search for: get_share_security

...hopefully) importend part of level 10 log: ACCESSING PROJEKTEEE ==================== >| [2004/12/15 14:54:48, 3] smbd/service.c:make_connection_snum(472) >| Connect path is '/var/smb/share/Projekte' for service [projekteee] >| [2004/12/15 14:54:48, 4] rpc_server/srv_srvsvc_nt.c:get_share_security >| (217) >| get_share_security: using default secdesc for projekteee >| [2004/12/15 14:54:48, 10] lib/util_seaccess.c:se_map_generic(176) >| se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >| [2004/12/15 14:54:48, 10] lib/util_seaccess.c:se_access_check(234) >| se_acc...

...2005/06/25 01:32:33, 10] lib/username.c:user_in_list(533) user_in_list: checking user |jk| against |root| [2005/06/25 01:32:33, 10] smbd/uid.c:is_share_read_only_for_user(99) is_share_read_only_for_user: share db is read-write for unix user jk [2005/06/25 01:32:33, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for db [2005/06/25 01:32:33, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2005/06/25 01:32:33, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000002, for N...

...[2003/10/15 13:32:13, 4] smbd/reply.c:reply_tcon_and_X(266) Client requested device type [?????] for share [PUBLIC] [2003/10/15 13:32:13, 3] smbd/service.c:make_connection_snum(536) Connect path is '/shares/Public' for service [Public] [2003/10/15 13:32:13, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for Public [2003/10/15 13:32:13, 3] lib/util_seaccess.c:se_access_check(267) [2003/10/15 13:32:13, 3] lib/util_seaccess.c:se_access_check(268) se_access_check: user sid is S-1-5-21-2730512542-3254095339-111969469-501 se_access_check: also S-1-5-2...

...= 0 [2006/03/25 12:43:34, 4] smbd/reply.c:reply_tcon_and_X(660) Client requested device type [?????] for share [DATALIB] [2006/03/25 12:43:34, 3] smbd/service.c:make_connection_snum(488) Connect path is '/datalib' for service [datalib] [2006/03/25 12:43:34, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240) get_share_security: using default secdesc for datalib [2006/03/25 12:43:34, 3] lib/util_seaccess.c:se_access_check(250) [2006/03/25 12:43:34, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-3963901886-956592875-555457773-3124 se_access_check: also S-1-5-...

...lowercase is johnsmith [2007/11/02 12:25:08, 5] lib/username.c:Get_Pwnam_internals(108) Get_Pwnam_internals did find user [johnsmith]! [2007/11/02 12:25:08, 3] smbd/service.c:make_connection_snum(806) Connect path is '/tmp' for service [IPC$] [2007/11/02 12:25:08, 4] lib/sharesec.c:get_share_security(132) get_share_security: using default secdesc for IPC$ Thanks

...x_stack_ndx = 0 [2005/03/19 13:08:22, 4] smbd/reply.c:reply_tcon_and_X(407) Client requested device type [IPC] for share [IPC$] [2005/03/19 13:08:22, 3] smbd/service.c:make_connection_snum(469) Connect path is '/tmp' for service [IPC$] [2005/03/19 13:08:22, 4] rpc_server/srv_srvsvc_nt.c:get_share_security (217) get_share_security: using default secdesc for IPC$ [2005/03/19 13:08:22, 3] lib/util_seaccess.c:se_access_check(251) [2005/03/19 13:08:22, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-1790986081-3911417905-1778689532-501 se_access_check: also S-1-5-2...

...1/08 11:43:40, 2] lib/access.c:check_access(324) Allowed connection from (192.168.2.38) [2004/11/08 11:43:40, 3] smbd/service.c:make_connection_snum(457) Connect path is '/space/home/dos/update/installation' for service [installation] [2004/11/08 11:43:40, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for installation [2004/11/08 11:43:40, 3] lib/util_seaccess.c:se_access_check(251) [2004/11/08 11:43:40, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-.... se_access_check: also S-..... se_access_check: also S-........

...x_stack_ndx = 0 [2003/11/12 09:20:02, 4] smbd/reply.c:reply_tcon_and_X(266) Client requested device type [IPC] for share [IPC$] [2003/11/12 09:20:02, 3] smbd/service.c:make_connection_snum(536) Connect path is '/tmp' for service [IPC$] [2003/11/12 09:20:02, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2003/11/12 09:20:02, 3] lib/util_seaccess.c:se_access_check(267) [2003/11/12 09:20:02, 3] lib/util_seaccess.c:se_access_check(268) se_access_check: user sid is S-1-5-21-2114876815-3017972899-1737424133-501 se_access_check: also S-1-5-21...

...allow/deny list. [2004/08/21 18:44:20, 2] lib/access.c:check_access(324) Allowed connection from (150.162.166.51) [2004/08/21 18:44:20, 3] smbd/service.c:make_connection_snum(472) Connect path is '/home/marcus' for service [marcus] [2004/08/21 18:44:20, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for marcus [2004/08/21 18:44:20, 3] lib/util_seaccess.c:se_access_check(251) [2004/08/21 18:44:20, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-254309711-2267608974-3283361689-3002 se_access_check: also S-1...

...e as lowercase is rousse [2009/01/27 16:53:11, 5] lib/username.c:Get_Pwnam_internals(108) Get_Pwnam_internals did find user [rousse]! [2009/01/27 16:53:11, 3] smbd/service.c:make_connection_snum(806) Connect path is '/var/tmp' for service [IPC$] [2009/01/27 16:53:11, 4] lib/sharesec.c:get_share_security(132) get_share_security: using default secdesc for IPC$ [2009/01/27 16:53:11, 3] lib/util_seaccess.c:se_access_check(250) [2009/01/27 16:53:11, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-22-1-5012 se_access_check: also S-1-5-21-911279556-1797085143-1335962...

...-3778846326-1501 se_access_check: also S-1-5-21-1779933378-3869849677-3778846326-512 se_access_check: also S-1-5-21-1779933378-3869849677-3778846326-513 [2004/08/31 22:33:42, 3] smbd/vfs.c:vfs_init_default(203) Initialising default vfs hooks [2004/08/31 22:33:42, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for media [2004/08/31 22:33:42, 3] lib/util_seaccess.c:se_access_check(251) [2004/08/31 22:33:42, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-1779933378-3869849677-3778846326-2000 se_access_check: also S-1-5-...

...s nobody | [2003/08/08 12:32:39, 5] lib/username.c:Get_Pwnam_internals(251) | Get_Pwnam_internals did find user [nobody]! | [2003/08/08 12:32:39, 3] smbd/service.c:make_connection_snum(536) | Connect path is '/tmp' for service [IPC$] | [2003/08/08 12:32:39, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) | get_share_security: using default secdesc for IPC$ | [2003/08/08 12:32:39, 3] lib/util_seaccess.c:se_access_check(267) | [2003/08/08 12:32:39, 3] lib/util_seaccess.c:se_access_check(268) | se_access_check: user sid is S-1-5-21-752004543-2525487979-4294967295-501 | se_access_check: also...

...-2540860130-419262576-1000 --- above line repeats 7 more times with the last 4 digits changing --- [2001/12/14 04:26:51, 5] smbd/password.c:create_nt_token(236) user token sid S-1-5-2 --- above line repeats 3 more times with S-x-x-x changing --- [2001/12/14 04:26:51, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(200) get_share_security: using default secdesc for MP3Z [2001/12/14 04:26:51, 3] lib/util_seaccess.c:se_access_check(242) se_access_check: user sid is S-1-5-21-186448236-2540860130-419262576-1000 [2001/12/14 04:26:51, 3] lib/util_seaccess.c:se_access_check(245) se_access_check: also S-1-5-21-...

Hi, I want to switch from 'security = server' to 'security = ADS'. Kerberos is working and I can login to the server. With Samba 3.0.22 I was able to restrict access to shares with the 'valid users' directive. ve is local unix group. valid users = +ve And force the group ownership with the 'force group' directive. force group = +ve [foo] comment = foo

...er is in 2 groups: 1000, 201 [2002/07/09 10:16:07, 3] smbd/sec_ctx.c:pop_sec_ctx(420) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2002/07/09 10:16:07, 3] smbd/sec_ctx.c:get_current_groups(162) get_current_groups: user is in 2 groups: 1000, 201 [2002/07/09 10:16:07, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(211) get_share_security: using default secdesc for IPC$ [2002/07/09 10:16:07, 3] lib/util_seaccess.c:se_access_check(269) se_access_check: user sid is S-1-5-21-2553453539-573313404-1353726876-3636 [2002/07/09 10:16:07, 3] lib/util_seaccess.c:se_access_check(272) se_access_check: also S-1-5-21...

..._cache(235) fetch sid from gid cache 0 -> S-1-5-21-555172016-203035953-3233999674-1001 [2005/04/23 08:51:32, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(235) fetch sid from gid cache 512 -> S-1-5-21-555172016-203035953-3233999674-512 [2005/04/23 08:51:32, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2005/04/23 08:51:32, 3] lib/util_seaccess.c:se_access_check(251) [2005/04/23 08:51:32, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-555172016-203035953-3233999674-1000 se_access_check: also S-1-5-21-...

...3 [2002/11/22 09:23:24, 3] smbd/sec_ctx.c:pop_sec_ctx(436) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2002/11/22 09:23:24, 3] smbd/sec_ctx.c:get_current_groups(172) get_current_groups: user is in 10 groups: 100, 0, 6, 8, 9, 14, 16, 17, 31, 33 [2002/11/22 09:23:24, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(211) get_share_security: using default secdesc for ufa [2002/11/22 09:23:24, 3] lib/util_seaccess.c:se_access_check(269) se_access_check: user sid is S-1-5-21-2516889344-3334932691-3153003715-2000 [2002/11/22 09:23:24, 3] lib/util_seaccess.c:se_access_check(273) se_access_check: also S-1-5-21...

..._ndx = 0 [2005/06/28 16:16:02, 4] smbd/reply.c:reply_tcon_and_X(408) Client requested device type [?????] for share [IPC$] [2005/06/28 16:16:02, 3] smbd/service.c:make_connection_snum(472) Connect path is '/tmp' for service [IPC$] [2005/06/28 16:16:02, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2005/06/28 16:16:02, 3] lib/util_seaccess.c:se_access_check(251) [2005/06/28 16:16:02, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-3464024308-2102256894-3995807409-1310 se_access_check: also S-...

...s in guest [2003/09/26 21:39:03, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals didn't find user [guest]! [2003/09/26 21:39:03, 3] smbd/service.c:make_connection_snum(534) Connect path is '/tmp' for service [IPC$] [2003/09/26 21:39:03, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2003/09/26 21:39:03, 10] lib/util_seaccess.c:se_map_generic(192) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2003/09/26 21:39:03, 10] lib/util_seaccess.c:se_access_check(250) se_access_check: requested access 0x00000002,...

...samba/log.wydaw* --------------- [2004/05/10 22:35:43, 10] lib/username.c:user_in_list(521) user_in_list: checking user lenec in list [2004/05/10 22:35:43, 10] lib/username.c:user_in_list(525) user_in_list: checking user |lenec| against |root| [2004/05/10 22:35:43, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2004/05/10 22:35:43, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/05/10 22:35:43, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000001, for...