Lorenzo Milesi
2022-Jun-17 13:58 UTC
[Samba] Troubles deploying software via GPO on a simple share in DC
Hi.
I have a DC with a simple public share, with no ACL or such which could cause
the weird behaviors of a "fileserver on a DC" (or at least this is
what I learnt from past experiences - a simple share shouldn't trigger
issues. But I must be mistaken, because...).
I use it to share files that should be available for GPO, like desktop
background and MSI files. It used to work (TM) when it was first deployed, but
for some time now, the share doesn't seem to work for the COMPUTER$ account.
I did test connection as a computer account user using
psexec.exe -i -s -d cmd.exe
then issue
net use \\dc1\pub /user:%COMPUTERNAME%$
and I got "The command completed successfully."
But if I check the logs when trying to deploy software via GPO, I get error 1612
which means "resource unavailable" or something like that. Accessing
the share from a logged in user works flawlessly.
I'm pasting below the configuration and some debug logs. i.e.,
fusioninventory-agent-deployment.vbs is a script residing in the \\dc1\pub share
which clients are unable to access. sfondo_lockscreen.ps1 is another.
To make sure, from a Win10 machine I've configured access to
"Authenticated Users" to the whole share.
Please let me know if further information are required.
Thanks
Using Samba 4.13.17 from Van Belle repos, on Ubuntu 20.04.
/etc/samba/smb.conf
# Global parameters
[global]
server services = -dns
netbios name = DC1
realm = WDC.DOMAIN.IT
server role = active directory domain controller
workgroup = WDC
printcap name = /dev/null
load printers = no
disable spoolss = yes
printing = bsd
allow dns updates = disabled
interfaces = eth1 lo
bind interfaces only = yes
# Per Radius
https://wiki.samba.org/index.php/Authenticating_Freeradius_against_Active_Directory
ntlm auth = mschapv2-and-ntlmv2-only
log file = /var/log/samba/%m.log
log level = 10 all:10
[sysvol]
path = /var/lib/samba/sysvol
read only = No
[netlogon]
path = /var/lib/samba/sysvol/wdc.domain.it/scripts
read only = No
[pub]
path = /dati/condivisioni/pub
read only = No
# Log
[2022/06/16 15:27:37.520209, 10, pid=487534, effective(3000047, 3000018),
real(3000047, 0), class=smb2]
../../source3/smbd/smb2_server.c:3747(smbd_smb2_request_done_ex)
smbd_smb2_request_done_ex: mid [85] idx[1] status[NT_STATUS_OK] body[60]
dyn[no:0] at ../../source3/smbd/smb2_close.c:146
[2022/06/16 15:27:37.520233, 10, pid=487534, effective(3000047, 3000018),
real(3000047, 0), class=smb2_credits]
../../source3/smbd/smb2_server.c:963(smb2_set_operation_credit)
smb2_set_operation_credit: smb2_set_operation_credit: requested 1, charge 1,
granted 1, current possible/max 8066/8192, total granted/max/low/range
127/8192/86/127
[2022/06/16 15:27:37.520260, 5, pid=487534, effective(3000047, 3000018),
real(3000047, 0)] ../../libcli/smb/smb2_signing.c:173(smb2_signing_sign_pdu)
signed SMB2 message
[2022/06/16 15:27:37.520349, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=smb2]
../../source3/smbd/smb2_create.c:713(smbd_smb2_create_send)
smbd_smb2_create_send: name [fusioninventory-agent-deployment.vbs]
[2022/06/16 15:27:37.520508, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=smb2]
../../source3/smbd/smb2_create.c:1263(smbd_smb2_create_before_exec)
Got lease request size 52
[2022/06/16 15:27:37.520634, 1, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
state->lease_ptr: struct smb2_lease
lease_key: struct smb2_lease_key
data: ARRAY(2)
data : 0xed85f790a41dad18
(-1331385914217353960)
data : 0xcc591c619a106c09
(-3721912411522831351)
lease_state : 0x00000007 (7)
1: SMB2_LEASE_READ
1: SMB2_LEASE_HANDLE
1: SMB2_LEASE_WRITE
lease_flags : 0x00000000 (0)
lease_duration : 0x0000000000000000 (0)
parent_lease_key: struct smb2_lease_key
data: ARRAY(2)
data : 0x0000000000000000 (0)
data : 0x0000000000000000 (0)
lease_version : 0x0002 (2)
lease_epoch : 0x0000 (0)
[2022/06/16 15:27:37.521662, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=smb2]
../../source3/smbd/smb2_create.c:818(smbd_smb2_create_send)
smbd_smb2_create_send: open execution phase
[2022/06/16 15:27:37.521787, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/filename.c:987(unix_convert)
unix_convert: Called on file [fusioninventory-agent-deployment.vbs]
[2022/06/16 15:27:37.521916, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/statcache.c:286(stat_cache_lookup)
stat_cache_lookup: lookup failed for name [0000000000000000 at
FUSIONINVENTORY-AGENT-DEPLOYMENT.VBS]
[2022/06/16 15:27:37.522040, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/filename.c:1171(unix_convert)
unix_convert: Begin: name [fusioninventory-agent-deployment.vbs] dirpath [.]
name [fusioninventory-agent-deployment.vbs]
[2022/06/16 15:27:37.522175, 5, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/statcache.c:168(stat_cache_add)
stat_cache_add: Added entry (55d42d91d870:size 35) 0000000000000000 at
FUSIONINVENTORY-AGENT-DEPLOYMENT.VBS -> 0000000000000000 at
fusioninventory-agent-deployment.vbs
[2022/06/16 15:27:37.522301, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/filename.c:1196(unix_convert)
unix_convert: Conversion of base_name finished
[fusioninventory-agent-deployment.vbs] ->
[fusioninventory-agent-deployment.vbs]
[2022/06/16 15:27:37.522438, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/filename.c:1377(unix_convert)
unix_convert: Conversion finished [fusioninventory-agent-deployment.vbs] ->
[fusioninventory-agent-deployment.vbs]
[2022/06/16 15:27:37.522562, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=vfs] ../../source3/smbd/vfs.c:1327(check_reduced_name)
check_reduced_name: check_reduced_name [fusioninventory-agent-deployment.vbs]
[/dati/condivisioni/pub]
[2022/06/16 15:27:37.522697, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=vfs] ../../source3/smbd/vfs.c:1389(check_reduced_name)
check_reduced_name realpath [fusioninventory-agent-deployment.vbs] ->
[/dati/condivisioni/pub/fusioninventory-agent-deployment.vbs]
[2022/06/16 15:27:37.522822, 5, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=vfs] ../../source3/smbd/vfs.c:1495(check_reduced_name)
check_reduced_name: fusioninventory-agent-deployment.vbs reduced to
/dati/condivisioni/pub/fusioninventory-agent-deployment.vbs
[2022/06/16 15:27:37.522945, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/open.c:6069(create_file_default)
create_file_default: create_file: access_mask = 0x120089 file_attributes =
0x0, share_access = 0x1, create_disposition = 0x1 create_options = 0x44
oplock_request = 0x100 private_flags = 0x0 ea_list = (nil), sd = (nil), dirfsp =
/dati/condivisioni/pub, fname = fusioninventory-agent-deployment.vbs
[2022/06/16 15:27:37.523073, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/open.c:5584(create_file_unixpath)
create_file_unixpath: create_file_unixpath: access_mask = 0x120089
file_attributes = 0x0, share_access = 0x1, create_disposition = 0x1
create_options = 0x44 oplock_request = 0x100 private_flags = 0x0 ea_list =
(nil), sd = (nil), fname = fusioninventory-agent-deployment.vbs
[2022/06/16 15:27:37.523201, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=locking]
../../source3/locking/leases_db.c:81(leases_db_key)
leases_db_key:
[2022/06/16 15:27:37.523326, 1, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&db_key: struct leases_db_key
client_guid : 001c51dc-ed78-11ec-b903-70c94e8975c2
lease_key: struct smb2_lease_key
data: ARRAY(2)
data : 0xed85f790a41dad18
(-1331385914217353960)
data : 0xcc591c619a106c09
(-3721912411522831351)
[2022/06/16 15:27:37.523756, 5, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)
dbwrap_lock_order_lock: check lock order 1 for
/run/samba/smbXsrv_open_global.tdb
[2022/06/16 15:27:37.523885, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../lib/dbwrap/dbwrap.c:131(debug_lock_order)
lock order: 1:/run/samba/smbXsrv_open_global.tdb 2:<none>
3:<none> 4:<none>
[2022/06/16 15:27:37.524521, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Locking key 6FCE3A4D
[2022/06/16 15:27:37.524652, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)]
../../lib/dbwrap/dbwrap_tdb.c:153(db_tdb_fetch_locked_internal)
db_tdb_fetch_locked_internal: Allocated locked data 0x55d42e11a280
[2022/06/16 15:27:37.524808, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)]
../../source3/smbd/smbXsrv_open.c:632(smbXsrv_open_global_verify_record)
smbXsrv_open_global_verify_record: empty value
[2022/06/16 15:27:37.524960, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)]
../../source3/smbd/smbXsrv_open.c:750(smbXsrv_open_global_store)
smbXsrv_open_global_store: key '6FCE3A4D' stored
[2022/06/16 15:27:37.525091, 1, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&global_blob: struct smbXsrv_open_globalB
version : SMBXSRV_VERSION_0 (0)
seqnum : 0x00000001 (1)
info : union smbXsrv_open_globalU(case 0)
info0 : *
info0: struct smbXsrv_open_global0
db_rec : *
server_id: struct server_id
pid : 0x0000000000077046 (487494)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0xdcdffa20936bc84d
(-2531029447739717555)
open_global_id : 0x6fce3a4d (1875786317)
open_persistent_id : 0x000000006fce3a4d (1875786317)
open_volatile_id : 0x00000000fb466882 (4215695490)
open_owner :
S-1-5-21-3516824725-3155270197-1791756496-1215
open_time : Thu Jun 16 03:27:38 PM 2022 CEST
create_guid :
00000000-0000-0000-0000-000000000000
client_guid :
001c51dc-ed78-11ec-b903-70c94e8975c2
app_instance_id :
00000000-0000-0000-0000-000000000000
disconnect_time : NTTIME(0)
durable_timeout_msec : 0x00000000 (0)
durable : 0x00 (0)
backend_cookie : DATA_BLOB length=0
channel_sequence : 0x0000 (0)
channel_generation : 0x0000000000000000 (0)
lock_sequence_array: ARRAY(64)
[0000] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........
[0010] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........
[0020] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........
[0030] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........
[2022/06/16 15:27:37.527101, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Unlocking key 6FCE3A4D
[2022/06/16 15:27:37.527227, 5, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../lib/dbwrap/dbwrap.c:178(dbwrap_lock_order_unlock)
dbwrap_lock_order_unlock: release lock order 1 for
/run/samba/smbXsrv_open_global.tdb
[2022/06/16 15:27:37.527353, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/smbXsrv_open.c:916(smbXsrv_open_create)
smbXsrv_open_create: global_id (0x6fce3a4d) stored
[2022/06/16 15:27:37.527474, 1, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&open_blob: struct smbXsrv_openB
version : SMBXSRV_VERSION_0 (0)
reserved : 0x00000000 (0)
info : union smbXsrv_openU(case 0)
info0 : *
info0: struct smbXsrv_open
table : *
db_rec : NULL
local_id : 0xfb466882 (4215695490)
global : *
global: struct smbXsrv_open_global0
db_rec : NULL
server_id: struct server_id
pid : 0x0000000000077046
(487494)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0xdcdffa20936bc84d
(-2531029447739717555)
open_global_id : 0x6fce3a4d (1875786317)
open_persistent_id : 0x000000006fce3a4d
(1875786317)
open_volatile_id : 0x00000000fb466882
(4215695490)
open_owner :
S-1-5-21-3516824725-3155270197-1791756496-1215
open_time : Thu Jun 16 03:27:38 PM 2022
CEST
create_guid :
00000000-0000-0000-0000-000000000000
client_guid :
001c51dc-ed78-11ec-b903-70c94e8975c2
app_instance_id :
00000000-0000-0000-0000-000000000000
disconnect_time : NTTIME(0)
durable_timeout_msec : 0x00000000 (0)
durable : 0x00 (0)
backend_cookie : DATA_BLOB length=0
channel_sequence : 0x0000 (0)
channel_generation : 0x0000000000000000 (0)
lock_sequence_array: ARRAY(64)
[0000] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........
[0010] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........
[0020] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........
[0030] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........
status : NT_STATUS_OK
idle_time : Thu Jun 16 03:27:38 PM 2022 CEST
compat : NULL
flags : 0x00 (0)
0: SMBXSRV_OPEN_NEED_REPLAY_CACHE
0: SMBXSRV_OPEN_HAVE_REPLAY_CACHE
create_action : 0x00000000 (0)
request_count : 0x0000000000000000 (0)
pre_request_count : 0x0000000000000000 (0)
[2022/06/16 15:27:37.530117, 5, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/files.c:154(file_new)
allocated file structure fnum 4215695490 (4 used)
[2022/06/16 15:27:37.530251, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/files.c:824(file_name_hash)
file_name_hash: /dati/condivisioni/pub/fusioninventory-agent-deployment.vbs
hash 0x70b74ad8
[2022/06/16 15:27:37.530383, 5, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/dosmode.c:181(unix_mode)
unix_mode: unix_mode(fusioninventory-agent-deployment.vbs) returning 0644
[2022/06/16 15:27:37.530588, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/open.c:3509(open_file_ntcreate)
open_file_ntcreate: fname=fusioninventory-agent-deployment.vbs, dos_attrs=0x0
access_mask=0x120089 share_access=0x1 create_disposition = 0x1
create_options=0x44 unix mode=0644 oplock_request=256 private_flags = 0x0
[2022/06/16 15:27:37.530732, 5, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/dosmode.c:422(get_ea_dos_attribute)
get_ea_dos_attribute: Cannot get attribute from EA on file
fusioninventory-agent-deployment.vbs: Error = No data available
[2022/06/16 15:27:37.530872, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/open.c:3697(open_file_ntcreate)
open_file_ntcreate: fname=fusioninventory-agent-deployment.vbs, after mapping
access_mask=0x120089
[2022/06/16 15:27:37.530995, 4, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/open.c:3800(open_file_ntcreate)
calling open_file with flags=0x0 flags2=0x800 mode=0644, access_mask =
0x120089, open_access_mask = 0x120089
[2022/06/16 15:27:37.531319, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)]
../../source3/modules/vfs_acl_common.c:776(get_nt_acl_common_at)
get_nt_acl_common_at: name=fusioninventory-agent-deployment.vbs
[2022/06/16 15:27:37.531455, 4, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(3000047, 3000018) : sec_ctx_stack_ndx = 1
[2022/06/16 15:27:37.531582, 4, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(1053193842) : conn_ctx_stack_ndx = 0
[2022/06/16 15:27:37.531718, 4, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2022/06/16 15:27:37.531840, 5, pid=487494, effective(3000047, 3000018),
real(3000047, 0)]
../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2022/06/16 15:27:37.531959, 5, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2022/06/16 15:27:37.532166, 4, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (3000047, 3000018) - sec_ctx_stack_ndx = 0
[2022/06/16 15:27:37.532299, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=acls]
../../source3/smbd/posix_acls.c:3531(posix_get_nt_acl)
posix_get_nt_acl: called for file fusioninventory-agent-deployment.vbs
[2022/06/16 15:27:37.532471, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/passdb/lookup_sid.c:1191(xid_to_sid)
xid_to_sid: UID 0 -> S-1-5-21-3516824725-3155270197-1791756496-500 from
cache
[2022/06/16 15:27:37.532620, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/passdb/lookup_sid.c:1191(xid_to_sid)
xid_to_sid: GID 3000004 -> S-1-5-21-3516824725-3155270197-1791756496-512
from cache
[2022/06/16 15:27:37.532751, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=acls]
../../source3/smbd/posix_acls.c:2774(canonicalise_acl)
canonicalise_acl: Access ace entries before arrange :
[2022/06/16 15:27:37.532872, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=acls]
../../source3/smbd/posix_acls.c:2787(canonicalise_acl)
canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags =
0x0 perms r--
[2022/06/16 15:27:37.532997, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=acls]
../../source3/smbd/posix_acls.c:2787(canonicalise_acl)
canon_ace index 1. Type = allow SID =
S-1-5-21-3516824725-3155270197-1791756496-512 gid 3000004 SMB_ACL_GROUP_OBJ
ace_flags = 0x0 perms rw-
[2022/06/16 15:27:37.533121, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=acls]
../../source3/smbd/posix_acls.c:2787(canonicalise_acl)
canon_ace index 2. Type = allow SID =
S-1-5-21-3516824725-3155270197-1791756496-500 uid 0 SMB_ACL_USER_OBJ ace_flags =
0x0 perms rw-
[2022/06/16 15:27:37.533246, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=acls]
../../source3/smbd/posix_acls.c:848(print_canon_ace_list)
print_canon_ace_list: canonicalise_acl: ace entries after arrange
canon_ace index 0. Type = allow SID =
S-1-5-21-3516824725-3155270197-1791756496-500 uid 0 SMB_ACL_USER_OBJ ace_flags =
0x0 perms rw-
canon_ace index 1. Type = allow SID =
S-1-5-21-3516824725-3155270197-1791756496-512 gid 3000004 SMB_ACL_GROUP_OBJ
ace_flags = 0x0 perms rw-
canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags =
0x0 perms r--
[2022/06/16 15:27:37.533570, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=acls]
../../source3/smbd/posix_acls.c:1111(map_canon_ace_perms)
map_canon_ace_perms: Mapped (UNIX) 180 to (NT) 1f019f
[2022/06/16 15:27:37.533700, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=acls]
../../source3/smbd/posix_acls.c:1111(map_canon_ace_perms)
map_canon_ace_perms: Mapped (UNIX) 180 to (NT) 1f019f
[2022/06/16 15:27:37.533822, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=acls]
../../source3/smbd/posix_acls.c:1111(map_canon_ace_perms)
map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089
[2022/06/16 15:27:37.533957, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)]
../../source3/modules/vfs_acl_common.c:902(get_nt_acl_common_at)
get_nt_acl_common_at: returning acl for fusioninventory-agent-deployment.vbs
is:
[2022/06/16 15:27:37.534091, 1, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
psd: struct security_descriptor
revision : SECURITY_DESCRIPTOR_REVISION_1 (1)
type : 0x8004 (32772)
0: SEC_DESC_OWNER_DEFAULTED
0: SEC_DESC_GROUP_DEFAULTED
1: SEC_DESC_DACL_PRESENT
0: SEC_DESC_DACL_DEFAULTED
0: SEC_DESC_SACL_PRESENT
0: SEC_DESC_SACL_DEFAULTED
0: SEC_DESC_DACL_TRUSTED
0: SEC_DESC_SERVER_SECURITY
0: SEC_DESC_DACL_AUTO_INHERIT_REQ
0: SEC_DESC_SACL_AUTO_INHERIT_REQ
0: SEC_DESC_DACL_AUTO_INHERITED
0: SEC_DESC_SACL_AUTO_INHERITED
0: SEC_DESC_DACL_PROTECTED
0: SEC_DESC_SACL_PROTECTED
0: SEC_DESC_RM_CONTROL_VALID
1: SEC_DESC_SELF_RELATIVE
owner_sid : *
owner_sid :
S-1-5-21-3516824725-3155270197-1791756496-500
group_sid : *
group_sid :
S-1-5-21-3516824725-3155270197-1791756496-512
sacl : NULL
dacl : *
dacl: struct security_acl
revision : SECURITY_ACL_REVISION_NT4 (2)
size : 0x0064 (100)
num_aces : 0x00000003 (3)
aces: ARRAY(3)
aces: struct security_ace
type : SEC_ACE_TYPE_ACCESS_ALLOWED
(0)
flags : 0x00 (0)
0: SEC_ACE_FLAG_OBJECT_INHERIT
0: SEC_ACE_FLAG_CONTAINER_INHERIT
0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT
0: SEC_ACE_FLAG_INHERIT_ONLY
0: SEC_ACE_FLAG_INHERITED_ACE
0x00: SEC_ACE_FLAG_VALID_INHERIT (0)
0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS
0: SEC_ACE_FLAG_FAILED_ACCESS
size : 0x0024 (36)
access_mask : 0x001f019f (2032031)
object : union
security_ace_object_ctr(case 0)
trustee :
S-1-5-21-3516824725-3155270197-1791756496-500
aces: struct security_ace
type : SEC_ACE_TYPE_ACCESS_ALLOWED
(0)
flags : 0x00 (0)
0: SEC_ACE_FLAG_OBJECT_INHERIT
0: SEC_ACE_FLAG_CONTAINER_INHERIT
0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT
0: SEC_ACE_FLAG_INHERIT_ONLY
0: SEC_ACE_FLAG_INHERITED_ACE
0x00: SEC_ACE_FLAG_VALID_INHERIT (0)
0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS
0: SEC_ACE_FLAG_FAILED_ACCESS
size : 0x0024 (36)
access_mask : 0x001f019f (2032031)
object : union
security_ace_object_ctr(case 0)
trustee :
S-1-5-21-3516824725-3155270197-1791756496-512
aces: struct security_ace
type : SEC_ACE_TYPE_ACCESS_ALLOWED
(0)
flags : 0x00 (0)
0: SEC_ACE_FLAG_OBJECT_INHERIT
0: SEC_ACE_FLAG_CONTAINER_INHERIT
0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT
0: SEC_ACE_FLAG_INHERIT_ONLY
0: SEC_ACE_FLAG_INHERITED_ACE
0x00: SEC_ACE_FLAG_VALID_INHERIT (0)
0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS
0: SEC_ACE_FLAG_FAILED_ACCESS
size : 0x0014 (20)
access_mask : 0x00120089 (1179785)
object : union
security_ace_object_ctr(case 0)
trustee : S-1-1-0
[2022/06/16 15:27:37.538561, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/open.c:201(smbd_check_access_rights)
smbd_check_access_rights: file fusioninventory-agent-deployment.vbs requesting
0x120089 returning 0x120009 (NT_STATUS_OK)
[2022/06/16 15:27:37.538716, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=vfs] ../../source3/smbd/vfs.c:1327(check_reduced_name)
check_reduced_name: check_reduced_name [fusioninventory-agent-deployment.vbs]
[/dati/condivisioni/pub]
[2022/06/16 15:27:37.538875, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=vfs] ../../source3/smbd/vfs.c:1389(check_reduced_name)
check_reduced_name realpath [fusioninventory-agent-deployment.vbs] ->
[/dati/condivisioni/pub/fusioninventory-agent-deployment.vbs]
[2022/06/16 15:27:37.539000, 5, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=vfs] ../../source3/smbd/vfs.c:1495(check_reduced_name)
check_reduced_name: fusioninventory-agent-deployment.vbs reduced to
/dati/condivisioni/pub/fusioninventory-agent-deployment.vbs
[2022/06/16 15:27:37.539138, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/open.c:841(fd_open)
fd_open: name fusioninventory-agent-deployment.vbs, flags = 04000 mode = 0644,
fd = 49
[2022/06/16 15:27:37.539272, 2, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/open.c:1524(open_file)
WDC\PC-CARLINI-STEF$ opened file fusioninventory-agent-deployment.vbs read=Yes
write=No (numopen=4)
[2022/06/16 15:27:37.539410, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)]
../../source3/lib/dbwrap/dbwrap_watch.c:452(dbwrap_watched_subrec_wakeup_fn)
dbwrap_watched_subrec_wakeup_fn: No watchers
[2022/06/16 15:27:37.539561, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)]
../../source3/lib/dbwrap/dbwrap_watch.c:426(dbwrap_watched_do_locked)
dbwrap_watched_do_locked: dbwrap_watched_do_locked_fn returned NT_STATUS_OK
[2022/06/16 15:27:37.539687, 5, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)
dbwrap_lock_order_lock: check lock order 1 for /run/samba/locking.tdb
[2022/06/16 15:27:37.539808, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../lib/dbwrap/dbwrap.c:131(debug_lock_order)
lock order: 1:/run/samba/locking.tdb 2:<none> 3:<none>
4:<none>
[2022/06/16 15:27:37.539941, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=locking]
../../source3/locking/share_mode_lock.c:2142(share_mode_forall_entries)
share_mode_forall_entries: num_share_modes=0
[2022/06/16 15:27:37.540065, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=locking]
../../source3/locking/share_mode_lock.c:2161(share_mode_forall_entries)
share_mode_forall_entries: num_share_entries=0, writeback=0
[2022/06/16 15:27:37.540185, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=locking]
../../source3/locking/locking.c:960(find_delete_on_close_token)
find_delete_on_close_token: name_hash = 0x70b74ad8
[2022/06/16 15:27:37.540312, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=locking]
../../source3/locking/share_mode_lock.c:2142(share_mode_forall_entries)
share_mode_forall_entries: num_share_modes=0
[2022/06/16 15:27:37.540463, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=locking]
../../source3/locking/share_mode_lock.c:2161(share_mode_forall_entries)
share_mode_forall_entries: num_share_entries=0, writeback=0
[2022/06/16 15:27:37.540591, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=locking]
../../source3/locking/brlock.c:1889(brl_get_locks_readonly)
seqnum=8, fsp->brlock_seqnum=0
[2022/06/16 15:27:37.540718, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=locking]
../../source3/locking/leases_db.c:81(leases_db_key)
leases_db_key:
[2022/06/16 15:27:37.540841, 1, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&db_key: struct leases_db_key
client_guid : 001c51dc-ed78-11ec-b903-70c94e8975c2
lease_key: struct smb2_lease_key
data: ARRAY(2)
data : 0xed85f790a41dad18
(-1331385914217353960)
data : 0xcc591c619a106c09
(-3721912411522831351)
[2022/06/16 15:27:37.541246, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=locking]
../../source3/locking/leases_db.c:81(leases_db_key)
leases_db_key:
[2022/06/16 15:27:37.541372, 1, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&db_key: struct leases_db_key
client_guid : 001c51dc-ed78-11ec-b903-70c94e8975c2
lease_key: struct smb2_lease_key
data: ARRAY(2)
data : 0xed85f790a41dad18
(-1331385914217353960)
data : 0xcc591c619a106c09
(-3721912411522831351)
[2022/06/16 15:27:37.541792, 5, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)
dbwrap_lock_order_lock: check lock order 4 for /run/samba/leases.tdb
[2022/06/16 15:27:37.541921, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../lib/dbwrap/dbwrap.c:131(debug_lock_order)
lock order: 1:/run/samba/locking.tdb 2:<none> 3:<none>
4:/run/samba/leases.tdb
[2022/06/16 15:27:37.542060, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=locking]
../../source3/locking/leases_db.c:159(leases_db_do_locked_fn)
leases_db_do_locked_fn:
[2022/06/16 15:27:37.542186, 1, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
value: struct leases_db_value
current_state : 0x00000007 (7)
1: SMB2_LEASE_READ
1: SMB2_LEASE_HANDLE
1: SMB2_LEASE_WRITE
breaking : 0x00 (0)
breaking_to_requested : 0x00000000 (0)
0: SMB2_LEASE_READ
0: SMB2_LEASE_HANDLE
0: SMB2_LEASE_WRITE
breaking_to_required : 0x00000000 (0)
0: SMB2_LEASE_READ
0: SMB2_LEASE_HANDLE
0: SMB2_LEASE_WRITE
lease_version : 0x0002 (2)
epoch : 0x0001 (1)
num_files : 0x00000001 (1)
files: ARRAY(1)
files: struct leases_db_file
id: struct file_id
devid : 0x000000000000fd01 (64769)
inode : 0x00000000002feb20 (3140384)
extid : 0x0000000000000000 (0)
servicepath : *
servicepath :
'/dati/condivisioni/pub'
base_name : *
base_name :
'fusioninventory-agent-deployment.vbs'
stream_name : NULL
[2022/06/16 15:27:37.543908, 5, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../lib/dbwrap/dbwrap.c:178(dbwrap_lock_order_unlock)
dbwrap_lock_order_unlock: release lock order 4 for /run/samba/leases.tdb
[2022/06/16 15:27:37.547172, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/open.c:2700(delay_for_oplock)
delay_for_oplock: lease_state=7
[2022/06/16 15:27:37.547308, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0)] ../../source3/smbd/open.c:2723(delay_for_oplock)
delay_for_oplock: oplock type 0x100 on file
fusioninventory-agent-deployment.vbs
[2022/06/16 15:27:37.547446, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=locking]
../../source3/locking/share_mode_lock.c:1894(set_share_mode)
set_share_mode: num_share_modes=0
[2022/06/16 15:27:37.547574, 10, pid=487494, effective(3000047, 3000018),
real(3000047, 0), class=locking]
../../source3/locking/share_mode_lock.c:376(share_mode_entry_put)
share_mode_entry_put: share_mode_entry:
--
Lorenzo Milesi - lorenzo.milesi at yetopen.com
CTO @ YetOpen Srl
YetOpen - https://www.yetopen.com/
Corso Martiri della Liberazione 114 - 23900 Lecco - ITALY - | 4801 Glenwood
Avenue - Suite 200 - Raleigh, NC 27612 - USA -
Tel +39 0341 220 205 - info.it at yetopen.com | Phone +1 919-817-8106 - info.us
at yetopen.com
Think green - Non stampare questa e-mail se non necessario / Don't print
this email unless necessary
-------- D.Lgs. 196/2003 e GDPR 679/2016 --------
Tutte le informazioni contenute in questo messaggio sono riservate ed a uso
esclusivo del destinatario.
Tutte le informazioni ivi contenute, compresi eventuali allegati, sono da
ritenere confidenziali e riservate secondo i termini
del vigente D.Lgs. 196/2003 in materia di privacy e del Regolamento europeo
679/2016 - GDPR - e quindi ne e' proibita l'utilizzazione ulteriore non
autorizzata.
Nel caso in cui questo messaggio Le fosse pervenuto per errore, La invitiamo ad
eliminarlo senza copiarlo, stamparlo, a non inoltrarlo a terzi e ad avvertirci
non appena possibile.
Grazie.
Confidentiality notice: this email message including any attachment is for the
sole use of the intended recipient and may contain confidential and privileged
information;
pursuant to Legislative Decree 196/2003 and the European General Data Protection
Regulation 679/2016 - GDPR - any unauthorized review, use, disclosure or
distribution
is prohibited. If you are not the intended recepient please delete this message
without copying, printing or forwarding it to others, and alert us as soon as
possible.
Thank you.