search for: nt_status_lock_not_granted

...m/loadparm.c:2614(lp_do_section) Processing section "[testshare]" [2015/07/03 17:23:31.110024, 0] ../source3/auth/auth_domain.c:302(domain_client_validate) domain_client_validate: unable to validate password for user roland in domain MYDOM to Domain controller PDCHOST. Error was NT_STATUS_LOCK_NOT_GRANTED. [2015/07/03 17:23:31.111246, 2] ../source3/auth/auth.c:315(auth_check_ntlm_password) check_ntlm_password: Authentication for user [roland] -> [roland] FAILED with error NT_STATUS_LOCK_NOT_GRANTED [2015/07/03 17:23:31.111278, 2] ../auth/gensec/spnego.c:746(gensec_spnego_server_negTokenT...

On 04/21/2015 11:39 AM, Rowland Penny wrote: > On 21/04/15 18:24, Ty! Boyack wrote: >> On 04/20/2015 05:30 PM, Andrey Repin wrote: >>> Greetings, Ty! Boyack! >> >> Thanks, and Hi! >>> I dumped (using testparm -v) all of the default settings, and found >>> that >>> With Samba 4, I've found the output of "samba-tool testparm" to

Tim, Thanks for the hint. Usermap for root applied, locally made requests fail now systematically with "Could not connect to server <server address> Connection failed: NT_STATUS_LOCK_NOT_GRANTED" It is kind of improvement :) Random things scare me. -Tom On Tue, Mar 24, 2015 at 7:40 PM, Tim <lists at kiuni.de> wrote: > Hi Tom, > > have a look at this: > https://wiki.samba.org/index.php/Samba_Member_Server_Troubleshooting > > I think this could resolve your...

...for SSH. When I try to connect to a share on the machine, it fails and I see: [2015/04/27 14:53:19.363856, 0] ../source3/auth/auth_domain.c:302(domain_client_validate) domain_client_validate: unable to validate password for user MYDOMuser in domain MYDOM to Domain controller PDC. Error was NT_STATUS_LOCK_NOT_GRANTED. [2015/04/27 14:53:19.367346, 2] ../source3/auth/auth.c:300(auth_check_ntlm_password) check_ntlm_password: Authentication for user [MYDOMuser] -> [MYDOMuser] FAILED with error NT_STATUS_LOCK_NOT_GRANTED [2015/04/27 14:53:19.367449, 2] ../auth/gensec/spnego.c:746(gensec_spnego_server_neg...

...PDC. > > Which are the correct switches to allow a samba-4.2.0 member to join a > samba3 PDC? > > thank you, > > Francesco > Further exploring my issue (in the meanwhile I upgraded to samba-4.2.1), I noticed that after a couple of failed login (NT_STATUS_ACCESS_DENIED, NT_STATUS_LOCK_NOT_GRANTED), [...] rpc_dc_name: Returning DC DOMAIN (*.*.*.*) for domain MY_DOMAIN [2015/04/21 09:33:31.817284, 3] ../source3/lib/util_sock.c:617(open_socket_out_send) Connecting to 155.185.253.19 at port 445 [2015/04/21 09:33:31.846741, 0] ../source3/auth/auth_domain.c:302(domain_client_validate) dom...

...util_sock.c:617(open_socket_out_send) Connecting to 192.168.9.3 at port 445 [2015/07/06 08:02:47.188335, 0] ../source3/auth/auth_domain.c:302(domain_client_validate) domain_client_validate: unable to validate password for user roland in domain MYDOM to Domain controller PDCHOST. Error was NT_STATUS_LOCK_NOT_GRANTED. [2015/07/06 08:02:47.189817, 2] ../source3/auth/auth.c:315(auth_check_ntlm_password) check_ntlm_password: Authentication for user [roland] -> [roland] FAILED with error NT_STATUS_LOCK_NOT_GRANTED [2015/07/06 08:02:47.189854, 2] ../auth/gensec/spnego.c:746(gensec_spnego_server_negTokenT...

...util_sock.c:617(open_socket_out_send) Connecting to 192.168.9.3 at port 445 [2015/07/06 08:02:47.188335, 0] ../source3/auth/auth_domain.c:302(domain_client_validate) domain_client_validate: unable to validate password for user roland in domain MYDOM to Domain controller PDCHOST. Error was NT_STATUS_LOCK_NOT_GRANTED. [2015/07/06 08:02:47.189817, 2] ../source3/auth/auth.c:315(auth_check_ntlm_password) check_ntlm_password: Authentication for user [roland] -> [roland] FAILED with error NT_STATUS_LOCK_NOT_GRANTED [2015/07/06 08:02:47.189854, 2] ../auth/gensec/spnego.c:746(gensec_spnego_server_negTokenT...

...Tom S?derlund" <tom.k.soderlund at gmail.com>: >> Tim, >> >> Thanks for the hint. Usermap for root applied, locally made requests >> fail >> now systematically with >> "Could not connect to server <server address> >> Connection failed: NT_STATUS_LOCK_NOT_GRANTED" >> >> It is kind of improvement :) Random things scare me. >> >> -Tom >> >> >> On Tue, Mar 24, 2015 at 7:40 PM, Tim <lists at kiuni.de> wrote: >> >>> Hi Tom, >>> >>> have a look at this: >>> https://wiki...

...OMAIN\Domain Admins" domain admins:*:978600512:me.user,administrator [me at server]$ net rpc rights grant "DOMAIN\Domain Admins" SeDiskOperatorPrivilege -UDOMAIN\\Administrator -S server Enter DOMAIN\Administrator's password: Could not connect to server server Connection failed: NT_STATUS_LOCK_NOT_GRANTED [me at server]$ net rpc rights grant "DOMAIN\Domain Admins" SeDiskOperatorPrivilege -UDOMAIN\\Administrator -S server.domain.local Enter DOMAIN\Administrator's password: Failed to grant privileges for DOMAIN\Domain Admins (NT_STATUS_ACCESS_DENIED) [me at server]$ sudo net rpc rights...

...same user again) has to wait a timed 4 minutes before the database opens for him. I have tried a number of various locking options (oplocks = no, veto oplocks file = *\.mdb, even fake oplocks = yes) in order to improve the situation, but to no avail. One of the debugging messages I got was NT_STATUS_LOCK_NOT_GRANTED amongst a number of things I did not understand. A downgrade to 2.2.12 improved the situation immediately, the second user has no trouble opening the file, and working with it. I would like to use the features of samba-3.0.10 for a samba PDC which is why I am not happy about downgrading. But...

...2015 14:47:16 MEZ, schrieb "Tom S?derlund" <tom.k.soderlund at gmail.com>: >Tim, > >Thanks for the hint. Usermap for root applied, locally made requests >fail >now systematically with >"Could not connect to server <server address> >Connection failed: NT_STATUS_LOCK_NOT_GRANTED" > >It is kind of improvement :) Random things scare me. > >-Tom > > >On Tue, Mar 24, 2015 at 7:40 PM, Tim <lists at kiuni.de> wrote: > >> Hi Tom, >> >> have a look at this: >> https://wiki.samba.org/index.php/Samba_Member_Server_Troublesho...

...ystem. On both Fedora and CentOS I see that the Samba process is contacting the DC with the logon information. While Fedora gets back an appropriate response of logon success or logon failure, the CentOS version gets back one of 3 responses (I have not seen a pattern to which response we get): NT_STATUS_LOCK_NOT_GRANTED NT_STATUS_ACCESS_DENIED NT_STATUS_INVALID_PARAMETER With any of those errors, it denies the client access to the share, even though the correct username and password has been sent. I dumped (using testparm -v) all of the default settings, and found that there were two entries with different def...

...roblem is appearing here: > > [2015/07/06 08:02:47.188335, 0] ../source3/auth/auth_domain.c: > > 302(domain_client_validate) > > domain_client_validate: unable to validate password for user roland in > > domain MYDOM to Domain controller PDCHOST. Error was > > NT_STATUS_LOCK_NOT_GRANTED. > > > > Why on earth is this happening? When my win7 testmachine is trying > > to access the 4.2.2 PDC directly everything is fine and easy. So Ibelieve > > the setup of the PDC is correct. > > Hi Roland, > > I had the exact same error, although my setu...

...9223372036854775808 op 13 type 1 (Value too large for defined data type) [2002/05/30 12:00:08, 3] smbd/error.c:error_packet(91) error string = Value too large for defined data type [2002/05/30 12:00:08, 3] smbd/error.c:error_packet(99) error packet at smbd/blocking.c(179) cmd=36 (SMBlockingX) NT_STATUS_LOCK_NOT_GRANTED I note that 9223372036854775808 == 0x8000000000000000, so this isn't a genuine region locking call. Shouldn't this lock be filtered out before fcntl_lock() is called? I've found a workaround: setting "posix locking = no" for the Profiles share hides the problem quite effe...

...t;domain admins:*:978600512:me.user,administrator > >[me at server]$ net rpc rights grant "DOMAIN\Domain Admins" >SeDiskOperatorPrivilege -UDOMAIN\\Administrator -S server >Enter DOMAIN\Administrator's password: >Could not connect to server server >Connection failed: NT_STATUS_LOCK_NOT_GRANTED > >[me at server]$ net rpc rights grant "DOMAIN\Domain Admins" >SeDiskOperatorPrivilege -UDOMAIN\\Administrator -S server.domain.local >Enter DOMAIN\Administrator's password: >Failed to grant privileges for DOMAIN\Domain Admins >(NT_STATUS_ACCESS_DENIED) > >[me...

...ra and CentOS I see that the Samba process is contacting the > DC with the logon information. While Fedora gets back an appropriate > response of logon success or logon failure, the CentOS version gets back > one of 3 responses (I have not seen a pattern to which response we get): > NT_STATUS_LOCK_NOT_GRANTED > NT_STATUS_ACCESS_DENIED > NT_STATUS_INVALID_PARAMETER > With any of those errors, it denies the client access to the share, even > though the correct username and password has been sent. > I dumped (using testparm -v) all of the default settings, and found that With Samba 4, I...

...server (correct) Testing LOCKING_ANDX_CANCEL_LOCK testing cancel by CANCEL_LOCK (torture/raw/lock.c:502) Incorrect status NT_STATUS_UNSUCCESSFUL - should be ERRDOS:ERRcancelviolation Testing LOCK_NOT_GRANTED vs. FILE_LOCK_CONFLICT testing with timeout = 0 (torture/raw/lock.c:857) Incorrect status NT_STATUS_LOCK_NOT_GRANTED - should be NT_STATUS_FILE_LOCK_CONFLICT Testing LOCKING_ANDX_CHANGE_LOCKTYPE TEST RAW-LOCK FAILED! - ... RAW-LOCK took 0.434055 secs Tests: 1, Errors: 1, Skipped: 0. Success rate: 0.00% NMBD OUTPUT: Netbios nameserver version 3.0.23d started. Copyright Andrew Tridgell and the Samba Team 1992-200...

(Re-posting to list also.. Sorry forgot Cc. -Tom) Marc, Thanks for your help and clarifications. I was indeed addressing the domain controller (2012 R2) due to my misunderstanding. Addressing the request at the file server (Samba 4) to the file server fails too but with different errors. Rights list succeeds. $ net rpc rights list accounts -UDOMAIN\\Administrator Enter