samba - Sep 2005 - RES: RES: Re: ACLs with Problem

Paul,


>1. Which user is logged on the the windows workstation trying to modify
>a file on the samba share?
Henrique are user, this user is in the list of administrators of the samba, but
he is not administrator of the PDC (windows 2003).
It looks at the parameters below of smb.conf:
 admin users = corniani, administrator, henrique
>2. What are the ACLs on that file before you try to change them and what
>are they after the operation failed?
Are the ACLs on that file before:
[root@redfree teste]# getfacl teste.txt
# file: teste.txt
# owner: root
# group: Domain Users
user::rwx
user:henrique:rw-
group::r--
mask::rw-
other::r--

After:
[root@redfree teste]# getfacl teste.txt
# file: teste.txt
# owner: root
# group: Domain Users
user::rwx
user:henrique:rw-
group::r--
mask::rw-
other::r--

Nothing one gets excited after the failed.
>3. What is the output of the samba log when you try to change ACLs on
>the file?
Look my big logs:

  unix_mode(teste.txt) returning 0744
[2005/09/26 17:11:44, 2] smbd/open.c:open_file(372)
  henrique opened file teste.txt read=No write=No (numopen=2)
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
  Transaction 156 of length 88
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
  switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:44, 3]
smbd/nttrans.c:call_nt_transact_query_security_desc(1965)
  call_nt_transact_query_security_desc: file = teste.txt, info_wanted = 0x4
[2005/09/26 17:11:44, 3]
smbd/nttrans.c:call_nt_transact_query_security_desc(1992)
  call_nt_transact_query_security_desc: sd_size = 120.
[2005/09/26 17:11:44, 3] smbd/error.c:error_packet(147)
  error packet at smbd/nttrans.c(95) cmd=160 (SMBnttrans)
NT_STATUS_BUFFER_TOO_SMALL
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
  Transaction 157 of length 88
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
  switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:44, 3]
smbd/nttrans.c:call_nt_transact_query_security_desc(1965)
  call_nt_transact_query_security_desc: file = teste.txt, info_wanted = 0x4
[2005/09/26 17:11:44, 3]
smbd/nttrans.c:call_nt_transact_query_security_desc(1992)
  call_nt_transact_query_security_desc: sd_size = 120.
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
  Transaction 158 of length 92
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
  switch message SMBntcreateX (pid 1361) conn 0x8033e238
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:44, 3] smbd/dosmode.c:unix_mode(121)
  unix_mode(.) returning 0744
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
  Transaction 159 of length 88
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
  switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:44, 3]
smbd/nttrans.c:call_nt_transact_query_security_desc(1965)
  call_nt_transact_query_security_desc: file = ., info_wanted = 0x4
[2005/09/26 17:11:44, 3]
smbd/nttrans.c:call_nt_transact_query_security_desc(1992)
  call_nt_transact_query_security_desc: sd_size = 120.
[2005/09/26 17:11:44, 3] smbd/error.c:error_packet(147)
  error packet at smbd/nttrans.c(95) cmd=160 (SMBnttrans)
NT_STATUS_BUFFER_TOO_SMALL
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
  Transaction 160 of length 88
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
  switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:44, 3]
smbd/nttrans.c:call_nt_transact_query_security_desc(1965)
  call_nt_transact_query_security_desc: file = ., info_wanted = 0x4
[2005/09/26 17:11:44, 3]
smbd/nttrans.c:call_nt_transact_query_security_desc(1992)
  call_nt_transact_query_security_desc: sd_size = 120.
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
  Transaction 161 of length 45
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
  switch message SMBclose (pid 1361) conn 0x8033e238
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:44, 3] smbd/reply.c:reply_close(3233)
  close directory fnum=8243
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
  Transaction 162 of length 88
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
  switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:44, 3]
smbd/nttrans.c:call_nt_transact_query_security_desc(1965)
  call_nt_transact_query_security_desc: file = teste.txt, info_wanted = 0x7
[2005/09/26 17:11:44, 3]
smbd/nttrans.c:call_nt_transact_query_security_desc(1992)
  call_nt_transact_query_security_desc: sd_size = 152.
[2005/09/26 17:11:44, 3] smbd/error.c:error_packet(147)
  error packet at smbd/nttrans.c(95) cmd=160 (SMBnttrans)
NT_STATUS_BUFFER_TOO_SMALL
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
  Transaction 163 of length 88
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
  switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:44, 3]
smbd/nttrans.c:call_nt_transact_query_security_desc(1965)
  call_nt_transact_query_security_desc: file = teste.txt, info_wanted = 0x7
[2005/09/26 17:11:44, 3]
smbd/nttrans.c:call_nt_transact_query_security_desc(1992)
  call_nt_transact_query_security_desc: sd_size = 152.
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
  Transaction 164 of length 45
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
  switch message SMBclose (pid 1361) conn 0x8033e238
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:44, 3] smbd/reply.c:reply_close(3247)
  close fd=-1 fnum=8241 (numopen=2)
[2005/09/26 17:11:44, 2] smbd/close.c:close_normal_file(270)
  ECPNET\henrique closed file teste.txt (numopen=1)
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
  Transaction 165 of length 104
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
  switch message SMBntcreateX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (10918, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:44, 3] smbd/nttrans.c:nt_open_pipe(351)
  nt_open_pipe: Known pipe lsarpc opening.
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
  Transaction 166 of length 140
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
  switch message SMBwriteX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:44, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(891)
  api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsass
[2005/09/26 17:11:44, 3] rpc_server/srv_pipe.c:check_bind_req(765)
  check_bind_req for \PIPE\lsarpc
[2005/09/26 17:11:44, 3] smbd/pipes.c:reply_pipe_write_and_X(207)
  writeX-IPC pnum=70b3 nwritten=72
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
  Transaction 167 of length 63
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
  switch message SMBreadX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:44, 3] smbd/pipes.c:reply_pipe_read_and_X(252)
  readX-IPC pnum=70b3 min=1024 max=1024 nread=68
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
  Transaction 168 of length 200
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
  Transaction 168 of length 200
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
  switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:44, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=112 params=0 setup=2
[2005/09/26 17:11:44, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/09/26 17:11:44, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "lsarpc" (pnum 70b3)
[2005/09/26 17:11:44, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 71
[2005/09/26 17:11:44, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
  api_rpcTNP: rpc command: LSA_OPENPOLICY2
[2005/09/26 17:11:44, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181)
  lsa_io_sec_qos: length c does not match size 8
[2005/09/26 17:11:44, 3] lib/util_seaccess.c:se_access_check(250)
[2005/09/26 17:11:44, 3] lib/util_seaccess.c:se_access_check(251)
  se_access_check: user sid is S-1-5-21-292644099-1531732898-830254507-22836
  se_access_check: also S-1-5-21-292644099-1531732898-830254507-21003
  se_access_check: also S-1-1-0
  se_access_check: also S-1-5-2
  se_access_check: also S-1-5-11
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-513
  se_access_check: also S-1-5-21-39586307-262093593-238184688-1270
  se_access_check: also S-1-5-21-39586307-262093593-238184688-1425
  se_access_check: also S-1-5-21-39586307-262093593-238184688-5217
  se_access_check: also S-1-5-21-39586307-262093593-238184688-1880
  se_access_check: also S-1-5-21-39586307-262093593-238184688-1841
  se_access_check: also S-1-5-21-39586307-262093593-238184688-2856
  se_access_check: also S-1-5-21-39586307-262093593-238184688-2855
  se_access_check: also S-1-5-32-545
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-3668
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-3669
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2471
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2521
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2459
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2500
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2520
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2460
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-4125
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2515
[2005/09/26 17:11:44, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 842
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
  Transaction 169 of length 134
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
  switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:44, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=46 params=0 setup=2
[2005/09/26 17:11:44, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/09/26 17:11:44, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "lsarpc" (pnum 70b3)
[2005/09/26 17:11:44, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:44, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
  api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY
[2005/09/26 17:11:44, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 30
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
  Transaction 170 of length 132
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
  switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:44, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=44 params=0 setup=2
[2005/09/26 17:11:44, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/09/26 17:11:44, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "lsarpc" (pnum 70b3)
[2005/09/26 17:11:44, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:44, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
  api_rpcTNP: rpc command: LSA_CLOSE
[2005/09/26 17:11:44, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
  Closed policy
[2005/09/26 17:11:44, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
  Transaction 171 of length 45
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
  switch message SMBclose (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 172 of length 104
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBntcreateX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/nttrans.c:nt_open_pipe(351)
  nt_open_pipe: Known pipe lsarpc opening.
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 173 of length 140
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBwriteX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(891)
  api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsass
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:check_bind_req(765)
  check_bind_req for \PIPE\lsarpc
[2005/09/26 17:11:46, 3] smbd/pipes.c:reply_pipe_write_and_X(207)
  writeX-IPC pnum=70b4 nwritten=72
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 174 of length 63
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBreadX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/pipes.c:reply_pipe_read_and_X(252)
  readX-IPC pnum=70b4 min=1024 max=1024 nread=68
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 175 of length 114
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=26 params=0 setup=2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "lsarpc" (pnum 70b4)
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 71
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 176 of length 45
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBclose (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 177 of length 104
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBntcreateX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/nttrans.c:nt_open_pipe(351)
  nt_open_pipe: Known pipe winreg opening.
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 178 of length 140
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBwriteX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(891)
  api_pipe_bind_req: \PIPE\winreg -> \PIPE\winreg
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:check_bind_req(765)
  check_bind_req for \PIPE\winreg
[2005/09/26 17:11:46, 3] smbd/pipes.c:reply_pipe_write_and_X(207)
  writeX-IPC pnum=70b5 nwritten=72
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 179 of length 63
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBreadX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/pipes.c:reply_pipe_read_and_X(252)
  readX-IPC pnum=70b5 min=1024 max=1024 nread=68
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 180 of length 124
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=36 params=0 setup=2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "winreg" (pnum 70b5)
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 71
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
  api_rpcTNP: rpc command: REG_OPEN_HKLM
[2005/09/26 17:11:46, 3] lib/util_seaccess.c:se_access_check(250)
[2005/09/26 17:11:46, 3] lib/util_seaccess.c:se_access_check(251)
  se_access_check: user sid is S-1-5-21-292644099-1531732898-830254507-22836
  se_access_check: also S-1-5-21-292644099-1531732898-830254507-21003
  se_access_check: also S-1-1-0
  se_access_check: also S-1-5-2
  se_access_check: also S-1-5-11
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-513
  se_access_check: also S-1-5-21-39586307-262093593-238184688-1270
  se_access_check: also S-1-5-21-39586307-262093593-238184688-1425
  se_access_check: also S-1-5-21-39586307-262093593-238184688-5217
  se_access_check: also S-1-5-21-39586307-262093593-238184688-1880
  se_access_check: also S-1-5-21-39586307-262093593-238184688-1841
  se_access_check: also S-1-5-21-39586307-262093593-238184688-2856
  se_access_check: also S-1-5-21-39586307-262093593-238184688-2855
  se_access_check: also S-1-5-32-545
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-3668
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-3669
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2471
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2521
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2459
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2500
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2520
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2460
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-4125
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2515
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 510
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 181 of length 256
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=168 params=0 setup=2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "winreg" (pnum 70b5)
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
  api_rpcTNP: rpc command: REG_OPEN_ENTRY
[2005/09/26 17:11:46, 3] lib/util_seaccess.c:se_access_check(250)
[2005/09/26 17:11:46, 3] lib/util_seaccess.c:se_access_check(251)
  se_access_check: user sid is S-1-5-21-292644099-1531732898-830254507-22836
  se_access_check: also S-1-5-21-292644099-1531732898-830254507-21003
  se_access_check: also S-1-1-0
  se_access_check: also S-1-5-2
  se_access_check: also S-1-5-11
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-513
  se_access_check: also S-1-5-21-39586307-262093593-238184688-1270
  se_access_check: also S-1-5-21-39586307-262093593-238184688-1425
  se_access_check: also S-1-5-21-39586307-262093593-238184688-5217
  se_access_check: also S-1-5-21-39586307-262093593-238184688-1880
  se_access_check: also S-1-5-21-39586307-262093593-238184688-1841
  se_access_check: also S-1-5-21-39586307-262093593-238184688-2856
  se_access_check: also S-1-5-21-39586307-262093593-238184688-2855
  se_access_check: also S-1-5-32-545
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-3668
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-3669
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2471
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2521
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2459
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2500
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2520
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2460
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-4125
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2515
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 620
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 182 of length 204
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=116 params=0 setup=2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "winreg" (pnum 70b5)
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
  api_rpcTNP: rpc command: REG_QUERY_VALUE
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 64
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 183 of length 216
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=128 params=0 setup=2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "winreg" (pnum 70b5)
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
  api_rpcTNP: rpc command: REG_QUERY_VALUE
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 80
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 184 of length 132
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=44 params=0 setup=2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "winreg" (pnum 70b5)
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
  api_rpcTNP: rpc command: REG_CLOSE
[2005/09/26 17:11:46, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
  Closed policy
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 185 of length 132
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=44 params=0 setup=2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "winreg" (pnum 70b5)
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
  api_rpcTNP: rpc command: REG_CLOSE
[2005/09/26 17:11:46, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
  Closed policy
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 186 of length 45
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBclose (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 187 of length 104
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBntcreateX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/nttrans.c:nt_open_pipe(351)
  nt_open_pipe: Known pipe lsarpc opening.
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 188 of length 140
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBwriteX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(891)
  api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsass
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:check_bind_req(765)
  check_bind_req for \PIPE\lsarpc
[2005/09/26 17:11:46, 3] smbd/pipes.c:reply_pipe_write_and_X(207)
  writeX-IPC pnum=70b6 nwritten=72
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 189 of length 63
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBreadX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/pipes.c:reply_pipe_read_and_X(252)
  readX-IPC pnum=70b6 min=1024 max=1024 nread=68
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 190 of length 188
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=100 params=0 setup=2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "lsarpc" (pnum 70b6)
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 71
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
  api_rpcTNP: rpc command: LSA_OPENPOLICY2
[2005/09/26 17:11:46, 3] lib/util_seaccess.c:se_access_check(250)
[2005/09/26 17:11:46, 3] lib/util_seaccess.c:se_access_check(251)
  se_access_check: user sid is S-1-5-21-292644099-1531732898-830254507-22836
  se_access_check: also S-1-5-21-292644099-1531732898-830254507-21003
  se_access_check: also S-1-1-0
  se_access_check: also S-1-5-2
  se_access_check: also S-1-5-11
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-513
  se_access_check: also S-1-5-21-39586307-262093593-238184688-1270
  se_access_check: also S-1-5-21-39586307-262093593-238184688-1425
  se_access_check: also S-1-5-21-39586307-262093593-238184688-5217
  se_access_check: also S-1-5-21-39586307-262093593-238184688-1880
  se_access_check: also S-1-5-21-39586307-262093593-238184688-1841
  se_access_check: also S-1-5-21-39586307-262093593-238184688-2856
  se_access_check: also S-1-5-21-39586307-262093593-238184688-2855
  se_access_check: also S-1-5-32-545
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-3668
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-3669
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2471
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2521
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2459
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2500
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2520
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2460
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-4125
  se_access_check: also S-1-5-21-641689743-798303756-4037891328-2515
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 830
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 191 of length 134
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=46 params=0 setup=2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "lsarpc" (pnum 70b6)
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
  api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 14
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 192 of length 132
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=44 params=0 setup=2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "lsarpc" (pnum 70b6)
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
  api_rpcTNP: rpc command: LSA_CLOSE
[2005/09/26 17:11:46, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
  Closed policy
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
  free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
  Transaction 193 of length 45
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
  switch message SMBclose (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:51, 3] smbd/process.c:process_smb(1114)
  Transaction 194 of length 110
[2005/09/26 17:11:51, 3] smbd/process.c:switch_message(900)
  switch message SMBntcreateX (pid 1361) conn 0x8033e238
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:51, 3] smbd/dosmode.c:unix_mode(121)
  unix_mode(teste.txt) returning 0744
[2005/09/26 17:11:51, 2] smbd/open.c:open_file(372)
  henrique opened file teste.txt read=No write=No (numopen=2)
[2005/09/26 17:11:51, 3] smbd/process.c:process_smb(1114)
  Transaction 195 of length 76
[2005/09/26 17:11:51, 3] smbd/process.c:switch_message(900)
  switch message SMBtrans2 (pid 1361) conn 0x8033e238
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:51, 3] smbd/trans2.c:call_trans2qfilepathinfo(2760)
  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006
[2005/09/26 17:11:51, 3] smbd/trans2.c:call_trans2qfilepathinfo(2871)
  call_trans2qfilepathinfo teste.txt (fnum = 8244) level=1006 call=7
total_data=0
[2005/09/26 17:11:51, 3] smbd/process.c:process_smb(1114)
  Transaction 196 of length 276
[2005/09/26 17:11:51, 3] smbd/process.c:switch_message(900)
  switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:51, 3] smbd/nttrans.c:call_nt_transact_set_security_desc(2081)
  call_nt_transact_set_security_desc: file = teste.txt, sent 0x80000004
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 10001) : sec_ctx_stack_ndx = 1
[2005/09/26 17:11:51, 3] smbd/uid.c:push_conn_ctx(388)
  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:51, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232)
  fetch sid from gid cache 10001 ->
S-1-5-21-641689743-798303756-4037891328-513
[2005/09/26 17:11:51, 3] smbd/dosmode.c:unix_mode(121)
  unix_mode(teste.txt) returning 0744
[2005/09/26 17:11:51, 3]
smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2581)
  convert_canon_ace_to_posix_perms: Too many ACE entries for file teste.txt to
convert to posix perms.
[2005/09/26 17:11:51, 3] smbd/posix_acls.c:set_nt_acl(3257)
  set_nt_acl: failed to convert file acl to posix permissions for file
teste.txt.
[2005/09/26 17:11:51, 3] smbd/error.c:error_packet(147)
  error packet at smbd/nttrans.c(2088) cmd=160 (SMBnttrans)
NT_STATUS_ACCESS_DENIED
[2005/09/26 17:11:51, 3] smbd/process.c:process_smb(1114)
  Transaction 197 of length 45
[2005/09/26 17:11:51, 3] smbd/process.c:switch_message(900)
  switch message SMBclose (pid 1361) conn 0x8033e238
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:51, 3] smbd/reply.c:reply_close(3247)
  close fd=-1 fnum=8244 (numopen=2)
[2005/09/26 17:11:51, 2] smbd/close.c:close_normal_file(270)
  ECPNET\henrique closed file teste.txt (numopen=1)
[2005/09/26 17:11:51, 3] smbd/process.c:process_smb(1114)
  Transaction 198 of length 110
[2005/09/26 17:11:51, 3] smbd/process.c:switch_message(900)
  switch message SMBntcreateX (pid 1361) conn 0x8033e238
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:51, 3] smbd/dosmode.c:unix_mode(121)
  unix_mode(teste.txt) returning 0744
[2005/09/26 17:11:51, 2] smbd/open.c:open_file(372)
  henrique opened file teste.txt read=No write=No (numopen=2)
[2005/09/26 17:11:51, 3] smbd/process.c:process_smb(1114)
  Transaction 199 of length 220
[2005/09/26 17:11:51, 3] smbd/process.c:switch_message(900)
  switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:51, 3] smbd/nttrans.c:call_nt_transact_set_security_desc(2081)
  call_nt_transact_set_security_desc: file = teste.txt, sent 0x4
[2005/09/26 17:11:51, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(158)
  fetch sid from uid cache 0 -> S-1-5-21-292644099-1531732898-830254507-1000
[2005/09/26 17:11:51, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232)
  fetch sid from gid cache 10001 ->
S-1-5-21-641689743-798303756-4037891328-513
[2005/09/26 17:11:51, 3] passdb/lookup_sid.c:fetch_uid_from_cache(179)
  fetch uid from cache 10004 -> S-1-5-21-641689743-798303756-4037891328-2009
[2005/09/26 17:11:51, 3] smbd/dosmode.c:unix_mode(121)
  unix_mode(teste.txt) returning 0744
[2005/09/26 17:11:51, 3]
smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2581)
  convert_canon_ace_to_posix_perms: Too many ACE entries for file teste.txt to
convert to posix perms.
[2005/09/26 17:11:51, 3] smbd/posix_acls.c:set_nt_acl(3257)
  set_nt_acl: failed to convert file acl to posix permissions for file
teste.txt.
[2005/09/26 17:11:51, 3] smbd/error.c:error_packet(147)
  error packet at smbd/nttrans.c(2088) cmd=160 (SMBnttrans)
NT_STATUS_ACCESS_DENIED
[2005/09/26 17:11:51, 3] smbd/process.c:process_smb(1114)
  Transaction 200 of length 45
[2005/09/26 17:11:51, 3] smbd/process.c:switch_message(900)
  switch message SMBclose (pid 1361) conn 0x8033e238
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:51, 3] smbd/reply.c:reply_close(3247)
  close fd=-1 fnum=8245 (numopen=2)
[2005/09/26 17:11:51, 2] smbd/close.c:close_normal_file(270)
  ECPNET\henrique closed file teste.txt (numopen=1)
[2005/09/26 17:11:53, 3] smbd/process.c:process_smb(1114)
  Transaction 201 of length 110
[2005/09/26 17:11:53, 3] smbd/process.c:switch_message(900)
  switch message SMBntcreateX (pid 1361) conn 0x8033e238
[2005/09/26 17:11:53, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:53, 3] smbd/dosmode.c:unix_mode(121)
  unix_mode(teste.txt) returning 0744
[2005/09/26 17:11:53, 2] smbd/open.c:open_file(372)
  henrique opened file teste.txt read=No write=No (numopen=2)
[2005/09/26 17:11:53, 3] smbd/process.c:process_smb(1114)
  Transaction 202 of length 276
[2005/09/26 17:11:53, 3] smbd/process.c:switch_message(900)
  switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:53, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:53, 3] smbd/nttrans.c:call_nt_transact_set_security_desc(2081)
  call_nt_transact_set_security_desc: file = teste.txt, sent 0x80000004
[2005/09/26 17:11:53, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(158)
  fetch sid from uid cache 0 -> S-1-5-21-292644099-1531732898-830254507-1000
[2005/09/26 17:11:53, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232)
  fetch sid from gid cache 10001 ->
S-1-5-21-641689743-798303756-4037891328-513
[2005/09/26 17:11:53, 3] passdb/lookup_sid.c:fetch_uid_from_cache(179)
  fetch uid from cache 10004 -> S-1-5-21-641689743-798303756-4037891328-2009
[2005/09/26 17:11:53, 3] smbd/dosmode.c:unix_mode(121)
  unix_mode(teste.txt) returning 0744
[2005/09/26 17:11:53, 3]
smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2581)
  convert_canon_ace_to_posix_perms: Too many ACE entries for file teste.txt to
convert to posix perms.
[2005/09/26 17:11:53, 3] smbd/posix_acls.c:set_nt_acl(3257)
  set_nt_acl: failed to convert file acl to posix permissions for file
teste.txt.
[2005/09/26 17:11:53, 3] smbd/error.c:error_packet(147)
  error packet at smbd/nttrans.c(2088) cmd=160 (SMBnttrans)
NT_STATUS_ACCESS_DENIED
[2005/09/26 17:11:53, 3] smbd/process.c:process_smb(1114)
  Transaction 203 of length 45
[2005/09/26 17:11:53, 3] smbd/process.c:switch_message(900)
  switch message SMBclose (pid 1361) conn 0x8033e238
[2005/09/26 17:11:53, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:53, 3] smbd/reply.c:reply_close(3247)
  close fd=-1 fnum=8246 (numopen=2)
[2005/09/26 17:11:53, 2] smbd/close.c:close_normal_file(270)
  ECPNET\henrique closed file teste.txt (numopen=1)
[2005/09/26 17:11:53, 3] smbd/process.c:process_smb(1114)
  Transaction 204 of length 110
[2005/09/26 17:11:53, 3] smbd/process.c:switch_message(900)
  switch message SMBntcreateX (pid 1361) conn 0x8033e238
[2005/09/26 17:11:53, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:53, 3] smbd/dosmode.c:unix_mode(121)
  unix_mode(teste.txt) returning 0744
[2005/09/26 17:11:53, 2] smbd/open.c:open_file(372)
  henrique opened file teste.txt read=No write=No (numopen=2)
[2005/09/26 17:11:53, 3] smbd/process.c:process_smb(1114)
  Transaction 205 of length 220
[2005/09/26 17:11:53, 3] smbd/process.c:switch_message(900)
  switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:53, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:53, 3] smbd/nttrans.c:call_nt_transact_set_security_desc(2081)
  call_nt_transact_set_security_desc: file = teste.txt, sent 0x4
[2005/09/26 17:11:53, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(158)
  fetch sid from uid cache 0 -> S-1-5-21-292644099-1531732898-830254507-1000
[2005/09/26 17:11:53, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232)
  fetch sid from gid cache 10001 ->
S-1-5-21-641689743-798303756-4037891328-513
[2005/09/26 17:11:53, 3] passdb/lookup_sid.c:fetch_uid_from_cache(179)
  fetch uid from cache 10004 -> S-1-5-21-641689743-798303756-4037891328-2009
[2005/09/26 17:11:53, 3] smbd/dosmode.c:unix_mode(121)
  unix_mode(teste.txt) returning 0744
[2005/09/26 17:11:53, 3]
smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2581)
  convert_canon_ace_to_posix_perms: Too many ACE entries for file teste.txt to
convert to posix perms.
[2005/09/26 17:11:53, 3] smbd/posix_acls.c:set_nt_acl(3257)
  set_nt_acl: failed to convert file acl to posix permissions for file
teste.txt.
[2005/09/26 17:11:53, 3] smbd/error.c:error_packet(147)
  error packet at smbd/nttrans.c(2088) cmd=160 (SMBnttrans)
NT_STATUS_ACCESS_DENIED
[2005/09/26 17:11:53, 3] smbd/process.c:process_smb(1114)
  Transaction 206 of length 45
[2005/09/26 17:11:53, 3] smbd/process.c:switch_message(900)
  switch message SMBclose (pid 1361) conn 0x8033e238
[2005/09/26 17:11:53, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:53, 3] smbd/reply.c:reply_close(3247)
  close fd=-1 fnum=8247 (numopen=2)
[2005/09/26 17:11:53, 2] smbd/close.c:close_normal_file(270)
  ECPNET\henrique closed file teste.txt (numopen=1)
[2005/09/26 17:11:56, 3] smbd/process.c:process_smb(1114)
  Transaction 207 of length 40
[2005/09/26 17:11:56, 3] smbd/process.c:switch_message(900)
  switch message SMBntcancel (pid 1361) conn 0x8033e238
[2005/09/26 17:11:56, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:56, 3] smbd/error.c:error_packet(147)
  error packet at smbd/notify.c(55) cmd=160 (SMBnttrans) NT_STATUS_CANCELLED
[2005/09/26 17:11:56, 3] smbd/notify_kernel.c:kernel_remove_notify(144)
  kernel_remove_notify: fd=28
[2005/09/26 17:11:56, 3] smbd/nttrans.c:reply_ntcancel(1565)
  reply_ntcancel: cancel called on mid = 4352.
[2005/09/26 17:11:56, 3] smbd/process.c:process_smb(1114)
  Transaction 208 of length 45
[2005/09/26 17:11:56, 3] smbd/process.c:switch_message(900)
  switch message SMBclose (pid 1361) conn 0x8033e238
[2005/09/26 17:11:56, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 10001) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:56, 3] smbd/reply.c:reply_close(3233)
  close directory fnum=8226
[2005/09/26 17:11:58, 3] smbd/process.c:process_smb(1114)
  Transaction 209 of length 39
[2005/09/26 17:11:58, 3] smbd/process.c:switch_message(900)
  switch message SMBtdis (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:58, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:58, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:58, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:58, 3] smbd/service.c:close_cnum(835)
  10.0.1.37 (10.0.1.37) closed connection to service IPC$
[2005/09/26 17:11:58, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to IPC$
[2005/09/26 17:11:58, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:58, 3] smbd/process.c:process_smb(1114)
  Transaction 210 of length 43
[2005/09/26 17:11:58, 3] smbd/process.c:switch_message(900)
  switch message SMBulogoffX (pid 1361) conn 0x0
[2005/09/26 17:11:58, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:58, 3] smbd/reply.c:reply_ulogoffX(1560)
  ulogoffX vuid=101
[2005/09/26 17:11:58, 3] smbd/process.c:process_smb(1114)
  Transaction 211 of length 39
[2005/09/26 17:11:58, 3] smbd/process.c:switch_message(900)
  switch message SMBtdis (pid 1361) conn 0x8033e238
[2005/09/26 17:11:58, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:58, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:58, 1] smbd/service.c:close_cnum(835)
  10.0.1.37 (10.0.1.37) closed connection to service Teste1
[2005/09/26 17:11:58, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to Teste1
[2005/09/26 17:11:58, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:58, 3] smbd/process.c:timeout_processing(1366)
  timeout_processing: End of file from client (client has disconnected).
[2005/09/26 17:11:58, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/09/26 17:11:58, 2] smbd/server.c:exit_server(608)
  Closing connections
[2005/09/26 17:11:58, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to
[2005/09/26 17:11:58, 3] smbd/server.c:exit_server(652)
  Server exit (normal exit)

Luis Henrique de Faria Guimar?es wrote:
> [2005/09/26 17:11:53, 3]
smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2581)
>   convert_canon_ace_to_posix_perms: Too many ACE entries for file teste.txt
to convert to posix perms.
I wonder why convert_canon_ace_to_posix_perms is called with an
file_ace_list with more than three canon_ace elements. set_nt_acl should
never call convert_canon_ace_to_posix_perms that way. I guess it fails
because you have an ACL_USER_OBJ which makes the file_ace_list longer
than three entries but for some reason set_nt_acl thinks it cannot use
set_canon_ace_list.

I just start to read the code so maybe someone who really knows what's
going on could clear this up a bit.

hth
 Paul

BTW: check your samba binary for ACL support, could be that ./configure
failed to pick up some libs or headers and the whole feature is not
present. Use "strings $(which smbd) | grep HAVE_POSIX_ACLS". If you
don't get anything back your binary lacks ACL support.

PS: Try not to start a new thread with each response and please keep
your replies on the list.