сделал пару попыток зайти в шару и перед снятием логов остановил сервисы smb, nmb, winbind.
привожу логи
[2012/03/15 15:08:38.034247, 3] smbd/oplock.c:895(init_oplocks)
init_oplocks: initializing messages.
[2012/03/15 15:08:38.046342, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks)
Linux kernel oplocks enabled
[2012/03/15 15:08:38.046515, 3] smbd/process.c:1489(process_smb)
Transaction 0 of length 137 (0 toread)
[2012/03/15 15:08:38.046574, 3] smbd/process.c:1298(switch_message)
switch message SMBnegprot (pid 1662) conn 0x0
[2012/03/15 15:08:38.046616, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.058035, 3] smbd/negprot.c:587(reply_negprot)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2012/03/15 15:08:38.058097, 3] smbd/negprot.c:587(reply_negprot)
Requested protocol [LANMAN1.0]
[2012/03/15 15:08:38.058134, 3] smbd/negprot.c:587(reply_negprot)
Requested protocol [Windows for Workgroups 3.1a]
[2012/03/15 15:08:38.058183, 3] smbd/negprot.c:587(reply_negprot)
Requested protocol [LM1.2X002]
[2012/03/15 15:08:38.058217, 3] smbd/negprot.c:587(reply_negprot)
Requested protocol [LANMAN2.1]
[2012/03/15 15:08:38.058247, 3] smbd/negprot.c:587(reply_negprot)
Requested protocol [NT LM 0.12]
[2012/03/15 15:08:38.058751, 3] smbd/negprot.c:405(reply_nt1)
using SPNEGO
[2012/03/15 15:08:38.058797, 3] smbd/negprot.c:692(reply_negprot)
Selected protocol NT LM 0.12
[2012/03/15 15:08:38.061070, 3] smbd/process.c:1489(process_smb)
Transaction 1 of length 1704 (0 toread)
[2012/03/15 15:08:38.061125, 3] smbd/process.c:1298(switch_message)
switch message SMBsesssetupX (pid 1662) conn 0x0
[2012/03/15 15:08:38.061157, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.062509, 3] smbd/sesssetup.c:1458(reply_sesssetup_and_X)
wct=12 flg2=0xc807
[2012/03/15 15:08:38.062576, 2] smbd/sesssetup.c:1413(setup_new_vc_session)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2012/03/15 15:08:38.062611, 3] smbd/sesssetup.c:1212(reply_sesssetup_and_X_spnego)
Doing spnego session setup
[2012/03/15 15:08:38.062649, 3] smbd/sesssetup.c:1254(reply_sesssetup_and_X_spnego)
NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2012/03/15 15:08:38.062752, 3] smbd/sesssetup.c:806(reply_spnego_negotiate)
reply_spnego_negotiate: Got secblob of size 1558
[2012/03/15 15:08:38.138072, 3] libads/authdata.c:304(decode_pac_data)
Found account name from PAC: troxxx [Х Троххх]
[2012/03/15 15:08:38.138206, 3] smbd/sesssetup.c:338(reply_spnego_kerberos)
Ticket name is [troxxx@NEX.LOCAL]
[2012/03/15 15:08:38.163618, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.163681, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.163716, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.164721, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.164805, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-926604562-1521242566-298935221-1103]
[2012/03/15 15:08:38.164858, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-926604562-1521242566-298935221-513]
[2012/03/15 15:08:38.164910, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-2]
[2012/03/15 15:08:38.164999, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-11]
[2012/03/15 15:08:38.165043, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-926604562-1521242566-298935221-1677]
[2012/03/15 15:08:38.165086, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-926604562-1521242566-298935221-1637]
[2012/03/15 15:08:38.165130, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-926604562-1521242566-298935221-3102]
[2012/03/15 15:08:38.165186, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-21-926604562-1521242566-298935221-1644]
[2012/03/15 15:08:38.165229, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-32-545]
[2012/03/15 15:08:38.165400, 3] smbd/password.c:282(register_existing_vuid)
register_existing_vuid: User name: NEX\troxxx Real name: Х Троххх
[2012/03/15 15:08:38.165446, 3] smbd/password.c:292(register_existing_vuid)
register_existing_vuid: UNIX uid 10046 is UNIX user NEX\troxxx, and will be vuid 101
[2012/03/15 15:08:38.165969, 3] smbd/password.c:223(register_homes_share)
Adding homes service for user 'NEX\troxxx' using home directory: '/home/NEX/troxxx'
[2012/03/15 15:08:38.167568, 3] smbd/process.c:1489(process_smb)
Transaction 2 of length 84 (0 toread)
[2012/03/15 15:08:38.167627, 3] smbd/process.c:1298(switch_message)
switch message SMBtconX (pid 1662) conn 0x0
[2012/03/15 15:08:38.167663, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.167771, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.167810, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.167839, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.167896, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.167980, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.168015, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.168044, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.168094, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.168156, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.168190, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.168220, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.168268, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.168339, 3] smbd/service.c:807(make_connection_snum)
Connect path is '/tmp' for service [IPC$]
[2012/03/15 15:08:38.168416, 3] smbd/vfs.c:97(vfs_init_default)
Initialising default vfs hooks
[2012/03/15 15:08:38.168470, 3] smbd/vfs.c:122(vfs_init_custom)
Initialising custom vfs hooks from [/[Default VFS]/]
[2012/03/15 15:08:38.168595, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.168634, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.168663, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.168716, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.168751, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.168780, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.168808, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.168854, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.168899, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.168972, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.169004, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.169056, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.169122, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (10046, 10005) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.169200, 3] smbd/service.c:1070(make_connection_snum)
__ffff_192.168.3.33 (::ffff:192.168.3.33) connect to service IPC$ initially as user NEX\troxxx (uid=10046, gid=10005) (pid 1662)
[2012/03/15 15:08:38.169245, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.169290, 3] smbd/reply.c:865(reply_tcon_and_X)
tconX service=IPC$
[2012/03/15 15:08:38.172450, 3] smbd/process.c:1489(process_smb)
Transaction 3 of length 104 (0 toread)
[2012/03/15 15:08:38.172472, 3] smbd/process.c:1298(switch_message)
switch message SMBntcreateX (pid 1662) conn 0x26fa1b0
[2012/03/15 15:08:38.172486, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (10046, 10005) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.185489, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(10046, 10005) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.185544, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.185575, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.185636, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (10046, 10005) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.185673, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(10046, 10005) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.185707, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.185736, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.185787, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (10046, 10005) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.185835, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(10046, 10005) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.185870, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.185899, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.185992, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (10046, 10005) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.187166, 3] smbd/process.c:1489(process_smb)
Transaction 4 of length 76 (0 toread)
[2012/03/15 15:08:38.187220, 3] smbd/process.c:1298(switch_message)
switch message SMBtrans2 (pid 1662) conn 0x26fa1b0
[2012/03/15 15:08:38.187991, 3] smbd/process.c:1489(process_smb)
Transaction 5 of length 184 (0 toread)
[2012/03/15 15:08:38.188043, 3] smbd/process.c:1298(switch_message)
switch message SMBwriteX (pid 1662) conn 0x26fa1b0
[2012/03/15 15:08:38.188132, 3] rpc_server/srv_pipe.c:1668(api_pipe_bind_req)
api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc
[2012/03/15 15:08:38.188181, 3] rpc_server/srv_pipe.c:998(check_bind_req)
check_bind_req for \srvsvc
[2012/03/15 15:08:38.188243, 3] smbd/pipes.c:352(pipe_write_andx_done)
writeX-IPC nwritten=116
[2012/03/15 15:08:38.188679, 3] smbd/process.c:1489(process_smb)
Transaction 6 of length 63 (0 toread)
[2012/03/15 15:08:38.188729, 3] smbd/process.c:1298(switch_message)
switch message SMBreadX (pid 1662) conn 0x26fa1b0
[2012/03/15 15:08:38.188781, 3] smbd/pipes.c:462(pipe_read_andx_done)
readX-IPC min=1024 max=1024 nread=68
[2012/03/15 15:08:38.189466, 3] smbd/process.c:1489(process_smb)
Transaction 7 of length 176 (0 toread)
[2012/03/15 15:08:38.189517, 3] smbd/process.c:1298(switch_message)
switch message SMBtrans (pid 1662) conn 0x26fa1b0
[2012/03/15 15:08:38.189566, 3] smbd/ipc.c:545(handle_trans)
trans <\PIPE\> data=88 params=0 setup=2
[2012/03/15 15:08:38.189609, 3] smbd/ipc.c:496(named_pipe)
named pipe command on <> name
[2012/03/15 15:08:38.189643, 3] smbd/ipc.c:460(api_fd_reply)
Got API command 0x26 on pipe "srvsvc" (pnum 1bc8)
[2012/03/15 15:08:38.189684, 3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
free_pipe_context: destroying talloc pool of size 120
[2012/03/15 15:08:38.189749, 3] rpc_server/srv_pipe.c:2415(api_rpcTNP)
api_rpcTNP: rpc command: SRVSVC_NETSHAREENUMALL
[2012/03/15 15:08:38.201585, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(10046, 10005) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.201646, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.201677, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.201735, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (10046, 10005) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.207912, 3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
free_pipe_context: destroying talloc pool of size 130
[2012/03/15 15:08:38.208575, 3] smbd/process.c:1489(process_smb)
Transaction 8 of length 45 (0 toread)
[2012/03/15 15:08:38.208627, 3] smbd/process.c:1298(switch_message)
switch message SMBclose (pid 1662) conn 0x26fa1b0
[2012/03/15 15:08:38.208665, 3] smbd/reply.c:4653(reply_close)
close fd=-1 fnum=7112 (numopen=1)
[2012/03/15 15:08:38.294618, 3] smbd/process.c:1489(process_smb)
Transaction 9 of length 100 (0 toread)
[2012/03/15 15:08:38.294677, 3] smbd/process.c:1298(switch_message)
switch message SMBtrans2 (pid 1662) conn 0x26fa1b0
[2012/03/15 15:08:38.294750, 3] smbd/msdfs.c:840(get_referred_path)
get_referred_path: |zzz| in dfs path \Centos2\zzz is not a dfs root.
[2012/03/15 15:08:38.294789, 3] smbd/error.c:80(error_packet_set)
error packet at smbd/trans2.c(8056) cmd=50 (SMBtrans2) NT_STATUS_NOT_FOUND
[2012/03/15 15:08:38.296416, 3] smbd/process.c:1489(process_smb)
Transaction 10 of length 82 (0 toread)
[2012/03/15 15:08:38.296470, 3] smbd/process.c:1298(switch_message)
switch message SMBtconX (pid 1662) conn 0x0
[2012/03/15 15:08:38.296501, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.296572, 3] lib/util_sid.c:228(string_to_sid)
string_to_sid: Sid troxxx does not start with 'S-'.
[2012/03/15 15:08:38.296635, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.296669, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.296698, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.296782, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.296818, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.296847, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.296875, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.297016, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.303230, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.303285, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.303317, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.303376, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.303414, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.303444, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.303472, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.303518, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.303569, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.303601, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.303629, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.303690, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.303764, 3] smbd/service.c:807(make_connection_snum)
Connect path is '/ZZZ/' for service [ZZZ]
[2012/03/15 15:08:38.303818, 3] smbd/vfs.c:97(vfs_init_default)
Initialising default vfs hooks
[2012/03/15 15:08:38.303850, 3] smbd/vfs.c:122(vfs_init_custom)
Initialising custom vfs hooks from [/[Default VFS]/]
[2012/03/15 15:08:38.304749, 3] lib/util_sid.c:228(string_to_sid)
string_to_sid: Sid troxxx does not start with 'S-'.
[2012/03/15 15:08:38.304805, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.304837, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.304866, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.304978, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.305027, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.305057, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.305085, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.305179, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.305852, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.305902, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.305980, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.306037, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.306073, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.306103, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.306138, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.306190, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.306238, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.306270, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/03/15 15:08:38.306299, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/03/15 15:08:38.306346, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.306393, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (10046, 10005) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.306463, 1] smbd/service.c:1070(make_connection_snum)
__ffff_192.168.3.33 (::ffff:192.168.3.33) connect to service ZZZ initially as user NEX\troxxx (uid=10046, gid=10005) (pid 1662)
[2012/03/15 15:08:38.306508, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:38.306559, 3] smbd/reply.c:865(reply_tcon_and_X)
tconX service=ZZZ
[2012/03/15 15:08:39.000389, 3] smbd/process.c:1489(process_smb)
Transaction 11 of length 80 (0 toread)
[2012/03/15 15:08:39.000501, 3] smbd/process.c:1298(switch_message)
switch message SMBtrans2 (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:39.000548, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (10046, 10005) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:39.000622, 3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
[2012/03/15 15:08:39.000715, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:39.000766, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:39.000828, 3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
[2012/03/15 15:08:39.001362, 3] smbd/process.c:1489(process_smb)
Transaction 12 of length 80 (0 toread)
[2012/03/15 15:08:39.001416, 3] smbd/process.c:1298(switch_message)
switch message SMBtrans2 (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:39.001451, 3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1005
[2012/03/15 15:08:39.001491, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:39.001527, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:39.001567, 3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
call_trans2qfilepathinfo . (fnum = -1) level=1005 call=5 total_data=0
[2012/03/15 15:08:39.153133, 3] smbd/process.c:1489(process_smb)
Transaction 13 of length 90 (0 toread)
[2012/03/15 15:08:39.153207, 3] smbd/process.c:1298(switch_message)
switch message SMBntcreateX (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:39.153255, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:39.153294, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:39.153338, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:39.153374, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:39.155226, 3] smbd/process.c:1489(process_smb)
Transaction 14 of length 114 (0 toread)
[2012/03/15 15:08:39.155283, 3] smbd/process.c:1298(switch_message)
switch message SMBntcreateX (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:39.155878, 3] smbd/filename.c:945(get_real_filename_full_scan)
scan dir didn't open dir [.]
[2012/03/15 15:08:39.155968, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [desktop.ini] [/ZZZ]
[2012/03/15 15:08:39.156020, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: desktop.ini reduced to /ZZZ/desktop.ini
[2012/03/15 15:08:39.156052, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [desktop.ini] [/ZZZ]
[2012/03/15 15:08:39.156094, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: desktop.ini reduced to /ZZZ/desktop.ini
[2012/03/15 15:08:39.156140, 3] smbd/dosmode.c:166(unix_mode)
unix_mode(desktop.ini) returning 0766
[2012/03/15 15:08:39.156174, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [desktop.ini] [/ZZZ]
[2012/03/15 15:08:39.156216, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: desktop.ini reduced to /ZZZ/desktop.ini
[2012/03/15 15:08:39.156270, 3] smbd/error.c:80(error_packet_set)
error packet at smbd/error.c(160) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND
[2012/03/15 15:08:39.156404, 3] smbd/process.c:1489(process_smb)
Transaction 15 of length 76 (0 toread)
[2012/03/15 15:08:39.156450, 3] smbd/process.c:1298(switch_message)
switch message SMBtrans2 (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:39.156485, 3] smbd/trans2.c:5013(call_trans2qfilepathinfo)
call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006
[2012/03/15 15:08:39.156540, 3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
call_trans2qfilepathinfo . (fnum = 7113) level=1006 call=7 total_data=0
[2012/03/15 15:08:39.157419, 3] smbd/process.c:1489(process_smb)
Transaction 16 of length 88 (0 toread)
[2012/03/15 15:08:39.157474, 3] smbd/process.c:1298(switch_message)
switch message SMBnttrans (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:39.157516, 3] smbd/nttrans.c:1654(call_nt_transact_notify_change)
call_nt_transact_notify_change
[2012/03/15 15:08:39.157559, 3] smbd/nttrans.c:1671(call_nt_transact_notify_change)
call_nt_transact_notify_change: notify change called on ., filter = FILE_NAME|DIR_NAME|ATTRIBUTES|LAST_WRITE, recursive = 0
[2012/03/15 15:08:39.157658, 1] smbd/notify_inotify.c:421(inotify_watch)
inotify_add_watch returned Отказано в доступе
[2012/03/15 15:08:39.197961, 3] smbd/process.c:1489(process_smb)
Transaction 17 of length 90 (0 toread)
[2012/03/15 15:08:39.198033, 3] smbd/process.c:1298(switch_message)
switch message SMBntcreateX (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:39.198079, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:39.198118, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:39.198157, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:39.198192, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:39.198228, 3] smbd/dosmode.c:166(unix_mode)
unix_mode(.) returning 0766
[2012/03/15 15:08:39.198260, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:39.198293, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:39.198360, 3] smbd/open.c:467(open_file)
Error opening file . (NT_STATUS_ACCESS_DENIED) (local_flags=0) (flags=0)
[2012/03/15 15:08:39.198419, 3] smbd/error.c:80(error_packet_set)
error packet at smbd/error.c(160) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
[2012/03/15 15:08:39.200690, 3] smbd/process.c:1489(process_smb)
Transaction 18 of length 90 (0 toread)
[2012/03/15 15:08:39.200745, 3] smbd/process.c:1298(switch_message)
switch message SMBntcreateX (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:39.200788, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:39.200825, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:39.200856, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:39.200889, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:39.200958, 3] smbd/dosmode.c:166(unix_mode)
unix_mode(.) returning 0766
[2012/03/15 15:08:39.200999, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:39.201033, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:39.201084, 3] smbd/open.c:467(open_file)
Error opening file . (NT_STATUS_ACCESS_DENIED) (local_flags=0) (flags=0)
[2012/03/15 15:08:39.201128, 3] smbd/error.c:80(error_packet_set)
error packet at smbd/error.c(160) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
[2012/03/15 15:08:39.202536, 3] smbd/process.c:1489(process_smb)
Transaction 19 of length 80 (0 toread)
[2012/03/15 15:08:39.202591, 3] smbd/process.c:1298(switch_message)
switch message SMBtrans2 (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:39.202627, 3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
[2012/03/15 15:08:39.202667, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:39.202703, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:39.202745, 3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
[2012/03/15 15:08:39.203453, 3] smbd/process.c:1489(process_smb)
Transaction 20 of length 80 (0 toread)
[2012/03/15 15:08:39.203508, 3] smbd/process.c:1298(switch_message)
switch message SMBtrans2 (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:39.203543, 3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1005
[2012/03/15 15:08:39.203582, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:39.203618, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:39.203660, 3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
call_trans2qfilepathinfo . (fnum = -1) level=1005 call=5 total_data=0
[2012/03/15 15:08:42.281784, 3] smbd/process.c:1489(process_smb)
Transaction 21 of length 90 (0 toread)
[2012/03/15 15:08:42.281858, 3] smbd/process.c:1298(switch_message)
switch message SMBntcreateX (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:42.281966, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:42.282018, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:42.282051, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:42.282085, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:42.282125, 3] smbd/dosmode.c:166(unix_mode)
unix_mode(.) returning 0766
[2012/03/15 15:08:42.282158, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:42.282190, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:42.282258, 3] smbd/open.c:467(open_file)
Error opening file . (NT_STATUS_ACCESS_DENIED) (local_flags=0) (flags=0)
[2012/03/15 15:08:42.282306, 3] smbd/error.c:80(error_packet_set)
error packet at smbd/error.c(160) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
[2012/03/15 15:08:42.283943, 3] smbd/process.c:1489(process_smb)
Transaction 22 of length 40 (0 toread)
[2012/03/15 15:08:42.284000, 3] smbd/process.c:1298(switch_message)
switch message SMBntcancel (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:42.284033, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:42.284097, 3] smbd/error.c:80(error_packet_set)
error packet at smbd/nttrans.c(73) cmd=160 (SMBnttrans) NT_STATUS_CANCELLED
[2012/03/15 15:08:42.284197, 3] smbd/nttrans.c:1311(reply_ntcancel)
reply_ntcancel: cancel called on mid = 13760.
[2012/03/15 15:08:42.284866, 3] smbd/process.c:1489(process_smb)
Transaction 23 of length 45 (0 toread)
[2012/03/15 15:08:42.284951, 3] smbd/process.c:1298(switch_message)
switch message SMBclose (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:42.284997, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (10046, 10005) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:42.285048, 3] smbd/reply.c:4643(reply_close)
close directory fnum=7113
[2012/03/15 15:08:43.294396, 3] smbd/process.c:1489(process_smb)
Transaction 24 of length 80 (0 toread)
[2012/03/15 15:08:43.294496, 3] smbd/process.c:1298(switch_message)
switch message SMBtrans2 (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:43.294540, 3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
[2012/03/15 15:08:43.294590, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:43.294630, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:43.294680, 3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
[2012/03/15 15:08:43.295217, 3] smbd/process.c:1489(process_smb)
Transaction 25 of length 80 (0 toread)
[2012/03/15 15:08:43.295271, 3] smbd/process.c:1298(switch_message)
switch message SMBtrans2 (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:43.295306, 3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1005
[2012/03/15 15:08:43.295346, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:43.295382, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:43.295421, 3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
call_trans2qfilepathinfo . (fnum = -1) level=1005 call=5 total_data=0
[2012/03/15 15:08:43.432265, 3] smbd/process.c:1489(process_smb)
Transaction 26 of length 90 (0 toread)
[2012/03/15 15:08:43.432333, 3] smbd/process.c:1298(switch_message)
switch message SMBntcreateX (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:43.432379, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:43.432418, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:43.432450, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:43.432484, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:43.433116, 3] smbd/process.c:1489(process_smb)
Transaction 27 of length 88 (0 toread)
[2012/03/15 15:08:43.433171, 3] smbd/process.c:1298(switch_message)
switch message SMBnttrans (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:43.433208, 3] smbd/nttrans.c:1654(call_nt_transact_notify_change)
call_nt_transact_notify_change
[2012/03/15 15:08:43.433247, 3] smbd/nttrans.c:1671(call_nt_transact_notify_change)
call_nt_transact_notify_change: notify change called on ., filter = FILE_NAME|DIR_NAME|ATTRIBUTES|LAST_WRITE, recursive = 0
[2012/03/15 15:08:43.433305, 1] smbd/notify_inotify.c:421(inotify_watch)
inotify_add_watch returned Отказано в доступе
[2012/03/15 15:08:43.473540, 3] smbd/process.c:1489(process_smb)
Transaction 28 of length 90 (0 toread)
[2012/03/15 15:08:43.473603, 3] smbd/process.c:1298(switch_message)
switch message SMBntcreateX (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:43.473647, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:43.473685, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:43.473717, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:43.473750, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:43.473786, 3] smbd/dosmode.c:166(unix_mode)
unix_mode(.) returning 0766
[2012/03/15 15:08:43.473818, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:43.473850, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:43.473908, 3] smbd/open.c:467(open_file)
Error opening file . (NT_STATUS_ACCESS_DENIED) (local_flags=0) (flags=0)
[2012/03/15 15:08:43.473997, 3] smbd/error.c:80(error_packet_set)
error packet at smbd/error.c(160) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
[2012/03/15 15:08:43.477247, 3] smbd/process.c:1489(process_smb)
Transaction 29 of length 90 (0 toread)
[2012/03/15 15:08:43.477303, 3] smbd/process.c:1298(switch_message)
switch message SMBntcreateX (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:43.477345, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:43.477382, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:43.477413, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:43.477446, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:43.477481, 3] smbd/dosmode.c:166(unix_mode)
unix_mode(.) returning 0766
[2012/03/15 15:08:43.477512, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:43.477544, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:43.477595, 3] smbd/open.c:467(open_file)
Error opening file . (NT_STATUS_ACCESS_DENIED) (local_flags=0) (flags=0)
[2012/03/15 15:08:43.477637, 3] smbd/error.c:80(error_packet_set)
error packet at smbd/error.c(160) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
[2012/03/15 15:08:43.478300, 3] smbd/process.c:1489(process_smb)
Transaction 30 of length 80 (0 toread)
[2012/03/15 15:08:43.478354, 3] smbd/process.c:1298(switch_message)
switch message SMBtrans2 (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:43.478390, 3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
[2012/03/15 15:08:43.478430, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:43.478466, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:43.478508, 3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
[2012/03/15 15:08:43.479649, 3] smbd/process.c:1489(process_smb)
Transaction 31 of length 80 (0 toread)
[2012/03/15 15:08:43.479704, 3] smbd/process.c:1298(switch_message)
switch message SMBtrans2 (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:43.479750, 3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1005
[2012/03/15 15:08:43.479790, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:43.479826, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:43.479867, 3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
call_trans2qfilepathinfo . (fnum = -1) level=1005 call=5 total_data=0
[2012/03/15 15:08:44.385024, 3] smbd/process.c:1489(process_smb)
Transaction 32 of length 90 (0 toread)
[2012/03/15 15:08:44.385127, 3] smbd/process.c:1298(switch_message)
switch message SMBntcreateX (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:44.385187, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:44.385230, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:44.385264, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:44.385298, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:44.385339, 3] smbd/dosmode.c:166(unix_mode)
unix_mode(.) returning 0766
[2012/03/15 15:08:44.385371, 3] smbd/vfs.c:881(check_reduced_name)
check_reduced_name [.] [/ZZZ]
[2012/03/15 15:08:44.385404, 3] smbd/vfs.c:1038(check_reduced_name)
check_reduced_name: . reduced to /ZZZ
[2012/03/15 15:08:44.385476, 3] smbd/open.c:467(open_file)
Error opening file . (NT_STATUS_ACCESS_DENIED) (local_flags=0) (flags=0)
[2012/03/15 15:08:44.385523, 3] smbd/error.c:80(error_packet_set)
error packet at smbd/error.c(160) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
[2012/03/15 15:08:44.387257, 3] smbd/process.c:1489(process_smb)
Transaction 33 of length 40 (0 toread)
[2012/03/15 15:08:44.387312, 3] smbd/process.c:1298(switch_message)
switch message SMBntcancel (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:44.387345, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:44.387401, 3] smbd/error.c:80(error_packet_set)
error packet at smbd/nttrans.c(73) cmd=160 (SMBnttrans) NT_STATUS_CANCELLED
[2012/03/15 15:08:44.387474, 3] smbd/nttrans.c:1311(reply_ntcancel)
reply_ntcancel: cancel called on mid = 14400.
[2012/03/15 15:08:44.388187, 3] smbd/process.c:1489(process_smb)
Transaction 34 of length 45 (0 toread)
[2012/03/15 15:08:44.388241, 3] smbd/process.c:1298(switch_message)
switch message SMBclose (pid 1662) conn 0xb73aefa0
[2012/03/15 15:08:44.388278, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (10046, 10005) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:44.388327, 3] smbd/reply.c:4643(reply_close)
close directory fnum=7118
[2012/03/15 15:08:53.949754, 3] smbd/process.c:1489(process_smb)
Transaction 35 of length 39 (0 toread)
[2012/03/15 15:08:53.949877, 3] smbd/process.c:1298(switch_message)
switch message SMBtdis (pid 1662) conn 0x26fa1b0
[2012/03/15 15:08:53.949914, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:53.950024, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:08:53.950063, 3] smbd/service.c:1251(close_cnum)
__ffff_192.168.3.33 (::ffff:192.168.3.33) closed connection to service IPC$
[2012/03/15 15:08:53.950103, 3] smbd/connection.c:31(yield_connection)
Yielding connection to IPC$
[2012/03/15 15:08:53.950214, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:09:38.090726, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:09:46.593856, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:09:46.593898, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:09:46.593914, 1] smbd/service.c:1251(close_cnum)
__ffff_192.168.3.33 (::ffff:192.168.3.33) closed connection to service ZZZ
[2012/03/15 15:09:46.593978, 3] smbd/connection.c:31(yield_connection)
Yielding connection to ZZZ
[2012/03/15 15:09:46.594022, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/03/15 15:09:46.594108, 3] smbd/connection.c:31(yield_connection)
Yielding connection to
[2012/03/15 15:09:46.594166, 3] smbd/server.c:923(exit_server_common)
Server exit (termination signal)