search for: se_access_check

..._conn_ctx(0) : conn_ctx_stack_ndx = 0 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 get_privileges: No privileges assigned to SID [S-1-22-1-0] get_privileges: No privileges assigned to SID [S-1-5-2] get_privileges: No privileges assigned to SID [S-1-5-11] se_access_check: user sid is S-1-22-1-0 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: user sid is S-1-22-1-0 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_chec...

...er that exports the printers. All other machines (XP, win 2000, including a Windows 2000 TSE) can print fine to any printer on the samba server. Increasing the logging level and analyzing the results, it seems to point to an authorization issue: [2008/04/02 17:11:50, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f000c, for NT token with 17 entries and first sid S-1-5-21-1743362971-2219156043-3858894690-17208. [2008/04/02 17:11:50, 3] lib/util_seaccess.c:se_access_check(250) [2008/04/02 17:11:50, 3] lib/util_seaccess.c:se_access_check(251) se_access_check:...

...password interface check_ntlm_password: mapped user is: [SD80]\[Administrator]@[IANSERVER] check_ntlm_password: winbind authentication for user [Administrator] succeeded check_ntlm_password: authentication for user [Administrator] ->[Administrator] -> [SD80+administrator] succeeded se_access_check: user sid is S-1-5-21-4023909512-3739307249-2032274589-500 se_access_check: also S-1-5-21-4023909512-3739307249-2032274589-513 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-4023909512-3739307249-2032274589-520 s...

...[S-1-22-1-0] [2007/12/28 12:53:05, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-2] [2007/12/28 12:53:05, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-11] [2007/12/28 12:53:05, 3] lib/util_seaccess.c:se_access_check(250) [2007/12/28 12:53:05, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-22-1-0 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 [2007/12/28 12:53:05, 3] lib/util_seaccess.c:se_acce...

Hello, I have problems to connect my pc to my samba server. I can log in to the server and I can se some folders but i can't access them. The error message i recive in the log file looks like this: [2006/04/26 15:20:22, 3] lib/util_seaccess.c:se_access_check(250) [2006/04/26 15:20:22, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-2872186745-2418432764-454733278-501 se_access_check: also S-1-5-21-2872186745-2418432764-454733278-514 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check:...

..._conn_ctx(0) : conn_ctx_stack_ndx = 0 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 get_privileges: No privileges assigned to SID [S-1-22-1-0] get_privileges: No privileges assigned to SID [S-1-5-2] get_privileges: No privileges assigned to SID [S-1-5-11] se_access_check: user sid is S-1-22-1-0 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: user sid is S-1-22-1-0 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_chec...

...644929-1026171850-512) -> admin Over winxp (network environment -> server -> printers -> access) I arranged that for the group 'domain users' print job management is allowed. But deleting occurs access denied. Here is the log file: [2006/12/11 13:26:43, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-2984023303-172644929-10261718 50-3012 se_access_check: also S-1-5-21-2984023303-172644929-1026171850-1222 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-2984023303-17264...

...3 of length 86 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtconX (pid 25528) conn 0x0 [2009/02/21 11:50:01, 3] smbd/service.c:make_connection_snum(940) Connect path is '/tmp' for service [IPC$] [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_che...

...ID [S-1-22-1-0] [2008/01/04 14:52:07, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-2] [2008/01/04 14:52:07, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-11] [2008/01/04 14:52:07, 3] lib/util_seaccess.c:se_access_check(250) [2008/01/04 14:52:07, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-22-1-0 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 [2008/01/04 14:52:07, 3] lib/util_seaccess.c:se_access_ch...

...hine is in domain and log in, I get full admin rights on that box. Removing the box from domain works anytime. Error message in windows is: "Logon failure: invalid user name or bad password". In log files (debuglevel 10) appear such lines: ... [2003/09/11 18:09:33, 5] lib/util_seaccess.c:se_access_check(331) se_access_check: access (211) denied. [2003/09/11 18:09:33, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(93) _samr_open_domain: ACCESS DENIED (requested: 0x00000211) ... [2003/09/11 18:09:33, 5] rpc_server/srv_samr_nt.c:access_check_samr_function(106) _samr_create_user: access c...

...orrect directory is scanned, and I don't get a client error : the client behaves as if the dir is empty. However if I do the same thing in winxp, I do get a client error -- "Windows cannot find "...path..." What's happening? > [2005/07/16 00:57:12, 3] lib/util_seaccess.c:se_access_check(251) > [2005/07/16 00:57:12, 3] lib/util_seaccess.c:se_access_check(252) > se_access_check: user sid is > S-1-5-21-*********-*********-*********-2002 > se_access_check: also S-1-5-21-*********-*********-*********-1201 > se_access_check: also S-1-1-0 > se_access_check: also...

...d/password.c:register_vuid(235) Adding/updating homes service for user 'heubach' using home directory: '/home/ heubach' [2003/08/29 18:23:01, 3] smbd/service.c:make_connection_snum(536) Connect path is '/tmp' for service [IPC$] [2003/08/29 18:23:01, 3] lib/util_seaccess.c:se_access_check(267) [2003/08/29 18:23:01, 3] lib/util_seaccess.c:se_access_check(268) se_access_check: user sid is S-1-5-21-2855476704-3843309178-487093961-3000 se_access_check: also S-1-5-21-2855476704-3843309178-487093961-513 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also...

...g when trying to connect from the Windows machine.?? It seems to find the account from AD fine and grant access, but unexpectedly closes the connection for some reason. ?[2008/12/04 09:48:04, 5] smbd/connection.c:claim_connection(142) claiming [vobstore] [2008/12/04 09:48:04, 3] lib/util_seaccess.c:se_access_check(249) [2008/12/04 09:48:04, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-2693496084-966658720-213559819-1120 se_access_check: also S-1-5-21-2693496084-966658720-213559819-513 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-...

..._ldap(2222) init_group_from_ldap: Entry found for group: 0 [2006/09/14 13:10:36.489039, 3, pid=5120, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/09/14 13:10:36.489384, 3, pid=5120, effective(0, 0), real(0, 0)] lib/util_seaccess.c:se_access_check(250) [2006/09/14 13:10:36.489541, 3, pid=5120, effective(0, 0), real(0, 0)] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-4120742614-1436429045-4285614666-1000 se_access_check: also S-1-5-21-4120742614-1436429045-4285614666-1001 se_access_check: also S-1-1-0...

...4, share_access = 0x3, private_options = 0x0, access_mask = 0x20000, mid = 0x0, type= 0x0, file_id = 15253, uid = 501, flags = 2, dev = 0xfd02, inode = 212042139 [2015/02/02 18:34:15, 5] smbd/files.c:file_free(454) freed files structure 14004 (0 used) [2015/02/02 18:34:15, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000002, for NT token with 17 entries and first sid S-1-5-21-3650665210-738519219-1273585530-2002. [2015/02/02 18:34:15, 3] lib/util_seaccess.c:se_access_check(250) [2015/02/02 18:34:15, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user...

...sable spoolss = yes' to smb.conf). But if I try to connect to the printer share from my Windows PC and print a test page, the test page fails to print and Windows asks to launch the troubleshooter. Looking in the Samba logs I see entries like this: [2005/01/13 12:24:46, 3] lib/util_seaccess.c:se_access_check(251) [2005/01/13 12:24:46, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-1214440339-1580818891-1202660629-2125 se_access_check: also S-1-5-21-1214440339-1580818891-1202660629-513 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_acces...

...MBtconX (pid 4387) conn 0x0 [2009/07/17 13:57:31, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/07/17 13:57:31, 3] smbd/service.c:make_connection_snum(940) Connect path is '/tmp' for service [IPC$] [2009/07/17 13:57:31, 3] lib/util_seaccess.c:se_access_check(249) [2009/07/17 13:57:31, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-4023909512-3739307249-2032274589-500 se_access_check: also S-1-5-21-4023909512-3739307249-2032274589-513 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_chec...

...misc. options, like Paper feeder and so on .. . So far so good! Printing from W9x and NT 4.0 Clients is working without any problems! But the W2k Clients get a "Access denied" after the first print job! When I look into a level 6 log, I see: [2002/02/20 14:58:03, 3] lib/util_seaccess.c:se_access_check(244) se_access_check: user sid is S-1-5-21-1833108988-1007584141-3113639171-7268 [2002/02/20 14:58:03, 3] lib/util_seaccess.c:se_access_check(247) se_access_check: also S-1-5-21-1833108988-1007584141-3113639171-1621 [2002/02/20 14:58:03, 3] lib/util_seaccess.c:se_access_check(247) se_access_c...

Hi, I have a very odd problem which perhaps is not related to Samba but to be sure... I have a RH6.2 2.2.20 ACLs Samba server 2.2.2 and everything is/was running fine partaking in a Windows 2000 domain. I needed to reboot the server. It has come up and I am getting "input/output errors" all over the logs when I try and access any of the shares on the raid array from a Windows client

...| [2004/05/10 22:35:43, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2004/05/10 22:35:43, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/05/10 22:35:43, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000001, for NT token with 6 entries and first sid S-1-5-21-3658755377-320826499-3197562212-1081. [2004/05/10 22:35:43, 3] lib/util_seaccess.c:se_access_check(251) [2004/05/10 22:35:43, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user s...