[global]
        workgroup = WORKGROUP
        netbios name = observer
        server string = samba
        log level = 1 auth:3
        encrypt passwords = yes
        passdb backend = smbpasswd
        security = share
        smb passwd file = /etc/samba/smbpasswd
        unix charset = UTF-8
        dos charset = cp1251
        store dos attributes = yes
        local master = no
        time server = no
        max log size = 10
        load printers = no
        printing = bsd
        printcap name = /dev/null
        disable spoolss = yes
        usershare max shares = 100
[rw]
        comment = rw
        path = /home/share
        writable = yes
        printable = no
        browsable = yes
        read only = no
        guest ok = no

[2012/06/12 05:25:54.245998,  0] lib/util_sock.c:474(read_fd_with_timeout)
[2012/06/12 05:25:54.246168,  0] lib/util_sock.c:1441(get_peer_addr_internal)
  getpeername failed. Error was Transport endpoint is not connected
  read_fd_with_timeout: client 0.0.0.0 read error = Connection reset by peer.
[2012/06/12 05:30:27.907527,  3] auth/auth.c:216(check_ntlm_password)
  check_ntlm_password:  Checking password for unmapped user []\[]@[] with the new password interface
[2012/06/12 05:30:27.907591,  3] auth/auth.c:219(check_ntlm_password)
  check_ntlm_password:  mapped user is: []\[]@[]
[2012/06/12 05:30:27.908079,  3] auth/auth.c:265(check_ntlm_password)
  check_ntlm_password: guest authentication for user [] succeeded
[2012/06/12 05:30:27.910464,  3] auth/auth.c:216(check_ntlm_password)
  check_ntlm_password:  Checking password for unmapped user [WINDOWSPC]\[share]@[192.168.251.2] with the new password interface
[2012/06/12 05:30:27.910510,  3] auth/auth.c:219(check_ntlm_password)
  check_ntlm_password:  mapped user is: [OBSERVER]\[share]@[192.168.251.2]
  check_ntlm_password:  Checking password for unmapped user [WORKGROUP]\[nobody]@[192.168.251.2] with the new password interface
[2012/06/12 05:33:50.075166,  3] auth/auth.c:219(check_ntlm_password)
  check_ntlm_password:  mapped user is: [OBSERVER]\[nobody]@[192.168.251.2]
[2012/06/12 05:33:50.075239,  3] auth/auth_sam.c:399(check_sam_security)
  check_sam_security: Couldn't find user 'nobody' in passdb.
[2012/06/12 05:33:50.075266,  2] auth/auth.c:314(check_ntlm_password)
  check_ntlm_password:  Authentication for user [nobody] -> [nobody] FAILED with error NT_STATUS_NO_SUCH_USER
[2012/06/12 05:33:50.075288,  3] auth/auth.c:216(check_ntlm_password)
  check_ntlm_password:  Checking password for unmapped user [WORKGROUP]\[nobody]@[192.168.251.2] with the new password interface
[2012/06/12 05:33:50.075309,  3] auth/auth.c:219(check_ntlm_password)
  check_ntlm_password:  mapped user is: [OBSERVER]\[nobody]@[192.168.251.2]
[2012/06/12 05:33:50.075389,  3] auth/auth_sam.c:399(check_sam_security)
  check_sam_security: Couldn't find user 'nobody' in passdb.
[2012/06/12 05:33:50.075417,  2] auth/auth.c:314(check_ntlm_password)
  check_ntlm_password:  Authentication for user [nobody] -> [nobody] FAILED with error NT_STATUS_NO_SUCH_USER
[2012/06/12 05:34:12.291964,  1] smbd/service.c:1251(close_cnum)
  192.168.251.2 (192.168.251.2) closed connection to service rw