search for: access_check_samr_object

...11:32:04, 2] /SourceCache/samba/samba-92.20/samba/source/ rpc_server/srv_samr_nt.c:_samr_lookup_domain(2531) Returning domain sid for domain [DOMAIN] -> S-1-5-21-457614760-3765950544-3595693477 [2006/08/22 11:32:04, 2] /SourceCache/samba/samba-92.20/samba/source/ rpc_server/srv_samr_nt.c:access_check_samr_object(93) _samr_open_domain: ACCESS DENIED (requested: 0x00000211) [2006/08/22 11:32:04, 2] /SourceCache/samba/samba-92.20/samba/source/ rpc_server/srv_samr_nt.c:_samr_lookup_domain(2531) Returning domain sid for domain [DOMAIN] -> S-1-5-21-457614760-3765950544-3595693477 [2006/08/22 11:32:...

...report them back correctly. However, whomever I am logged in as ( including gid 512 users) it will not let me see details or change anything. In the logs after trying to view a users details I will get (hand typed from across the room, so forgive the lack of log lines): rpc_server/src_samr_nt.c:access_check_samr_object(93) _samr_open_user: ACCESS DENIED (requested: 0x00601bf) Before that it does access checks se_access_check of different SID variations, ending in also S-1-5-21-.......-512. Does anyone have any idea why it is not enabling me to use the usrmgr.exe to manage users? The scripts work great as far...

...m_password: authentication for user [frode] -> [frode] -> [frode] succeeded [2004/03/26 10:16:03, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2461) Returning domain sid for domain ISENGARD -> S-1-5-21-2641962930-4089608471-2571597100 [2004/03/26 10:16:03, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(93) _samr_open_domain: ACCESS DENIED (requested: 0x00000211) [2004/03/26 10:16:03, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2461) Returning domain sid for domain ISENGARD -> S-1-5-21-2641962930-4089608471-2571597100 [2004/03/26 10:16:03, 2] rpc_server/srv_samr_nt.c:access_check_samr_...

...Error message in windows is: "Logon failure: invalid user name or bad password". In log files (debuglevel 10) appear such lines: ... [2003/09/11 18:09:33, 5] lib/util_seaccess.c:se_access_check(331) se_access_check: access (211) denied. [2003/09/11 18:09:33, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(93) _samr_open_domain: ACCESS DENIED (requested: 0x00000211) ... [2003/09/11 18:09:33, 5] rpc_server/srv_samr_nt.c:access_check_samr_function(106) _samr_create_user: access check ((granted: 0x00000201; required: 0x00000010) [2003/09/11 18:09:33, 2] rpc_server/srv_samr_nt.c:access_check_samr_f...

...-2409148434-2038783532-1251894419-1441 se_access_check: also S-1-5-21-2409148434-2038783532-1251894419-512 se_access_check: also S-1-5-21-2409148434-2038783532-1251894419-513 se_access_check: also S-1-5-21-2409148434-2038783532-1251894419-1207 [2004/02/17 09:36:47, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(93) _samr_open_domain: ACCESS DENIED (requested: 0x00000211) -----Original Message----- From: keith@midnighthax.com [mailto:keith@midnighthax.com]On Behalf Of Keith Edmunds Sent: Tuesday, February 17, 2004 9:32 AM To: ndressler@dinmar.com Subject: Re: [Samba] Samba 3.0.2/LDAP and Adding a Wor...

...ation for user [Administrator] -> [Administrator] -> [Administrator] succeeded [2004/01/05 16:20:53, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2461) Returning domain sid for domain SOLA -> S-1-5-21-238816456-3885207889-2738941293 [2004/01/05 16:20:53, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(93) _samr_open_domain: ACCESS DENIED (requested: 0x00000211) [2004/01/05 16:20:53, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2461) Returning domain sid for domain SOLA -> S-1-5-21-238816456-3885207889-2738941293 [2004/01/05 16:20:53, 2] rpc_server/srv_samr_nt.c:access_check_samr_fun...

...ntlm_password: authentication for user [sandro] -> [sandro] -> [sandro] succeeded [2003/09/17 16:52:06, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540) Returning domain sid for domain SAMBA -> S-1-5-21-331481452-486475617-929701000 [2003/09/17 16:52:06, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(93) _samr_open_domain: ACCESS DENIED (requested: 0x00000211) [2003/09/17 16:52:06, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540) Returning domain sid for domain SAMBA -> S-1-5-21-331481452-486475617-929701000 [2003/09/17 16:52:06, 2] rpc_server/srv_samr_nt.c:access_check_samr_functi...

...ntication for user [dsonenberg] -> [dsonenberg] -> [dsonenberg] succeeded [2005/02/08 10:26:26, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2482) Returning domain sid for domain STROZLLC -> S-1-5-21-1001378032-4272845324-1772824492 [2005/02/08 10:26:26, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(93) _samr_open_domain: ACCESS DENIED (requested: 0x00000211) [2005/02/08 10:26:26, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2482) Returning domain sid for domain STROZLLC -> S-1-5-21-1001378032-4272845324-1772824492 [2005/02/08 10:26:26, 2] rpc_server/srv_samr_nt.c:access_check_sam...

...00 server (and also from another NT4 workstation) was something like "incorrect user namo or password". I've tryed to figure out what's not working, upping the debug level to 3, and the only thing that I've found suspicous is [2004/01/28 16:43:09, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(93) ~ _samr_open_domain: ACCESS DENIED (requested: 0x00000211) I'm including also my smb.conf file: ~ ----------------BEGIN of SMB.CONF-------------------- [global] ~ netbios name = FS5 ~ idmap uid = 10000-20000 ~ idmap gid = 10000-20000 ~ winbind enum users = yes ~ winbind enum...

...real(0, 0)] lib/util_seaccess.c:se_access_check(269) se_access_check: also S-1-5-2 [2002/08/15 14:14:52, 3, effective(503, 512), real(0, 0)] lib/util_seaccess.c:se_access_check(269) se_access_check: also S-1-5-11 [2002/08/15 14:14:52, 2, effective(503, 512), real(0, 0)] rpc_server/srv_samr_nt.c:access_check_samr_object(92) _samr_open_domain: ACCESS DENIED (requested: 0x00000211)

...l no be processed." On the PDC log.smbd displays an ominous message: [2002/10/13 18:10:27, 2] passdb/pdb_ldap.c:ldapsam_search_one_user(431) ldapsam_search_one_user: searching for:[(&(uid=Domain Users)(objectclass=samba Account))] [2002/10/13 18:10:27, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(94) _samr_open_group: ACCESS DENIED (requested: 0x0000004e) This is on debian unstable with samba 3.0 alpha and ldapsam. Cheers, -- THESEE: Je t'aimais ; et je sens que malgr? ton offense, Mes entrailles pour toi se troublent par avance....

...d report them back correctly. However, whomever I am logged in as ( including gid 512 users) it will not let me see details or change anything. In the logs after trying to view a users details I will get (hand typed from across the room, so forgive the lack of log lines): rpc_server/src_samr_nt.c:access_check_samr_object(93) _samr_open_user: ACCESS DENIED (requested: 0x00601bf) Before that it does access checks se_access_check of different SID variations, ending in also S-1-5-21-.......-512. Does anyone have any idea why it is not enabling me to use the usrmgr.exe to manage users? The scripts work great as far...

...n for user [administrator] -> [administrator] -> [Administrator] succeeded [2004/01/27 20:36:25, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2461) Returning domain sid for domain IT-TRANS -> S-1-5-21-3079347702-147214601-1898991890 [2004/01/27 20:36:25, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(93) _samr_open_domain: ACCESS DENIED (requested: 0x00000211) [2004/01/27 20:36:25, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2461) Returning domain sid for domain IT-TRANS -> S-1-5-21-3079347702-147214601-1898991890 [2004/01/27 20:36:25, 2] rpc_server/srv_samr_nt.c:access_check_samr...

...and add a host to the domain I get an error message of "Access Denied" Going through the ldap logs I see no acl denied errors. The only error I can find in samba is Logging level 6 0008 Status: NT_STATUS_ACCESS_DENIED logging level 2 [2005/07/27 10:27:11, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(93) _samr_open_domain: ACCESS DENIED (requested: 0000000211) [2005/07/27 10:27:11, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2482) Returning domain sid for domain SAFER -> S-1-5-21-873056956-1700891030-3564651719 [2005/07/27 10:27:11, 2] rpc_server/srv_samr_nt.c:access_check_samr_func...

...to join the domain. I've followed the HOWTO pretty closely, but when I try to get a win2k machine to join the domain, I get a message saying that the authentication failed. The log on the samba server shows the following errors (at loglevel 2): [2004/07/18 21:05:04, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(93) _samr_open_domain: ACCESS DENIED (requested: 0x00000211) [2004/07/18 21:05:04, 2] rpc_server/srv_samr_nt.c:access_check_samr_function(115) _samr_create_user: ACCESS DENIED (granted: 0x00000201; required: 0x00000010) My question is -- how do I determine _why_ access is denied. I've tr...

...for user [administrator] -> [administrator] -> [Administrator] succeeded [2005/03/22 09:47:05, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2482) Returning domain sid for domain ARZUR-NT -> S-1-5-21-1874299889-3982645529-2160850509 [2005/03/22 09:47:05, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(93) _samr_open_domain: ACCESS DENIED (requested: 0x00000211) [2005/03/22 09:47:05, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2482) Returning domain sid for domain ARZUR-NT -> S-1-5-21-1874299889-3982645529-2160850509 [2005/03/22 09:47:05, 2] rpc_server/srv_samr_nt.c:access_check_sam...

...-544 mask = f001f, current desired = e se_access_check: ACE 2: type 0, flags = 0x00, SID = S-1-5-32-548 mask = f001f, current desired = e [2003/11/21 12:16:06, 5] lib/util_seaccess.c:se_access_check(315) se_access_check: access (1f) denied. [2003/11/21 12:16:06, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(93) _samr_open_group: ACCESS DENIED (requested: 0x0000001f) My questions : - Am I really fooling me in believing it is possible ? - Am I stuck to using 'admin user=too,many,users,here,mapped,to,root' ? - What is the sambaGroupType in LDAP (I noticed that 2 is domain group, 5 is buitin...

Hi, I've posted this question before, but i'm still scratching my head. I've got a samba 3 cvs server with an ldap backend. When I do a search for users in a group either by net group <group> /domain or in user manager it returns access denied When I look at the logs on the server samba is searching for (uid=<group>(objectclass=sambaAccount)). The samba schema does not

...oups are returned. And if I try a 'wbinfo -g' there is old cached group data that makes it look like it worked once upon a time. When the 'getent group' is run on the fileserver the error log on the PDC for the client is as follows [2002/07/29 15:59:02, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(90) _samr_open_group: ACCESS DENIED (requested: 0x0ffff41f) Maybe someone knows the explanation of this error? My nsswitch.conf on the fileserver contains the winbind entries for passwd and group. I have used the smbgroupedit command to create the domain groups from the unix groups. The smb....

...800523-3004 se_access_check: also S-1-5-21-3516781642-1962875130-3438800523-1401 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-518063335-3730449020-288107188-1401 [2003/11/28 15:02:32, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(93) _samr_open_domain: ACCESS DENIED (requested: 0x00000211) [2003/11/28 15:07:25, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 732 [2003/11/28 15:07:25, 3] smbd/process.c:process_smb(890) Transaction 35 of length 168 [2003/11/28 15:0...