[2022/01/04 21:27:30.289145, 1] ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) ldb: Unable to open tdb '/var/lib/samba/private/secrets.ldb': No such file or directory [2022/01/04 21:27:30.289183, 1] ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) ldb: Failed to connect to '/var/lib/samba/private/secrets.ldb' with backend 'tdb': Unable to open tdb '/var/lib/samba/private/secrets.ldb': No such file or directory [2022/01/04 21:27:30.299718, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1883(rpc_pipe_bind_send) Bind RPC Pipe: host old-win-dc1.CORPOLDWINDOM.local auth_type 0, auth_level 1 [2022/01/04 21:27:30.299778, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.300444, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 52 [2022/01/04 21:27:30.300480, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 68 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.300505, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 68 bytes. [2022/01/04 21:27:30.300521, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1759(check_bind_response) check_bind_response: accepted! [2022/01/04 21:27:30.300539, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:3154(cli_rpc_pipe_open_noauth_transport) cli_rpc_pipe_open_noauth: opened pipe dssetup to machine old-win-dc1.CORPOLDWINDOM.local and bound anonymously. [2022/01/04 21:27:30.300573, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.301324, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 188 [2022/01/04 21:27:30.301363, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 204, data_len 180 [2022/01/04 21:27:30.301380, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 204 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.301393, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 180 bytes. [2022/01/04 21:27:30.302653, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1883(rpc_pipe_bind_send) Bind RPC Pipe: host old-win-dc1.CORPOLDWINDOM.local auth_type 0, auth_level 1 [2022/01/04 21:27:30.302679, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.303318, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 52 [2022/01/04 21:27:30.303347, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 68 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.303369, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 68 bytes. [2022/01/04 21:27:30.303385, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1759(check_bind_response) check_bind_response: accepted! [2022/01/04 21:27:30.303411, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:3154(cli_rpc_pipe_open_noauth_transport) cli_rpc_pipe_open_noauth: opened pipe lsarpc to machine old-win-dc1.CORPOLDWINDOM.local and bound anonymously. [2022/01/04 21:27:30.303459, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.304184, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 32 [2022/01/04 21:27:30.304215, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 48, data_len 24 [2022/01/04 21:27:30.304230, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.304251, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 24 bytes. [2022/01/04 21:27:30.304285, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.304963, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 212 [2022/01/04 21:27:30.304990, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 228, data_len 204 [2022/01/04 21:27:30.305005, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 228 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.305018, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 204 bytes. [2022/01/04 21:27:30.306057, 1] ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) ldb: Unable to open tdb '/var/lib/samba/private/secrets.ldb': No such file or directory [2022/01/04 21:27:30.306073, 1] ../../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) ldb: Failed to connect to '/var/lib/samba/private/secrets.ldb' with backend 'tdb': Unable to open tdb '/var/lib/samba/private/secrets.ldb': No such file or directory [2022/01/04 21:27:30.306711, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1883(rpc_pipe_bind_send) Bind RPC Pipe: host old-win-dc1.CORPOLDWINDOM.local auth_type 0, auth_level 1 [2022/01/04 21:27:30.306735, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.306750, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 72 [2022/01/04 21:27:30.307212, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 44 [2022/01/04 21:27:30.307245, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 60 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.307261, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 60 bytes. [2022/01/04 21:27:30.307276, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1759(check_bind_response) check_bind_response: accepted! [2022/01/04 21:27:30.307350, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.307372, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 156 [2022/01/04 21:27:30.307804, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 136 [2022/01/04 21:27:30.307834, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 152, data_len 128 [2022/01/04 21:27:30.307849, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 152 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.307862, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 128 bytes. [2022/01/04 21:27:30.308534, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1883(rpc_pipe_bind_send) Bind RPC Pipe: host old-win-dc1.CORPOLDWINDOM.local auth_type 0, auth_level 1 [2022/01/04 21:27:30.308558, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.308572, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 72 [2022/01/04 21:27:30.309029, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 44 [2022/01/04 21:27:30.309065, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 60 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.309085, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 60 bytes. [2022/01/04 21:27:30.309099, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1759(check_bind_response) check_bind_response: accepted! [2022/01/04 21:27:30.309121, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:3154(cli_rpc_pipe_open_noauth_transport) cli_rpc_pipe_open_noauth: opened pipe netlogon to machine old-win-dc1.CORPOLDWINDOM.local and bound anonymously. [2022/01/04 21:27:30.309166, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.309182, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 128 [2022/01/04 21:27:30.309776, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 20 [2022/01/04 21:27:30.309805, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 36, data_len 12 [2022/01/04 21:27:30.309819, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 36 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.309839, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 12 bytes. [2022/01/04 21:27:30.309922, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.309954, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 160 [2022/01/04 21:27:30.335273, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 28 [2022/01/04 21:27:30.335351, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 44, data_len 20 [2022/01/04 21:27:30.335368, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 44 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.335386, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 20 bytes. [2022/01/04 21:27:30.335434, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.335450, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 128 [2022/01/04 21:27:30.336030, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 20 [2022/01/04 21:27:30.336072, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 36, data_len 12 [2022/01/04 21:27:30.336088, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 36 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.336102, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 12 bytes. [2022/01/04 21:27:30.336163, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.336180, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 160 [2022/01/04 21:27:30.337071, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 28 [2022/01/04 21:27:30.337112, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 44, data_len 20 [2022/01/04 21:27:30.337129, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 44 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.337142, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 20 bytes. [2022/01/04 21:27:30.338268, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1883(rpc_pipe_bind_send) Bind RPC Pipe: host old-win-dc1.CORPOLDWINDOM.local auth_type 0, auth_level 1 [2022/01/04 21:27:30.338314, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.338330, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 72 [2022/01/04 21:27:30.338805, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 44 [2022/01/04 21:27:30.338864, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 60 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.338883, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 60 bytes. [2022/01/04 21:27:30.338898, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1759(check_bind_response) check_bind_response: accepted! [2022/01/04 21:27:30.338954, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.338970, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 156 [2022/01/04 21:27:30.339577, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 136 [2022/01/04 21:27:30.339608, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 152, data_len 128 [2022/01/04 21:27:30.339623, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 152 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.339643, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 128 bytes. [2022/01/04 21:27:30.340402, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1883(rpc_pipe_bind_send) Bind RPC Pipe: host old-win-dc1.CORPOLDWINDOM.local auth_type 68, auth_level 6 [2022/01/04 21:27:30.340424, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1144(create_generic_auth_rpc_bind_req) create_generic_auth_rpc_bind_req: generate first token [2022/01/04 21:27:30.340473, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.340490, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 105 [2022/01/04 21:27:30.341118, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 64 [2022/01/04 21:27:30.341162, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 80 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.341180, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 80 bytes. [2022/01/04 21:27:30.341195, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1759(check_bind_response) check_bind_response: accepted! [2022/01/04 21:27:30.341283, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.341301, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 256 [2022/01/04 21:27:30.341908, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 80 [2022/01/04 21:27:30.341956, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:428(dcerpc_check_auth) Requested Privacy. [2022/01/04 21:27:30.341979, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:492(dcerpc_check_auth) GENSEC auth [2022/01/04 21:27:30.342009, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 96, data_len 24 [2022/01/04 21:27:30.342022, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 96 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.342035, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 24 bytes. [2022/01/04 21:27:30.342115, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.342133, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 144 [2022/01/04 21:27:30.342669, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 224 [2022/01/04 21:27:30.342699, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:428(dcerpc_check_auth) Requested Privacy. [2022/01/04 21:27:30.342721, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:492(dcerpc_check_auth) GENSEC auth [2022/01/04 21:27:30.342751, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 240, data_len 172 [2022/01/04 21:27:30.342765, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 240 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.342777, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 172 bytes. [2022/01/04 21:27:30.343596, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1883(rpc_pipe_bind_send) Bind RPC Pipe: host old-win-dc1.CORPOLDWINDOM.local auth_type 0, auth_level 1 [2022/01/04 21:27:30.343620, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.343634, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 72 [2022/01/04 21:27:30.344198, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 44 [2022/01/04 21:27:30.344231, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 60 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.344254, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 60 bytes. [2022/01/04 21:27:30.344270, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1759(check_bind_response) check_bind_response: accepted! [2022/01/04 21:27:30.344317, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.344333, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 156 [2022/01/04 21:27:30.344977, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 136 [2022/01/04 21:27:30.345007, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 152, data_len 128 [2022/01/04 21:27:30.345021, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 152 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.345034, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 128 bytes. [2022/01/04 21:27:30.345784, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1883(rpc_pipe_bind_send) Bind RPC Pipe: host old-win-dc1.CORPOLDWINDOM.local auth_type 68, auth_level 6 [2022/01/04 21:27:30.345803, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1144(create_generic_auth_rpc_bind_req) create_generic_auth_rpc_bind_req: generate first token [2022/01/04 21:27:30.345842, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.345859, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 105 [2022/01/04 21:27:30.346574, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 64 [2022/01/04 21:27:30.346607, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 80 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.346628, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 80 bytes. [2022/01/04 21:27:30.346644, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1759(check_bind_response) check_bind_response: accepted! [2022/01/04 21:27:30.346674, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:3339(cli_rpc_pipe_open_schannel_with_creds) cli_rpc_pipe_open_schannel_with_creds: opened pipe lsarpc to machine old-win-dc1.CORPOLDWINDOM.local with key netlogon_creds_cli:CLI[V-PS4/V-PS4$]/SRV[AD-V-DC1/CORPOLDWINDOM] and bound using schannel. [2022/01/04 21:27:30.346736, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.346754, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 208 [2022/01/04 21:27:30.347388, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 208 [2022/01/04 21:27:30.347418, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:428(dcerpc_check_auth) Requested Privacy. [2022/01/04 21:27:30.347433, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:492(dcerpc_check_auth) GENSEC auth [2022/01/04 21:27:30.347467, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 224, data_len 156 [2022/01/04 21:27:30.347482, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 224 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.347500, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 156 bytes. [2022/01/04 21:27:30.347710, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:30.347729, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 144 [2022/01/04 21:27:30.348253, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 224 [2022/01/04 21:27:30.348291, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:428(dcerpc_check_auth) Requested Privacy. [2022/01/04 21:27:30.348308, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:492(dcerpc_check_auth) GENSEC auth [2022/01/04 21:27:30.348337, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 240, data_len 172 [2022/01/04 21:27:30.348353, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 240 at offset 0: NT_STATUS_OK [2022/01/04 21:27:30.348366, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 172 bytes. [2022/01/04 21:27:35.012286, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:35.012322, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 192 [2022/01/04 21:27:35.036840, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 416 [2022/01/04 21:27:35.036907, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:428(dcerpc_check_auth) Requested Privacy. [2022/01/04 21:27:35.036924, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:492(dcerpc_check_auth) GENSEC auth [2022/01/04 21:27:35.036964, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 432, data_len 360 [2022/01/04 21:27:35.036985, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 432 at offset 0: NT_STATUS_OK [2022/01/04 21:27:35.036999, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 360 bytes. [2022/01/04 21:27:35.659775, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:27:35.659813, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 400 [2022/01/04 21:27:35.661438, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 864 [2022/01/04 21:27:35.661508, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:428(dcerpc_check_auth) Requested Privacy. [2022/01/04 21:27:35.661525, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:492(dcerpc_check_auth) GENSEC auth [2022/01/04 21:27:35.661577, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 880, data_len 804 [2022/01/04 21:27:35.661591, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 880 at offset 0: NT_STATUS_OK [2022/01/04 21:27:35.661605, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 804 bytes. [2022/01/04 21:28:06.903988, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:28:06.904021, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 400 [2022/01/04 21:28:06.905360, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 784 [2022/01/04 21:28:06.905399, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:428(dcerpc_check_auth) Requested Privacy. [2022/01/04 21:28:06.905416, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:492(dcerpc_check_auth) GENSEC auth [2022/01/04 21:28:06.905451, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 800, data_len 732 [2022/01/04 21:28:06.905466, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 800 at offset 0: NT_STATUS_OK [2022/01/04 21:28:06.905481, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 732 bytes. [2022/01/04 21:28:06.935956, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:28:06.935990, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 400 [2022/01/04 21:28:06.937370, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 784 [2022/01/04 21:28:06.937439, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:428(dcerpc_check_auth) Requested Privacy. [2022/01/04 21:28:06.937457, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:492(dcerpc_check_auth) GENSEC auth [2022/01/04 21:28:06.937499, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 800, data_len 732 [2022/01/04 21:28:06.937514, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 800 at offset 0: NT_STATUS_OK [2022/01/04 21:28:06.937529, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 732 bytes. [2022/01/04 21:28:31.934253, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:28:31.934294, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 400 [2022/01/04 21:28:31.935765, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 864 [2022/01/04 21:28:31.935803, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:428(dcerpc_check_auth) Requested Privacy. [2022/01/04 21:28:31.935820, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:492(dcerpc_check_auth) GENSEC auth [2022/01/04 21:28:31.935854, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 880, data_len 804 [2022/01/04 21:28:31.935867, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 880 at offset 0: NT_STATUS_OK [2022/01/04 21:28:31.935881, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 804 bytes. [2022/01/04 21:28:34.927615, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:828(rpc_api_pipe_send) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local [2022/01/04 21:28:34.927644, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:180(rpc_write_send) rpc_write_send: data_to_write: 400 [2022/01/04 21:28:34.929445, 5, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 864 [2022/01/04 21:28:34.929482, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:428(dcerpc_check_auth) Requested Privacy. [2022/01/04 21:28:34.929499, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_parse] ../../source3/librpc/rpc/dcerpc_helpers.c:492(dcerpc_check_auth) GENSEC auth [2022/01/04 21:28:34.929532, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:525(cli_pipe_validate_current_pdu) Got pdu len 880, data_len 804 [2022/01/04 21:28:34.929546, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:977(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 880 at offset 0: NT_STATUS_OK [2022/01/04 21:28:34.929560, 10, pid=46641, effective(0, 0), real(0, 0), class=rpc_cli] ../../source3/rpc_client/cli_pipe.c:1078(rpc_api_pipe_got_pdu) rpc_api_pipe: host old-win-dc1.CORPOLDWINDOM.local returned 804 bytes. [2022/01/04 21:28:51.902415, 0] ../../source3/winbindd/winbindd.c:247(winbindd_sig_term_handler) Got sig[15] terminate (is_parent=0)