search for: smbd_do_query_security_desc

...0/03/14 00:37:17.131659, 2] > ../../source3/smbd/service.c:851(make_connection_snum) > 192.168.1.134 (ipv4:192.168.1.134:62573) connect to service > Assessoria-2 initially as user root (uid=0, gid=0) (pid 3065) > [2020/03/14 00:37:17.133433, 3] > ../../source3/smbd/nttrans.c:2047(smbd_do_query_security_desc) > smbd_do_query_security_desc: sd_size = 148. > [2020/03/14 00:37:17.133488, 3] > ../../source3/smbd/smb2_server.c:3256(smbd_smb2_request_error_ex) > smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] > status[NT_STATUS_BUFFER_TOO_SMALL] | +info| at > ../../sourc...

Hi, I have a Samba4 File Server on Debian 10 I am not being able to assign permissions on shares to groups that already have the Unix attribute set. Groups without the Unix attribute are working OK. My two DC are Samba4 (migrated of the Windows 2008 Server) and my current File Servers are Windows 2008 Server. I followed "Setting up a Share Using Windows ACLs" tutorial (

...ion DC. So when I set the DC's smb.conf debug level to 3, I see smbd logs like the following when doing the sysvol portion of the backup: smbd: call_nt_transact_query_security_desc: file = addom.samba.example.com/Policies/{6AC1786C-016F-11D2-945F-00C04FB984F9}/MACHINE, info_wanted = 0xf smbd: smbd_do_query_security_desc: sd_size = 272. The last call_nt_transact_query_security_desc log you see may be the file that it's failing on. If (for the last file) you see the first log but not the second, then that narrows it down - it means smbd_do_query_security_desc() is failing. If you use debug level 10 on the serve...

...; ../source3/smbd/close.c:789(close_normal_file) And the most important one i think. > AD\toysales01 closed file > user-profiles/toysales01.V6/6A6DCA49-668C-4DD1-8A7F-9D5B61E8EE > 92.tmp (numopen=0) NT_STATUS_OK > [2019/01/24 10:36:41.385800, 3] > ../source3/smbd/nttrans.c:2036(smbd_do_query_security_desc) > smbd_do_query_security_desc: sd_size = 48. > [2019/01/24 10:36:41.385816, 3] > ../source3/smbd/smb2_server.c:3115(smbd_smb2_request_error_ex) > smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: > idx[1] status[NT_STATUS_BUFFER_TOO_SMALL] | +info| at > ../source3/s...

Hai, The best info is missing. What are the windows event ID errors? What is the right set on the profiles folder? If you layout is : /home/samba/profiles and you shared the folder profiles, then show me getfacl /home/samba/profiles. I see your running, Samba 4.7, are you able to upgrade to 4.9.4? This: ~# cat default-rights-sysvol.acl # file: /var/lib/samba/sysvol # owner: root #

Hi, thanks for your hints! Am 10.01.19 um 03:46 schrieb Tim Beale via samba: > - As a sanity-check, you could run 'samba-tool ntacl sysvolcheck' > locally on your DC. It may tell you if there's an ACL problem. samba-tool ntacl sysvolcheck doesn't show any problems. > - Instead of an online backup, try running 'samba-tool domain backup > offline' locally on

..../source3/smbd/smb2_getinfo.c:154 [2019/01/24 10:36:41.382830, 2] ../source3/smbd/close.c:789(close_normal_file) AD\toysales01 closed file user-profiles/toysales01.V6/6A6DCA49-668C-4DD1-8A7F-9D5B61E8EE92.tmp (numopen=0) NT_STATUS_OK [2019/01/24 10:36:41.385800, 3] ../source3/smbd/nttrans.c:2036(smbd_do_query_security_desc) smbd_do_query_security_desc: sd_size = 48. [2019/01/24 10:36:41.385816, 3] ../source3/smbd/smb2_server.c:3115(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_BUFFER_TOO_SMALL] | +info| at ../source3/smbd/smb2_getinfo.c:171 [2019/01/2...

...e3/smbd/smb2_create.c:296 (...) [2020/01/01 16:36:23.462929,? 2] ../source3/smbd/close.c:802(close_normal_file) ? EXAMPLE\user closed file user/.system/Thunderbird/profile.default-release/Mail/Feeds/Notes (numopen=13) NT_STATUS_OK [2020/01/01 16:36:39.466546,? 3] ../source3/smbd/nttrans.c:2038(smbd_do_query_security_desc) ? smbd_do_query_security_desc: sd_size = 20. [2020/01/01 16:36:39.466608,? 3] ../source3/smbd/smb2_server.c:3190(smbd_smb2_request_error_ex) ? smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_BUFFER_TOO_SMALL] | +info| at ../source3/smbd/smb2_getinfo.c:176 [2020...

...e read=Yes write=No (numopen=7) > [2017/04/21 01:06:20.315317, 3] > ../source3/smbd/smb2_read.c:413(smb2_read_complete) > smbd_smb2_read: fnum 3158341796, file CGS/upexe3.exe, length=12666 > offset=0 read=12666 > [2017/04/21 01:06:20.350757, 3] > ../source3/smbd/nttrans.c:2033(smbd_do_query_security_desc) > smbd_do_query_security_desc: sd_size = 20. > [2017/04/21 01:06:20.351192, 3] > ../source3/smbd/smb2_server.c:3098(smbd_smb2_request_error_ex) > smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] > status[NT_STATUS_ACCESS_DENIED] || at > ../source3/smbd/smb2_get...

I'm desperate. My English is terrible, but I will try to be as clear as possible. I have Samba 4.4.4 in a Centos 7. I have many connections for each ip. The command smbstatus -b returns me infinity of these: Samba version 4.4.4 PID Username Group Machine Protocol Version Encryption Signing

...rriz opened file CGS/upexe3.exe read=Yes write=No (numopen=7) [2017/04/21 01:06:20.315317, 3] ../source3/smbd/smb2_read.c:413(smb2_read_complete) smbd_smb2_read: fnum 3158341796, file CGS/upexe3.exe, length=12666 offset=0 read=12666 [2017/04/21 01:06:20.350757, 3] ../source3/smbd/nttrans.c:2033(smbd_do_query_security_desc) smbd_do_query_security_desc: sd_size = 20. [2017/04/21 01:06:20.351192, 3] ../source3/smbd/smb2_server.c:3098(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_getinfo.c:154 [2017/04/21 01:06:2...

...5:20.853251, 3] ../../source3/smbd/smb2_server.c:3256(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_OBJECT_NAME_NOT_FOUND] || at ../../source3/smbd/smb2_create.c:296 [2019/11/26 07:45:20.856722, 3] ../../source3/smbd/nttrans.c:2047(smbd_do_query_security_desc) smbd_do_query_security_desc: sd_size = 48. [2019/11/26 07:45:20.859302, 3] ../../lib/util/access.c:371(allow_access) Allowed connection from 192.168.2.218 (192.168.2.218) [2019/11/26 07:45:20.859446, 3] ../../source3/smbd/service.c:605(make_connection_snum) make_connection_snum: Conne...

...open=7) >> [2017/04/21 01:06:20.315317, 3] >> ../source3/smbd/smb2_read.c:413(smb2_read_complete) >> smbd_smb2_read: fnum 3158341796, file CGS/upexe3.exe, length=12666 >> offset=0 read=12666 >> [2017/04/21 01:06:20.350757, 3] >> ../source3/smbd/nttrans.c:2033(smbd_do_query_security_desc) >> smbd_do_query_security_desc: sd_size = 20. >> [2017/04/21 01:06:20.351192, 3] >> ../source3/smbd/smb2_server.c:3098(smbd_smb2_request_error_ex) >> smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] >> status[NT_STATUS_ACCESS_DENIED] || at >>...

...5, 5] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" [2018/02/21 14:26:38.861188, 4] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2018/02/21 14:26:38.861287, 3] ../source3/smbd/nttrans.c:2034(smbd_do_query_security_desc) smbd_do_query_security_desc: sd_size = 264. [2018/02/21 14:26:38.861746, 4] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2018/02/21 14:26:38.861823, 3] ../source3/smbd/nttrans.c:2034(smbd_do_query_security_desc) smbd_do_query_security_desc: sd_size = 64. [...

Hello, I have a question because POSIX ACL with SMB2 max protocol does not work properly.Did you test VFS xattr acls with SMB2 max protocol? Is it working corectly? Best regards/Adrian Berlin --