search for: posix_get_nt_acl

Hi all, On Thu, Apr 16, 2015 at 03:00:49PM -0700, Jeremy Allison wrote: > On Thu, Apr 16, 2015 at 08:42:48PM +0200, Ervin Heged?s wrote: > > Dear Samba users, > > > > here is an Ubuntu 14.04, with Samba 4 (4.1.6), and LDAP (slapd > > 2.4.31). The config came from a previous system (Debian Squeezy), > > which had been crashed (HW error - on this new machine,

...nixpath) create_file_unixpath: access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = withoutgroupperm/New Text Document.txt [2010/10/29 16:51:22, 10] smbd/posix_acls.c:3369(posix_get_nt_acl) posix_get_nt_acl: called for file withoutgroupperm [2010/10/29 16:51:22, 10] smbd/posix_acls.c:2519(canonicalise_acl) canonicalise_acl: Access ace entries before arrange : [2010/10/29 16:51:22, 10] smbd/posix_acls.c:2532(canonicalise_acl) canon_ace index 0. Type = allow SID = S-1-1-0 other S...

...> > >>Nothing that I can see. > > > >That is not a helpful response to a request for debug info. > > > >Just sayin' :-) :-). > > > > No, it's not. Apologies. > > http://www.cv.nrao.edu/~jmalone/sambalog.txt Looking at that log I see: posix_get_nt_acl: called for file . canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (root) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OT...

...% libc-2.6.1.so [.] __geteuid | --- __geteuid uwrap_geteuid assert_uid set_unix_security_ctx set_sec_ctx set_root_sec_ctx smbd_become_root legacy_gid_to_sid gid_to_sid create_file_sids posix_get_nt_acl_common posix_get_nt_acl vfswrap_get_nt_acl smb_vfs_call_get_nt_acl smbd_check_access_rights 1.22% libc-2.6.1.so [.] __getegid | --- __getegid uwrap_getegid assert_gid set_unix_security_ctx set_sec_ctx...

Hi again, I think I found out something interesting: When running "ntacl get" with debug = 10, I get the following output on the machine where it works: posix_get_nt_acl: called for file /srv/profiles/ Opening cache file at /var/cache/samba/gencache.tdb Opening cache file at /var/run/samba/gencache_notrans.tdb uid 0 -> sid S-1-22-1-0 <12210> gid 100513 -> sid S-1-5-21-3981408749-3007518722-157077061-513 canonicalise_acl: Access ace entries before arrang...

...of the warnings, but I can login to MAIL (PDC) and other Win workstations, create and remove files with no issue. It is only when logging into this member server locally or from a remote workstation. Getting this sort of thing in the logs... [2012/05/10 14:24:33.711345, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) posix_get_nt_acl: called for file test [2012/05/10 14:24:33.711404, 10] smbd/posix_acls.c:2537(canonicalise_acl) canonicalise_acl: Access ace entries before arrange : [2012/05/10 14:24:33.711447, 10] smbd/posix_acls.c:2550(canonicalise_acl) canon_ace index 0. Type = allow SID = S-1-1-0 other...

Hello, Really stumped on this issue. I have samba 4.4.7 running on a new server. Users cannot write to files to which they have write permissions via group. Example: Here's the local filesystem on the samba server. I'm logged in as jmalone : jmalone at canis; cd /home/www.nrao.edu/content/logs/ : jmalone at canis; ls -l total 4 -rw-rw-r-- 1 jmalone nraoweb 0 Nov 10 10:02

...al(2310, 0)] ../source3/smbd/open.c:2758(open_fi le_ntcreate) calling open_file with flags=0x2 flags2=0x0 mode=0744, access_mask = 0x20087, open_access_mask = 0x20087 [2016/11/14 11:32:30.009702, 10, pid=9336, effective(2310, 2049), real(2310, 0), class=acls] ../source3/smbd/posix_a cls.c:3558(posix_get_nt_acl) posix_get_nt_acl: called for file logs/foobar [2016/11/14 11:32:30.009753, 10, pid=9336, effective(2310, 2049), real(2310, 0)] ../source3/passdb/lookup_sid.c:1251 (uid_to_sid) uid 12477 -> sid S-1-22-1-12477 [2016/11/14 11:32:30.009784, 10, pid=9336, effective(2310, 2049), real(2310, 0)...

Thanks to some of the guys on #samba-technical (obnox in particular!), I now have a working samba configuration. The environment: In our setup each user has an entry in both openldap (no samba schemes) and AD. Each account has the same name and even has a Unix UID entry in AD. Our users ssh into Linux boxes, authenticating off of openldap. Files are shared via samba. Due to the account

Hello! I have samba share on my sshfs-mounted folder. All works just fine except I can't delete files from sshfs unless they are in 0777 chmodded directory. Even if that files were putted trough smbclient. I can read files, write files (regardless their directory permissions) but not delete them. Here is my share config: [myshare] comment = shre over sshfs path = /home/kli/work/remotes/dev

...ule is ok gpfs_get_nfs4_acl invoked for . [2012/05/10 18:47:18.671955, 10] modules/vfs_gpfs.c:270(gpfs_get_nfs4_acl) Got non-nfsv4 acl [2012/05/10 18:47:18.671999, 10] modules/vfs_gpfs.c:371(gpfsacl_get_nt_acl) retrying with posix acl... [2012/05/10 18:47:18.672044, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) posix_get_nt_acl: called for file . [2012/05/11 11:29:41.979466, 10] smbd/open.c:1163(grant_fsp_oplock_type) - trying to open new text document grant_fsp_oplock_type: oplock type 0x3 on file New Text Document.txt [2012/05/11 11:29:41.979509, 4] smbd/open.c:2069(open_file_ntcre...

...mbd [0x5555557861a3] #20 /usr/local/sbin/smbd [0x5555557863c4] #21 /usr/local/sbin/smbd(pdb_uid_to_rid+0x28) [0x55555578764f] #22 /usr/local/sbin/smbd(uid_to_sid+0x1bf) [0x55555578bcd8] #23 /usr/local/sbin/smbd [0x55555564faa5] #24 /usr/local/sbin/smbd [0x555555652483] #25 /usr/local/sbin/smbd(posix_get_nt_acl+0x3dc) [0x5555556533a2] #26 /usr/local/sbin/smbd(posix_fget_nt_acl+0xd6) [0x5555556534b0] #27 /usr/local/sbin/smbd [0x555555668c78] #28 /usr/local/sbin/smbd(is_visible_file+0x33d) [0x5555555f9a1d] #29 /usr/local/sbin/smbd [0x5555555f9f52] #30 /usr/local/sbin/smbd(dptr_ReadDirName+0x40) [! 0x5...

...d/open.c:2758(open_fi > le_ntcreate) > calling open_file with flags=0x2 flags2=0x0 mode=0744, access_mask > = 0x20087, open_access_mask = 0x20087 > [2016/11/14 11:32:30.009702, 10, pid=9336, effective(2310, 2049), > real(2310, 0), class=acls] ../source3/smbd/posix_a > cls.c:3558(posix_get_nt_acl) > posix_get_nt_acl: called for file logs/foobar > [2016/11/14 11:32:30.009753, 10, pid=9336, effective(2310, 2049), > real(2310, 0)] ../source3/passdb/lookup_sid.c:1251 > (uid_to_sid) > uid 12477 -> sid S-1-22-1-12477 > [2016/11/14 11:32:30.009784, 10, pid=9336, effective(...

On 11/17/16 2:17 PM, Jeremy Allison wrote: > On Wed, Nov 16, 2016 at 03:25:24PM -0500, Josh Malone wrote: >> >> http://www.cv.nrao.edu/~jmalone/sambalog.txt > > Looking at that log I see: > > posix_get_nt_acl: called for file . > > canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (root) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x > canon_ace index 2. Type = allow SID = S-1-1...

...SID. Maybe that's a decent hint what went wrong? Am Freitag, 24. August 2018 schrieb Waishon : > Hi again, > > I think I found out something interesting: > When running "ntacl get" with debug = 10, I get the following output on > the machine where it works: > > posix_get_nt_acl: called for file /srv/profiles/ > Opening cache file at /var/cache/samba/gencache.tdb > Opening cache file at /var/run/samba/gencache_notrans.tdb > uid 0 -> sid S-1-22-1-0 <12210> > gid 100513 -> sid S-1-5-21-3981408749-3007518722-157077061-513 > canonicalise_acl: Access...

...__geteuid > uwrap_geteuid > assert_uid > set_unix_security_ctx > set_sec_ctx > set_root_sec_ctx > smbd_become_root > legacy_gid_to_sid > gid_to_sid > create_file_sids > posix_get_nt_acl_common > posix_get_nt_acl > vfswrap_get_nt_acl > smb_vfs_call_get_nt_acl > smbd_check_access_rights > > 1.22% libc-2.6.1.so [.] __getegid > | > --- __getegid > uwrap_getegid > assert_gid >...

On Wed, Nov 16, 2016 at 03:12:06PM -0500, Josh Malone via samba wrote: > On 11/16/16 2:32 PM, Jeremy Allison via samba wrote: > >> > >>But the file is not root:root - it's owned by uid 12477 and group > >>9006. Why is Samba getting the wrong owner/group for this file? > > > >That is the core of your problem. What does the full debug level 10 >

...9.533716, 10, pid=3350, effective(1017, 1003), real(1017, 0)] ../source3/smbd/smb2_create.c:1194(smbd_smb2_create_send) smbd_smb2_create_send: response construction phase [2018/10/12 12:05:09.533724, 10, pid=3350, effective(1017, 1003), real(1017, 0), class=acls] ../source3/smbd/posix_acls.c:3564(posix_get_nt_acl) posix_get_nt_acl: called for file . [2018/10/12 12:05:09.533748, 10, pid=3350, effective(1017, 1003), real(1017, 0)] ../source3/passdb/lookup_sid.c:1286(uid_to_sid) uid 0 -> sid S-1-22-1-0 [2018/10/12 12:05:09.533759, 10, pid=3350, effective(1017, 1003), real(1017, 0)] ../source3/passdb/loo...

On Fri, 24 Aug 2018 22:06:01 +0200 Waishon <waishon009 at gmail.com> wrote: > Hi, > > thanks for your suggestions. Do you think this is causes the > stacktrace above? . I just added "REALM" as a placeholder and it > worked on a DC that was provisioned using Samba 4.7.3 and upgraded > afterwards to Samba 4.8.4 absolutely fine with this config and the > command

...x0fffffffffffcd78), line 1785 in "vfs.c" canonicalise_acl(conn = 0x8000002800000001, fname = "", posix_acl = 0x000141ff00020000, psbuf = (nil), powner = (nil), pgroup = 0x000070000000000e, pal = 0x0000000051012748, the_acl_type = 410016384), line 2462 in "posix_acls.c" posix_get_nt_acl_common(conn = 0x000000011014b960, name = "", sbuf = 0x00000000510126f5, pal = (nil), posix_acl = 0x0fffffffffffd690, def_acl = (nil), security_info = 268435455, ppdesc = 0x0fffffffffffd338), line 3177 in "posix_acls.c" posix_get_nt_acl(conn = 0x09000000000103e0, name = (nil), se...