Link to home
Start Free TrialLog in
Avatar of pcarron
pcarronFlag for United States of America

asked on

VMS error connecting to A SCP Server (winsshd)

Hi,
I have setup winsshd server on a win 7 PC to use as an scp server. I can connect from any other windows machine and transfear files but when I try from a vms system I get the following error in the windows logs and the connection terminates:

EventData
[110] WinSSHD 5.23: Session thread 1002 for Windows account 'FILESCP\username' from 10.9.66.12:52112: Session channel 1: FlowSfsWin: Opening file 'C:\my folder' failed with InvalidParameter. Failed to convert Group '' to the native form. LookupAccountName() failed: Windows error 160: One or more arguments are not correct.

The username/passwords are all correct. Anybody know how I can solve this please ?
Below is the log from the winsshd server:

000000000001 2011-10-12 14:11:01.487897 UTC WinSSHD-ALC 5.23 [001] Info
  Configuration loaded:
  * DSA Keypair:
  Size: 1024
  MD5: 3e:30:c8:61:99:3e:3e:ca:9c:d1:2d:61:d2:12:d7:f0
  Babble: xitoh-pygyh-givyf-lerat-zyryc-pokuk-zolup-lysud-holyf-cuzeh-bexix
  * Settings:
  SetDefaults
  With server {
    windowsFirewall.sshPortsFirewallSetting globalScope
    windowsFirewall.fowardedPortsFirewallSetting globalScope
    logging.eventLogLevel logLevelEWI
    logging.logFileLevel logLevelEWIT
  }
  With algs {
    kex.gssG1Sha1Krb5 false
    kex.gssGexSha1Krb5 false
    encr.none true
  }
  With session {
    kerberos5Auth disabled
    ntlmAuth disabled
    sessionTimeout 200
  }
  With access {
    authKeysSync false
    With winGroups {
      Clear
          With New {
        onLogonCmd.workDir "C:\\ALC"
        onLogoffCmd.workDir "C:\\ICS_SCP_TRANSFER"
        initDir "C:\\ICS_SCP_TRANSFER"
        With sfsMap {
          With mountPoints {
            Clear
            CreateNewWithId 1
            New.sfsMountPath "/ICS_SCP_TRANSFER"
            New.realRootPath "C:\\ICS_SCP_TRANSFER"
            NewCommit
          }
        }
        permitS2CForwarding false
      }
      NewCommit
    }
    With winAccounts {
      Clear
      CreateNewWithId 1
      With New {
        winAccount "username"
        loginAllowed yes
        passwordAuth allowed
        publicKeyAuth allowed
        permitTerminalShell yes
        useDefaultInitDir false
        initDir "C:\\ICS_SCP_TRANSFER"
        permitEnvVar yes
        permitExecRequests yes
        permitScp yes
        permitSftp yes
        With sfsMap {
          useDefaultSfsMap false
          With mountPoints {
            Clear
            CreateNewWithId 1
            New.sfsMountPath "/ICS_SCP_TRANSFER"
            New.realRootPath "C:\\ICS_SCP_TRANSFER"
            NewCommit
          }
        }
      }
      NewCommit
      CreateNewWithId 2
      With New {
        winAccount "username2"
        loginAllowed yes
        onLogonCmd.useDefault false
        onLogonCmd.workDir "C:\\ALC"
        onLogoffCmd.useDefault false
        onLogoffCmd.workDir "C:\\ALC"
        permitTerminalShell yes
        useDefaultInitDir false
        initDir "C:\\ALC"
        permitExecRequests yes
        permitScp yes
        permitSftp yes
        With sfsMap {
          useDefaultSfsMap false
          With mountPoints {
            Clear
            CreateNewWithId 1
            New.realRootPath "C:\\ICS_SCP_TRANSFER"
            NewCommit
          }
        }
        permitC2SForwarding no
        permitS2CForwarding no
      }
      NewCommit
    }
    virtGroups.Clear
  }

000000000002 2011-10-12 14:11:01.524009 UTC WinSSHD-ALC 5.23 [240] Info
  Listening on interface 0.0.0.0:22

000000000003 2011-10-12 14:11:01.533936 UTC WinSSHD-ALC 5.23 [362] Info
  Windows Firewall exception added: port 22 with global scope

000000000004 2011-10-12 14:11:01.539182 UTC WinSSHD-ALC 5.23 [005] Info
  Service started, executable file name:
  C:\Program Files (x86)\WinSSHD-ALC\WinSSHD.exe

000000000005 2011-10-12 14:11:58.916945 UTC WinSSHD-ALC 5.23 [021] Info
  Session thread 1001 handling connection from 10.9.66.12:52114:
  Connection from 10.9.66.12:52114 accepted.

000000000006 2011-10-12 14:11:58.922566 UTC WinSSHD-ALC 5.23 [022] Info
  Session thread 1001 handling connection from 10.9.66.12:52114:
  Client version string: SSH-1.99-3.2.0 F-SECURE SSH - Process Software SSH for OpenVMS

000000000007 2011-10-12 14:11:58.922589 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1001 handling connection from 10.9.66.12:52114:
  Starting first key exchange.

000000000008 2011-10-12 14:11:58.954491 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1001 handling connection from 10.9.66.12:52114:
  First out key exchange done.

000000000009 2011-10-12 14:11:58.980217 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1001 handling connection from 10.9.66.12:52114:
  First in key exchange done.

000000000010 2011-10-12 14:11:58.980240 UTC WinSSHD-ALC 5.23 [255] Trace
  Session thread 1001 handling connection from 10.9.66.12:52114:
  Key exchange: diffie-hellman-group1-sha1. Session encryption: aes128-cbc, MAC: hmac-sha1, compression:
  none.

000000000011 2011-10-12 14:11:58.983539 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1001 handling connection from 10.9.66.12:52114:
  Logon attempt 1 for user name 'username' with logon method 'none' started.

000000000012 2011-10-12 14:11:58.983559 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1001 handling connection from 10.9.66.12:52114:
  Logon attempt 1 for user name 'username' with logon method 'none' ended.

000000000013 2011-10-12 14:11:58.987087 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1001 handling connection from 10.9.66.12:52114:
  Logon attempt 1 for user name 'username' with logon method 'none' started.

000000000014 2011-10-12 14:11:58.987106 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1001 handling connection from 10.9.66.12:52114:
  Logon attempt 1 for user name 'username' with logon method 'none' ended.

000000000015 2011-10-12 14:12:05.072149 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1001 handling connection from 10.9.66.12:52114:
  Logon attempt 1 for user name 'username' with logon method 'password' started.

000000000016 2011-10-12 14:12:05.072854 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1001 handling connection from 10.9.66.12:52114:
  DeterministicWinAcctLookup() completed in 632 microseconds.

000000000017 2011-10-12 14:12:05.074885 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1001 handling connection from 10.9.66.12:52114:
  NetUserGetLocalGroups() completed in 1.82 milliseconds.

000000000018 2011-10-12 14:12:05.075866 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1001 handling connection from 10.9.66.12:52114:
  NetUserGetInfo() completed in 964 microseconds.

000000000019 2011-10-12 14:12:05.066209 UTC WinSSHD-ALC 5.23 [153] Trace
  Session thread 1001 handling connection from 10.9.66.12:52114:
  Windows account 'FILESCP\username' has been matched to account settings entry 'username'.

000000000020 2011-10-12 14:12:05.066229 UTC WinSSHD-ALC 5.23 [153] Trace
  Session thread 1001 handling connection from 10.9.66.12:52114:
  Windows account 'FILESCP\username' has been matched to group settings entry '(Everyone)' according
  to WinSSHD account settings entry group setting

000000000021 2011-10-12 14:12:05.081813 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1001 handling connection from 10.9.66.12:52114:
  LogonUser() completed in 15.2 milliseconds.

000000000022 2011-10-12 14:12:05.081858 UTC WinSSHD-ALC 5.23 [040] Info
  Session thread 1001 for Windows account 'FILESCP\username' from 10.9.66.12:52114:
  Logon attempt 1 for user name 'username' with logon method 'password' succeeded.

000000000023 2011-10-12 14:12:05.083288 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1001 for Windows account 'FILESCP\username' from 10.9.66.12:52114:
  Logon attempt 1 for user name 'username' with logon method 'password' ended.

000000000024 2011-10-12 14:12:05.086506 UTC WinSSHD-ALC 5.23 [049] Info
  Session thread 1001 for Windows account 'FILESCP\username' from 10.9.66.12:52114:
  Session channel 1: Session channel created.

000000000025 2011-10-12 14:12:05.221813 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1001 for Windows account 'FILESCP\username' from 10.9.66.12:52114:
  LoadUserProfile() completed in 133 milliseconds.

000000000026 2011-10-12 14:12:05.222887 UTC WinSSHD-ALC 5.23 [251] Trace
  Session thread 1001 for Windows account 'FILESCP\username' from 10.9.66.12:52114:
  User's profile loaded, reason: SFTP session

000000000027 2011-10-12 14:12:05.224604 UTC WinSSHD-ALC 5.23 [287] Trace
  Session thread 1001 for Windows account 'FILESCP\username' from 10.9.66.12:52114:
  Session channel 1: Executed WinSSHD subsystem 'SftpServer.exe'.

000000000028 2011-10-12 14:12:05.238527 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1001 for Windows account 'FILESCP\username' from 10.9.66.12:52114:
  Session channel 1: FlowSfsRoot: Initializing root with the following parameters:
  QtNameValueTree:
  m_name: QtStr, 'Root'
  m_value: QtStr, ''
  m_nested: QtVectS, 2 objects
    [0] QtNameValueTree:
      m_name: QtStr, 'HomePath'
      m_value: QtStr, '//C:/Users/username'
      m_nested: QtVectS, 0 objects
    [1] QtNameValueTree:
      m_name: QtStr, 'Provider'
      m_value: QtStr, 'FlowSfsWin.dll'
      m_nested: QtVectS, 3 objects
        [0] QtNameValueTree:
          m_name: QtStr, 'MountPath'
          m_value: QtStr, '/ICS_SCP_TRANSFER'
          m_nested: QtVectS, 0 objects
        [1] QtNameValueTree:
          m_name: QtStr, 'MountMode'
          m_value: QtStr, 'Read,Write,Delete'
          m_nested: QtVectS, 0 objects
        [2] QtNameValueTree:
          m_name: QtStr, 'RootPath'
          m_value: QtStr, 'C:\ICS_SCP_TRANSFER'
          m_nested: QtVectS, 0 objects

000000000029 2011-10-12 14:12:05.238541 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1001 for Windows account 'FILESCP\username' from 10.9.66.12:52114:
  Session channel 1: FlowSfsRoot: Added provider 'FlowSfsWin.dll' mounted on '/ICS_SCP_TRANSFER' in
  'Read,Write,Delete' mode.

000000000030 2011-10-12 14:12:05.238549 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1001 for Windows account 'FILESCP\username' from 10.9.66.12:52114:
  Session channel 1: FlowSfsRoot: Added provider 'FlowSfsVirtual' mounted on '/'.

000000000031 2011-10-12 14:12:05.238662 UTC WinSSHD-ALC 5.23 [333] Info
  Session thread 1001 for Windows account 'FILESCP\username' from 10.9.66.12:52114:
  Session channel 1: SFTP initialization request received. Client SFTP version: 4. Negotiated SFTP
  version: 4.

000000000032 2011-10-12 14:12:05.238669 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1001 for Windows account 'FILESCP\username' from 10.9.66.12:52114:
  Session channel 1: FlowSfsWin: Initializing provider with the following parameters:
  QtNameValueTree:
  m_name: QtStr, 'Provider'
  m_value: QtStr, 'FlowSfsWin.dll'
  m_nested: QtVectS, 3 objects
    [0] QtNameValueTree:
      m_name: QtStr, 'MountPath'
      m_value: QtStr, '/ICS_SCP_TRANSFER'
      m_nested: null
    [1] QtNameValueTree:
      m_name: QtStr, 'MountMode'
      m_value: QtStr, 'Read,Write,Delete'
      m_nested: QtVectS, 0 objects
    [2] QtNameValueTree:
      m_name: QtStr, 'RootPath'
      m_value: QtStr, 'C:\ICS_SCP_TRANSFER'
      m_nested: QtVectS, 0 objects

000000000033 2011-10-12 14:12:05.238677 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1001 for Windows account 'FILESCP\username' from 10.9.66.12:52114:
  Session channel 1: FlowSfsVirtual: Initializing provider with the following parameters:
  QtNameValueTree:
  m_name: QtStr, 'Provider'
  m_value: QtStr, 'FlowSfsVirtual'
  m_nested: QtVectS, 2 objects
    [0] QtNameValueTree:
      m_name: QtStr, 'MountPath'
      m_value: QtStr, '/'
      m_nested: null
    [1] QtNameValueTree:
      m_name: QtStr, 'Directory'
      m_value: QtStr, '/ICS_SCP_TRANSFER'
      m_nested: null

000000000034 2011-10-12 14:12:05.238697 UTC WinSSHD-ALC 5.23 [304] Info
  Session thread 1001 for Windows account 'FILESCP\username' from 10.9.66.12:52114:
  Session channel 1: FlowSfsRoot: The provided home directory '/C/Users/username' is invalid. Home
  directory '/' will be used instead.

000000000035 2011-10-12 14:12:05.237809 UTC WinSSHD-ALC 5.23 [118] Info
  Session thread 1001 for Windows account 'FILESCP\username' from 10.9.66.12:52114:
  Session channel 1: FlowSfsWin: Read attributes for 'C:\ICS_SCP_TRANSFER' (follow symlink).

000000000036 2011-10-12 14:12:05.240325 UTC WinSSHD-ALC 5.23 [110] Info
  Session thread 1001 for Windows account 'FILESCP\username' from 10.9.66.12:52114:
  Session channel 1: FlowSfsWin: Opening file 'C:\ICS_SCP_TRANSFER' failed with InvalidParameter. Failed
  to convert Group '' to the native form. LookupAccountName() failed: Windows error 160: One or more
  arguments are not correct.

000000000037 2011-10-12 14:12:05.245273 UTC WinSSHD-ALC 5.23 [136] Trace
  ProcessTerminator for session channel 1 in session thread 1001:
  Process completed within 5000 ms waiting period with exit code 0, terminating job.

000000000038 2011-10-12 14:12:05.245154 UTC WinSSHD-ALC 5.23 [050] Info
  Session thread 1001 for Windows account 'FILESCP\username' from 10.9.66.12:52114:
  Session channel 1: Closing session channel.

000000000039 2011-10-12 14:12:05.245224 UTC WinSSHD-ALC 5.23 [093] Info
  Session thread 1001 for Windows account 'FILESCP\username' from 10.9.66.12:52114:
  The client has disconnected the session by sending EOF.

000000000040 2011-10-12 14:32:07.426322 UTC WinSSHD-ALC 5.23 [021] Info
  Session thread 1002 handling connection from 192.156.136.251:61598:
  Connection from 192.156.136.251:61598 accepted.

000000000041 2011-10-12 14:32:07.429266 UTC WinSSHD-ALC 5.23 [022] Info
  Session thread 1002 handling connection from 192.156.136.251:61598:
  Client version string: SSH-2.0-PuTTY_Release_0.60

000000000042 2011-10-12 14:32:07.429282 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1002 handling connection from 192.156.136.251:61598:
  Starting first key exchange.

000000000043 2011-10-12 14:32:07.722333 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1002 handling connection from 192.156.136.251:61598:
  First out key exchange done.

000000000044 2011-10-12 14:32:10.353464 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1002 handling connection from 192.156.136.251:61598:
  First in key exchange done.

000000000045 2011-10-12 14:32:10.353493 UTC WinSSHD-ALC 5.23 [255] Trace
  Session thread 1002 handling connection from 192.156.136.251:61598:
  Key exchange: diffie-hellman-group-exchange-sha1. Session encryption: aes256-ctr, MAC: hmac-sha1,
  compression: none.

000000000046 2011-10-12 14:32:10.577528 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1002 handling connection from 192.156.136.251:61598:
  Logon attempt 1 for user name 'username2' with logon method 'none' started.

000000000047 2011-10-12 14:32:10.577550 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1002 handling connection from 192.156.136.251:61598:
  Logon attempt 1 for user name 'username2' with logon method 'none' ended.

000000000048 2011-10-12 14:32:10.578620 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1002 handling connection from 192.156.136.251:61598:
  Logon attempt 1 for user name 'username2' with logon method 'password' started.

000000000049 2011-10-12 14:32:10.579295 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1002 handling connection from 192.156.136.251:61598:
  DeterministicWinAcctLookup() completed in 620 microseconds.

000000000050 2011-10-12 14:32:10.581334 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1002 handling connection from 192.156.136.251:61598:
  NetUserGetLocalGroups() completed in 1.82 milliseconds.

000000000051 2011-10-12 14:32:10.582281 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1002 handling connection from 192.156.136.251:61598:
  NetUserGetInfo() completed in 934 microseconds.

000000000052 2011-10-12 14:32:10.583148 UTC WinSSHD-ALC 5.23 [153] Trace
  Session thread 1002 handling connection from 192.156.136.251:61598:
  Windows account 'FILESCP\username2' has been matched to account settings entry 'username2'.

000000000053 2011-10-12 14:32:10.583163 UTC WinSSHD-ALC 5.23 [153] Trace
  Session thread 1002 handling connection from 192.156.136.251:61598:
  Windows account 'FILESCP\username2' has been matched to group settings entry '(Everyone)' according to
  WinSSHD account settings entry group setting

000000000054 2011-10-12 14:32:10.585285 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1002 handling connection from 192.156.136.251:61598:
  LogonUser() completed in 1.84 milliseconds.

000000000055 2011-10-12 14:32:10.585327 UTC WinSSHD-ALC 5.23 [040] Info
  Session thread 1002 for Windows account 'FILESCP\username2' from 192.156.136.251:61598:
  Logon attempt 1 for user name 'username2' with logon method 'password' succeeded.

000000000056 2011-10-12 14:32:10.586823 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1002 for Windows account 'FILESCP\username2' from 192.156.136.251:61598:
  Logon attempt 1 for user name 'username2' with logon method 'password' ended.

000000000057 2011-10-12 14:32:10.577528 UTC WinSSHD-ALC 5.23 [049] Info
  Session thread 1002 for Windows account 'FILESCP\username2' from 192.156.136.251:61598:
  Session channel 1: Session channel created.

000000000058 2011-10-12 14:32:10.995035 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1002 for Windows account 'FILESCP\username2' from 192.156.136.251:61598:
  LoadUserProfile() completed in 416 milliseconds.

000000000059 2011-10-12 14:32:10.996537 UTC WinSSHD-ALC 5.23 [251] Trace
  Session thread 1002 for Windows account 'FILESCP\username2' from 192.156.136.251:61598:
  User's profile loaded, reason: SFTP session

000000000060 2011-10-12 14:32:10.999058 UTC WinSSHD-ALC 5.23 [287] Trace
  Session thread 1002 for Windows account 'FILESCP\username2' from 192.156.136.251:61598:
  Session channel 1: Executed WinSSHD subsystem 'SftpServer.exe'.

000000000061 2011-10-12 14:32:11.228224 UTC WinSSHD-ALC 5.23 [333] Info
  Session thread 1002 for Windows account 'FILESCP\username2' from 192.156.136.251:61598:
  Session channel 1: SFTP initialization request received. Client SFTP version: 3. Negotiated SFTP
  version: 3.

000000000062 2011-10-12 14:32:11.248629 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1002 for Windows account 'FILESCP\username2' from 192.156.136.251:61598:
  Session channel 1: FlowSfsRoot: Initializing root with the following parameters:
  QtNameValueTree:
  m_name: QtStr, 'Root'
  m_value: QtStr, ''
  m_nested: QtVectS, 2 objects
    [0] QtNameValueTree:
      m_name: QtStr, 'HomePath'
      m_value: QtStr, '//C:/Users/username2'
      m_nested: QtVectS, 0 objects
    [1] QtNameValueTree:
      m_name: QtStr, 'Provider'
      m_value: QtStr, 'FlowSfsWin.dll'
      m_nested: QtVectS, 3 objects
        [0] QtNameValueTree:
          m_name: QtStr, 'MountPath'
          m_value: QtStr, '/'
          m_nested: QtVectS, 0 objects
        [1] QtNameValueTree:
          m_name: QtStr, 'MountMode'
          m_value: QtStr, 'Read,Write,Delete'
          m_nested: QtVectS, 0 objects
        [2] QtNameValueTree:
          m_name: QtStr, 'RootPath'
          m_value: QtStr, 'C:\ICS_SCP_TRANSFER'
          m_nested: QtVectS, 0 objects

000000000063 2011-10-12 14:32:11.248644 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1002 for Windows account 'FILESCP\username2' from 192.156.136.251:61598:
  Session channel 1: FlowSfsRoot: Added provider 'FlowSfsWin.dll' mounted on '/' in 'Read,Write,Delete'
  mode.

000000000064 2011-10-12 14:32:11.248653 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1002 for Windows account 'FILESCP\username2' from 192.156.136.251:61598:
  Session channel 1: FlowSfsWin: Initializing provider with the following parameters:
  QtNameValueTree:
  m_name: QtStr, 'Provider'
  m_value: QtStr, 'FlowSfsWin.dll'
  m_nested: QtVectS, 3 objects
    [0] QtNameValueTree:
      m_name: QtStr, 'MountPath'
      m_value: QtStr, '/'
      m_nested: null
    [1] QtNameValueTree:
      m_name: QtStr, 'MountMode'
      m_value: QtStr, 'Read,Write,Delete'
      m_nested: QtVectS, 0 objects
    [2] QtNameValueTree:
      m_name: QtStr, 'RootPath'
      m_value: QtStr, 'C:\ICS_SCP_TRANSFER'
      m_nested: QtVectS, 0 objects

000000000065 2011-10-12 14:32:11.248676 UTC WinSSHD-ALC 5.23 [304] Info
  Session thread 1002 for Windows account 'FILESCP\username2' from 192.156.136.251:61598:
  Session channel 1: FlowSfsRoot: The provided home directory '/C/Users/username2' is invalid. Home
  directory '/' will be used instead.

000000000066 2011-10-12 14:32:11.497929 UTC WinSSHD-ALC 5.23 [120] Info
  Session thread 1002 for Windows account 'FILESCP\username2' from 192.156.136.251:61598:
  Session channel 1: FlowSfsWin: Opened directory 'C:\ICS_SCP_TRANSFER'.

000000000067 2011-10-12 14:32:11.731930 UTC WinSSHD-ALC 5.23 [123] Trace
  Session thread 1002 for Windows account 'FILESCP\username2' from 192.156.136.251:61598:
  Session channel 1: FlowSfsWin: Listed 11 entries in directory 'C:\ICS_SCP_TRANSFER' reaching Eof in the
  process.

000000000068 2011-10-12 14:32:11.950330 UTC WinSSHD-ALC 5.23 [123] Trace
  Session thread 1002 for Windows account 'FILESCP\username2' from 192.156.136.251:61598:
  Session channel 1: FlowSfsWin: Listing directory 'C:\ICS_SCP_TRANSFER' failed with Eof.

000000000069 2011-10-12 14:32:12.168735 UTC WinSSHD-ALC 5.23 [111] Info
  Session thread 1002 for Windows account 'FILESCP\username2' from 192.156.136.251:61598:
  Session channel 1: FlowSfsWin: Closed directory 'C:\ICS_SCP_TRANSFER'. Registered 1 successful
  operation. Listed 11 entries in 1 operation.

000000000070 2011-10-12 14:32:12.201333 UTC WinSSHD-ALC 5.23 [136] Trace
  ProcessTerminator for session channel 1 in session thread 1002:
  Process completed within 5000 ms waiting period with exit code 0, terminating job.

000000000071 2011-10-12 14:32:12.201042 UTC WinSSHD-ALC 5.23 [050] Info
  Session thread 1002 for Windows account 'FILESCP\username2' from 192.156.136.251:61598:
  Session channel 1: Closing session channel.

000000000072 2011-10-12 14:32:12.202695 UTC WinSSHD-ALC 5.23 [093] Info
  Session thread 1002 for Windows account 'FILESCP\username2' from 192.156.136.251:61598:
  The client has disconnected the session by sending EOF.

000000000073 2011-10-12 14:32:41.832303 UTC WinSSHD-ALC 5.23 [021] Info
  Session thread 1003 handling connection from 192.156.136.251:61600:
  Connection from 192.156.136.251:61600 accepted.

000000000074 2011-10-12 14:32:41.835205 UTC WinSSHD-ALC 5.23 [022] Info
  Session thread 1003 handling connection from 192.156.136.251:61600:
  Client version string: SSH-2.0-PuTTY_Release_0.60

000000000075 2011-10-12 14:32:41.835220 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1003 handling connection from 192.156.136.251:61600:
  Starting first key exchange.

000000000076 2011-10-12 14:32:42.121856 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1003 handling connection from 192.156.136.251:61600:
  First out key exchange done.

000000000077 2011-10-12 14:32:42.198783 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1003 handling connection from 192.156.136.251:61600:
  First in key exchange done.

000000000078 2011-10-12 14:32:42.198808 UTC WinSSHD-ALC 5.23 [255] Trace
  Session thread 1003 handling connection from 192.156.136.251:61600:
  Key exchange: diffie-hellman-group-exchange-sha1. Session encryption: aes256-ctr, MAC: hmac-sha1,
  compression: none.

000000000079 2011-10-12 14:32:42.415504 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1003 handling connection from 192.156.136.251:61600:
  Logon attempt 1 for user name 'username2' with logon method 'none' started.

000000000080 2011-10-12 14:32:42.415528 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1003 handling connection from 192.156.136.251:61600:
  Logon attempt 1 for user name 'username2' with logon method 'none' ended.

000000000081 2011-10-12 14:32:42.416601 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1003 handling connection from 192.156.136.251:61600:
  Logon attempt 1 for user name 'username2' with logon method 'password' started.

000000000082 2011-10-12 14:32:42.417278 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1003 handling connection from 192.156.136.251:61600:
  DeterministicWinAcctLookup() completed in 638 microseconds.

000000000083 2011-10-12 14:32:42.419246 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1003 handling connection from 192.156.136.251:61600:
  NetUserGetLocalGroups() completed in 1.76 milliseconds.

000000000084 2011-10-12 14:32:42.420220 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1003 handling connection from 192.156.136.251:61600:
  NetUserGetInfo() completed in 961 microseconds.

000000000085 2011-10-12 14:32:42.420246 UTC WinSSHD-ALC 5.23 [153] Trace
  Session thread 1003 handling connection from 192.156.136.251:61600:
  Windows account 'FILESCP\username2' has been matched to account settings entry 'username2'.

000000000086 2011-10-12 14:32:42.420259 UTC WinSSHD-ALC 5.23 [153] Trace
  Session thread 1003 handling connection from 192.156.136.251:61600:
  Windows account 'FILESCP\username2' has been matched to group settings entry '(Everyone)' according to
  WinSSHD account settings entry group setting

000000000087 2011-10-12 14:32:42.422185 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1003 handling connection from 192.156.136.251:61600:
  LogonUser() completed in 1.66 milliseconds.

000000000088 2011-10-12 14:32:42.422224 UTC WinSSHD-ALC 5.23 [040] Info
  Session thread 1003 for Windows account 'FILESCP\username2' from 192.156.136.251:61600:
  Logon attempt 1 for user name 'username2' with logon method 'password' succeeded.

000000000089 2011-10-12 14:32:42.423765 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1003 for Windows account 'FILESCP\username2' from 192.156.136.251:61600:
  Logon attempt 1 for user name 'username2' with logon method 'password' ended.

000000000090 2011-10-12 14:32:42.424847 UTC WinSSHD-ALC 5.23 [049] Info
  Session thread 1003 for Windows account 'FILESCP\username2' from 192.156.136.251:61600:
  Session channel 1: Session channel created.

000000000091 2011-10-12 14:32:42.541994 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1003 for Windows account 'FILESCP\username2' from 192.156.136.251:61600:
  LoadUserProfile() completed in 116 milliseconds.

000000000092 2011-10-12 14:32:42.557584 UTC WinSSHD-ALC 5.23 [251] Trace
  Session thread 1003 for Windows account 'FILESCP\username2' from 192.156.136.251:61600:
  User's profile loaded, reason: SFTP session

000000000093 2011-10-12 14:32:42.560170 UTC WinSSHD-ALC 5.23 [287] Trace
  Session thread 1003 for Windows account 'FILESCP\username2' from 192.156.136.251:61600:
  Session channel 1: Executed WinSSHD subsystem 'SftpServer.exe'.

000000000094 2011-10-12 14:32:42.575067 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1003 for Windows account 'FILESCP\username2' from 192.156.136.251:61600:
  Session channel 1: FlowSfsRoot: Initializing root with the following parameters:
  QtNameValueTree:
  m_name: QtStr, 'Root'
  m_value: QtStr, ''
  m_nested: QtVectS, 2 objects
    [0] QtNameValueTree:
      m_name: QtStr, 'HomePath'
      m_value: QtStr, '//C:/Users/username2'
      m_nested: QtVectS, 0 objects
    [1] QtNameValueTree:
      m_name: QtStr, 'Provider'
      m_value: QtStr, 'FlowSfsWin.dll'
      m_nested: QtVectS, 3 objects
        [0] QtNameValueTree:
          m_name: QtStr, 'MountPath'
          m_value: QtStr, '/'
          m_nested: QtVectS, 0 objects
        [1] QtNameValueTree:
          m_name: QtStr, 'MountMode'
          m_value: QtStr, 'Read,Write,Delete'
          m_nested: QtVectS, 0 objects
        [2] QtNameValueTree:
          m_name: QtStr, 'RootPath'
          m_value: QtStr, 'C:\ICS_SCP_TRANSFER'
          m_nested: QtVectS, 0 objects

000000000095 2011-10-12 14:32:42.575079 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1003 for Windows account 'FILESCP\username2' from 192.156.136.251:61600:
  Session channel 1: FlowSfsRoot: Added provider 'FlowSfsWin.dll' mounted on '/' in 'Read,Write,Delete'
  mode.

000000000096 2011-10-12 14:32:42.575085 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1003 for Windows account 'FILESCP\username2' from 192.156.136.251:61600:
  Session channel 1: FlowSfsWin: Initializing provider with the following parameters:
  QtNameValueTree:
  m_name: QtStr, 'Provider'
  m_value: QtStr, 'FlowSfsWin.dll'
  m_nested: QtVectS, 3 objects
    [0] QtNameValueTree:
      m_name: QtStr, 'MountPath'
      m_value: QtStr, '/'
      m_nested: null
    [1] QtNameValueTree:
      m_name: QtStr, 'MountMode'
      m_value: QtStr, 'Read,Write,Delete'
      m_nested: QtVectS, 0 objects
    [2] QtNameValueTree:
      m_name: QtStr, 'RootPath'
      m_value: QtStr, 'C:\ICS_SCP_TRANSFER'
      m_nested: QtVectS, 0 objects

000000000097 2011-10-12 14:32:42.575170 UTC WinSSHD-ALC 5.23 [304] Info
  Session thread 1003 for Windows account 'FILESCP\username2' from 192.156.136.251:61600:
  Session channel 1: FlowSfsRoot: The provided home directory '/C/Users/username2' is invalid. Home
  directory '/' will be used instead.

000000000098 2011-10-12 14:32:42.776015 UTC WinSSHD-ALC 5.23 [333] Info
  Session thread 1003 for Windows account 'FILESCP\username2' from 192.156.136.251:61600:
  Session channel 1: SFTP initialization request received. Client SFTP version: 3. Negotiated SFTP
  version: 3.

000000000099 2011-10-12 14:32:42.979052 UTC WinSSHD-ALC 5.23 [120] Info
  Session thread 1003 for Windows account 'FILESCP\username2' from 192.156.136.251:61600:
  Session channel 1: FlowSfsWin: Opened directory 'C:\ICS_SCP_TRANSFER\em_draw'.

000000000100 2011-10-12 14:32:43.197587 UTC WinSSHD-ALC 5.23 [123] Trace
  Session thread 1003 for Windows account 'FILESCP\username2' from 192.156.136.251:61600:
  Session channel 1: FlowSfsWin: Listed 5 entries in directory 'C:\ICS_SCP_TRANSFER\em_draw' reaching Eof
  in the process.

000000000101 2011-10-12 14:32:43.399956 UTC WinSSHD-ALC 5.23 [123] Trace
  Session thread 1003 for Windows account 'FILESCP\username2' from 192.156.136.251:61600:
  Session channel 1: FlowSfsWin: Listing directory 'C:\ICS_SCP_TRANSFER\em_draw' failed with Eof.

000000000102 2011-10-12 14:32:43.602778 UTC WinSSHD-ALC 5.23 [111] Info
  Session thread 1003 for Windows account 'FILESCP\username2' from 192.156.136.251:61600:
  Session channel 1: FlowSfsWin: Closed directory 'C:\ICS_SCP_TRANSFER\em_draw'. Registered 1 successful
  operation. Listed 5 entries in 1 operation.

000000000103 2011-10-12 14:32:43.606821 UTC WinSSHD-ALC 5.23 [136] Trace
  ProcessTerminator for session channel 1 in session thread 1003:
  Process completed within 5000 ms waiting period with exit code 0, terminating job.

000000000104 2011-10-12 14:32:43.606772 UTC WinSSHD-ALC 5.23 [050] Info
  Session thread 1003 for Windows account 'FILESCP\username2' from 192.156.136.251:61600:
  Session channel 1: Closing session channel.

000000000105 2011-10-12 14:32:43.607588 UTC WinSSHD-ALC 5.23 [093] Info
  Session thread 1003 for Windows account 'FILESCP\username2' from 192.156.136.251:61600:
  The client has disconnected the session by sending EOF.

000000000106 2011-10-12 14:33:07.173229 UTC WinSSHD-ALC 5.23 [021] Info
  Session thread 1004 handling connection from 192.156.136.251:61601:
  Connection from 192.156.136.251:61601 accepted.

000000000107 2011-10-12 14:33:07.175993 UTC WinSSHD-ALC 5.23 [022] Info
  Session thread 1004 handling connection from 192.156.136.251:61601:
  Client version string: SSH-2.0-PuTTY_Release_0.60

000000000108 2011-10-12 14:33:07.176009 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1004 handling connection from 192.156.136.251:61601:
  Starting first key exchange.

000000000109 2011-10-12 14:33:07.473331 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1004 handling connection from 192.156.136.251:61601:
  First out key exchange done.

000000000110 2011-10-12 14:33:07.536959 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1004 handling connection from 192.156.136.251:61601:
  First in key exchange done.

000000000111 2011-10-12 14:33:07.536982 UTC WinSSHD-ALC 5.23 [255] Trace
  Session thread 1004 handling connection from 192.156.136.251:61601:
  Key exchange: diffie-hellman-group-exchange-sha1. Session encryption: aes256-ctr, MAC: hmac-sha1,
  compression: none.

000000000112 2011-10-12 14:33:07.736467 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1004 handling connection from 192.156.136.251:61601:
  Logon attempt 1 for user name 'username2' with logon method 'none' started.

000000000113 2011-10-12 14:33:07.736493 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1004 handling connection from 192.156.136.251:61601:
  Logon attempt 1 for user name 'username2' with logon method 'none' ended.

000000000114 2011-10-12 14:33:07.737726 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1004 handling connection from 192.156.136.251:61601:
  Logon attempt 1 for user name 'username2' with logon method 'password' started.

000000000115 2011-10-12 14:33:07.738333 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1004 handling connection from 192.156.136.251:61601:
  DeterministicWinAcctLookup() completed in 567 microseconds.

000000000116 2011-10-12 14:33:07.740168 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1004 handling connection from 192.156.136.251:61601:
  NetUserGetLocalGroups() completed in 1.63 milliseconds.

000000000117 2011-10-12 14:33:07.741121 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1004 handling connection from 192.156.136.251:61601:
  NetUserGetInfo() completed in 939 microseconds.

000000000118 2011-10-12 14:33:07.741146 UTC WinSSHD-ALC 5.23 [153] Trace
  Session thread 1004 handling connection from 192.156.136.251:61601:
  Windows account 'FILESCP\username2' has been matched to account settings entry 'username2'.

000000000119 2011-10-12 14:33:07.741158 UTC WinSSHD-ALC 5.23 [153] Trace
  Session thread 1004 handling connection from 192.156.136.251:61601:
  Windows account 'FILESCP\username2' has been matched to group settings entry '(Everyone)' according to
  WinSSHD account settings entry group setting

000000000120 2011-10-12 14:33:07.743065 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1004 handling connection from 192.156.136.251:61601:
  LogonUser() completed in 1.63 milliseconds.

000000000121 2011-10-12 14:33:07.743105 UTC WinSSHD-ALC 5.23 [040] Info
  Session thread 1004 for Windows account 'FILESCP\username2' from 192.156.136.251:61601:
  Logon attempt 1 for user name 'username2' with logon method 'password' succeeded.

000000000122 2011-10-12 14:33:07.744566 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1004 for Windows account 'FILESCP\username2' from 192.156.136.251:61601:
  Logon attempt 1 for user name 'username2' with logon method 'password' ended.

000000000123 2011-10-12 14:33:07.745693 UTC WinSSHD-ALC 5.23 [049] Info
  Session thread 1004 for Windows account 'FILESCP\username2' from 192.156.136.251:61601:
  Session channel 1: Session channel created.

000000000124 2011-10-12 14:33:07.854791 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1004 for Windows account 'FILESCP\username2' from 192.156.136.251:61601:
  LoadUserProfile() completed in 118 milliseconds.

000000000125 2011-10-12 14:33:07.855779 UTC WinSSHD-ALC 5.23 [251] Trace
  Session thread 1004 for Windows account 'FILESCP\username2' from 192.156.136.251:61601:
  User's profile loaded, reason: SFTP session

000000000126 2011-10-12 14:33:07.857149 UTC WinSSHD-ALC 5.23 [287] Trace
  Session thread 1004 for Windows account 'FILESCP\username2' from 192.156.136.251:61601:
  Session channel 1: Executed WinSSHD subsystem 'SftpServer.exe'.

000000000127 2011-10-12 14:33:07.868472 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1004 for Windows account 'FILESCP\username2' from 192.156.136.251:61601:
  Session channel 1: FlowSfsRoot: Initializing root with the following parameters:
  QtNameValueTree:
  m_name: QtStr, 'Root'
  m_value: QtStr, ''
  m_nested: QtVectS, 2 objects
    [0] QtNameValueTree:
      m_name: QtStr, 'HomePath'
      m_value: QtStr, '//C:/Users/username2'
      m_nested: QtVectS, 0 objects
    [1] QtNameValueTree:
      m_name: QtStr, 'Provider'
      m_value: QtStr, 'FlowSfsWin.dll'
      m_nested: QtVectS, 3 objects
        [0] QtNameValueTree:
          m_name: QtStr, 'MountPath'
          m_value: QtStr, '/'
          m_nested: QtVectS, 0 objects
        [1] QtNameValueTree:
          m_name: QtStr, 'MountMode'
          m_value: QtStr, 'Read,Write,Delete'
          m_nested: QtVectS, 0 objects
        [2] QtNameValueTree:
          m_name: QtStr, 'RootPath'
          m_value: QtStr, 'C:\ICS_SCP_TRANSFER'
          m_nested: QtVectS, 0 objects

000000000128 2011-10-12 14:33:07.868485 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1004 for Windows account 'FILESCP\username2' from 192.156.136.251:61601:
  Session channel 1: FlowSfsRoot: Added provider 'FlowSfsWin.dll' mounted on '/' in 'Read,Write,Delete'
  mode.

000000000129 2011-10-12 14:33:07.868491 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1004 for Windows account 'FILESCP\username2' from 192.156.136.251:61601:
  Session channel 1: FlowSfsWin: Initializing provider with the following parameters:
  QtNameValueTree:
  m_name: QtStr, 'Provider'
  m_value: QtStr, 'FlowSfsWin.dll'
  m_nested: QtVectS, 3 objects
    [0] QtNameValueTree:
      m_name: QtStr, 'MountPath'
      m_value: QtStr, '/'
      m_nested: null
    [1] QtNameValueTree:
      m_name: QtStr, 'MountMode'
      m_value: QtStr, 'Read,Write,Delete'
      m_nested: QtVectS, 0 objects
    [2] QtNameValueTree:
      m_name: QtStr, 'RootPath'
      m_value: QtStr, 'C:\ICS_SCP_TRANSFER'
      m_nested: QtVectS, 0 objects

000000000130 2011-10-12 14:33:07.868506 UTC WinSSHD-ALC 5.23 [304] Info
  Session thread 1004 for Windows account 'FILESCP\username2' from 192.156.136.251:61601:
  Session channel 1: FlowSfsRoot: The provided home directory '/C/Users/username2' is invalid. Home
  directory '/' will be used instead.

000000000131 2011-10-12 14:33:08.079229 UTC WinSSHD-ALC 5.23 [333] Info
  Session thread 1004 for Windows account 'FILESCP\username2' from 192.156.136.251:61601:
  Session channel 1: SFTP initialization request received. Client SFTP version: 3. Negotiated SFTP
  version: 3.

000000000132 2011-10-12 14:33:08.297800 UTC WinSSHD-ALC 5.23 [120] Info
  Session thread 1004 for Windows account 'FILESCP\username2' from 192.156.136.251:61601:
  Session channel 1: FlowSfsWin: Opened directory 'C:\ICS_SCP_TRANSFER\em_draw\combi_from_ALC'.

000000000133 2011-10-12 14:33:08.500510 UTC WinSSHD-ALC 5.23 [123] Trace
  Session thread 1004 for Windows account 'FILESCP\username2' from 192.156.136.251:61601:
  Session channel 1: FlowSfsWin: Listed 2 entries in directory 'C:\ICS_SCP_TRANSFER\em_draw\combi_from_nl
  c' reaching Eof in the process.

000000000134 2011-10-12 14:33:08.718812 UTC WinSSHD-ALC 5.23 [123] Trace
  Session thread 1004 for Windows account 'FILESCP\username2' from 192.156.136.251:61601:
  Session channel 1: FlowSfsWin: Listing directory 'C:\ICS_SCP_TRANSFER\em_draw\combi_from_ALC' failed
  with Eof.

000000000135 2011-10-12 14:33:08.937176 UTC WinSSHD-ALC 5.23 [111] Info
  Session thread 1004 for Windows account 'FILESCP\username2' from 192.156.136.251:61601:
  Session channel 1: FlowSfsWin: Closed directory 'C:\ICS_SCP_TRANSFER\em_draw\combi_from_ALC'.
  Registered 1 successful operation. Listed 2 entries in 1 operation.

000000000136 2011-10-12 14:33:08.941006 UTC WinSSHD-ALC 5.23 [050] Info
  Session thread 1004 for Windows account 'FILESCP\username2' from 192.156.136.251:61601:
  Session channel 1: Closing session channel.

000000000137 2011-10-12 14:33:08.941776 UTC WinSSHD-ALC 5.23 [136] Trace
  ProcessTerminator for session channel 1 in session thread 1004:
  Process completed within 5000 ms waiting period with exit code 0, terminating job.

000000000138 2011-10-12 14:33:08.941771 UTC WinSSHD-ALC 5.23 [093] Info
  Session thread 1004 for Windows account 'FILESCP\username2' from 192.156.136.251:61601:
  The client has disconnected the session by sending EOF.

000000000139 2011-10-12 15:00:36.790450 UTC WinSSHD-ALC 5.23 [021] Info
  Session thread 1005 handling connection from 10.9.66.12:52115:
  Connection from 10.9.66.12:52115 accepted.

000000000140 2011-10-12 15:00:36.796283 UTC WinSSHD-ALC 5.23 [022] Info
  Session thread 1005 handling connection from 10.9.66.12:52115:
  Client version string: SSH-1.99-3.2.0 F-SECURE SSH - Process Software SSH for OpenVMS

000000000141 2011-10-12 15:00:36.796303 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  Starting first key exchange.

000000000142 2011-10-12 15:00:36.827779 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  First out key exchange done.

000000000143 2011-10-12 15:00:36.854335 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  First in key exchange done.

000000000144 2011-10-12 15:00:36.854353 UTC WinSSHD-ALC 5.23 [255] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  Key exchange: diffie-hellman-group1-sha1. Session encryption: aes128-cbc, MAC: hmac-sha1, compression:
  none.

000000000145 2011-10-12 15:00:36.857287 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  Logon attempt 1 for user name 'username' with logon method 'none' started.

000000000146 2011-10-12 15:00:36.857307 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  Logon attempt 1 for user name 'username' with logon method 'none' ended.

000000000147 2011-10-12 15:00:36.861467 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  Logon attempt 1 for user name 'username' with logon method 'none' started.

000000000148 2011-10-12 15:00:36.861487 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  Logon attempt 1 for user name 'username' with logon method 'none' ended.

000000000149 2011-10-12 15:00:45.424213 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  Logon attempt 1 for user name 'username' with logon method 'password' started.

000000000150 2011-10-12 15:00:45.424898 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  DeterministicWinAcctLookup() completed in 618 microseconds.

000000000151 2011-10-12 15:00:45.426946 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  NetUserGetLocalGroups() completed in 1.84 milliseconds.

000000000152 2011-10-12 15:00:45.427904 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  NetUserGetInfo() completed in 940 microseconds.

000000000153 2011-10-12 15:00:45.428742 UTC WinSSHD-ALC 5.23 [153] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  Windows account 'FILESCP\username' has been matched to account settings entry 'username'.

000000000154 2011-10-12 15:00:45.428756 UTC WinSSHD-ALC 5.23 [153] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  Windows account 'FILESCP\username' has been matched to group settings entry '(Everyone)' according
  to WinSSHD account settings entry group setting

000000000155 2011-10-12 15:00:45.460326 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  LogonUser() completed in 31.2 milliseconds.

000000000156 2011-10-12 15:00:45.494781 UTC WinSSHD-ALC 5.23 [039] Warning
  Session thread 1005 handling connection from 10.9.66.12:52115:
  Logon attempt 1 for user name 'username' with logon method 'password' failed: The system function
  LogonUser() failed with the following error: Windows error 1326: Logon failure: unknown user name or
  bad password.

000000000157 2011-10-12 15:00:48.434893 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  Logon attempt 2 for user name 'username' with logon method 'password' ended.

000000000158 2011-10-12 15:01:02.001549 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  Logon attempt 2 for user name 'username' with logon method 'password' started.

000000000159 2011-10-12 15:01:02.002137 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  DeterministicWinAcctLookup() completed in 532 microseconds.

000000000160 2011-10-12 15:01:02.006940 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  NetUserGetLocalGroups() completed in 4.56 milliseconds.

000000000161 2011-10-12 15:01:02.007883 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  NetUserGetInfo() completed in 928 microseconds.

000000000162 2011-10-12 15:01:02.007910 UTC WinSSHD-ALC 5.23 [153] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  Windows account 'FILESCP\username' has been matched to account settings entry 'username'.

000000000163 2011-10-12 15:01:02.007923 UTC WinSSHD-ALC 5.23 [153] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  Windows account 'FILESCP\username' has been matched to group settings entry '(Everyone)' according
  to WinSSHD account settings entry group setting

000000000164 2011-10-12 15:01:02.009870 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1005 handling connection from 10.9.66.12:52115:
  LogonUser() completed in 1.67 milliseconds.

000000000165 2011-10-12 15:01:02.009912 UTC WinSSHD-ALC 5.23 [040] Info
  Session thread 1005 for Windows account 'FILESCP\username' from 10.9.66.12:52115:
  Logon attempt 2 for user name 'username' with logon method 'password' succeeded.

000000000166 2011-10-12 15:01:02.011538 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1005 for Windows account 'FILESCP\username' from 10.9.66.12:52115:
  Logon attempt 2 for user name 'username' with logon method 'password' ended.

000000000167 2011-10-12 15:01:02.015120 UTC WinSSHD-ALC 5.23 [049] Info
  Session thread 1005 for Windows account 'FILESCP\username' from 10.9.66.12:52115:
  Session channel 1: Session channel created.

000000000168 2011-10-12 15:01:03.483921 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1005 for Windows account 'FILESCP\username' from 10.9.66.12:52115:
  LoadUserProfile() completed in 1.46 seconds.

000000000169 2011-10-12 15:01:03.485674 UTC WinSSHD-ALC 5.23 [251] Trace
  Session thread 1005 for Windows account 'FILESCP\username' from 10.9.66.12:52115:
  User's profile loaded, reason: SFTP session

000000000170 2011-10-12 15:01:04.161913 UTC WinSSHD-ALC 5.23 [287] Trace
  Session thread 1005 for Windows account 'FILESCP\username' from 10.9.66.12:52115:
  Session channel 1: Executed WinSSHD subsystem 'SftpServer.exe'.

000000000171 2011-10-12 15:01:04.919395 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1005 for Windows account 'FILESCP\username' from 10.9.66.12:52115:
  Session channel 1: FlowSfsRoot: Initializing root with the following parameters:
  QtNameValueTree:
  m_name: QtStr, 'Root'
  m_value: QtStr, ''
  m_nested: QtVectS, 2 objects
    [0] QtNameValueTree:
      m_name: QtStr, 'HomePath'
      m_value: QtStr, '//C:/Users/username'
      m_nested: QtVectS, 0 objects
    [1] QtNameValueTree:
      m_name: QtStr, 'Provider'
      m_value: QtStr, 'FlowSfsWin.dll'
      m_nested: QtVectS, 3 objects
        [0] QtNameValueTree:
          m_name: QtStr, 'MountPath'
          m_value: QtStr, '/ICS_SCP_TRANSFER'
          m_nested: QtVectS, 0 objects
        [1] QtNameValueTree:
          m_name: QtStr, 'MountMode'
          m_value: QtStr, 'Read,Write,Delete'
          m_nested: QtVectS, 0 objects
        [2] QtNameValueTree:
          m_name: QtStr, 'RootPath'
          m_value: QtStr, 'C:\ICS_SCP_TRANSFER'
          m_nested: QtVectS, 0 objects

000000000172 2011-10-12 15:01:04.919412 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1005 for Windows account 'FILESCP\username' from 10.9.66.12:52115:
  Session channel 1: FlowSfsRoot: Added provider 'FlowSfsWin.dll' mounted on '/ICS_SCP_TRANSFER' in
  'Read,Write,Delete' mode.

000000000173 2011-10-12 15:01:04.919419 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1005 for Windows account 'FILESCP\username' from 10.9.66.12:52115:
  Session channel 1: FlowSfsRoot: Added provider 'FlowSfsVirtual' mounted on '/'.

000000000174 2011-10-12 15:01:04.919576 UTC WinSSHD-ALC 5.23 [333] Info
  Session thread 1005 for Windows account 'FILESCP\username' from 10.9.66.12:52115:
  Session channel 1: SFTP initialization request received. Client SFTP version: 4. Negotiated SFTP
  version: 4.

000000000175 2011-10-12 15:01:04.919585 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1005 for Windows account 'FILESCP\username' from 10.9.66.12:52115:
  Session channel 1: FlowSfsWin: Initializing provider with the following parameters:
  QtNameValueTree:
  m_name: QtStr, 'Provider'
  m_value: QtStr, 'FlowSfsWin.dll'
  m_nested: QtVectS, 3 objects
    [0] QtNameValueTree:
      m_name: QtStr, 'MountPath'
      m_value: QtStr, '/ICS_SCP_TRANSFER'
      m_nested: null
    [1] QtNameValueTree:
      m_name: QtStr, 'MountMode'
      m_value: QtStr, 'Read,Write,Delete'
      m_nested: QtVectS, 0 objects
    [2] QtNameValueTree:
      m_name: QtStr, 'RootPath'
      m_value: QtStr, 'C:\ICS_SCP_TRANSFER'
      m_nested: QtVectS, 0 objects

000000000176 2011-10-12 15:01:04.919595 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1005 for Windows account 'FILESCP\username' from 10.9.66.12:52115:
  Session channel 1: FlowSfsVirtual: Initializing provider with the following parameters:
  QtNameValueTree:
  m_name: QtStr, 'Provider'
  m_value: QtStr, 'FlowSfsVirtual'
  m_nested: QtVectS, 2 objects
    [0] QtNameValueTree:
      m_name: QtStr, 'MountPath'
      m_value: QtStr, '/'
      m_nested: null
    [1] QtNameValueTree:
      m_name: QtStr, 'Directory'
      m_value: QtStr, '/ICS_SCP_TRANSFER'
      m_nested: null

000000000177 2011-10-12 15:01:04.919620 UTC WinSSHD-ALC 5.23 [304] Info
  Session thread 1005 for Windows account 'FILESCP\username' from 10.9.66.12:52115:
  Session channel 1: FlowSfsRoot: The provided home directory '/C/Users/username' is invalid. Home
  directory '/' will be used instead.

000000000178 2011-10-12 15:01:04.943232 UTC WinSSHD-ALC 5.23 [118] Info
  Session thread 1005 for Windows account 'FILESCP\username' from 10.9.66.12:52115:
  Session channel 1: FlowSfsWin: Read attributes for 'C:\ICS_SCP_TRANSFER' (follow symlink).

000000000179 2011-10-12 15:01:04.947358 UTC WinSSHD-ALC 5.23 [110] Info
  Session thread 1005 for Windows account 'FILESCP\username' from 10.9.66.12:52115:
  Session channel 1: FlowSfsWin: Opening file 'C:\ICS_SCP_TRANSFER' failed with InvalidParameter. Failed
  to convert Group '' to the native form. LookupAccountName() failed: Windows error 160: One or more
  arguments are not correct.

000000000180 2011-10-12 15:01:04.977617 UTC WinSSHD-ALC 5.23 [136] Trace
  ProcessTerminator for session channel 1 in session thread 1005:
  Process completed within 5000 ms waiting period with exit code 0, terminating job.

000000000181 2011-10-12 15:01:04.976497 UTC WinSSHD-ALC 5.23 [050] Info
  Session thread 1005 for Windows account 'FILESCP\username' from 10.9.66.12:52115:
  Session channel 1: Closing session channel.

000000000182 2011-10-12 15:01:04.976618 UTC WinSSHD-ALC 5.23 [093] Info
  Session thread 1005 for Windows account 'FILESCP\username' from 10.9.66.12:52115:
  The client has disconnected the session by sending EOF.

000000000183 2011-10-12 15:04:08.813524 UTC WinSSHD-ALC 5.23 [021] Info
  Session thread 1006 handling connection from 10.9.60.112:4143:
  Connection from 10.9.60.112:4143 accepted.

000000000184 2011-10-12 15:04:08.865812 UTC WinSSHD-ALC 5.23 [022] Info
  Session thread 1006 handling connection from 10.9.60.112:4143:
  Client version string: SSH-2.0-OpenSSH_3.8.1p1

000000000185 2011-10-12 15:04:08.865829 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1006 handling connection from 10.9.60.112:4143:
  Starting first key exchange.

000000000186 2011-10-12 15:04:09.094164 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1006 handling connection from 10.9.60.112:4143:
  First out key exchange done.

000000000187 2011-10-12 15:04:09.116066 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1006 handling connection from 10.9.60.112:4143:
  First in key exchange done.

000000000188 2011-10-12 15:04:09.116084 UTC WinSSHD-ALC 5.23 [255] Trace
  Session thread 1006 handling connection from 10.9.60.112:4143:
  Key exchange: diffie-hellman-group-exchange-sha1. Session encryption: aes128-cbc, MAC: hmac-md5,
  compression: none.

000000000189 2011-10-12 15:04:09.331893 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1006 handling connection from 10.9.60.112:4143:
  Logon attempt 1 for user name 'testuser' with logon method 'none' started.

000000000190 2011-10-12 15:04:09.331916 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1006 handling connection from 10.9.60.112:4143:
  Logon attempt 1 for user name 'testuser' with logon method 'none' ended.

000000000191 2011-10-12 15:04:16.828837 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1006 handling connection from 10.9.60.112:4143:
  Logon attempt 1 for user name 'testuser' with logon method 'password' started.

000000000192 2011-10-12 15:04:16.852917 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1006 handling connection from 10.9.60.112:4143:
  DeterministicWinAcctLookup() completed in 24.0 milliseconds.

000000000193 2011-10-12 15:04:16.852937 UTC WinSSHD-ALC 5.23 [029] Warning
  Session thread 1006 handling connection from 10.9.60.112:4143:
  Logon attempt 1 for user name 'testuser' with logon method 'password' failed: The supplied user name
  could not be looked up: Account lookup failed: First LookupAccountName() for 'FILESCP\testuser'
  failed with the following error: Windows error 1332: No mapping between account names and security IDs
  was done.

000000000194 2011-10-12 15:04:19.839642 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1006 handling connection from 10.9.60.112:4143:
  Logon attempt 2 for user name 'testuser' with logon method 'password' ended.

000000000195 2011-10-12 15:04:21.321645 UTC WinSSHD-ALC 5.23 [093] Info
  Session thread 1006 handling connection from 10.9.60.112:4143:
  The client has disconnected the session by sending EOF.

000000000196 2011-10-12 15:04:34.291587 UTC WinSSHD-ALC 5.23 [021] Info
  Session thread 1007 handling connection from 10.9.60.112:4159:
  Connection from 10.9.60.112:4159 accepted.

000000000197 2011-10-12 15:04:34.378316 UTC WinSSHD-ALC 5.23 [022] Info
  Session thread 1007 handling connection from 10.9.60.112:4159:
  Client version string: SSH-2.0-OpenSSH_3.8.1p1

000000000198 2011-10-12 15:04:34.378334 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1007 handling connection from 10.9.60.112:4159:
  Starting first key exchange.

000000000199 2011-10-12 15:04:34.607186 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1007 handling connection from 10.9.60.112:4159:
  First out key exchange done.

000000000200 2011-10-12 15:04:34.628946 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1007 handling connection from 10.9.60.112:4159:
  First in key exchange done.

000000000201 2011-10-12 15:04:34.628965 UTC WinSSHD-ALC 5.23 [255] Trace
  Session thread 1007 handling connection from 10.9.60.112:4159:
  Key exchange: diffie-hellman-group-exchange-sha1. Session encryption: aes128-cbc, MAC: hmac-md5,
  compression: none.

000000000202 2011-10-12 15:04:34.845210 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1007 handling connection from 10.9.60.112:4159:
  Logon attempt 1 for user name 'username' with logon method 'none' started.

000000000203 2011-10-12 15:04:34.845232 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1007 handling connection from 10.9.60.112:4159:
  Logon attempt 1 for user name 'username' with logon method 'none' ended.

000000000204 2011-10-12 15:04:41.088154 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1007 handling connection from 10.9.60.112:4159:
  Logon attempt 1 for user name 'username' with logon method 'password' started.

000000000205 2011-10-12 15:04:41.088754 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1007 handling connection from 10.9.60.112:4159:
  DeterministicWinAcctLookup() completed in 547 microseconds.

000000000206 2011-10-12 15:04:41.102485 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1007 handling connection from 10.9.60.112:4159:
  NetUserGetLocalGroups() completed in 13.5 milliseconds.

000000000207 2011-10-12 15:04:41.103428 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1007 handling connection from 10.9.60.112:4159:
  NetUserGetInfo() completed in 928 microseconds.

000000000208 2011-10-12 15:04:41.103456 UTC WinSSHD-ALC 5.23 [153] Trace
  Session thread 1007 handling connection from 10.9.60.112:4159:
  Windows account 'FILESCP\username' has been matched to account settings entry 'username'.

000000000209 2011-10-12 15:04:41.103469 UTC WinSSHD-ALC 5.23 [153] Trace
  Session thread 1007 handling connection from 10.9.60.112:4159:
  Windows account 'FILESCP\username' has been matched to group settings entry '(Everyone)' according
  to WinSSHD account settings entry group setting

000000000210 2011-10-12 15:04:41.105565 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1007 handling connection from 10.9.60.112:4159:
  LogonUser() completed in 1.81 milliseconds.

000000000211 2011-10-12 15:04:41.105615 UTC WinSSHD-ALC 5.23 [040] Info
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  Logon attempt 1 for user name 'username' with logon method 'password' succeeded.

000000000212 2011-10-12 15:04:41.106984 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  Logon attempt 1 for user name 'username' with logon method 'password' ended.

000000000213 2011-10-12 15:04:41.112004 UTC WinSSHD-ALC 5.23 [049] Info
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  Session channel 1: Session channel created.

000000000214 2011-10-12 15:04:41.314575 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  LoadUserProfile() completed in 181 milliseconds.

000000000215 2011-10-12 15:04:41.305280 UTC WinSSHD-ALC 5.23 [251] Trace
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  User's profile loaded, reason: SCP session

000000000216 2011-10-12 15:04:41.385067 UTC WinSSHD-ALC 5.23 [287] Trace
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  Session channel 1: Executed WinSSHD subsystem 'ScpServer.exe'.

000000000217 2011-10-12 15:04:41.508080 UTC WinSSHD-ALC 5.23 [340] Info
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  Session channel 1: Starting SCP with command: scp -v -t /ICS_SCP_TRANSFER/testgareth10.txt.

000000000218 2011-10-12 15:04:41.511263 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  Session channel 1: FlowSfsRoot: Initializing root with the following parameters:
  QtNameValueTree:
  m_name: QtStr, 'Root'
  m_value: QtStr, ''
  m_nested: QtVectS, 2 objects
    [0] QtNameValueTree:
      m_name: QtStr, 'HomePath'
      m_value: QtStr, '//C:/Users/username'
      m_nested: QtVectS, 0 objects
    [1] QtNameValueTree:
      m_name: QtStr, 'Provider'
      m_value: QtStr, 'FlowSfsWin.dll'
      m_nested: QtVectS, 3 objects
        [0] QtNameValueTree:
          m_name: QtStr, 'MountPath'
          m_value: QtStr, '/ICS_SCP_TRANSFER'
          m_nested: QtVectS, 0 objects
        [1] QtNameValueTree:
          m_name: QtStr, 'MountMode'
          m_value: QtStr, 'Read,Write,Delete'
          m_nested: QtVectS, 0 objects
        [2] QtNameValueTree:
          m_name: QtStr, 'RootPath'
          m_value: QtStr, 'C:\ICS_SCP_TRANSFER'
          m_nested: QtVectS, 0 objects

000000000219 2011-10-12 15:04:41.511279 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  Session channel 1: FlowSfsRoot: Added provider 'FlowSfsWin.dll' mounted on '/ICS_SCP_TRANSFER' in
  'Read,Write,Delete' mode.

000000000220 2011-10-12 15:04:41.511286 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  Session channel 1: FlowSfsRoot: Added provider 'FlowSfsVirtual' mounted on '/'.

000000000221 2011-10-12 15:04:41.511438 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  Session channel 1: FlowSfsVirtual: Initializing provider with the following parameters:
  QtNameValueTree:
  m_name: QtStr, 'Provider'
  m_value: QtStr, 'FlowSfsVirtual'
  m_nested: QtVectS, 2 objects
    [0] QtNameValueTree:
      m_name: QtStr, 'MountPath'
      m_value: QtStr, '/'
      m_nested: null
    [1] QtNameValueTree:
      m_name: QtStr, 'Directory'
      m_value: QtStr, '/ICS_SCP_TRANSFER'
      m_nested: null

000000000222 2011-10-12 15:04:41.511450 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  Session channel 1: FlowSfsWin: Initializing provider with the following parameters:
  QtNameValueTree:
  m_name: QtStr, 'Provider'
  m_value: QtStr, 'FlowSfsWin.dll'
  m_nested: QtVectS, 3 objects
    [0] QtNameValueTree:
      m_name: QtStr, 'MountPath'
      m_value: QtStr, '/ICS_SCP_TRANSFER'
      m_nested: null
    [1] QtNameValueTree:
      m_name: QtStr, 'MountMode'
      m_value: QtStr, 'Read,Write,Delete'
      m_nested: QtVectS, 0 objects
    [2] QtNameValueTree:
      m_name: QtStr, 'RootPath'
      m_value: QtStr, 'C:\ICS_SCP_TRANSFER'
      m_nested: QtVectS, 0 objects

000000000223 2011-10-12 15:04:41.511461 UTC WinSSHD-ALC 5.23 [304] Info
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  Session channel 1: FlowSfsRoot: The provided home directory '/C/Users/username' is invalid. Home
  directory '/' will be used instead.

000000000224 2011-10-12 15:04:41.511492 UTC WinSSHD-ALC 5.23 [118] Info
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  Session channel 1: FlowSfsWin: Reading attributes for 'C:\ICS_SCP_TRANSFER\testgareth10.txt' (follow
  symlink) failed with NoSuchFile. GetFileAttributes() failed: Windows error 2: The system cannot find
  the file specified.

000000000225 2011-10-12 15:04:41.580463 UTC WinSSHD-ALC 5.23 [110] Info
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  Session channel 1: FlowSfsWin: Opened new file 'C:\ICS_SCP_TRANSFER\testgareth10.txt'.

000000000226 2011-10-12 15:04:41.617280 UTC WinSSHD-ALC 5.23 [117] Trace
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  Session channel 1: FlowSfsWin: Wrote 8 bytes at position 0 to file 'C:\ICS_SCP_TRANSFER\testgareth10.tx
  t'.

000000000227 2011-10-12 15:04:41.670563 UTC WinSSHD-ALC 5.23 [111] Info
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  Session channel 1: FlowSfsWin: Closed file 'C:\ICS_SCP_TRANSFER\testgareth10.txt'. Registered 1
  successful operation. Uploaded 8 bytes in 1 operation.

000000000228 2011-10-12 15:04:41.701959 UTC WinSSHD-ALC 5.23 [374] Trace
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  Session channel 1: Sending exit code 0 to WinSSHD.

000000000229 2011-10-12 15:04:41.702009 UTC WinSSHD-ALC 5.23 [371] Trace
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  Session channel 1: Received exit code 0 from WinSSHD subsystem; relaying it to the remote.

000000000230 2011-10-12 15:04:41.702323 UTC WinSSHD-ALC 5.23 [136] Trace
  ProcessTerminator for session channel 1 in session thread 1007:
  Process completed within 5000 ms waiting period with exit code 0, terminating job.

000000000231 2011-10-12 15:04:41.702228 UTC WinSSHD-ALC 5.23 [050] Info
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  Session channel 1: Closing session channel.

000000000232 2011-10-12 15:04:41.715153 UTC WinSSHD-ALC 5.23 [093] Info
  Session thread 1007 for Windows account 'FILESCP\username' from 10.9.60.112:4159:
  The client has disconnected the session by sending EOF.

000000000233 2011-10-12 15:12:40.959322 UTC WinSSHD-ALC 5.23 [021] Info
  Session thread 1008 handling connection from 10.9.66.11:63592:
  Connection from 10.9.66.11:63592 accepted.

000000000234 2011-10-12 15:12:40.964210 UTC WinSSHD-ALC 5.23 [022] Info
  Session thread 1008 handling connection from 10.9.66.11:63592:
  Client version string: SSH-1.99-3.2.0 F-SECURE SSH - Process Software SSH for OpenVMS

000000000235 2011-10-12 15:12:40.964228 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1008 handling connection from 10.9.66.11:63592:
  Starting first key exchange.

000000000236 2011-10-12 15:12:41.005407 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1008 handling connection from 10.9.66.11:63592:
  First out key exchange done.

000000000237 2011-10-12 15:12:41.055836 UTC WinSSHD-ALC 5.23 [152] Trace
  Session thread 1008 handling connection from 10.9.66.11:63592:
  First in key exchange done.

000000000238 2011-10-12 15:12:41.055855 UTC WinSSHD-ALC 5.23 [255] Trace
  Session thread 1008 handling connection from 10.9.66.11:63592:
  Key exchange: diffie-hellman-group1-sha1. Session encryption: aes128-cbc, MAC: hmac-sha1, compression:
  none.

000000000239 2011-10-12 15:12:41.058777 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1008 handling connection from 10.9.66.11:63592:
  Logon attempt 1 for user name 'username' with logon method 'none' started.

000000000240 2011-10-12 15:12:41.058796 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1008 handling connection from 10.9.66.11:63592:
  Logon attempt 1 for user name 'username' with logon method 'none' ended.

000000000241 2011-10-12 15:12:41.062628 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1008 handling connection from 10.9.66.11:63592:
  Logon attempt 1 for user name 'username' with logon method 'none' started.

000000000242 2011-10-12 15:12:41.062646 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1008 handling connection from 10.9.66.11:63592:
  Logon attempt 1 for user name 'username' with logon method 'none' ended.

000000000243 2011-10-12 15:13:13.472371 UTC WinSSHD-ALC 5.23 [393] Trace
  Session thread 1008 handling connection from 10.9.66.11:63592:
  Logon attempt 1 for user name 'username' with logon method 'password' started.

000000000244 2011-10-12 15:13:13.473072 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1008 handling connection from 10.9.66.11:63592:
  DeterministicWinAcctLookup() completed in 638 microseconds.

000000000245 2011-10-12 15:13:13.475114 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1008 handling connection from 10.9.66.11:63592:
  NetUserGetLocalGroups() completed in 1.82 milliseconds.

000000000246 2011-10-12 15:13:13.476073 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1008 handling connection from 10.9.66.11:63592:
  NetUserGetInfo() completed in 944 microseconds.

000000000247 2011-10-12 15:13:13.476911 UTC WinSSHD-ALC 5.23 [153] Trace
  Session thread 1008 handling connection from 10.9.66.11:63592:
  Windows account 'FILESCP\username' has been matched to account settings entry 'username'.

000000000248 2011-10-12 15:13:13.476926 UTC WinSSHD-ALC 5.23 [153] Trace
  Session thread 1008 handling connection from 10.9.66.11:63592:
  Windows account 'FILESCP\username' has been matched to group settings entry '(Everyone)' according
  to WinSSHD account settings entry group setting

000000000249 2011-10-12 15:13:13.479075 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1008 handling connection from 10.9.66.11:63592:
  LogonUser() completed in 1.87 milliseconds.

000000000250 2011-10-12 15:13:13.479125 UTC WinSSHD-ALC 5.23 [040] Info
  Session thread 1008 for Windows account 'FILESCP\username' from 10.9.66.11:63592:
  Logon attempt 1 for user name 'username' with logon method 'password' succeeded.

000000000251 2011-10-12 15:13:13.480641 UTC WinSSHD-ALC 5.23 [394] Trace
  Session thread 1008 for Windows account 'FILESCP\username' from 10.9.66.11:63592:
  Logon attempt 1 for user name 'username' with logon method 'password' ended.

000000000252 2011-10-12 15:13:13.484483 UTC WinSSHD-ALC 5.23 [049] Info
  Session thread 1008 for Windows account 'FILESCP\username' from 10.9.66.11:63592:
  Session channel 1: Session channel created.

000000000253 2011-10-12 15:13:13.622730 UTC WinSSHD-ALC 5.23 [395] Trace
  Session thread 1008 for Windows account 'FILESCP\username' from 10.9.66.11:63592:
  LoadUserProfile() completed in 136 milliseconds.

000000000254 2011-10-12 15:13:13.623794 UTC WinSSHD-ALC 5.23 [251] Trace
  Session thread 1008 for Windows account 'FILESCP\username' from 10.9.66.11:63592:
  User's profile loaded, reason: SFTP session

000000000255 2011-10-12 15:13:13.625686 UTC WinSSHD-ALC 5.23 [287] Trace
  Session thread 1008 for Windows account 'FILESCP\username' from 10.9.66.11:63592:
  Session channel 1: Executed WinSSHD subsystem 'SftpServer.exe'.

000000000256 2011-10-12 15:13:13.639030 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1008 for Windows account 'FILESCP\username' from 10.9.66.11:63592:
  Session channel 1: FlowSfsRoot: Initializing root with the following parameters:
  QtNameValueTree:
  m_name: QtStr, 'Root'
  m_value: QtStr, ''
  m_nested: QtVectS, 2 objects
    [0] QtNameValueTree:
      m_name: QtStr, 'HomePath'
      m_value: QtStr, '//C:/Users/username'
      m_nested: QtVectS, 0 objects
    [1] QtNameValueTree:
      m_name: QtStr, 'Provider'
      m_value: QtStr, 'FlowSfsWin.dll'
      m_nested: QtVectS, 3 objects
        [0] QtNameValueTree:
          m_name: QtStr, 'MountPath'
          m_value: QtStr, '/ICS_SCP_TRANSFER'
          m_nested: QtVectS, 0 objects
        [1] QtNameValueTree:
          m_name: QtStr, 'MountMode'
          m_value: QtStr, 'Read,Write,Delete'
          m_nested: QtVectS, 0 objects
        [2] QtNameValueTree:
          m_name: QtStr, 'RootPath'
          m_value: QtStr, 'C:\ICS_SCP_TRANSFER'
          m_nested: QtVectS, 0 objects

000000000257 2011-10-12 15:13:13.639042 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1008 for Windows account 'FILESCP\username' from 10.9.66.11:63592:
  Session channel 1: FlowSfsRoot: Added provider 'FlowSfsWin.dll' mounted on '/ICS_SCP_TRANSFER' in
  'Read,Write,Delete' mode.

000000000258 2011-10-12 15:13:13.639047 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1008 for Windows account 'FILESCP\username' from 10.9.66.11:63592:
  Session channel 1: FlowSfsRoot: Added provider 'FlowSfsVirtual' mounted on '/'.

000000000259 2011-10-12 15:13:13.639156 UTC WinSSHD-ALC 5.23 [333] Info
  Session thread 1008 for Windows account 'FILESCP\username' from 10.9.66.11:63592:
  Session channel 1: SFTP initialization request received. Client SFTP version: 4. Negotiated SFTP
  version: 4.

000000000260 2011-10-12 15:13:13.639163 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1008 for Windows account 'FILESCP\username' from 10.9.66.11:63592:
  Session channel 1: FlowSfsWin: Initializing provider with the following parameters:
  QtNameValueTree:
  m_name: QtStr, 'Provider'
  m_value: QtStr, 'FlowSfsWin.dll'
  m_nested: QtVectS, 3 objects
    [0] QtNameValueTree:
      m_name: QtStr, 'MountPath'
      m_value: QtStr, '/ICS_SCP_TRANSFER'
      m_nested: null
    [1] QtNameValueTree:
      m_name: QtStr, 'MountMode'
      m_value: QtStr, 'Read,Write,Delete'
      m_nested: QtVectS, 0 objects
    [2] QtNameValueTree:
      m_name: QtStr, 'RootPath'
      m_value: QtStr, 'C:\ICS_SCP_TRANSFER'
      m_nested: QtVectS, 0 objects

000000000261 2011-10-12 15:13:13.639179 UTC WinSSHD-ALC 5.23 [305] Trace
  Session thread 1008 for Windows account 'FILESCP\username' from 10.9.66.11:63592:
  Session channel 1: FlowSfsVirtual: Initializing provider with the following parameters:
  QtNameValueTree:
  m_name: QtStr, 'Provider'
  m_value: QtStr, 'FlowSfsVirtual'
  m_nested: QtVectS, 2 objects
    [0] QtNameValueTree:
      m_name: QtStr, 'MountPath'
      m_value: QtStr, '/'
      m_nested: null
    [1] QtNameValueTree:
      m_name: QtStr, 'Directory'
      m_value: QtStr, '/ICS_SCP_TRANSFER'
      m_nested: null

000000000262 2011-10-12 15:13:13.639198 UTC WinSSHD-ALC 5.23 [304] Info
  Session thread 1008 for Windows account 'FILESCP\username' from 10.9.66.11:63592:
  Session channel 1: FlowSfsRoot: The provided home directory '/C/Users/username' is invalid. Home
  directory '/' will be used instead.

000000000263 2011-10-12 15:13:13.745812 UTC WinSSHD-ALC 5.23 [118] Info
  Session thread 1008 for Windows account 'FILESCP\username' from 10.9.66.11:63592:
  Session channel 1: FlowSfsWin: Reading attributes for 'C:\ICS_SCP_TRANSFER\gareth.xml' (follow symlink)
  failed with NoSuchFile. GetFileAttributes() failed: Windows error 2: The system cannot find the file
  specified.

000000000264 2011-10-12 15:13:13.749276 UTC WinSSHD-ALC 5.23 [110] Info
  Session thread 1008 for Windows account 'FILESCP\username' from 10.9.66.11:63592:
  Session channel 1: FlowSfsWin: Opening file 'C:\ICS_SCP_TRANSFER\gareth.xml' failed with
  InvalidParameter. Failed to convert Group '' to the native form. LookupAccountName() failed: Windows
  error 160: One or more arguments are not correct.

000000000265 2011-10-12 15:13:13.754715 UTC WinSSHD-ALC 5.23 [136] Trace
  ProcessTerminator for session channel 1 in session thread 1008:
  Process completed within 5000 ms waiting period with exit code 0, terminating job.

000000000266 2011-10-12 15:13:13.753978 UTC WinSSHD-ALC 5.23 [050] Info
  Session thread 1008 for Windows account 'FILESCP\username' from 10.9.66.11:63592:
  Session channel 1: Closing session channel.

000000000267 2011-10-12 15:13:13.754047 UTC WinSSHD-ALC 5.23 [093] Info
  Session thread 1008 for Windows account 'FILESCP\username' from 10.9.66.11:63592:
  The client has disconnected the session by sending EOF.

Open in new window

Avatar of noci
noci


Is the user: FILESCP\username allowed access to the path leading to this directory:
C:\ICS_SCP_TRANSFER\


ASKER CERTIFIED SOLUTION
Avatar of pcarron
pcarron
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of pcarron

ASKER

Contacted Developers directly. Hope this helps someone else :-)