[2022/01/04 21:27:29.977108, 0] ../../source3/smbd/server.c:1784(main) smbd version 4.13.13-Debian started. Copyright Andrew Tridgell and the Samba Team 1992-2020 [2022/01/04 21:27:29.977711, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_config.c:45(global_dcesrv_context) global_dcesrv_context: Initializing DCE/RPC server context [2022/01/04 21:27:29.978538, 1] ../../source3/profile/profile_dummy.c:30(set_profile_level) INFO: Profiling support unavailable in this build. [2022/01/04 21:27:30.003937, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:734(dcesrv_init) dcesrv_init: Registering DCE/RPC endpoint servers [2022/01/04 21:27:30.003980, 3, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:2590(dcerpc_register_ep_server) DCERPC endpoint server 'winreg' registered [2022/01/04 21:27:30.003998, 3, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:2590(dcerpc_register_ep_server) DCERPC endpoint server 'srvsvc' registered [2022/01/04 21:27:30.004016, 3, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:2590(dcerpc_register_ep_server) DCERPC endpoint server 'lsarpc' registered [2022/01/04 21:27:30.004036, 3, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:2590(dcerpc_register_ep_server) DCERPC endpoint server 'samr' registered [2022/01/04 21:27:30.004053, 3, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:2590(dcerpc_register_ep_server) DCERPC endpoint server 'netdfs' registered [2022/01/04 21:27:30.004067, 3, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:2590(dcerpc_register_ep_server) DCERPC endpoint server 'dssetup' registered [2022/01/04 21:27:30.004084, 3, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:2590(dcerpc_register_ep_server) DCERPC endpoint server 'wkssvc' registered [2022/01/04 21:27:30.004107, 3, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:2590(dcerpc_register_ep_server) DCERPC endpoint server 'svcctl' registered [2022/01/04 21:27:30.004121, 3, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:2590(dcerpc_register_ep_server) DCERPC endpoint server 'ntsvcs' registered [2022/01/04 21:27:30.004135, 3, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:2590(dcerpc_register_ep_server) DCERPC endpoint server 'eventlog' registered [2022/01/04 21:27:30.004149, 3, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:2590(dcerpc_register_ep_server) DCERPC endpoint server 'initshutdown' registered [2022/01/04 21:27:30.004161, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:808(dcesrv_init) dcesrv_init: Initializing DCE/RPC modules [2022/01/04 21:27:30.004173, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/mdssvc/srv_mdssvc_nt.c:80(rpc_mdssvc_module_init) rpc_mdssvc_module_init: Registering mdsvc RPC service [2022/01/04 21:27:30.004186, 3, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_modules.c:64(register_rpc_module) register_rpc_module: Successfully added RPC module 'mdssvc' [2022/01/04 21:27:30.004241, 3, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:2590(dcerpc_register_ep_server) DCERPC endpoint server 'mdssvc' registered [2022/01/04 21:27:30.004258, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:842(dcesrv_init) dcesrv_init: Initializing DCE/RPC registered endpoint servers [2022/01/04 21:27:30.004291, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]' (single process required) [2022/01/04 21:27:30.004317, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ./librpc/gen_ndr/ndr_winreg_scompat.c:1147(winreg__check_register_in_endpoint) winreg__check_register_in_endpoint: Interface 'winreg' not registered in endpoint 'winreg' as service is embedded [2022/01/04 21:27:30.004337, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'winreg' registered on endpoint 'ncalrpc:' (single process required) [2022/01/04 21:27:30.004359, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]' (single process required) [2022/01/04 21:27:30.004374, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ./librpc/gen_ndr/ndr_srvsvc_scompat.c:1522(srvsvc__check_register_in_endpoint) srvsvc__check_register_in_endpoint: Interface 'srvsvc' not registered in endpoint 'srvsvc' as service is embedded [2022/01/04 21:27:30.004390, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'srvsvc' registered on endpoint 'ncalrpc:' (single process required) [2022/01/04 21:27:30.004409, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]' (single process required) [2022/01/04 21:27:30.004433, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' (single process required) [2022/01/04 21:27:30.004451, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]' (single process required) [2022/01/04 21:27:30.004467, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ./librpc/gen_ndr/ndr_lsa_scompat.c:2258(lsarpc__check_register_in_endpoint) lsarpc__check_register_in_endpoint: Interface 'lsarpc' not registered in endpoint 'lsarpc' as service is embedded [2022/01/04 21:27:30.004483, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'lsarpc' registered on endpoint 'ncalrpc:' (single process required) [2022/01/04 21:27:30.004507, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]' (single process required) [2022/01/04 21:27:30.004522, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ./librpc/gen_ndr/ndr_samr_scompat.c:2107(samr__check_register_in_endpoint) samr__check_register_in_endpoint: Interface 'samr' not registered in endpoint 'samr' as service is embedded [2022/01/04 21:27:30.004540, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'samr' registered on endpoint 'ncalrpc:' (single process required) [2022/01/04 21:27:30.004561, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'netdfs' registered on endpoint 'ncacn_np:[\pipe\netdfs]' (single process required) [2022/01/04 21:27:30.004580, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'netdfs' registered on endpoint 'ncalrpc:' (single process required) [2022/01/04 21:27:30.004602, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' (single process required) [2022/01/04 21:27:30.004622, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]' (single process required) [2022/01/04 21:27:30.004637, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ./librpc/gen_ndr/ndr_dssetup_scompat.c:430(dssetup__check_register_in_endpoint) dssetup__check_register_in_endpoint: Interface 'dssetup' not registered in endpoint 'dssetup' as service is embedded [2022/01/04 21:27:30.004654, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'dssetup' registered on endpoint 'ncalrpc:' (single process required) [2022/01/04 21:27:30.004673, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]' (single process required) [2022/01/04 21:27:30.004688, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ./librpc/gen_ndr/ndr_wkssvc_scompat.c:947(wkssvc__check_register_in_endpoint) wkssvc__check_register_in_endpoint: Interface 'wkssvc' not registered in endpoint 'wkssvc' as service is embedded [2022/01/04 21:27:30.004706, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'wkssvc' registered on endpoint 'ncalrpc:' (single process required) [2022/01/04 21:27:30.004795, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:261(make_internal_ncacn_conn) make_internal_ncacn_conn: Create pipe requested winreg [2022/01/04 21:27:30.004842, 4, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:307(make_internal_ncacn_conn) Created internal pipe winreg [2022/01/04 21:27:30.005025, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:446(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2022/01/04 21:27:30.005059, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:446(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2022/01/04 21:27:30.005088, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:446(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2022/01/04 21:27:30.005115, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:446(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2022/01/04 21:27:30.005142, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:446(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2022/01/04 21:27:30.005170, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:446(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2022/01/04 21:27:30.005200, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:446(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2022/01/04 21:27:30.005235, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:734(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler' [2022/01/04 21:27:30.005314, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Start] [2022/01/04 21:27:30.005355, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Type] [2022/01/04 21:27:30.005385, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ErrorControl] [2022/01/04 21:27:30.005417, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ObjectName] [2022/01/04 21:27:30.005448, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:DisplayName] [2022/01/04 21:27:30.005477, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ImagePath] [2022/01/04 21:27:30.005508, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Description] [2022/01/04 21:27:30.005553, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:734(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler\Security' [2022/01/04 21:27:30.005631, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security:Security] [2022/01/04 21:27:30.005682, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:734(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON' [2022/01/04 21:27:30.005746, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Start] [2022/01/04 21:27:30.005786, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Type] [2022/01/04 21:27:30.005816, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ErrorControl] [2022/01/04 21:27:30.005845, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ObjectName] [2022/01/04 21:27:30.005874, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:DisplayName] [2022/01/04 21:27:30.005902, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ImagePath] [2022/01/04 21:27:30.005935, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Description] [2022/01/04 21:27:30.005994, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:734(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' [2022/01/04 21:27:30.006072, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security:Security] [2022/01/04 21:27:30.006118, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:734(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' [2022/01/04 21:27:30.006181, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Start] [2022/01/04 21:27:30.006218, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Type] [2022/01/04 21:27:30.006247, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ErrorControl] [2022/01/04 21:27:30.006276, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ObjectName] [2022/01/04 21:27:30.006305, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:DisplayName] [2022/01/04 21:27:30.006336, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ImagePath] [2022/01/04 21:27:30.006365, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Description] [2022/01/04 21:27:30.006406, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:734(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' [2022/01/04 21:27:30.006480, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security:Security] [2022/01/04 21:27:30.006525, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:734(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS' [2022/01/04 21:27:30.006594, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Start] [2022/01/04 21:27:30.006636, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Type] [2022/01/04 21:27:30.006666, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ErrorControl] [2022/01/04 21:27:30.006696, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ObjectName] [2022/01/04 21:27:30.006726, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:DisplayName] [2022/01/04 21:27:30.006754, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ImagePath] [2022/01/04 21:27:30.006785, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Description] [2022/01/04 21:27:30.006827, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:734(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS\Security' [2022/01/04 21:27:30.006900, 8, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/winreg/srv_winreg_nt.c:766(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security:Security] [2022/01/04 21:27:30.006978, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'svcctl' registered on endpoint 'ncacn_np:[\pipe\svcctl]' (single process required) [2022/01/04 21:27:30.007001, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'svcctl' registered on endpoint 'ncalrpc:' (single process required) [2022/01/04 21:27:30.007022, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'ntsvcs' registered on endpoint 'ncacn_np:[\pipe\ntsvcs]' (single process required) [2022/01/04 21:27:30.007042, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'ntsvcs' registered on endpoint 'ncacn_np:[\pipe\plugplay]' (single process required) [2022/01/04 21:27:30.007059, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:261(make_internal_ncacn_conn) make_internal_ncacn_conn: Create pipe requested winreg [2022/01/04 21:27:30.007086, 4, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:307(make_internal_ncacn_conn) Created internal pipe winreg [2022/01/04 21:27:30.007320, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'eventlog' registered on endpoint 'ncacn_np:[\pipe\eventlog]' (single process required) [2022/01/04 21:27:30.007346, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'initshutdown' registered on endpoint 'ncacn_np:[\pipe\InitShutdown]' (single process required) [2022/01/04 21:27:30.007372, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'mdssvc' registered on endpoint 'ncacn_np:[\pipe\mdssvc]' (single process required) [2022/01/04 21:27:30.007396, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../librpc/rpc/dcesrv_core.c:411(dcesrv_interface_register) dcesrv_interface_register: Interface 'mdssvc' registered on endpoint 'ncalrpc:' (single process required) [2022/01/04 21:27:30.007409, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:851(dcesrv_init) dcesrv_init: Initializing DCE/RPC connection endpoints [2022/01/04 21:27:30.007424, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:185(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Setting up endpoint 'ncacn_np:[\pipe\mdssvc]' [2022/01/04 21:27:30.007475, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:149(dcesrv_create_ncacn_np_socket) dcesrv_create_ncacn_np_socket: Opened pipe socket fd 27 for mdssvc [2022/01/04 21:27:30.007490, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:210(dcesrv_setup_ncacn_np_socket) dcesrv_setup_ncacn_np_socket: Opened pipe socket fd 27 for \pipe\mdssvc [2022/01/04 21:27:30.007509, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:238(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Successfully listening on 'ncacn_np:[\pipe\mdssvc]' for 'mdssvc' 'mgmt' [2022/01/04 21:27:30.007529, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:185(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Setting up endpoint 'ncacn_np:[\pipe\InitShutdown]' [2022/01/04 21:27:30.007569, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:149(dcesrv_create_ncacn_np_socket) dcesrv_create_ncacn_np_socket: Opened pipe socket fd 28 for initshutdown [2022/01/04 21:27:30.007582, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:210(dcesrv_setup_ncacn_np_socket) dcesrv_setup_ncacn_np_socket: Opened pipe socket fd 28 for \pipe\InitShutdown [2022/01/04 21:27:30.007599, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:238(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Successfully listening on 'ncacn_np:[\pipe\InitShutdown]' for 'initshutdown' 'mgmt' [2022/01/04 21:27:30.007617, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:185(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Setting up endpoint 'ncacn_np:[\pipe\eventlog]' [2022/01/04 21:27:30.007656, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:149(dcesrv_create_ncacn_np_socket) dcesrv_create_ncacn_np_socket: Opened pipe socket fd 29 for eventlog [2022/01/04 21:27:30.007670, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:210(dcesrv_setup_ncacn_np_socket) dcesrv_setup_ncacn_np_socket: Opened pipe socket fd 29 for \pipe\eventlog [2022/01/04 21:27:30.007686, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:238(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Successfully listening on 'ncacn_np:[\pipe\eventlog]' for 'eventlog' 'mgmt' [2022/01/04 21:27:30.007704, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:185(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Setting up endpoint 'ncacn_np:[\pipe\plugplay]' [2022/01/04 21:27:30.007742, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:149(dcesrv_create_ncacn_np_socket) dcesrv_create_ncacn_np_socket: Opened pipe socket fd 30 for plugplay [2022/01/04 21:27:30.007759, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:210(dcesrv_setup_ncacn_np_socket) dcesrv_setup_ncacn_np_socket: Opened pipe socket fd 30 for \pipe\plugplay [2022/01/04 21:27:30.007776, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:238(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Successfully listening on 'ncacn_np:[\pipe\plugplay]' for 'ntsvcs' 'mgmt' [2022/01/04 21:27:30.007793, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:185(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Setting up endpoint 'ncacn_np:[\pipe\ntsvcs]' [2022/01/04 21:27:30.007832, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:149(dcesrv_create_ncacn_np_socket) dcesrv_create_ncacn_np_socket: Opened pipe socket fd 31 for ntsvcs [2022/01/04 21:27:30.007846, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:210(dcesrv_setup_ncacn_np_socket) dcesrv_setup_ncacn_np_socket: Opened pipe socket fd 31 for \pipe\ntsvcs [2022/01/04 21:27:30.007862, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:238(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Successfully listening on 'ncacn_np:[\pipe\ntsvcs]' for 'ntsvcs' 'mgmt' [2022/01/04 21:27:30.007879, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:185(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Setting up endpoint 'ncacn_np:[\pipe\svcctl]' [2022/01/04 21:27:30.007932, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:149(dcesrv_create_ncacn_np_socket) dcesrv_create_ncacn_np_socket: Opened pipe socket fd 32 for svcctl [2022/01/04 21:27:30.007948, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:210(dcesrv_setup_ncacn_np_socket) dcesrv_setup_ncacn_np_socket: Opened pipe socket fd 32 for \pipe\svcctl [2022/01/04 21:27:30.007965, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:238(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Successfully listening on 'ncacn_np:[\pipe\svcctl]' for 'svcctl' 'mgmt' [2022/01/04 21:27:30.007982, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:185(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Setting up endpoint 'ncacn_np:[\pipe\wkssvc]' [2022/01/04 21:27:30.008022, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:149(dcesrv_create_ncacn_np_socket) dcesrv_create_ncacn_np_socket: Opened pipe socket fd 33 for wkssvc [2022/01/04 21:27:30.008035, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:210(dcesrv_setup_ncacn_np_socket) dcesrv_setup_ncacn_np_socket: Opened pipe socket fd 33 for \pipe\wkssvc [2022/01/04 21:27:30.008051, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:238(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Successfully listening on 'ncacn_np:[\pipe\wkssvc]' for 'wkssvc' 'mgmt' [2022/01/04 21:27:30.008069, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:185(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Setting up endpoint 'ncacn_np:[\pipe\netdfs]' [2022/01/04 21:27:30.008108, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:149(dcesrv_create_ncacn_np_socket) dcesrv_create_ncacn_np_socket: Opened pipe socket fd 34 for netdfs [2022/01/04 21:27:30.008124, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:210(dcesrv_setup_ncacn_np_socket) dcesrv_setup_ncacn_np_socket: Opened pipe socket fd 34 for \pipe\netdfs [2022/01/04 21:27:30.008141, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:238(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Successfully listening on 'ncacn_np:[\pipe\netdfs]' for 'netdfs' 'mgmt' [2022/01/04 21:27:30.008158, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:185(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Setting up endpoint 'ncacn_np:[\pipe\samr]' [2022/01/04 21:27:30.008197, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:149(dcesrv_create_ncacn_np_socket) dcesrv_create_ncacn_np_socket: Opened pipe socket fd 35 for samr [2022/01/04 21:27:30.008211, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:210(dcesrv_setup_ncacn_np_socket) dcesrv_setup_ncacn_np_socket: Opened pipe socket fd 35 for \pipe\samr [2022/01/04 21:27:30.008227, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:238(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Successfully listening on 'ncacn_np:[\pipe\samr]' for 'samr' 'mgmt' [2022/01/04 21:27:30.008244, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:185(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Setting up endpoint 'ncacn_np:[\pipe\lsass]' [2022/01/04 21:27:30.008282, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:149(dcesrv_create_ncacn_np_socket) dcesrv_create_ncacn_np_socket: Opened pipe socket fd 36 for lsass [2022/01/04 21:27:30.008296, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:210(dcesrv_setup_ncacn_np_socket) dcesrv_setup_ncacn_np_socket: Opened pipe socket fd 36 for \pipe\lsass [2022/01/04 21:27:30.008312, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:238(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Successfully listening on 'ncacn_np:[\pipe\lsass]' for 'dssetup' 'lsarpc' 'mgmt' [2022/01/04 21:27:30.008330, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:185(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Setting up endpoint 'ncacn_np:[\pipe\lsarpc]' [2022/01/04 21:27:30.008369, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:149(dcesrv_create_ncacn_np_socket) dcesrv_create_ncacn_np_socket: Opened pipe socket fd 37 for lsarpc [2022/01/04 21:27:30.008383, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:210(dcesrv_setup_ncacn_np_socket) dcesrv_setup_ncacn_np_socket: Opened pipe socket fd 37 for \pipe\lsarpc [2022/01/04 21:27:30.008399, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:238(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Successfully listening on 'ncacn_np:[\pipe\lsarpc]' for 'dssetup' 'lsarpc' 'mgmt' [2022/01/04 21:27:30.008418, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:185(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Setting up endpoint 'ncacn_np:[\pipe\netlogon]' [2022/01/04 21:27:30.008456, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:149(dcesrv_create_ncacn_np_socket) dcesrv_create_ncacn_np_socket: Opened pipe socket fd 38 for netlogon [2022/01/04 21:27:30.008470, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:210(dcesrv_setup_ncacn_np_socket) dcesrv_setup_ncacn_np_socket: Opened pipe socket fd 38 for \pipe\netlogon [2022/01/04 21:27:30.008489, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:238(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Successfully listening on 'ncacn_np:[\pipe\netlogon]' for 'lsarpc' 'mgmt' [2022/01/04 21:27:30.008506, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:185(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Setting up endpoint 'ncacn_np:[\pipe\srvsvc]' [2022/01/04 21:27:30.008545, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:149(dcesrv_create_ncacn_np_socket) dcesrv_create_ncacn_np_socket: Opened pipe socket fd 39 for srvsvc [2022/01/04 21:27:30.008561, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:210(dcesrv_setup_ncacn_np_socket) dcesrv_setup_ncacn_np_socket: Opened pipe socket fd 39 for \pipe\srvsvc [2022/01/04 21:27:30.008577, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:238(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Successfully listening on 'ncacn_np:[\pipe\srvsvc]' for 'srvsvc' 'mgmt' [2022/01/04 21:27:30.008594, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:185(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Setting up endpoint 'ncalrpc:' [2022/01/04 21:27:30.008626, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:561(dcesrv_create_ncalrpc_socket) dcesrv_create_ncalrpc_socket: Opened ncalrpc socket fd '40' for '/var/run/samba/ncalrpc/DEFAULT' [2022/01/04 21:27:30.008646, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:238(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Successfully listening on 'ncalrpc:[DEFAULT]' for 'mdssvc' 'svcctl' 'wkssvc' 'dssetup' 'netdfs' 'samr' 'lsarpc' 'srvsvc' 'winreg' 'mgmt' [2022/01/04 21:27:30.008662, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:185(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Setting up endpoint 'ncacn_np:[\pipe\winreg]' [2022/01/04 21:27:30.008700, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:149(dcesrv_create_ncacn_np_socket) dcesrv_create_ncacn_np_socket: Opened pipe socket fd 41 for winreg [2022/01/04 21:27:30.008714, 10, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_server.c:210(dcesrv_setup_ncacn_np_socket) dcesrv_setup_ncacn_np_socket: Opened pipe socket fd 41 for \pipe\winreg [2022/01/04 21:27:30.008730, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_service_setup.c:238(dcesrv_setup_endpoint_sockets) dcesrv_setup_endpoint_sockets: Successfully listening on 'ncacn_np:[\pipe\winreg]' for 'winreg' 'mgmt' [2022/01/04 21:27:30.008778, 0] ../../lib/util/become_daemon.c:135(daemon_ready) daemon_ready: daemon 'smbd' finished starting up and ready to serve connections [2022/01/04 21:27:30.111399, 5, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:261(make_internal_ncacn_conn) make_internal_ncacn_conn: Create pipe requested winreg [2022/01/04 21:27:30.111437, 4, pid=46630, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:307(make_internal_ncacn_conn) Created internal pipe winreg [2022/01/04 21:27:30.115831, 1] ../../source3/printing/printer_list.c:234(printer_list_get_last_refresh) Failed to fetch record! [2022/01/04 21:27:35.631246, 1, pid=46642, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:992(make_external_rpc_pipe) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:27:35.633083, 1, pid=46642, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:992(make_external_rpc_pipe) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:27:51.005542, 1] ../../source3/smbd/process.c:555(receive_smb_talloc) receive_smb_raw_talloc failed for client ipv4:10.2.0.149:57432 read error = NT_STATUS_CONNECTION_RESET. [2022/01/04 21:28:17.510785, 1] ../../source3/smbd/process.c:555(receive_smb_talloc) receive_smb_raw_talloc failed for client ipv4:10.2.0.149:57442 read error = NT_STATUS_CONNECTION_RESET. [2022/01/04 21:28:29.266007, 4, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:110(make_internal_rpc_pipe_socketpair) Create of internal pipe \pipe\srvsvc requested [2022/01/04 21:28:29.267693, 6, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/srv_pipe_hnd.c:174(np_write_send) np_write_send: len: 160 [2022/01/04 21:28:29.268674, 10, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/srv_pipe_hnd.c:418(np_read_recv) Received 116 bytes. There is no more data outstanding [2022/01/04 21:28:29.269639, 6, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/srv_pipe_hnd.c:174(np_write_send) np_write_send: len: 84 [2022/01/04 21:28:29.269737, 5, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:1614(_srvsvc_NetShareEnumAll) _srvsvc_NetShareEnumAll: 1614 [2022/01/04 21:28:29.269757, 5, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:604(init_srv_share_info_ctr) init_srv_share_info_ctr [2022/01/04 21:28:29.269891, 10, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:622(init_srv_share_info_ctr) counting service testshare [2022/01/04 21:28:29.269914, 10, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:627(init_srv_share_info_ctr) NOT counting service printers [2022/01/04 21:28:29.269930, 10, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:622(init_srv_share_info_ctr) counting service print$ [2022/01/04 21:28:29.269944, 10, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:622(init_srv_share_info_ctr) counting service IPC$ [2022/01/04 21:28:29.269958, 10, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:622(init_srv_share_info_ctr) counting service prnlxc1 [2022/01/04 21:28:29.269972, 10, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:622(init_srv_share_info_ctr) counting service prnlxc2 [2022/01/04 21:28:29.269992, 5, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:1628(_srvsvc_NetShareEnumAll) _srvsvc_NetShareEnumAll: 1628 [2022/01/04 21:28:29.270072, 10, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/srv_pipe_hnd.c:418(np_read_recv) Received 508 bytes. There is no more data outstanding [2022/01/04 21:28:31.903495, 1, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:992(make_external_rpc_pipe) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:28:31.905619, 1, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:992(make_external_rpc_pipe) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:28:31.945176, 5, pid=46660, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:1311(rpc_pipe_open_interface) Connecting to spoolss pipe. [2022/01/04 21:28:31.945315, 1, pid=46660, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:1117(make_external_rpc_pipe_p) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:28:31.945338, 1, pid=46660, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:1173(rpc_pipe_open_external) Unable to make proxy_state for connection to spoolss. [2022/01/04 21:28:31.945355, 0] ../../source3/smbd/lanman.c:846(api_DosPrintQGetInfo) api_DosPrintQGetInfo: could not connect to spoolss: NT_STATUS_UNSUCCESSFUL [2022/01/04 21:28:31.975789, 1, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:992(make_external_rpc_pipe) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:28:31.979141, 1, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:992(make_external_rpc_pipe) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:28:31.994501, 5, pid=46660, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:1311(rpc_pipe_open_interface) Connecting to spoolss pipe. [2022/01/04 21:28:31.994700, 1, pid=46660, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:1117(make_external_rpc_pipe_p) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:28:31.994723, 1, pid=46660, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:1173(rpc_pipe_open_external) Unable to make proxy_state for connection to spoolss. [2022/01/04 21:28:31.994741, 0] ../../source3/smbd/lanman.c:846(api_DosPrintQGetInfo) api_DosPrintQGetInfo: could not connect to spoolss: NT_STATUS_UNSUCCESSFUL [2022/01/04 21:28:34.912788, 1, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:992(make_external_rpc_pipe) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:28:34.915483, 1, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:992(make_external_rpc_pipe) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:28:37.143219, 1, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:992(make_external_rpc_pipe) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:28:37.164316, 1, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:992(make_external_rpc_pipe) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:28:37.168668, 5, pid=46660, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:1311(rpc_pipe_open_interface) Connecting to spoolss pipe. [2022/01/04 21:28:37.168850, 1, pid=46660, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:1117(make_external_rpc_pipe_p) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:28:37.168883, 1, pid=46660, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:1173(rpc_pipe_open_external) Unable to make proxy_state for connection to spoolss. [2022/01/04 21:28:37.168902, 0] ../../source3/smbd/lanman.c:846(api_DosPrintQGetInfo) api_DosPrintQGetInfo: could not connect to spoolss: NT_STATUS_UNSUCCESSFUL [2022/01/04 21:28:37.324740, 1, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:992(make_external_rpc_pipe) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:28:37.331753, 1, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:992(make_external_rpc_pipe) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:28:37.336998, 5, pid=46660, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:1311(rpc_pipe_open_interface) Connecting to spoolss pipe. [2022/01/04 21:28:37.337193, 1, pid=46660, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:1117(make_external_rpc_pipe_p) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:28:37.337216, 1, pid=46660, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:1173(rpc_pipe_open_external) Unable to make proxy_state for connection to spoolss. [2022/01/04 21:28:37.337234, 0] ../../source3/smbd/lanman.c:846(api_DosPrintQGetInfo) api_DosPrintQGetInfo: could not connect to spoolss: NT_STATUS_UNSUCCESSFUL [2022/01/04 21:28:37.348972, 1, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:992(make_external_rpc_pipe) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:28:37.350886, 1, pid=46659, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:992(make_external_rpc_pipe) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:28:37.352581, 5, pid=46660, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:1311(rpc_pipe_open_interface) Connecting to spoolss pipe. [2022/01/04 21:28:37.352774, 1, pid=46660, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:1117(make_external_rpc_pipe_p) tstream_npa_connect_recv to /var/run/samba/ncalrpc/np for pipe spoolss and user CORPOLDWINDOM\michael.evans failed: Connection refused [2022/01/04 21:28:37.352798, 1, pid=46660, effective(4100, 4104), real(4100, 0), class=rpc_srv] ../../source3/rpc_server/rpc_ncacn_np.c:1173(rpc_pipe_open_external) Unable to make proxy_state for connection to spoolss. [2022/01/04 21:28:37.352815, 0] ../../source3/smbd/lanman.c:846(api_DosPrintQGetInfo) api_DosPrintQGetInfo: could not connect to spoolss: NT_STATUS_UNSUCCESSFUL [2022/01/04 21:28:48.068296, 1] ../../source3/smbd/process.c:555(receive_smb_talloc) receive_smb_raw_talloc failed for client ipv4:10.2.0.149:57459 read error = NT_STATUS_CONNECTION_RESET.