System Summary:
centos 6.2
samba 3.5
smbldap-tools 0.9.6
openldap 2.4.23
Hello,
I am installing smb 3.5 on a CentOS 6.2 host using smbldap-tools. I've
previously installed a similar configuration on RHEL4 using smb 3.0 but
CentOS now uses nss-pam-ldapd and nslcd instead of nss_ldap, so the
configurations cannot be moved straight across.
Currently, when I attempt to connect to an smb share with a valid ldap
user and group on this host, I get "tree connect failed:
NT_STATUS_ACCESS_DENIED"
The LDAP server is currently serving as the directory server for the
existing Samba3.0 server. I can connect to the identical share on that
server as that user, so I know the user and group are okay.
With log level 2, I get:
[2013/02/11 17:11:00.701864, 2]
lib/smbldap.c:950(smbldap_open_connection)
smbldap_open_connection: connection opened
[2013/02/11 17:11:00.704794, 2]
passdb/pdb_ldap.c:572(init_sam_from_ldap)
init_sam_from_ldap: Entry found for user: wmodes
[2013/02/11 17:11:00.735092, 2] auth/auth.c:304(check_ntlm_password)
check_ntlm_password: authentication for user [wmodes] -> [wmodes]
-> [wmodes] succeeded
[2013/02/11 17:11:00.735608, 1]
passdb/pdb_ldap.c:2569(ldapsam_getgroup)
ldapsam_getgroup: Duplicate entries for filter
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544)): count=2
[2013/02/11 17:11:00.736254, 1]
passdb/pdb_ldap.c:2569(ldapsam_getgroup)
ldapsam_getgroup: Duplicate entries for filter
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544)): count=2
[2013/02/11 17:11:00.740024, 2] lib/access.c:409(check_access)
Allowed connection from ::ffff:128.114.163.34 (::ffff:128.114.163.34)
[2013/02/11 17:11:00.741041, 2] lib/access.c:409(check_access)
Allowed connection from ::ffff:128.114.163.34 (::ffff:128.114.163.34)
[2013/02/11 17:11:00.742383, 2]
passdb/pdb_ldap.c:2446(init_group_from_ldap)
init_group_from_ldap: Entry found for group: 30001
[2013/02/11 17:11:00.743305, 2]
passdb/pdb_ldap.c:2446(init_group_from_ldap)
init_group_from_ldap: Entry found for group: 30034
[2013/02/11 17:11:00.744600, 2]
passdb/pdb_ldap.c:2446(init_group_from_ldap)
init_group_from_ldap: Entry found for group: 1001
[2013/02/11 17:11:00.745181, 2]
smbd/service.c:598(create_connection_server_info)
user 'wmodes' (from session setup) not permitted to access this
share (cns)
[2013/02/11 17:11:00.745225, 1]
smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
It seems like I was auth'd okay, my group was okay, but still it failed.
Here we are again at log level 3:
[root at edgar2 samba]# tail -n 0 -f log.smbd
[2013/02/11 17:40:43.095215, 3] smbd/process.c:1489(process_smb)
Transaction 1 of length 166 (0 toread)
[2013/02/11 17:40:43.095284, 3] smbd/process.c:1298(switch_message)
switch message SMBsesssetupX (pid 14343) conn 0x0
[2013/02/11 17:40:43.095299, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.095325, 3]
smbd/sesssetup.c:1458(reply_sesssetup_and_X)
wct=12 flg2=0xc801
[2013/02/11 17:40:43.095342, 3]
smbd/sesssetup.c:1212(reply_sesssetup_and_X_spnego)
Doing spnego session setup
[2013/02/11 17:40:43.095364, 3]
smbd/sesssetup.c:1254(reply_sesssetup_and_X_spnego)
NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[]
[2013/02/11 17:40:43.095405, 3]
smbd/sesssetup.c:806(reply_spnego_negotiate)
reply_spnego_negotiate: Got secblob of size 46
[2013/02/11 17:40:43.095463, 3]
libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0x60088215
[2013/02/11 17:40:43.096546, 3] smbd/process.c:1489(process_smb)
Transaction 2 of length 266 (0 toread)
[2013/02/11 17:40:43.096599, 3] smbd/process.c:1298(switch_message)
switch message SMBsesssetupX (pid 14343) conn 0x0
[2013/02/11 17:40:43.096612, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.096628, 3]
smbd/sesssetup.c:1458(reply_sesssetup_and_X)
wct=12 flg2=0xc801
[2013/02/11 17:40:43.096644, 3]
smbd/sesssetup.c:1212(reply_sesssetup_and_X_spnego)
Doing spnego session setup
[2013/02/11 17:40:43.096677, 3]
smbd/sesssetup.c:1254(reply_sesssetup_and_X_spnego)
NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[]
[2013/02/11 17:40:43.096780, 3]
libsmb/ntlmssp.c:747(ntlmssp_server_auth)
Got user=[wmodes] domain=[MYGROUP] workstation=[MONITOR] len1=24
len2=24
[2013/02/11 17:40:43.096829, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.096852, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.096870, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.096974, 2]
lib/smbldap.c:950(smbldap_open_connection)
smbldap_open_connection: connection opened
[2013/02/11 17:40:43.099000, 3]
lib/smbldap.c:1166(smbldap_connect_system)
ldap_connect_system: successful connection to the LDAP server
[2013/02/11 17:40:43.099393, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.099455, 3] auth/auth.c:216(check_ntlm_password)
check_ntlm_password: Checking password for unmapped user
[MYGROUP]\[wmodes]@[MONITOR] with the new password interface
[2013/02/11 17:40:43.099475, 3] auth/auth.c:219(check_ntlm_password)
check_ntlm_password: mapped user is: [MCHSTAFF]\[wmodes]@[MONITOR]
[2013/02/11 17:40:43.099497, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.099513, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.099529, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.100076, 2]
passdb/pdb_ldap.c:572(init_sam_from_ldap)
init_sam_from_ldap: Entry found for user: wmodes
[2013/02/11 17:40:43.100166, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2013/02/11 17:40:43.100187, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2013/02/11 17:40:43.100204, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2013/02/11 17:40:43.125910, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.126010, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2013/02/11 17:40:43.126035, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2013/02/11 17:40:43.126052, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2013/02/11 17:40:43.126886, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.127051, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2013/02/11 17:40:43.127076, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2013/02/11 17:40:43.127087, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2013/02/11 17:40:43.127669, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.127704, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2013/02/11 17:40:43.127788, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2013/02/11 17:40:43.127806, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2013/02/11 17:40:43.127834, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.127868, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2013/02/11 17:40:43.127887, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2013/02/11 17:40:43.127902, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2013/02/11 17:40:43.127921, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.127945, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.128023, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.128043, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.128058, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.128082, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.128102, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.128117, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.128132, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.129059, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.129095, 3] auth/auth.c:265(check_ntlm_password)
check_ntlm_password: sam authentication for user [wmodes] succeeded
[2013/02/11 17:40:43.129108, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.129124, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.129135, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.129156, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.129173, 2] auth/auth.c:304(check_ntlm_password)
check_ntlm_password: authentication for user [wmodes] -> [wmodes]
-> [wmodes] succeeded
[2013/02/11 17:40:43.129226, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.129248, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.129262, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.129785, 1]
passdb/pdb_ldap.c:2569(ldapsam_getgroup)
ldapsam_getgroup: Duplicate entries for filter
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544)): count=2
[2013/02/11 17:40:43.129820, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.129900, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.129913, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.129928, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.129978, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2013/02/11 17:40:43.129999, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2013/02/11 17:40:43.130014, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2013/02/11 17:40:43.130779, 1]
passdb/pdb_ldap.c:2569(ldapsam_getgroup)
ldapsam_getgroup: Duplicate entries for filter
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544)): count=2
[2013/02/11 17:40:43.130811, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.130892, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.130920, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.130937, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.130953, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.131294, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.131320, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.131336, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.131351, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.131385, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2013/02/11 17:40:43.131404, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2013/02/11 17:40:43.131418, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2013/02/11 17:40:43.131733, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.131768, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.131856, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.131875, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.131889, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.133114, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.133151, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID
[S-1-5-21-2154974163-3334587364-3558233830-62278]
[2013/02/11 17:40:43.133176, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID
[S-1-5-21-2154974163-3334587364-3558233830-61151]
[2013/02/11 17:40:43.133200, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-2]
[2013/02/11 17:40:43.133219, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID [S-1-5-11]
[2013/02/11 17:40:43.133239, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID
[S-1-5-21-2642364908-3785178431-1037763545-3003]
[2013/02/11 17:40:43.133259, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID
[S-1-5-21-2642364908-3785178431-1037763545-61003]
[2013/02/11 17:40:43.133279, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID
[S-1-5-21-509675986-796770002-1500055658-61055]
[2013/02/11 17:40:43.133299, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID
[S-1-5-21-2154974163-3334587364-3558233830-61137]
[2013/02/11 17:40:43.133320, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID
[S-1-5-21-2154974163-3334587364-3558233830-61139]
[2013/02/11 17:40:43.133354, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID
[S-1-5-21-2154974163-3334587364-3558233830-61141]
[2013/02/11 17:40:43.133382, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID
[S-1-5-21-2154974163-3334587364-3558233830-61143]
[2013/02/11 17:40:43.133404, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID
[S-1-5-21-2154974163-3334587364-3558233830-61171]
[2013/02/11 17:40:43.133424, 3] lib/privileges.c:63(get_privileges)
get_privileges: No privileges assigned to SID
[S-1-5-21-2154974163-3334587364-3558233830-61277]
[2013/02/11 17:40:43.133453, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.133470, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.133484, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.133855, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.134001, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.134026, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.134049, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.134480, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.134534, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.134552, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.134566, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.134892, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.135065, 3]
libsmb/ntlmssp_sign.c:343(ntlmssp_sign_init)
NTLMSSP Sign/Seal - Initialising with flags:
[2013/02/11 17:40:43.135090, 3]
libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0x60088215
[2013/02/11 17:40:43.135112, 3]
smbd/password.c:282(register_existing_vuid)
register_existing_vuid: User name: wmodes Real name: Wes Modes
[2013/02/11 17:40:43.135129, 3]
smbd/password.c:292(register_existing_vuid)
register_existing_vuid: UNIX uid 502 is UNIX user wmodes, and will
be vuid 100
[2013/02/11 17:40:43.135202, 3]
smbd/password.c:223(register_homes_share)
Adding homes service for user 'wmodes' using home directory:
'/home/wmodes'
[2013/02/11 17:40:43.135254, 3] param/loadparm.c:6290(lp_add_home)
adding home's share [wmodes] for user 'wmodes' at
'/data/home/%S'
[2013/02/11 17:40:43.135534, 3] smbd/process.c:1489(process_smb)
Transaction 3 of length 80 (0 toread)
[2013/02/11 17:40:43.135583, 3] smbd/process.c:1298(switch_message)
switch message SMBtconX (pid 14343) conn 0x0
[2013/02/11 17:40:43.135599, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.135644, 3] lib/access.c:365(only_ipaddrs_in_list)
only_ipaddrs_in_list: list has non-ip address (127.)
[2013/02/11 17:40:43.135683, 3] lib/access.c:399(check_access)
check_access: hostnames in host allow/deny list.
[2013/02/11 17:40:43.135779, 2] lib/access.c:409(check_access)
Allowed connection from ::ffff:128.114.163.34 (::ffff:128.114.163.34)
[2013/02/11 17:40:43.135812, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.135831, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.135846, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.135871, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.135891, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.135901, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.135910, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.135939, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.135968, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.135987, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.136002, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.136026, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.136056, 3]
smbd/service.c:807(make_connection_snum)
Connect path is '/tmp' for service [IPC$]
[2013/02/11 17:40:43.136108, 3] smbd/vfs.c:97(vfs_init_default)
Initialising default vfs hooks
[2013/02/11 17:40:43.136133, 3] smbd/vfs.c:122(vfs_init_custom)
Initialising custom vfs hooks from [/[Default VFS]/]
[2013/02/11 17:40:43.136186, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.136208, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.136223, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.136247, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.136267, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.136282, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.136296, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.136318, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.136347, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.136365, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.136380, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.136405, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.136429, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (502, 503) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.136462, 3]
smbd/service.c:1070(make_connection_snum)
monitor (::ffff:128.114.163.34) connect to service IPC$ initially
as user wmodes (uid=502, gid=503) (pid 14343)
[2013/02/11 17:40:43.136484, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.136507, 3] smbd/reply.c:865(reply_tcon_and_X)
tconX service=IPC$
[2013/02/11 17:40:43.136721, 3] smbd/process.c:1489(process_smb)
Transaction 4 of length 98 (0 toread)
[2013/02/11 17:40:43.136752, 3] smbd/process.c:1298(switch_message)
switch message SMBtrans2 (pid 14343) conn 0x7f4a977bedc0
[2013/02/11 17:40:43.136848, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (502, 503) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.136899, 3] smbd/msdfs.c:840(get_referred_path)
get_referred_path: |cns| in dfs path \edgar2\cns is not a dfs root.
[2013/02/11 17:40:43.136922, 3] smbd/error.c:80(error_packet_set)
error packet at smbd/trans2.c(8056) cmd=50 (SMBtrans2)
NT_STATUS_NOT_FOUND
[2013/02/11 17:40:43.137155, 3] smbd/process.c:1489(process_smb)
Transaction 5 of length 39 (0 toread)
[2013/02/11 17:40:43.137198, 3] smbd/process.c:1298(switch_message)
switch message SMBtdis (pid 14343) conn 0x7f4a977bedc0
[2013/02/11 17:40:43.137216, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.137240, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.137259, 3] smbd/service.c:1251(close_cnum)
monitor (::ffff:128.114.163.34) closed connection to service IPC$
[2013/02/11 17:40:43.137277, 3] smbd/connection.c:31(yield_connection)
Yielding connection to IPC$
[2013/02/11 17:40:43.137310, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.137509, 3] smbd/process.c:1489(process_smb)
Transaction 6 of length 80 (0 toread)
[2013/02/11 17:40:43.137551, 3] smbd/process.c:1298(switch_message)
switch message SMBtconX (pid 14343) conn 0x0
[2013/02/11 17:40:43.137580, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.137619, 3] lib/access.c:365(only_ipaddrs_in_list)
only_ipaddrs_in_list: list has non-ip address (127.)
[2013/02/11 17:40:43.137638, 3] lib/access.c:399(check_access)
check_access: hostnames in host allow/deny list.
[2013/02/11 17:40:43.137673, 2] lib/access.c:409(check_access)
Allowed connection from ::ffff:128.114.163.34 (::ffff:128.114.163.34)
[2013/02/11 17:40:43.137788, 3] lib/util_sid.c:228(string_to_sid)
string_to_sid: Sid @cns does not start with 'S-'.
[2013/02/11 17:40:43.138691, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.138728, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.138812, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.139344, 2]
passdb/pdb_ldap.c:2446(init_group_from_ldap)
init_group_from_ldap: Entry found for group: 30001
[2013/02/11 17:40:43.139423, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.139894, 3] lib/util_sid.c:228(string_to_sid)
string_to_sid: Sid @cns-read does not start with 'S-'.
[2013/02/11 17:40:43.140490, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.140516, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.140532, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.141015, 2]
passdb/pdb_ldap.c:2446(init_group_from_ldap)
init_group_from_ldap: Entry found for group: 30034
[2013/02/11 17:40:43.141078, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.141528, 3] lib/util_sid.c:228(string_to_sid)
string_to_sid: Sid @admin does not start with 'S-'.
[2013/02/11 17:40:43.141959, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.141993, 3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/02/11 17:40:43.142004, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/02/11 17:40:43.142516, 2]
passdb/pdb_ldap.c:2446(init_group_from_ldap)
init_group_from_ldap: Entry found for group: 1001
[2013/02/11 17:40:43.142596, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.143057, 2]
smbd/service.c:598(create_connection_server_info)
user 'wmodes' (from session setup) not permitted to access this
share (cns)
[2013/02/11 17:40:43.143087, 1]
smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2013/02/11 17:40:43.143105, 3] smbd/error.c:80(error_packet_set)
error packet at smbd/reply.c(795) cmd=117 (SMBtconX)
NT_STATUS_ACCESS_DENIED
[2013/02/11 17:40:43.143344, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/02/11 17:40:43.143414, 3] smbd/connection.c:31(yield_connection)
Yielding connection to
[2013/02/11 17:40:43.143470, 3] smbd/server.c:924(exit_server_common)
Server exit (failed to receive smb request)
Any clues as to what my problem here is?
Wes
--
Wes Modes
Systems Designer, Developer, and Administrator
University Library ITS
University of California, Santa Cruz