[2010/03/11 08:05:57, 0] lib/util_sock.c:write_data(562) write_data: write failure in writing to client 10.1.1.15. Error Connection reset by peer [2010/03/11 08:05:57, 0] lib/util_sock.c:send_smb(761) Error writing 4 bytes to client. -1. (Connection reset by peer) [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/03/11 08:05:57, 3] smbd/connection.c:yield_connection(69) Yielding connection to [2010/03/11 08:05:57, 3] smbd/connection.c:yield_connection(76) yield_connection: tdb_delete for name failed with error Record does not exist. [2010/03/11 08:05:57, 3] smbd/server.c:exit_server_common(768) Server exit (process_smb: send_smb failed.) [2010/03/11 08:05:57, 3] auth/auth.c:check_ntlm_password(221) check_ntlm_password: Checking password for unmapped user []\[]@[SERVER3] with the new password interface [2010/03/11 08:05:57, 3] auth/auth.c:check_ntlm_password(224) check_ntlm_password: mapped user is: [SOMEDOMAIN]\[]@[SERVER3] [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/03/11 08:05:57, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/03/11 08:05:57, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/03/11 08:05:57, 3] auth/auth.c:check_ntlm_password(270) check_ntlm_password: guest authentication for user [] succeeded [2010/03/11 08:05:57, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1107) fetch gid from cache 10747 -> S-1-5-32-544 [2010/03/11 08:05:57, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1107) fetch gid from cache 10748 -> S-1-5-32-545 [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/03/11 08:05:57, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/03/11 08:05:57, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-21-1548514525-1597833445-1171576397-501] [2010/03/11 08:05:57, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-2] [2010/03/11 08:05:57, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2010/03/11 08:05:57, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(338) NTLMSSP Sign/Seal - Initialising with flags: [2010/03/11 08:05:57, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xa2088205 [2010/03/11 08:05:57, 3] smbd/password.c:register_vuid(304) User name: nobody Real name: nobody [2010/03/11 08:05:57, 3] smbd/password.c:register_vuid(325) UNIX uid 65534 is UNIX user nobody, and will be vuid 101 [2010/03/11 08:05:57, 3] smbd/process.c:process_smb(1083) Transaction 3 of length 76 [2010/03/11 08:05:57, 3] smbd/process.c:switch_message(932) switch message SMBtconX (pid 12645) conn 0x0 [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/03/11 08:05:57, 3] smbd/service.c:make_connection_snum(815) Connect path is '/tmp' for service [IPC$] [2010/03/11 08:05:57, 3] lib/util_seaccess.c:se_access_check(250) [2010/03/11 08:05:57, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1548514525-1597833445-1171576397-501 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 [2010/03/11 08:05:57, 3] smbd/vfs.c:vfs_init_default(95) Initialising default vfs hooks [2010/03/11 08:05:57, 3] smbd/vfs.c:vfs_init_custom(128) Initialising custom vfs hooks from [/[Default VFS]/] [2010/03/11 08:05:57, 3] lib/util_seaccess.c:se_access_check(250) [2010/03/11 08:05:57, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1548514525-1597833445-1171576397-501 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2010/03/11 08:05:57, 3] smbd/service.c:make_connection_snum(1042) SERVER3 (10.1.1.15) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 12645) [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/03/11 08:05:57, 3] smbd/reply.c:reply_tcon_and_X(574) tconX service=IPC$ [2010/03/11 08:05:57, 3] smbd/process.c:process_smb(1083) Transaction 4 of length 80 [2010/03/11 08:05:57, 3] smbd/process.c:switch_message(932) switch message SMBtrans2 (pid 12645) conn 0xac4040 [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2010/03/11 08:05:57, 3] smbd/error.c:error_packet_set(106) error packet at smbd/trans2.c(6602) cmd=50 (SMBtrans2) NT_STATUS_NETWORK_ACCESS_DENIED [2010/03/11 08:05:57, 3] smbd/process.c:process_smb(1083) Transaction 5 of length 94 [2010/03/11 08:05:57, 3] smbd/process.c:switch_message(932) switch message SMBtrans2 (pid 12645) conn 0xac4040 [2010/03/11 08:05:57, 3] smbd/msdfs.c:get_referred_path(633) get_referred_path: |apps| in dfs path \sambaserver\apps is not a dfs root. [2010/03/11 08:05:57, 3] smbd/error.c:error_packet_set(106) error packet at smbd/trans2.c(6307) cmd=50 (SMBtrans2) NT_STATUS_NOT_FOUND [2010/03/11 08:05:57, 3] smbd/process.c:process_smb(1083) Transaction 6 of length 270 [2010/03/11 08:05:57, 3] smbd/process.c:switch_message(932) switch message SMBsesssetupX (pid 12645) conn 0x0 [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/03/11 08:05:57, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1253) wct=12 flg2=0xc807 [2010/03/11 08:05:57, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1038) Doing spnego session setup [2010/03/11 08:05:57, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1069) NativeOS=[Windows Server 2003 3790 Service Pack 2] NativeLanMan=[] PrimaryDomain=[Windows Server 2003 5.2] [2010/03/11 08:05:57, 3] smbd/sesssetup.c:reply_spnego_negotiate(697) reply_spnego_negotiate: Got secblob of size 40 [2010/03/11 08:05:57, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xa2088207 [2010/03/11 08:05:57, 3] smbd/process.c:process_smb(1083) Transaction 7 of length 378 [2010/03/11 08:05:57, 3] smbd/process.c:switch_message(932) switch message SMBsesssetupX (pid 12645) conn 0x0 [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/03/11 08:05:57, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1253) wct=12 flg2=0xc807 [2010/03/11 08:05:57, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1038) Doing spnego session setup [2010/03/11 08:05:57, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1069) NativeOS=[Windows Server 2003 3790 Service Pack 2] NativeLanMan=[] PrimaryDomain=[Windows Server 2003 5.2] [2010/03/11 08:05:57, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(739) Got user=[someuser] domain=[SOMEDOMAIN] workstation=[SERVER3] len1=24 len2=24 [2010/03/11 08:05:57, 3] auth/auth.c:check_ntlm_password(221) check_ntlm_password: Checking password for unmapped user [SOMEDOMAIN]\[someuser]@[SERVER3] with the new password interface [2010/03/11 08:05:57, 3] auth/auth.c:check_ntlm_password(224) check_ntlm_password: mapped user is: [SOMEDOMAIN]\[someuser]@[SERVER3] [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/03/11 08:05:57, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/03/11 08:05:57, 3] passdb/lookup_sid.c:store_gid_sid_cache(1151) store_gid_sid_cache: gid 10001 in cache -> S-1-5-21-1870800502-1360593094-619646970-513 [2010/03/11 08:05:57, 3] auth/auth.c:check_ntlm_password(270) check_ntlm_password: winbind authentication for user [someuser] succeeded [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/03/11 08:05:57, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/03/11 08:05:57, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/03/11 08:05:57, 2] auth/auth.c:check_ntlm_password(309) check_ntlm_password: authentication for user [someuser] -> [someuser] -> [SOMEDOMAIN+someuser] succeeded