Hello everyone, I'm having a big problem with stas authentication. I had the system configured and perfectly running until some weeks ago, and then, without changing anything and with no apparent reason, it has simply stopped working. i have this configuration: 2 domain controller Windows server 2012 standard, 1 with only the agent and another one with agent and collector. I have satc up and running on a terminal server and these (from satc) are the only users recognized by xg firewall.
Looking the logs i can see that only the local domain admin is logged in and seen by the stas, and no other. Same happens on the machine with only the agent installed.
I see some wmi related errors but don't know how to face them, and most of all i don't understant how is possible this stopped working without changing anything from a perfectly running configuration...
Here is a part of the log file, can anybody help me? Thank you!
DEBUG [0x3394] 18/04/2017 14:15:29 : wrkstpoll_workerthread_wmi: Success - Connected to WMI Namespace: \\10.0.101.83\root\cimv2
ERROR [0x3394] 18/04/2017 14:15:29 : wrkstpoll_workerthread_wmi: Success - Proxy Blanket Security Settings
ERROR [0x2a1c] 18/04/2017 14:15:29 : wrkstpoll_workerthread_wmi: WMI Query 'SELECT UserName FROM Win32_ComputerSystem' failed: 0x80041003
MSG [0x2a1c] 18/04/2017 14:15:29 : wrkstpoll_handle_logoff_req: Request received from CR
DEBUG [0x2a1c] 18/04/2017 14:15:29 : threadpool_finishnotify: Thread ID: 0x2a1c
DEBUG [0x2a1c] 18/04/2017 14:15:29 : threadpool_finishnotify: Reset Event
ERROR [0x3394] 18/04/2017 14:15:29 : wrkstpoll_workerthread_wmi: WMI Query 'SELECT UserName FROM Win32_ComputerSystem' failed: 0x80041003
MSG [0x3394] 18/04/2017 14:15:29 : wrkstpoll_handle_logoff_req: Request received from CR
DEBUG [0x3394] 18/04/2017 14:15:29 : threadpool_finishnotify: Thread ID: 0x3394
DEBUG [0x3394] 18/04/2017 14:15:29 : threadpool_finishnotify: Reset Event
DEBUG [0x2c78] 18/04/2017 14:15:29 : wrkstpoll_workerthread_wmi: Success - Connected to WMI Namespace: \\10.0.0.51\root\cimv2
ERROR [0x2c78] 18/04/2017 14:15:29 : wrkstpoll_workerthread_wmi: Success - Proxy Blanket Security Settings
ERROR [0x24f8] 18/04/2017 14:15:29 : wrkstpoll_workerthread_wmi: WMI Query 'SELECT UserName FROM Win32_ComputerSystem' failed: 0x80041003
ERROR [0x2c78] 18/04/2017 14:15:29 : wrkstpoll_workerthread_wmi: WMI Query 'SELECT UserName FROM Win32_ComputerSystem' failed: 0x80041003
MSG [0x24f8] 18/04/2017 14:15:29 : wrkstpoll_handle_logoff_req: Request received from CR
DEBUG [0x24f8] 18/04/2017 14:15:29 : threadpool_finishnotify: Thread ID: 0x24f8
DEBUG [0x24f8] 18/04/2017 14:15:29 : threadpool_finishnotify: Reset Event
MSG [0x2c78] 18/04/2017 14:15:29 : wrkstpoll_handle_logoff_req: Request received from CR
DEBUG [0x2c78] 18/04/2017 14:15:29 : threadpool_finishnotify: Thread ID: 0x2c78
DEBUG [0x2c78] 18/04/2017 14:15:29 : threadpool_finishnotify: Reset Event
ERROR [0x1ce8] 18/04/2017 14:15:29 : wrkstpoll_workerthread_wmi: WMI Query 'SELECT UserName FROM Win32_ComputerSystem' failed: 0x80041003
MSG [0x1ce8] 18/04/2017 14:15:29 : wrkstpoll_handle_logoff_req: Request received from CR
DEBUG [0x1ce8] 18/04/2017 14:15:29 : threadpool_finishnotify: Thread ID: 0x1ce8
DEBUG [0x1ce8] 18/04/2017 14:15:29 : threadpool_finishnotify: Reset Event
DEBUG [0x1450] 18/04/2017 14:15:30 : dca_eventlog: received event log notification
DEBUG [0x1450] 18/04/2017 14:15:30 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:30 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:30 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:30 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:30 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:30 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:30 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:30 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:30 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:30 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:30 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:30 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:30 : dca_eventlog: waiting for event log notification
DEBUG [0x1450] 18/04/2017 14:15:32 : dca_eventlog: received event log notification
DEBUG [0x1450] 18/04/2017 14:15:32 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:32 : dca_eventlog: waiting for event log notification
ERROR [0x1d78] 18/04/2017 14:15:33 : wrkstpoll_workerthread_wmi: couldnt connected to WMI Namespace '\\10.0.101.80\root\cimv2': 0x800706ba
ERROR [0x1d78] 18/04/2017 14:15:33 : wrkstpoll_workerthread_wmi: WMI Namespace Connect Retry Exceeded for '\\10.0.101.80\root\cimv2'
MSG [0x1d78] 18/04/2017 14:15:33 : wrkstpoll_handle_logoff_req: Request received from CR
DEBUG [0x1d78] 18/04/2017 14:15:33 : threadpool_finishnotify: Thread ID: 0x1d78
DEBUG [0x1d78] 18/04/2017 14:15:33 : threadpool_finishnotify: Reset Event
DEBUG [0x1450] 18/04/2017 14:15:34 : dca_eventlog: received event log notification
DEBUG [0x1450] 18/04/2017 14:15:34 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:34 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:34 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:34 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:34 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:34 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:34 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:34 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:34 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:34 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:34 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:34 : dca_eventlog: waiting for event log notification
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: received event log notification
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:36 : dca_eventlog: waiting for event log notification
DEBUG [0x24c0] 18/04/2017 14:15:37 : net_recvfrom: 19 bytes received
DEBUG [0x24c0] 18/04/2017 14:15:37 : SSO_server_RecvReqCR: 19 bytes received
DEBUG [0x24c0] 18/04/2017 14:15:37 : convert_netaddr_to_str: IP Address String: 10.0.10.253:38455
DEBUG [0x24c0] 18/04/2017 14:15:37 : SSO_server_RecvReqCR: packet size: 19
DEBUG [0x24c0] 18/04/2017 14:15:37 : SSO_server_handle_wrkstpoll_req: Request Type: Workstation-Poll
DEBUG [0x24c0] 18/04/2017 14:15:37 : SSOclient_filter_CR_subnet: Entering filter function
DEBUG [0x24c0] 18/04/2017 14:15:37 : SSOclient_filter_CR_subnet: authnet not specified, send reqiest to CR
MSG [0x24c0] 18/04/2017 14:15:37 : SSO_server_handle_wrkstpoll_req: Workstation IP: 10.0.101.59
DEBUG [0x24c0] 18/04/2017 14:15:37 : userdb_process_known_userinfo: select query: SELECT * FROM UserInfo WHERE wrkst_ip=='10.0.101.59';
DEBUG [0x24c0] 18/04/2017 14:15:37 : SSO_server_handle_wrkstpoll_req: no matched userinfo found
DEBUG [0x24c0] 18/04/2017 14:15:37 : threadpool_run: Submitting Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:15:37 : threadpool_run: adding function at tail
DEBUG [0x24c0] 18/04/2017 14:15:37 : list_add_tail: first element added
DEBUG [0x24c0] 18/04/2017 14:15:37 : threadpool_run: get free thread: ThreadID: 0x1d78
DEBUG [0x24c0] 18/04/2017 14:15:37 : SSO_server_handle_wrkstpoll_req: callback submitted
DEBUG [0x1d78] 18/04/2017 14:15:37 : threadpool_threadproc: New Function added
DEBUG [0x24c0] 18/04/2017 14:15:37 : net_recvfrom: 19 bytes received
DEBUG [0x1d78] 18/04/2017 14:15:37 : list_remove_head: last element removed
DEBUG [0x24c0] 18/04/2017 14:15:37 : SSO_server_RecvReqCR: 19 bytes received
DEBUG [0x1d78] 18/04/2017 14:15:37 : threadpool_get_threadproc: Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:15:37 : convert_netaddr_to_str: IP Address String: 10.0.10.253:38455
DEBUG [0x1d78] 18/04/2017 14:15:37 : threadpool_threadproc: Executing Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:15:37 : SSO_server_RecvReqCR: packet size: 19
DEBUG [0x24c0] 18/04/2017 14:15:37 : SSO_server_handle_wrkstpoll_req: Request Type: Workstation-Poll
DEBUG [0x24c0] 18/04/2017 14:15:37 : SSOclient_filter_CR_subnet: Entering filter function
DEBUG [0x1d78] 18/04/2017 14:15:37 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.101.59\root\cimv2'
DEBUG [0x24c0] 18/04/2017 14:15:37 : SSOclient_filter_CR_subnet: authnet not specified, send reqiest to CR
MSG [0x1d78] 18/04/2017 14:15:37 : wrkstpoll_workerthread_wmi: username:vb\administrator
MSG [0x24c0] 18/04/2017 14:15:37 : SSO_server_handle_wrkstpoll_req: Workstation IP: 10.0.101.71
DEBUG [0x24c0] 18/04/2017 14:15:37 : userdb_process_known_userinfo: select query: SELECT * FROM UserInfo WHERE wrkst_ip=='10.0.101.71';
DEBUG [0x24c0] 18/04/2017 14:15:37 : SSO_server_handle_wrkstpoll_req: no matched userinfo found
DEBUG [0x24c0] 18/04/2017 14:15:37 : threadpool_run: Submitting Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:15:37 : threadpool_run: adding function at tail
DEBUG [0x24c0] 18/04/2017 14:15:37 : list_add_tail: first element added
DEBUG [0x24c0] 18/04/2017 14:15:37 : threadpool_run: get free thread: ThreadID: 0x3394
DEBUG [0x24c0] 18/04/2017 14:15:37 : SSO_server_handle_wrkstpoll_req: callback submitted
DEBUG [0x3394] 18/04/2017 14:15:37 : threadpool_threadproc: New Function added
DEBUG [0x3394] 18/04/2017 14:15:37 : list_remove_head: last element removed
DEBUG [0x3394] 18/04/2017 14:15:37 : threadpool_get_threadproc: Function 0x4558a0
DEBUG [0x3394] 18/04/2017 14:15:37 : threadpool_threadproc: Executing Function 0x4558a0
DEBUG [0x3394] 18/04/2017 14:15:37 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.101.71\root\cimv2'
MSG [0x3394] 18/04/2017 14:15:37 : wrkstpoll_workerthread_wmi: username:vb\administrator
DEBUG [0x1d78] 18/04/2017 14:15:37 : wrkstpoll_workerthread_wmi: Success - Connected to WMI Namespace: \\10.0.101.59\root\cimv2
ERROR [0x1d78] 18/04/2017 14:15:37 : wrkstpoll_workerthread_wmi: Success - Proxy Blanket Security Settings
ERROR [0x1d78] 18/04/2017 14:15:37 : wrkstpoll_workerthread_wmi: WMI Query 'SELECT UserName FROM Win32_ComputerSystem' failed: 0x80041003
DEBUG [0x3394] 18/04/2017 14:15:37 : wrkstpoll_workerthread_wmi: Success - Connected to WMI Namespace: \\10.0.101.71\root\cimv2
ERROR [0x3394] 18/04/2017 14:15:37 : wrkstpoll_workerthread_wmi: Success - Proxy Blanket Security Settings
MSG [0x1d78] 18/04/2017 14:15:37 : wrkstpoll_handle_logoff_req: Request received from CR
DEBUG [0x1d78] 18/04/2017 14:15:37 : threadpool_finishnotify: Thread ID: 0x1d78
DEBUG [0x1d78] 18/04/2017 14:15:37 : threadpool_finishnotify: Reset Event
ERROR [0x3394] 18/04/2017 14:15:37 : wrkstpoll_workerthread_wmi: WMI Query 'SELECT UserName FROM Win32_ComputerSystem' failed: 0x80041003
MSG [0x3394] 18/04/2017 14:15:37 : wrkstpoll_handle_logoff_req: Request received from CR
DEBUG [0x3394] 18/04/2017 14:15:37 : threadpool_finishnotify: Thread ID: 0x3394
DEBUG [0x3394] 18/04/2017 14:15:37 : threadpool_finishnotify: Reset Event
DEBUG [0x1450] 18/04/2017 14:15:38 : dca_eventlog: received event log notification
DEBUG [0x1450] 18/04/2017 14:15:38 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:38 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:38 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:38 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:38 : dca_eventlog: waiting for event log notification
ERROR [0x265c] 18/04/2017 14:15:40 : wrkstpoll_workerthread_wmi: couldnt connected to WMI Namespace '\\10.0.102.74\root\cimv2': 0x800706ba
DEBUG [0x265c] 18/04/2017 14:15:41 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.102.74\root\cimv2'
MSG [0x265c] 18/04/2017 14:15:41 : wrkstpoll_workerthread_wmi: username:vb\administrator
DEBUG [0x1450] 18/04/2017 14:15:42 : dca_eventlog: received event log notification
DEBUG [0x1450] 18/04/2017 14:15:42 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:42 : dca_eventlog: waiting for event log notification
DEBUG [0x1450] 18/04/2017 14:15:45 : dca_eventlog: received event log notification
DEBUG [0x1450] 18/04/2017 14:15:45 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:45 : dca_eventlog: waiting for event log notification
DEBUG [0x24c0] 18/04/2017 14:15:45 : net_recvfrom: 19 bytes received
DEBUG [0x24c0] 18/04/2017 14:15:45 : SSO_server_RecvReqCR: 19 bytes received
DEBUG [0x24c0] 18/04/2017 14:15:45 : convert_netaddr_to_str: IP Address String: 10.0.10.253:38455
DEBUG [0x24c0] 18/04/2017 14:15:45 : SSO_server_RecvReqCR: packet size: 19
DEBUG [0x24c0] 18/04/2017 14:15:45 : SSO_server_handle_wrkstpoll_req: Request Type: Workstation-Poll
DEBUG [0x24c0] 18/04/2017 14:15:45 : SSOclient_filter_CR_subnet: Entering filter function
DEBUG [0x24c0] 18/04/2017 14:15:45 : SSOclient_filter_CR_subnet: authnet not specified, send reqiest to CR
MSG [0x24c0] 18/04/2017 14:15:45 : SSO_server_handle_wrkstpoll_req: Workstation IP: 10.0.102.71
DEBUG [0x24c0] 18/04/2017 14:15:45 : userdb_process_known_userinfo: select query: SELECT * FROM UserInfo WHERE wrkst_ip=='10.0.102.71';
DEBUG [0x24c0] 18/04/2017 14:15:45 : SSO_server_handle_wrkstpoll_req: no matched userinfo found
DEBUG [0x24c0] 18/04/2017 14:15:45 : threadpool_run: Submitting Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:15:45 : threadpool_run: adding function at tail
DEBUG [0x24c0] 18/04/2017 14:15:45 : list_add_tail: first element added
DEBUG [0x24c0] 18/04/2017 14:15:45 : threadpool_run: get free thread: ThreadID: 0x1d78
DEBUG [0x24c0] 18/04/2017 14:15:45 : SSO_server_handle_wrkstpoll_req: callback submitted
DEBUG [0x1d78] 18/04/2017 14:15:45 : threadpool_threadproc: New Function added
DEBUG [0x24c0] 18/04/2017 14:15:45 : net_recvfrom: 19 bytes received
DEBUG [0x1d78] 18/04/2017 14:15:45 : list_remove_head: last element removed
DEBUG [0x24c0] 18/04/2017 14:15:45 : SSO_server_RecvReqCR: 19 bytes received
DEBUG [0x1d78] 18/04/2017 14:15:45 : threadpool_get_threadproc: Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:15:45 : convert_netaddr_to_str: IP Address String: 10.0.10.253:38455
DEBUG [0x1d78] 18/04/2017 14:15:45 : threadpool_threadproc: Executing Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:15:45 : SSO_server_RecvReqCR: packet size: 19
DEBUG [0x24c0] 18/04/2017 14:15:45 : SSO_server_handle_wrkstpoll_req: Request Type: Workstation-Poll
DEBUG [0x24c0] 18/04/2017 14:15:45 : SSOclient_filter_CR_subnet: Entering filter function
DEBUG [0x1d78] 18/04/2017 14:15:45 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.102.71\root\cimv2'
DEBUG [0x24c0] 18/04/2017 14:15:45 : SSOclient_filter_CR_subnet: authnet not specified, send reqiest to CR
MSG [0x1d78] 18/04/2017 14:15:45 : wrkstpoll_workerthread_wmi: username:vb\administrator
MSG [0x24c0] 18/04/2017 14:15:45 : SSO_server_handle_wrkstpoll_req: Workstation IP: 10.0.102.54
DEBUG [0x24c0] 18/04/2017 14:15:45 : userdb_process_known_userinfo: select query: SELECT * FROM UserInfo WHERE wrkst_ip=='10.0.102.54';
DEBUG [0x24c0] 18/04/2017 14:15:45 : SSO_server_handle_wrkstpoll_req: no matched userinfo found
DEBUG [0x24c0] 18/04/2017 14:15:45 : threadpool_run: Submitting Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:15:45 : threadpool_run: adding function at tail
DEBUG [0x24c0] 18/04/2017 14:15:45 : list_add_tail: first element added
DEBUG [0x24c0] 18/04/2017 14:15:45 : threadpool_run: get free thread: ThreadID: 0x3394
DEBUG [0x24c0] 18/04/2017 14:15:45 : SSO_server_handle_wrkstpoll_req: callback submitted
DEBUG [0x3394] 18/04/2017 14:15:45 : threadpool_threadproc: New Function added
DEBUG [0x3394] 18/04/2017 14:15:45 : list_remove_head: last element removed
DEBUG [0x3394] 18/04/2017 14:15:45 : threadpool_get_threadproc: Function 0x4558a0
DEBUG [0x3394] 18/04/2017 14:15:45 : threadpool_threadproc: Executing Function 0x4558a0
DEBUG [0x3394] 18/04/2017 14:15:45 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.102.54\root\cimv2'
MSG [0x3394] 18/04/2017 14:15:45 : wrkstpoll_workerthread_wmi: username:vb\administrator
DEBUG [0x1450] 18/04/2017 14:15:52 : dca_eventlog: received event log notification
DEBUG [0x1450] 18/04/2017 14:15:52 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:52 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:52 : dca_eventlog: waiting for event log notification
MSG [0x1fe4] 18/04/2017 14:15:54 : SSO_client_update_heartbeat: cr_node:10.0.10.253 is_active:2
DEBUG [0x1fe4] 18/04/2017 14:15:54 : net_send: bytes sent: 11
DEBUG [0x1fe4] 18/04/2017 14:15:54 : net_send: full packet sent
DEBUG [0x1450] 18/04/2017 14:15:58 : dca_eventlog: received event log notification
DEBUG [0x1450] 18/04/2017 14:15:58 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:15:58 : dca_eventlog: waiting for event log notification
DEBUG [0x24c0] 18/04/2017 14:16:01 : net_recvfrom: 18 bytes received
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_RecvReqCR: 18 bytes received
DEBUG [0x24c0] 18/04/2017 14:16:01 : convert_netaddr_to_str: IP Address String: 10.0.10.253:38455
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_RecvReqCR: packet size: 18
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_handle_wrkstpoll_req: Request Type: Workstation-Poll
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSOclient_filter_CR_subnet: Entering filter function
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSOclient_filter_CR_subnet: authnet not specified, send reqiest to CR
MSG [0x24c0] 18/04/2017 14:16:01 : SSO_server_handle_wrkstpoll_req: Workstation IP: 10.0.0.212
DEBUG [0x24c0] 18/04/2017 14:16:01 : userdb_process_known_userinfo: select query: SELECT * FROM UserInfo WHERE wrkst_ip=='10.0.0.212';
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_handle_wrkstpoll_req: no matched userinfo found
DEBUG [0x24c0] 18/04/2017 14:16:01 : threadpool_run: Submitting Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:16:01 : threadpool_run: adding function at tail
DEBUG [0x24c0] 18/04/2017 14:16:01 : list_add_tail: first element added
DEBUG [0x24c0] 18/04/2017 14:16:01 : threadpool_run: get free thread: ThreadID: 0x2618
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_handle_wrkstpoll_req: callback submitted
DEBUG [0x2618] 18/04/2017 14:16:01 : threadpool_threadproc: New Function added
DEBUG [0x24c0] 18/04/2017 14:16:01 : net_recvfrom: 19 bytes received
DEBUG [0x2618] 18/04/2017 14:16:01 : list_remove_head: last element removed
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_RecvReqCR: 19 bytes received
DEBUG [0x2618] 18/04/2017 14:16:01 : threadpool_get_threadproc: Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:16:01 : convert_netaddr_to_str: IP Address String: 10.0.10.253:38455
DEBUG [0x2618] 18/04/2017 14:16:01 : threadpool_threadproc: Executing Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_RecvReqCR: packet size: 19
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_handle_wrkstpoll_req: Request Type: Workstation-Poll
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSOclient_filter_CR_subnet: Entering filter function
DEBUG [0x2618] 18/04/2017 14:16:01 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.0.212\root\cimv2'
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSOclient_filter_CR_subnet: authnet not specified, send reqiest to CR
MSG [0x2618] 18/04/2017 14:16:01 : wrkstpoll_workerthread_wmi: username:vb\administrator
MSG [0x24c0] 18/04/2017 14:16:01 : SSO_server_handle_wrkstpoll_req: Workstation IP: 10.0.101.70
DEBUG [0x24c0] 18/04/2017 14:16:01 : userdb_process_known_userinfo: select query: SELECT * FROM UserInfo WHERE wrkst_ip=='10.0.101.70';
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_handle_wrkstpoll_req: no matched userinfo found
DEBUG [0x24c0] 18/04/2017 14:16:01 : threadpool_run: Submitting Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:16:01 : threadpool_run: adding function at tail
DEBUG [0x24c0] 18/04/2017 14:16:01 : list_add_tail: first element added
DEBUG [0x24c0] 18/04/2017 14:16:01 : threadpool_run: get free thread: ThreadID: 0x2c78
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_handle_wrkstpoll_req: callback submitted
DEBUG [0x2c78] 18/04/2017 14:16:01 : threadpool_threadproc: New Function added
DEBUG [0x24c0] 18/04/2017 14:16:01 : net_recvfrom: 19 bytes received
DEBUG [0x2c78] 18/04/2017 14:16:01 : list_remove_head: last element removed
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_RecvReqCR: 19 bytes received
DEBUG [0x2c78] 18/04/2017 14:16:01 : threadpool_get_threadproc: Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:16:01 : convert_netaddr_to_str: IP Address String: 10.0.10.253:38455
DEBUG [0x2c78] 18/04/2017 14:16:01 : threadpool_threadproc: Executing Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_RecvReqCR: packet size: 19
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_handle_wrkstpoll_req: Request Type: Workstation-Poll
DEBUG [0x2c78] 18/04/2017 14:16:01 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.101.70\root\cimv2'
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSOclient_filter_CR_subnet: Entering filter function
MSG [0x2c78] 18/04/2017 14:16:01 : wrkstpoll_workerthread_wmi: username:vb\administrator
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSOclient_filter_CR_subnet: authnet not specified, send reqiest to CR
MSG [0x24c0] 18/04/2017 14:16:01 : SSO_server_handle_wrkstpoll_req: Workstation IP: 10.0.102.60
DEBUG [0x24c0] 18/04/2017 14:16:01 : userdb_process_known_userinfo: select query: SELECT * FROM UserInfo WHERE wrkst_ip=='10.0.102.60';
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_handle_wrkstpoll_req: no matched userinfo found
DEBUG [0x24c0] 18/04/2017 14:16:01 : threadpool_run: Submitting Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:16:01 : threadpool_run: adding function at tail
DEBUG [0x24c0] 18/04/2017 14:16:01 : list_add_tail: first element added
DEBUG [0x24c0] 18/04/2017 14:16:01 : threadpool_run: get free thread: ThreadID: 0x24f8
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_handle_wrkstpoll_req: callback submitted
DEBUG [0x24f8] 18/04/2017 14:16:01 : threadpool_threadproc: New Function added
DEBUG [0x24c0] 18/04/2017 14:16:01 : net_recvfrom: 19 bytes received
DEBUG [0x24f8] 18/04/2017 14:16:01 : list_remove_head: last element removed
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_RecvReqCR: 19 bytes received
DEBUG [0x24f8] 18/04/2017 14:16:01 : threadpool_get_threadproc: Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:16:01 : convert_netaddr_to_str: IP Address String: 10.0.10.253:38455
DEBUG [0x24f8] 18/04/2017 14:16:01 : threadpool_threadproc: Executing Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_RecvReqCR: packet size: 19
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_handle_wrkstpoll_req: Request Type: Workstation-Poll
DEBUG [0x24f8] 18/04/2017 14:16:01 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.102.60\root\cimv2'
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSOclient_filter_CR_subnet: Entering filter function
MSG [0x24f8] 18/04/2017 14:16:01 : wrkstpoll_workerthread_wmi: username:vb\administrator
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSOclient_filter_CR_subnet: authnet not specified, send reqiest to CR
MSG [0x24c0] 18/04/2017 14:16:01 : SSO_server_handle_wrkstpoll_req: Workstation IP: 10.0.101.82
DEBUG [0x24c0] 18/04/2017 14:16:01 : userdb_process_known_userinfo: select query: SELECT * FROM UserInfo WHERE wrkst_ip=='10.0.101.82';
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_handle_wrkstpoll_req: no matched userinfo found
DEBUG [0x24c0] 18/04/2017 14:16:01 : threadpool_run: Submitting Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:16:01 : threadpool_run: adding function at tail
DEBUG [0x24c0] 18/04/2017 14:16:01 : list_add_tail: first element added
DEBUG [0x24c0] 18/04/2017 14:16:01 : threadpool_run: get free thread: ThreadID: 0x1ce8
DEBUG [0x24c0] 18/04/2017 14:16:01 : SSO_server_handle_wrkstpoll_req: callback submitted
DEBUG [0x1ce8] 18/04/2017 14:16:01 : threadpool_threadproc: New Function added
DEBUG [0x1ce8] 18/04/2017 14:16:01 : list_remove_head: last element removed
DEBUG [0x1ce8] 18/04/2017 14:16:01 : threadpool_get_threadproc: Function 0x4558a0
DEBUG [0x1ce8] 18/04/2017 14:16:01 : threadpool_threadproc: Executing Function 0x4558a0
DEBUG [0x1ce8] 18/04/2017 14:16:01 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.101.82\root\cimv2'
MSG [0x1ce8] 18/04/2017 14:16:01 : wrkstpoll_workerthread_wmi: username:vb\administrator
DEBUG [0x24f8] 18/04/2017 14:16:01 : wrkstpoll_workerthread_wmi: Success - Connected to WMI Namespace: \\10.0.102.60\root\cimv2
ERROR [0x24f8] 18/04/2017 14:16:01 : wrkstpoll_workerthread_wmi: Success - Proxy Blanket Security Settings
ERROR [0x24f8] 18/04/2017 14:16:02 : wrkstpoll_workerthread_wmi: WMI Query 'SELECT UserName FROM Win32_ComputerSystem' failed: 0x80041003
MSG [0x24f8] 18/04/2017 14:16:02 : wrkstpoll_handle_logoff_req: Request received from CR
DEBUG [0x24f8] 18/04/2017 14:16:02 : threadpool_finishnotify: Thread ID: 0x24f8
DEBUG [0x24f8] 18/04/2017 14:16:02 : threadpool_finishnotify: Reset Event
DEBUG [0x1450] 18/04/2017 14:16:02 : dca_eventlog: received event log notification
DEBUG [0x1450] 18/04/2017 14:16:02 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:02 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:02 : dca_eventlog: waiting for event log notification
ERROR [0x2618] 18/04/2017 14:16:03 : wrkstpoll_workerthread_wmi: couldnt connected to WMI Namespace '\\10.0.0.212\root\cimv2': 0x80070005
DEBUG [0x2618] 18/04/2017 14:16:04 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.0.212\root\cimv2'
MSG [0x2618] 18/04/2017 14:16:04 : wrkstpoll_workerthread_wmi: username:vb\administrator
ERROR [0x2618] 18/04/2017 14:16:04 : wrkstpoll_workerthread_wmi: couldnt connected to WMI Namespace '\\10.0.0.212\root\cimv2': 0x80070005
DEBUG [0x1450] 18/04/2017 14:16:04 : dca_eventlog: received event log notification
DEBUG [0x1450] 18/04/2017 14:16:04 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:04 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:04 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:04 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:04 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:04 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:04 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:04 : dca_eventlog: waiting for event log notification
DEBUG [0x2618] 18/04/2017 14:16:05 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.0.212\root\cimv2'
MSG [0x2618] 18/04/2017 14:16:05 : wrkstpoll_workerthread_wmi: username:vb\administrator
ERROR [0x2618] 18/04/2017 14:16:05 : wrkstpoll_workerthread_wmi: couldnt connected to WMI Namespace '\\10.0.0.212\root\cimv2': 0x80070005
ERROR [0x2618] 18/04/2017 14:16:05 : wrkstpoll_workerthread_wmi: WMI Namespace Connect Retry Exceeded for '\\10.0.0.212\root\cimv2'
MSG [0x2618] 18/04/2017 14:16:05 : wrkstpoll_handle_logoff_req: Request received from CR
DEBUG [0x2618] 18/04/2017 14:16:05 : threadpool_finishnotify: Thread ID: 0x2618
DEBUG [0x2618] 18/04/2017 14:16:05 : threadpool_finishnotify: Reset Event
DEBUG [0x1450] 18/04/2017 14:16:06 : dca_eventlog: received event log notification
DEBUG [0x1450] 18/04/2017 14:16:06 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:06 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:06 : dca_eventlog: got security event: ID: 4648 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:06 : dca_eventlog: waiting for event log notification
DEBUG [0x2c78] 18/04/2017 14:16:06 : wrkstpoll_workerthread_wmi: Success - Connected to WMI Namespace: \\10.0.101.70\root\cimv2
ERROR [0x2c78] 18/04/2017 14:16:06 : wrkstpoll_workerthread_wmi: Success - Proxy Blanket Security Settings
ERROR [0x2c78] 18/04/2017 14:16:06 : wrkstpoll_workerthread_wmi: WMI Query 'SELECT UserName FROM Win32_ComputerSystem' failed: 0x80041003
MSG [0x2c78] 18/04/2017 14:16:06 : wrkstpoll_handle_logoff_req: Request received from CR
DEBUG [0x2c78] 18/04/2017 14:16:06 : threadpool_finishnotify: Thread ID: 0x2c78
DEBUG [0x2c78] 18/04/2017 14:16:06 : threadpool_finishnotify: Reset Event
ERROR [0x265c] 18/04/2017 14:16:06 : wrkstpoll_workerthread_wmi: couldnt connected to WMI Namespace '\\10.0.102.74\root\cimv2': 0x800706ba
ERROR [0x265c] 18/04/2017 14:16:06 : wrkstpoll_workerthread_wmi: WMI Namespace Connect Retry Exceeded for '\\10.0.102.74\root\cimv2'
MSG [0x265c] 18/04/2017 14:16:06 : wrkstpoll_handle_logoff_req: Request received from CR
DEBUG [0x265c] 18/04/2017 14:16:06 : threadpool_finishnotify: Thread ID: 0x265c
DEBUG [0x265c] 18/04/2017 14:16:06 : threadpool_finishnotify: Reset Event
DEBUG [0x1450] 18/04/2017 14:16:08 : dca_eventlog: received event log notification
DEBUG [0x1450] 18/04/2017 14:16:08 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:08 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:08 : dca_eventlog: waiting for event log notification
ERROR [0x3394] 18/04/2017 14:16:11 : wrkstpoll_workerthread_wmi: couldnt connected to WMI Namespace '\\10.0.102.54\root\cimv2': 0x800706ba
ERROR [0x1d78] 18/04/2017 14:16:11 : wrkstpoll_workerthread_wmi: couldnt connected to WMI Namespace '\\10.0.102.71\root\cimv2': 0x800706ba
DEBUG [0x3394] 18/04/2017 14:16:12 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.102.54\root\cimv2'
MSG [0x3394] 18/04/2017 14:16:12 : wrkstpoll_workerthread_wmi: username:vb\administrator
DEBUG [0x1d78] 18/04/2017 14:16:12 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.102.71\root\cimv2'
MSG [0x1d78] 18/04/2017 14:16:12 : wrkstpoll_workerthread_wmi: username:vb\administrator
DEBUG [0x1450] 18/04/2017 14:16:15 : dca_eventlog: received event log notification
DEBUG [0x1450] 18/04/2017 14:16:15 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:15 : dca_eventlog: waiting for event log notification
MSG [0x1fe4] 18/04/2017 14:16:24 : SSO_client_update_heartbeat: cr_node:10.0.10.253 is_active:2
DEBUG [0x1fe4] 18/04/2017 14:16:24 : net_send: bytes sent: 11
DEBUG [0x1fe4] 18/04/2017 14:16:24 : net_send: full packet sent
DEBUG [0x1450] 18/04/2017 14:16:26 : dca_eventlog: received event log notification
DEBUG [0x1450] 18/04/2017 14:16:26 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:26 : dca_eventlog: waiting for event log notification
ERROR [0x1ce8] 18/04/2017 14:16:27 : wrkstpoll_workerthread_wmi: couldnt connected to WMI Namespace '\\10.0.101.82\root\cimv2': 0x800706ba
DEBUG [0x1ce8] 18/04/2017 14:16:28 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.101.82\root\cimv2'
MSG [0x1ce8] 18/04/2017 14:16:28 : wrkstpoll_workerthread_wmi: username:vb\administrator
DEBUG [0x1450] 18/04/2017 14:16:30 : dca_eventlog: received event log notification
DEBUG [0x1450] 18/04/2017 14:16:30 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:30 : dca_eventlog: waiting for event log notification
DEBUG [0x1450] 18/04/2017 14:16:34 : dca_eventlog: received event log notification
DEBUG [0x1450] 18/04/2017 14:16:34 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:34 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:34 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:34 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:34 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:34 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:34 : dca_eventlog: waiting for event log notification
ERROR [0x3394] 18/04/2017 14:16:37 : wrkstpoll_workerthread_wmi: couldnt connected to WMI Namespace '\\10.0.102.54\root\cimv2': 0x800706ba
ERROR [0x1d78] 18/04/2017 14:16:37 : wrkstpoll_workerthread_wmi: couldnt connected to WMI Namespace '\\10.0.102.71\root\cimv2': 0x800706ba
DEBUG [0x3394] 18/04/2017 14:16:38 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.102.54\root\cimv2'
MSG [0x3394] 18/04/2017 14:16:38 : wrkstpoll_workerthread_wmi: username:vb\administrator
DEBUG [0x1d78] 18/04/2017 14:16:38 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.102.71\root\cimv2'
MSG [0x1d78] 18/04/2017 14:16:38 : wrkstpoll_workerthread_wmi: username:vb\administrator
DEBUG [0x24c0] 18/04/2017 14:16:42 : net_recvfrom: 17 bytes received
DEBUG [0x24c0] 18/04/2017 14:16:42 : SSO_server_RecvReqCR: 17 bytes received
DEBUG [0x24c0] 18/04/2017 14:16:42 : convert_netaddr_to_str: IP Address String: 10.0.10.253:38455
DEBUG [0x24c0] 18/04/2017 14:16:42 : SSO_server_RecvReqCR: packet size: 17
DEBUG [0x24c0] 18/04/2017 14:16:42 : SSO_server_handle_wrkstpoll_req: Request Type: Workstation-Poll
DEBUG [0x24c0] 18/04/2017 14:16:42 : SSOclient_filter_CR_subnet: Entering filter function
DEBUG [0x24c0] 18/04/2017 14:16:42 : SSOclient_filter_CR_subnet: authnet not specified, send reqiest to CR
MSG [0x24c0] 18/04/2017 14:16:42 : SSO_server_handle_wrkstpoll_req: Workstation IP: 10.0.0.26
DEBUG [0x24c0] 18/04/2017 14:16:42 : userdb_process_known_userinfo: select query: SELECT * FROM UserInfo WHERE wrkst_ip=='10.0.0.26';
DEBUG [0x24c0] 18/04/2017 14:16:42 : SSO_server_handle_wrkstpoll_req: no matched userinfo found
DEBUG [0x24c0] 18/04/2017 14:16:42 : threadpool_run: Submitting Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:16:42 : threadpool_run: adding function at tail
DEBUG [0x24c0] 18/04/2017 14:16:42 : list_add_tail: first element added
DEBUG [0x24c0] 18/04/2017 14:16:42 : threadpool_run: get free thread: ThreadID: 0x265c
DEBUG [0x24c0] 18/04/2017 14:16:42 : SSO_server_handle_wrkstpoll_req: callback submitted
DEBUG [0x24c0] 18/04/2017 14:16:42 : net_recvfrom: 21 bytes received
DEBUG [0x265c] 18/04/2017 14:16:42 : threadpool_threadproc: New Function added
DEBUG [0x24c0] 18/04/2017 14:16:42 : SSO_server_RecvReqCR: 21 bytes received
DEBUG [0x265c] 18/04/2017 14:16:42 : list_remove_head: last element removed
DEBUG [0x24c0] 18/04/2017 14:16:42 : convert_netaddr_to_str: IP Address String: 10.0.10.253:38455
DEBUG [0x265c] 18/04/2017 14:16:42 : threadpool_get_threadproc: Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:16:42 : SSO_server_RecvReqCR: packet size: 21
DEBUG [0x265c] 18/04/2017 14:16:42 : threadpool_threadproc: Executing Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:16:42 : SSO_server_handle_wrkstpoll_req: Request Type: Workstation-Poll
DEBUG [0x24c0] 18/04/2017 14:16:42 : SSOclient_filter_CR_subnet: Entering filter function
DEBUG [0x24c0] 18/04/2017 14:16:42 : SSOclient_filter_CR_subnet: authnet not specified, send reqiest to CR
DEBUG [0x265c] 18/04/2017 14:16:42 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.0.26\root\cimv2'
MSG [0x24c0] 18/04/2017 14:16:42 : SSO_server_handle_wrkstpoll_req: Workstation IP: 10.123.185.79
MSG [0x265c] 18/04/2017 14:16:42 : wrkstpoll_workerthread_wmi: username:vb\administrator
DEBUG [0x24c0] 18/04/2017 14:16:42 : userdb_process_known_userinfo: select query: SELECT * FROM UserInfo WHERE wrkst_ip=='10.123.185.79';
DEBUG [0x24c0] 18/04/2017 14:16:42 : SSO_server_handle_wrkstpoll_req: no matched userinfo found
DEBUG [0x24c0] 18/04/2017 14:16:42 : threadpool_run: Submitting Function 0x4558a0
DEBUG [0x24c0] 18/04/2017 14:16:42 : threadpool_run: adding function at tail
DEBUG [0x24c0] 18/04/2017 14:16:42 : list_add_tail: first element added
DEBUG [0x24c0] 18/04/2017 14:16:42 : threadpool_run: get free thread: ThreadID: 0x2618
DEBUG [0x24c0] 18/04/2017 14:16:42 : SSO_server_handle_wrkstpoll_req: callback submitted
DEBUG [0x2618] 18/04/2017 14:16:42 : threadpool_threadproc: New Function added
DEBUG [0x2618] 18/04/2017 14:16:42 : list_remove_head: last element removed
DEBUG [0x2618] 18/04/2017 14:16:42 : threadpool_get_threadproc: Function 0x4558a0
DEBUG [0x2618] 18/04/2017 14:16:42 : threadpool_threadproc: Executing Function 0x4558a0
DEBUG [0x2618] 18/04/2017 14:16:42 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.123.185.79\root\cimv2'
MSG [0x2618] 18/04/2017 14:16:42 : wrkstpoll_workerthread_wmi: username:vb\administrator
DEBUG [0x1450] 18/04/2017 14:16:52 : dca_eventlog: received event log notification
DEBUG [0x1450] 18/04/2017 14:16:52 : dca_eventlog: got security event: ID: 4624 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:52 : dca_eventlog: got security event: ID: 4634 <-> Type: 8
DEBUG [0x1450] 18/04/2017 14:16:52 : dca_eventlog: waiting for event log notification
ERROR [0x1ce8] 18/04/2017 14:16:53 : wrkstpoll_workerthread_wmi: couldnt connected to WMI Namespace '\\10.0.101.82\root\cimv2': 0x800706ba
MSG [0x1fe4] 18/04/2017 14:16:54 : SSO_client_update_heartbeat: cr_node:10.0.10.253 is_active:2
DEBUG [0x1fe4] 18/04/2017 14:16:54 : net_send: bytes sent: 11
DEBUG [0x1fe4] 18/04/2017 14:16:54 : net_send: full packet sent
DEBUG [0x1ce8] 18/04/2017 14:16:54 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.101.82\root\cimv2'
MSG [0x1ce8] 18/04/2017 14:16:54 : wrkstpoll_workerthread_wmi: username:vb\administrator
ERROR [0x265c] 18/04/2017 14:17:03 : wrkstpoll_workerthread_wmi: couldnt connected to WMI Namespace '\\10.0.0.26\root\cimv2': 0x800706ba
ERROR [0x3394] 18/04/2017 14:17:04 : wrkstpoll_workerthread_wmi: couldnt connected to WMI Namespace '\\10.0.102.54\root\cimv2': 0x800706ba
ERROR [0x3394] 18/04/2017 14:17:04 : wrkstpoll_workerthread_wmi: WMI Namespace Connect Retry Exceeded for '\\10.0.102.54\root\cimv2'
MSG [0x3394] 18/04/2017 14:17:04 : wrkstpoll_handle_logoff_req: Request received from CR
DEBUG [0x3394] 18/04/2017 14:17:04 : threadpool_finishnotify: Thread ID: 0x3394
DEBUG [0x3394] 18/04/2017 14:17:04 : threadpool_finishnotify: Reset Event
ERROR [0x1d78] 18/04/2017 14:17:04 : wrkstpoll_workerthread_wmi: couldnt connected to WMI Namespace '\\10.0.102.71\root\cimv2': 0x800706ba
ERROR [0x1d78] 18/04/2017 14:17:04 : wrkstpoll_workerthread_wmi: WMI Namespace Connect Retry Exceeded for '\\10.0.102.71\root\cimv2'
MSG [0x1d78] 18/04/2017 14:17:04 : wrkstpoll_handle_logoff_req: Request received from CR
DEBUG [0x1d78] 18/04/2017 14:17:04 : threadpool_finishnotify: Thread ID: 0x1d78
DEBUG [0x1d78] 18/04/2017 14:17:04 : threadpool_finishnotify: Reset Event
DEBUG [0x265c] 18/04/2017 14:17:04 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.0.0.26\root\cimv2'
MSG [0x265c] 18/04/2017 14:17:04 : wrkstpoll_workerthread_wmi: username:vb\administrator
This thread was automatically locked due to age.