectclass.so ldb: trying to load samldb from /usr/local/samba/lib/samba/ldb/samldb.so ldb: trying to load extended_dn from /usr/local/samba/lib/samba/ldb/extended_dn.so ldb: trying to load ranged_results from /usr/local/samba/lib/samba/ldb/ranged_results.so ldb: trying to load rootdse from /usr/local/samba/lib/samba/ldb/rootdse.so ldb: trying to load objectguid from /usr/local/samba/lib/samba/ldb/objectguid.so ldb: trying to load schema_fsmo from /usr/local/samba/lib/samba/ldb/schema_fsmo.so ldb: pdc_fsmo_init: we are master: yes ldb: trying to load subtree_rename from /usr/local/samba/lib/samba/ldb/subtree_rename.so ldb: trying to load kludge_acl from /usr/local/samba/lib/samba/ldb/kludge_acl.so ldb: trying to load objectclass from /usr/local/samba/lib/samba/ldb/objectclass.so ldb: trying to load samldb from /usr/local/samba/lib/samba/ldb/samldb.so ldb: trying to load extended_dn from /usr/local/samba/lib/samba/ldb/extended_dn.so ldb: trying to load ranged_results from /usr/local/samba/lib/samba/ldb/ranged_results.so ldb: trying to load rootdse from /usr/local/samba/lib/samba/ldb/rootdse.so ldb: trying to load objectguid from /usr/local/samba/lib/samba/ldb/objectguid.so ldb: trying to load schema_fsmo from /usr/local/samba/lib/samba/ldb/schema_fsmo.so ldb: schema_fsmo_init: we are master: yes ldb: trying to load naming_fsmo from /usr/local/samba/lib/samba/ldb/naming_fsmo.so ldb: naming_fsmo_init: we are master: yes ldb: trying to load password_hash from /usr/local/samba/lib/samba/ldb/password_hash.so ldb: trying to load pdc_fsmo from /usr/local/samba/lib/samba/ldb/pdc_fsmo.so ldb: pdc_fsmo_init: we are master: yes ldb: schema_fsmo_init: we are master: yes ldb: trying to load naming_fsmo from /usr/local/samba/lib/samba/ldb/naming_fsmo.so ldb: naming_fsmo_init: we are master: yes ldb: trying to load password_hash from /usr/local/samba/lib/samba/ldb/password_hash.so ldb: trying to load pdc_fsmo from /usr/local/samba/lib/samba/ldb/pdc_fsmo.so ldb: pdc_fsmo_init: we are master: yes ldb: schema_fsmo_init: we are master: yes ldb: trying to load naming_fsmo from /usr/local/samba/lib/samba/ldb/naming_fsmo.so ldb: naming_fsmo_init: we are master: yes ldb: trying to load password_hash from /usr/local/samba/lib/samba/ldb/password_hash.so ldb: trying to load pdc_fsmo from /usr/local/samba/lib/samba/ldb/pdc_fsmo.so ldb: pdc_fsmo_init: we are master: yes dreplsrv_partition[CN=Schema,CN=Configuration,DC=samba4,DC=int] loaded dreplsrv_partition[CN=Configuration,DC=samba4,DC=int] loaded dreplsrv_partition[DC=samba4,DC=int] loaded dreplsrv_refresh_partition(DC=samba4,DC=int) dreplsrv_refresh_partition(CN=Configuration,DC=samba4,DC=int) dreplsrv_refresh_partition(CN=Schema,CN=Configuration,DC=samba4,DC=int) dreplsrv_periodic_schedule(15) scheduled for: Sun Dec 9 14:10:18 2007 CET Registered SAMBA4<00> with 172.16.11.151 on interface 172.16.11.255 Registered SAMBA4<03> with 172.16.11.151 on interface 172.16.11.255 Registered SAMBA4<20> with 172.16.11.151 on interface 172.16.11.255 Registered SAMBA4<1b> with 172.16.11.151 on interface 172.16.11.255 Registered SAMBA4<1c> with 172.16.11.151 on interface 172.16.11.255 Registered SAMBA4<00> with 172.16.11.151 on interface 172.16.11.255 Received dgram packet of length 174 from 172.16.11.105:138 Browse GetBackupListReq (Op 9) on 'WORKGROUP<1d>' '\MAILSLOT\BROWSE' from 172.16.11.105:138 Received dgram packet of length 174 from 172.16.11.105:138 Browse GetBackupListReq (Op 9) on 'WORKGROUP<1d>' '\MAILSLOT\BROWSE' from 172.16.11.105:138 dreplsrv_periodic_run(): schedule pull replication dreplsrv_periodic_run(): run pending_ops dreplsrv_periodic_schedule(300) scheduled for: Sun Dec 9 14:15:18 2007 CET Received cldap packet of length 123 from 172.16.11.105:1035 cldap netlogon query domain=SAMBA4.INT host=WIN2003 user=(null) version=6 guid=(null) Received cldap packet of length 123 from 172.16.11.105:1037 cldap netlogon query domain=SAMBA4.INT host=WIN2003 user=(null) version=6 guid=(null) Received cldap packet of length 162 from 172.16.11.105:1038 cldap netlogon query domain=SAMBA4.INT host=WIN2003 user=WIN2003$ version=6 guid=(null) Received cldap packet of length 162 from 172.16.11.105:1039 cldap netlogon query domain=SAMBA4.INT host=WIN2003 user=WIN2003$ version=6 guid=(null) smbsrv_accept Shutdown SMB signing switch message SMBnegprot (task_id 11525) Requested protocol [0][PC NETWORK PROGRAM 1.0] Requested protocol [1][LANMAN1.0] Requested protocol [2][Windows for Workgroups 3.1a] Requested protocol [3][LM1.2X002] Requested protocol [4][LANMAN2.1] Requested protocol [5][NT LM 0.12] Starting GENSEC mechanism spnego Starting GENSEC submechanism gssapi_krb5 using SPNEGO Selected protocol [5][NT LM 0.12] Received cldap packet of length 123 from 172.16.11.105:1043 cldap netlogon query domain=SAMBA4.INT host=WIN2003 user=(null) version=536870918 guid=(null) Kerberos: AS-REQ administrator@SAMBA4.INT from 172.16.11.105 for krbtgt/SAMBA4.INT@SAMBA4.INT LDB_lookup_spn_alias: no alias for service krbtgt applicable authsam_account_ok: Checking SMB password for user administrator@SAMBA4.INT logon_hours_ok: No hours restrictions for user administrator@SAMBA4.INT Kerberos: Client sent patypes: encrypted-timestamp, 128 Kerberos: Looking for PKINIT pa-data -- administrator@SAMBA4.INT Kerberos: Looking for ENC-TS pa-data -- administrator@SAMBA4.INT Kerberos: ENC-TS Pre-authentication succeeded -- administrator@SAMBA4.INT using arcfour-hmac-md5 Kerberos: Client supported enctypes: arcfour-hmac-md5, -133, -128, des-cbc-md5, des-cbc-crc, 24, -135 Kerberos: Using arcfour-hmac-md5/arcfour-hmac-md5 Kerberos: Requested flags: renewable_ok, canonicalize, renewable, forwardable Kerberos: AS-REQ authtime: 2007-12-09T14:10:25 starttime: unset endtime: 2037-09-13T04:48:05 renew till: 2037-09-13T04:48:05 Kerberos: AS-REQ administrator@SAMBA4.INT from 172.16.11.105 for krbtgt/SAMBA4.INT@SAMBA4.INT LDB_lookup_spn_alias: no alias for service krbtgt applicable authsam_account_ok: Checking SMB password for user administrator@SAMBA4.INT logon_hours_ok: No hours restrictions for user administrator@SAMBA4.INT Kerberos: Client sent patypes: encrypted-timestamp, 128 Kerberos: Looking for PKINIT pa-data -- administrator@SAMBA4.INT Kerberos: Looking for ENC-TS pa-data -- administrator@SAMBA4.INT Kerberos: ENC-TS Pre-authentication succeeded -- administrator@SAMBA4.INT using arcfour-hmac-md5 Kerberos: Client supported enctypes: arcfour-hmac-md5, -133, -128, des-cbc-md5, des-cbc-crc, 24, -135 Kerberos: Using arcfour-hmac-md5/arcfour-hmac-md5 Kerberos: Requested flags: renewable_ok, canonicalize, renewable, forwardable Kerberos: AS-REQ authtime: 2007-12-09T14:10:25 starttime: unset endtime: 2037-09-13T04:48:05 renew till: 2037-09-13T04:48:05 single_terminate: reason[NT_STATUS_END_OF_FILE] Kerberos: TGS-REQ administrator@SAMBA4.INT from 172.16.11.105 for cifs/samba4.samba4.int@SAMBA4.INT [canonicalize, renewable, forwardable] Kerberos: TGS-REQ authtime: 2007-12-09T14:10:25 starttime: 2007-12-09T14:10:25 endtime: 2037-09-13T04:48:05 renew till: unset Kerberos: TGS-REQ administrator@SAMBA4.INT from 172.16.11.105 for krbtgt/SAMBA4.INT@SAMBA4.INT [renewable_ok, canonicalize, renewable, forwarded, forwardable] LDB_lookup_spn_alias: no alias for service krbtgt applicable Kerberos: TGS-REQ authtime: 2007-12-09T14:10:25 starttime: 2007-12-09T14:10:25 endtime: 2037-09-13T04:48:05 renew till: unset switch message SMBsesssetupX (task_id 11525) Starting GENSEC mechanism spnego Starting GENSEC submechanism gssapi_krb5 gensec_gssapi: credentials were delegated GSSAPI Connection will be cryptographicly signed Found account name from PAC: Administrator [] ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes SMB signing enabled! check_signed_incoming_message: BAD SIG (seq: 0): wanted SMB signature of [0000] A0 51 B7 1A 14 1D 70 09 .Q....p. check_signed_incoming_message: BAD SIG (seq: 0): got SMB signature of [0000] 42 53 52 53 50 59 4C 20 BSRSPYL signing_good: signing negotiated but not required and peer isn't sending correct signatures. Turning off. Shutdown SMB signing Client did not send a valid signature on SPNEGO session setup - ignored, expect good next time SMB signing enabled! sign_outgoing_message: SENT SIG (seq: 1): sent SMB signature of [0000] 33 D1 45 22 64 48 9D AF 3.E"dH.. [0000] 9C F8 99 43 47 76 56 20 ...CGvV Seen valid packet, so turning signing on Seen valid packet, so marking signing as 'seen valid' switch message SMBtconX (task_id 11525) dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]' dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]' dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:' sign_outgoing_message: SENT SIG (seq: 3): sent SMB signature of [0000] 81 78 37 92 DB AF 2B DF .x7...+. [0000] 9A 9D 68 61 E0 19 62 F0 ..ha..b. switch message SMBntcreateX (task_id 11525) sign_outgoing_message: SENT SIG (seq: 5): sent SMB signature of [0000] 31 BF D5 D8 A5 FD 0F 5B 1......[ [0000] 2C 4F C1 30 B6 73 6D 9D ,O.0.sm. switch message SMBwriteX (task_id 11525) sign_outgoing_message: SENT SIG (seq: 7): sent SMB signature of [0000] C8 55 E1 8C 49 F8 05 52 .U..I..R [0000] 9F F9 65 9E 4C C4 08 3A ..e.L..: switch message SMBreadX (task_id 11525) sign_outgoing_message: SENT SIG (seq: 9): sent SMB signature of [0000] F5 D9 EA 4F 72 EF 12 78 ...Or..x [0000] 20 78 27 57 21 F5 9B A9 x'W!... switch message SMBtrans (task_id 11525) ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes sign_outgoing_message: SENT SIG (seq: 11): sent SMB signature of [0000] BB 74 D0 61 B8 A6 A4 C9 .t.a.... [0000] D4 F8 B2 5E D2 15 7C 52 ...^..|R switch message SMBtrans (task_id 11525) sign_outgoing_message: SENT SIG (seq: 13): sent SMB signature of [0000] EB 08 B2 21 7B 6F 03 F5 ...!{o.. [0000] 46 A4 8F 14 FE 31 4C A7 F....1L. switch message SMBtrans (task_id 11525) sign_outgoing_message: SENT SIG (seq: 15): sent SMB signature of [0000] EC 22 E4 2A 32 0F D2 25 .".*2..% [0000] 0B 68 8E C3 F5 C7 D4 AD .h...... switch message SMBntcreateX (task_id 11525) sign_outgoing_message: SENT SIG (seq: 17): sent SMB signature of [0000] C3 4B A4 74 7D 88 22 36 .K.t}."6 [0000] CA 83 B7 99 BB 6D B0 14 .....m.. switch message SMBwriteX (task_id 11525) sign_outgoing_message: SENT SIG (seq: 19): sent SMB signature of [0000] AE D5 F7 EB 17 D1 3D B6 ......=. [0000] 2C 47 90 D0 F8 65 4E 0D ,G...eN. switch message SMBreadX (task_id 11525) sign_outgoing_message: SENT SIG (seq: 21): sent SMB signature of [0000] 95 1A D0 83 EA 16 56 36 ......V6 [0000] E7 A9 8A AF 11 9C 52 8F ......R. switch message SMBtrans (task_id 11525) ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes sign_outgoing_message: SENT SIG (seq: 23): sent SMB signature of [0000] 03 87 1E BD 6B 0D F2 12 ....k... [0000] DC 8F 88 D3 D4 FC 4E 54 ......NT switch message SMBtrans (task_id 11525) sign_outgoing_message: SENT SIG (seq: 25): sent SMB signature of [0000] E6 A9 C1 A2 80 6B 3B 2E .....k;. [0000] 2A 2A 7E F4 25 62 1E A3 **~.%b.. switch message SMBtrans (task_id 11525) sign_outgoing_message: SENT SIG (seq: 27): sent SMB signature of [0000] 7E 3C 0F 84 B6 7F 5A C9 ~<....Z. [0000] 61 DD F8 10 EE 1E EC 4A a......J switch message SMBtrans (task_id 11525) sign_outgoing_message: SENT SIG (seq: 29): sent SMB signature of [0000] BA 0B 89 57 34 99 79 0C ...W4.y. [0000] 2B 7F FE 8A 9C F7 BD 0F +....... switch message SMBtrans (task_id 11525) sign_outgoing_message: SENT SIG (seq: 31): sent SMB signature of [0000] CA CC BE 86 16 99 AA 90 ........ [0000] 82 78 89 62 95 AD 9A 9C .x.b.... switch message SMBclose (task_id 11525) sign_outgoing_message: SENT SIG (seq: 33): sent SMB signature of [0000] 23 5C 6C EB CB BE 13 DC #\l..... [0000] BE 70 2C D5 F3 F2 C0 F1 .p,..... switch message SMBtrans (task_id 11525) sign_outgoing_message: SENT SIG (seq: 35): sent SMB signature of [0000] 93 70 4C 98 E8 D3 7A EA .pL...z. [0000] F6 11 B9 F1 1C 5A D8 AA .....Z.. switch message SMBclose (task_id 11525) sign_outgoing_message: SENT SIG (seq: 37): sent SMB signature of [0000] 18 05 07 05 00 5F 96 82 ....._.. [0000] E4 91 A8 EA 9D F9 10 00 ........ switch message SMBulogoffX (task_id 11525) sign_outgoing_message: SENT SIG (seq: 39): sent SMB signature of [0000] 7B B9 3C F5 15 6E D6 00 {.<..n.. [0000] 7E 72 D0 69 11 BF 5B 5E ~r.i..[^ switch message SMBtdis (task_id 11525) 172.16.11.105 closed connection to service IPC$ sign_outgoing_message: SENT SIG (seq: 41): sent SMB signature of [0000] 96 23 93 48 86 1C 60 8B .#.H..`. standard_terminate: reason[NT_STATUS_END_OF_FILE] Received cldap packet of length 123 from 172.16.11.105:1049 cldap netlogon query domain=SAMBA4.INT host=WIN2003 user=(null) version=6 guid=(null) Received cldap packet of length 162 from 172.16.11.105:1050 cldap netlogon query domain=SAMBA4.INT host=WIN2003 user=WIN2003$ version=6 guid=(null) Received cldap packet of length 162 from 172.16.11.105:1051 cldap netlogon query domain=SAMBA4.INT host=WIN2003 user=WIN2003$ version=6 guid=(null) smbsrv_accept Shutdown SMB signing switch message SMBnegprot (task_id 11526) Requested protocol [0][PC NETWORK PROGRAM 1.0] Requested protocol [1][LANMAN1.0] Requested protocol [2][Windows for Workgroups 3.1a] Requested protocol [3][LM1.2X002] Requested protocol [4][LANMAN2.1] Requested protocol [5][NT LM 0.12] Starting GENSEC mechanism spnego Starting GENSEC submechanism gssapi_krb5 using SPNEGO Selected protocol [5][NT LM 0.12] Kerberos: AS-REQ administrator@SAMBA4.INT from 172.16.11.105 for krbtgt/SAMBA4.INT@SAMBA4.INT LDB_lookup_spn_alias: no alias for service krbtgt applicable authsam_account_ok: Checking SMB password for user administrator@SAMBA4.INT logon_hours_ok: No hours restrictions for user administrator@SAMBA4.INT Kerberos: Client sent patypes: encrypted-timestamp, 128 Kerberos: Looking for PKINIT pa-data -- administrator@SAMBA4.INT Kerberos: Looking for ENC-TS pa-data -- administrator@SAMBA4.INT Kerberos: ENC-TS Pre-authentication succeeded -- administrator@SAMBA4.INT using arcfour-hmac-md5 Kerberos: Client supported enctypes: arcfour-hmac-md5, -133, -128, des-cbc-md5, des-cbc-crc, 24, -135 Kerberos: Using arcfour-hmac-md5/arcfour-hmac-md5 Kerberos: Requested flags: renewable_ok, canonicalize, renewable, forwardable Kerberos: AS-REQ authtime: 2007-12-09T14:10:28 starttime: unset endtime: 2037-09-13T04:48:05 renew till: 2037-09-13T04:48:05 Kerberos: AS-REQ administrator@SAMBA4.INT from 172.16.11.105 for krbtgt/SAMBA4.INT@SAMBA4.INT LDB_lookup_spn_alias: no alias for service krbtgt applicable authsam_account_ok: Checking SMB password for user administrator@SAMBA4.INT logon_hours_ok: No hours restrictions for user administrator@SAMBA4.INT Kerberos: Client sent patypes: encrypted-timestamp, 128 Kerberos: Looking for PKINIT pa-data -- administrator@SAMBA4.INT Kerberos: Looking for ENC-TS pa-data -- administrator@SAMBA4.INT Kerberos: ENC-TS Pre-authentication succeeded -- administrator@SAMBA4.INT using arcfour-hmac-md5 Kerberos: Client supported enctypes: arcfour-hmac-md5, -133, -128, des-cbc-md5, des-cbc-crc, 24, -135 Kerberos: Using arcfour-hmac-md5/arcfour-hmac-md5 Kerberos: Requested flags: renewable_ok, canonicalize, renewable, forwardable Kerberos: AS-REQ authtime: 2007-12-09T14:10:28 starttime: unset endtime: 2037-09-13T04:48:05 renew till: 2037-09-13T04:48:05 single_terminate: reason[NT_STATUS_END_OF_FILE] Kerberos: TGS-REQ administrator@SAMBA4.INT from 172.16.11.105 for cifs/samba4.samba4.int@SAMBA4.INT [canonicalize, renewable, forwardable] Kerberos: TGS-REQ authtime: 2007-12-09T14:10:28 starttime: 2007-12-09T14:10:28 endtime: 2037-09-13T04:48:05 renew till: unset Kerberos: TGS-REQ administrator@SAMBA4.INT from 172.16.11.105 for krbtgt/SAMBA4.INT@SAMBA4.INT [renewable_ok, canonicalize, renewable, forwarded, forwardable] LDB_lookup_spn_alias: no alias for service krbtgt applicable Kerberos: TGS-REQ authtime: 2007-12-09T14:10:28 starttime: 2007-12-09T14:10:28 endtime: 2037-09-13T04:48:05 renew till: unset switch message SMBsesssetupX (task_id 11526) Starting GENSEC mechanism spnego Starting GENSEC submechanism gssapi_krb5 gensec_gssapi: credentials were delegated GSSAPI Connection will be cryptographicly signed Found account name from PAC: Administrator [] ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes SMB signing enabled! check_signed_incoming_message: BAD SIG (seq: 0): wanted SMB signature of [0000] E8 57 20 16 7B 1A FC D5 .W .{... check_signed_incoming_message: BAD SIG (seq: 0): got SMB signature of [0000] 42 53 52 53 50 59 4C 20 BSRSPYL signing_good: signing negotiated but not required and peer isn't sending correct signatures. Turning off. Shutdown SMB signing Client did not send a valid signature on SPNEGO session setup - ignored, expect good next time SMB signing enabled! sign_outgoing_message: SENT SIG (seq: 1): sent SMB signature of [0000] 34 CA CF 0B 5D 8E 99 52 4...]..R [0000] 59 46 0D DC FF C0 EB 13 YF...... Seen valid packet, so turning signing on Seen valid packet, so marking signing as 'seen valid' switch message SMBtconX (task_id 11526) dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]' dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]' dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:' sign_outgoing_message: SENT SIG (seq: 3): sent SMB signature of [0000] ED FC 60 CD 01 D1 DB 31 ..`....1 [0000] 9A 5B 86 0F 12 CD 76 52 .[....vR switch message SMBntcreateX (task_id 11526) sign_outgoing_message: SENT SIG (seq: 5): sent SMB signature of [0000] 05 6A 42 78 91 D7 5E F4 .jBx..^. [0000] 07 AA D1 88 23 6F FB 35 ....#o.5 switch message SMBwriteX (task_id 11526) sign_outgoing_message: SENT SIG (seq: 7): sent SMB signature of [0000] 3F 2C 19 1E 4E 6F D4 26 ?,..No.& [0000] 9B 4E 4C 13 C4 E8 03 84 .NL..... switch message SMBreadX (task_id 11526) sign_outgoing_message: SENT SIG (seq: 9): sent SMB signature of [0000] 41 80 FE B2 59 E1 67 82 A...Y.g. [0000] 29 A1 20 ED B5 D9 1F 82 ). ..... switch message SMBtrans (task_id 11526) ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes sign_outgoing_message: SENT SIG (seq: 11): sent SMB signature of [0000] 38 1E 9A 8A 28 DA 6B AB 8...(.k. [0000] BF AC 9C 69 F9 52 EB 26 ...i.R.& switch message SMBtrans (task_id 11526) sign_outgoing_message: SENT SIG (seq: 13): sent SMB signature of [0000] D5 13 28 DB 91 94 46 96 ..(...F. [0000] B6 99 9F 78 2E 55 BE 94 ...x.U.. switch message SMBtrans (task_id 11526) sign_outgoing_message: SENT SIG (seq: 15): sent SMB signature of [0000] 7E C3 41 05 8B E7 56 05 ~.A...V. [0000] 60 89 47 3A 64 0F EA 0C `.G:d... switch message SMBntcreateX (task_id 11526) sign_outgoing_message: SENT SIG (seq: 17): sent SMB signature of [0000] EB 4E 94 3A ED C1 9B B9 .N.:.... [0000] 93 3D F4 FF 2A B6 C7 C3 .=..*... switch message SMBwriteX (task_id 11526) sign_outgoing_message: SENT SIG (seq: 19): sent SMB signature of [0000] FA 38 F5 7B DE 03 A7 A0 .8.{.... [0000] 13 7F 75 5F E8 A9 76 BA ..u_..v. switch message SMBreadX (task_id 11526) sign_outgoing_message: SENT SIG (seq: 21): sent SMB signature of [0000] FC 46 A0 1A EE FA BB FB .F...... [0000] 88 89 69 6D 87 42 4E 3A ..im.BN: switch message SMBtrans (task_id 11526) ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes sign_outgoing_message: SENT SIG (seq: 23): sent SMB signature of [0000] 8E 22 40 56 F9 59 82 EA ."@V.Y.. [0000] 67 49 1A 8B 77 35 0C 01 gI..w5.. switch message SMBtrans (task_id 11526) sign_outgoing_message: SENT SIG (seq: 25): sent SMB signature of [0000] 61 FC 82 E4 20 96 09 4C a... ..L [0000] 27 46 98 A4 E9 FC ED 67 'F.....g switch message SMBtrans (task_id 11526) sign_outgoing_message: SENT SIG (seq: 27): sent SMB signature of [0000] 13 CF 49 79 39 C2 BB E9 ..Iy9... [0000] F7 77 FB A3 0F AF D2 AA .w...... switch message SMBtrans (task_id 11526) sign_outgoing_message: SENT SIG (seq: 29): sent SMB signature of [0000] 7F 96 95 9D 0F E5 10 3D .......= [0000] 30 9D C0 8B 59 27 CC C4 0...Y'.. switch message SMBtrans (task_id 11526) ldb: samldb_add_record ldb: no modules required by the db ldb: No modules specified for this database ldb: objectclass_modify ldb: password_hash_modify ldb: objectguid_add_record ldb: rdn_name_add_record ldb: objectclass_add ldb: password_hash_add ldb: objectguid_add_record ldb: objectclass_modify ldb: password_hash_modify ldb: objectguid_add_record Received dgram packet of length 208 from 172.16.11.105:138 Browse DomainAnnouncement (Op 12) on '%01%02__MSBROWSE__%02<01>' '\MAILSLOT\BROWSE' from 172.16.11.105:138 Received dgram packet of length 208 from 172.16.11.105:138 Browse DomainAnnouncement (Op 12) on '%01%02__MSBROWSE__%02<01>' '\MAILSLOT\BROWSE' from 172.16.11.105:138 sign_outgoing_message: SENT SIG (seq: 31): sent SMB signature of [0000] A1 0A 55 7B 1A 46 30 26 ..U{.F0& [0000] 30 DA F9 E3 51 6C C3 45 0...Ql.E switch message SMBtrans (task_id 11526) sign_outgoing_message: SENT SIG (seq: 33): sent SMB signature of [0000] 67 C7 0D 88 70 9F AA 47 g...p..G [0000] 54 3A 9F B1 CF 5D 5E FB T:...]^. switch message SMBtrans (task_id 11526) sign_outgoing_message: SENT SIG (seq: 35): sent SMB signature of [0000] 8D B5 98 CC 75 DA 2C A6 ....u.,. [0000] 3C 6E E6 1D 79 2B 02 D8 ..T... [0000] 37 AE 35 6C 56 B2 87 7C 7.5lV..| switch message SMBreadX (task_id 11526) sign_outgoing_message: SENT SIG (seq: 59): sent SMB signature of [0000] 04 67 9B 8C 57 68 6E 2A .g..Whn* [0000] 31 16 E5 F2 FA D8 9E 5A 1......Z switch message SMBtrans (task_id 11526) ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes sign_outgoing_message: SENT SIG (seq: 61): sent SMB signature of [0000] FC EE 02 D1 FD B5 B0 59 .......Y [0000] F8 D4 52 4D 29 58 6E BA ..RM)Xn. switch message SMBtrans (task_id 11526) sign_outgoing_message: SENT SIG (seq: 63): sent SMB signature of [0000] 45 B5 9B B9 AF E1 5C CD E.....\. [0000] B2 E4 E8 8B BE 9A 84 8E ........ switch message SMBtrans (task_id 11526) sign_outgoing_message: SENT SIG (seq: 65): sent SMB signature of [0000] 30 9C A9 19 A9 47 13 11 0....G.. [0000] 72 DB DB 0B 62 44 DB 41 r...bD.A switch message SMBtrans (task_id 11526) sign_outgoing_message: SENT SIG (seq: 67): sent SMB signature of [0000] DD 1A 39 AE 7E 59 D5 CB ..9.~Y.. [0000] FC 6A E2 89 5F 82 DC D4 .j.._... switch message SMBtrans (task_id 11526) sign_outgoing_message: SENT SIG (seq: 69): sent SMB signature of [0000] B9 4D CF AA 03 04 79 47 .M....yG [0000] D6 D0 84 4A C3 5E 76 8B ...J.^v. switch message SMBtrans (task_id 11526) ldb: objectclass_modify ldb: password_hash_modify ldb: objectguid_add_record sign_outgoing_message: SENT SIG (seq: 71): sent SMB signature of [0000] F4 02 E6 60 16 11 8B FF ...`.... [0000] 5B 03 E8 BA 38 9F 51 49 [...8.QI switch message SMBtrans (task_id 11526) sign_outgoing_message: SENT SIG (seq: 73): sent SMB signature of [0000] 1A 0D 30 DA B7 51 EE A3 ..0..Q.. [0000] C3 08 E3 58 55 70 C5 02 ...XUp.. switch message SMBtrans (task_id 11526) sign_outgoing_message: SENT SIG (seq: 75): sent SMB signature of [0000] 03 61 A0 68 D3 A9 9C 4A .a.h...J [0000] 4A 0D CA 6E 7A 83 E2 A0 J..nz... switch message SMBtrans (task_id 11526) sign_outgoing_message: SENT SIG (seq: 77): sent SMB signature of [0000] CD 53 A0 D8 94 DF B6 24 .S.....$ [0000] 8E D6 89 F4 C5 39 FA A4 .....9.. switch message SMBclose (task_id 11526) sign_outgoing_message: SENT SIG (seq: 79): sent SMB signature of [0000] A2 24 5A 8B 63 99 DB A1 .$Z.c... [0000] 6B 4D E2 E2 FE 03 E4 B4 kM...... switch message SMBtrans (task_id 11526) sign_outgoing_message: SENT SIG (seq: 81): sent SMB signature of [0000] AF FF F1 68 12 D7 3A C0 ...h..:. [0000] 8A B4 A5 86 D7 E2 BB D5 ........ switch message SMBclose (task_id 11526) sign_outgoing_message: SENT SIG (seq: 83): sent SMB signature of [0000] EB 05 E7 82 45 10 DA 23 ....E..# [0000] 87 87 65 3E 33 55 6F 65 ..e>3Uoe switch message SMBulogoffX (task_id 11526) sign_outgoing_message: SENT SIG (seq: 85): sent SMB signature of [0000] 3A 5F 17 CB 48 E0 D6 36 :_..H..6 [0000] 47 2F 86 C2 C2 78 C6 7E G/...x.~ switch message SMBtdis (task_id 11526) 172.16.11.105 closed connection to service IPC$ sign_outgoing_message: SENT SIG (seq: 87): sent SMB signature of [0000] 63 A5 41 73 67 E3 2F 31 c.Asg./1 standard_terminate: reason[NT_STATUS_END_OF_FILE]