search for: secdesc

...th one application which will gives error indication it cant create files. I have begun looking in the various .tdb files and have found that there is no entry for the [Windows] share in share_info.tdb root at louise:/var/lib/samba# tdbtool tdb> open share_info.tdb tdb> keys key 15 bytes: SECDESC/Hamlet key 18 bytes: SECDESC/Recovered key 14 bytes: SECDESC/Sigma key 14 bytes: SECDESC/Vault key 15 bytes: SECDESC/Office key 16 bytes: SECDESC/Testing key 13 bytes: INFO/version key 17 bytes: SECDESC/Projects tdb> The question now is how do I add a record and why isn't it there? I did di...

Hi all, [Please CC me in reply, I'm not subscribed] On two of our machines, "net rpc share allowedusers" gives the error "Coult not query secdesc for share", partial debug log (-d10) below. The servers are both running Windows Server 2008 R2 Standard 6.1 but we have other servers running the same version of Windows so I don't think that is the issue. This is definitely not a password issue since changing the password sent gives a...

New version 6.10 of cifs-utils has been released. Highlighted changes: - smb3 alias/fstype is added - smb2-quota tool is added to display quota information - smb2-secdesc UI tool to view security descriptors is added - smbinfo is enhanced with capabilities to dump session keys and get/set compression of files - smbinfo bash completion is supported - getcifsacl tool is improved to support multiple files webpage: https://wiki.samba.org/index.php/LinuxCIFS_utils tarba...

...the following bit of code: from samba import smb creds = {...} # domain,username,password cnn = smb.connect("svr1") cnn.session_request("svr1") cnn.negprot() cnn.session_setup(creds) cnn.tconx("c$") fnum = cnn.nt_create_andx("boot.ini", FLAGS) # FLAGS = 1 secdesc = cnn.query_secdesc(fnum) Which raises the error: prs_mem_get: reading data of size 2 would overrun buffer. Failed to parse secdesc Traceback (most recent call last): File "<stdin>", line 1, in ? RuntimeError: query_secdesc failed - What are the valid values for FLAGS in the n...

...sass.exe:568 QueryValue HKLM\SECURITY\Cache\NL$3 SUCCESS 0E 00 1E 00 0E 00 00 00 ... lsass.exe:568 QueryValue HKLM\SECURITY\Cache\NL$2 SUCCESS 0E 00 1E 00 0E 00 1A 00 ... lsass.exe:568 QueryValue HKLM\SECURITY\Cache\NL$1 SUCCESS 0C 00 1E 00 0C 00 1A 00 ... lsass.exe:568 OpenKey HKLM\SECURITY\Policy\SecDesc SUCCESS Access: 0x20019 lsass.exe:568 QueryValue HKLM\SECURITY\Policy\SecDesc\(Default) BUFFER OVERFLOW lsass.exe:568 CloseKey HKLM\SECURITY\Policy\SecDesc SUCCESS lsass.exe:568 QueryValue HKLM\SECURITY\Cache\NL$10 SUCCESS 0E 00 1E 00 0E 00 00 00 ... lsass.exe:568 QueryValue HKLM\SECURITY\Cache\...

I had to remove reference to some printer drivers via tdbtool on ntdrivers.tdb. 1. Do I need to restart smbd and nmbd to make these changes take effect? 2. If I restart smbd and nmbd will connected users get disconnected?

...ll spnego negprot Got challenge flags: Got NTLMSSP neg_flags=0x628a0215 NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x60080215 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x60080215 lsa_io_sec_qos: length c does not match size 8 NT_TRANSACT_SET_SECURITY_DESC failed ERROR: secdesc set failed: NT_STATUS_ACCESS_DENIED Any help will be appreciated! PS I can easily retrieve ACLs so it works one way :D //Henrik

...ll spnego negprot Got challenge flags: Got NTLMSSP neg_flags=0x628a0215 NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x60080215 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x60080215 lsa_io_sec_qos: length c does not match size 8 NT_TRANSACT_SET_SECURITY_DESC failed ERROR: secdesc set failed: NT_STATUS_ACCESS_DENIED Any help will be appreciated! PS I can easily retrieve ACLs so it works one way :D //Henrik

...t printing : smbd meets an internal error when a NT box tries to launch a print job. Sample of logfile : [2003/03/19 16:42:56, 10] lib/username.c:user_in_list(456) user_in_list: checking user nobody in list [2003/03/19 16:42:56, 4] printing/nt_printing.c:nt_printing_getsec(3848) using default secdesc for hp5000n [2003/03/19 16:42:56, 10] smbd/uid.c:lookup_name(457) lookup_name: winbind lookup for root failed - trying local [2003/03/19 16:42:56, 10] smbd/uid.c:lookup_name(489) lookup_name: (local) root -> SID S-1-5-21-2110550684-2792681551-4169345231-1000 (type 1) [2003/03/19 16:42:56, 4]...

...user_in_list: checking user |jk| against |root| [2005/06/25 01:32:33, 10] smbd/uid.c:is_share_read_only_for_user(99) is_share_read_only_for_user: share db is read-write for unix user jk [2005/06/25 01:32:33, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for db [2005/06/25 01:32:33, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2005/06/25 01:32:33, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000002, for NT token with 21 entries and first sid S-1-5-21-25...

...Client requested device type [?????] for share [PUBLIC] [2003/10/15 13:32:13, 3] smbd/service.c:make_connection_snum(536) Connect path is '/shares/Public' for service [Public] [2003/10/15 13:32:13, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for Public [2003/10/15 13:32:13, 3] lib/util_seaccess.c:se_access_check(267) [2003/10/15 13:32:13, 3] lib/util_seaccess.c:se_access_check(268) se_access_check: user sid is S-1-5-21-2730512542-3254095339-111969469-501 se_access_check: also S-1-5-21-2730512542-3254095339-111969469-514 se_access...

...60) Client requested device type [?????] for share [DATALIB] [2006/03/25 12:43:34, 3] smbd/service.c:make_connection_snum(488) Connect path is '/datalib' for service [datalib] [2006/03/25 12:43:34, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240) get_share_security: using default secdesc for datalib [2006/03/25 12:43:34, 3] lib/util_seaccess.c:se_access_check(250) [2006/03/25 12:43:34, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-3963901886-956592875-555457773-3124 se_access_check: also S-1-5-21-3963901886-956592875-555457773-513 se_access...

...with prototype: prototype: pointer to int : "include/../tdb/tdb.h", line 137 argument : pointer to volatile int Compiling tdb/tdbback.c with -KPIC Compiling lib/module.c with -KPIC Compiling lib/ldap_escape.c with -KPIC Compiling lib/privileges.c with -KPIC Compiling lib/secdesc.c with -KPIC Compiling lib/secace.c with -KPIC Compiling lib/secacl.c with -KPIC Compiling lib/dummysmbd.c with -KPIC Compiling libads/kerberos.c with -KPIC Compiling libads/ads_status.c with -KPIC Linking nsswitch/libnss_wins.so ld: fatal: file dynconfig.po.o: open failed: No such file or director...

Hello all, Some pc's in the network have big troubles opening files that reside on the server. Opening a word or excel file may take over 30 secs. Copying the file to the desktop takes less than a second. However, searching for this problem on google didn't give me any solutions yet. Any idea's what the problem is? Also, in my logs I see a lot of these 'connection to IPC$ denied

....c:Get_Pwnam_internals(108) Get_Pwnam_internals did find user [johnsmith]! [2007/11/02 12:25:08, 3] smbd/service.c:make_connection_snum(806) Connect path is '/tmp' for service [IPC$] [2007/11/02 12:25:08, 4] lib/sharesec.c:get_share_security(132) get_share_security: using default secdesc for IPC$ Thanks

...con_and_X(407) Client requested device type [IPC] for share [IPC$] [2005/03/19 13:08:22, 3] smbd/service.c:make_connection_snum(469) Connect path is '/tmp' for service [IPC$] [2005/03/19 13:08:22, 4] rpc_server/srv_srvsvc_nt.c:get_share_security (217) get_share_security: using default secdesc for IPC$ [2005/03/19 13:08:22, 3] lib/util_seaccess.c:se_access_check(251) [2005/03/19 13:08:22, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-1790986081-3911417905-1778689532-501 se_access_check: also S-1-5-21-1790986081-3911417905-1778689532-514 se_access...

...onnection from (192.168.2.38) [2004/11/08 11:43:40, 3] smbd/service.c:make_connection_snum(457) Connect path is '/space/home/dos/update/installation' for service [installation] [2004/11/08 11:43:40, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for installation [2004/11/08 11:43:40, 3] lib/util_seaccess.c:se_access_check(251) [2004/11/08 11:43:40, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-.... se_access_check: also S-..... se_access_check: also S-..... se_access_check: also S-..... se_access_chec...

....9. share_info.tdb ------------------- don't ask how this came to my head, maybe this was effect of long samba HowTo readings... aptitude install tdb-tools DST# tdbdump /var/lib/samba/share_info.tdb { key(13) = "INFO/version\00" data(4) = "\02\00\00\00" } { key(18) = "SECDESC/testshare\00" data(XX) = "..... some binary data ......" } DST# tdbtool --help Could not open --help: No such file or directory tdb> ^D DST# man tdbtool No manual entry for tdbtool See 'man 7 undocumented' for help when manual pages are not available. of course who uses...

...tcon_and_X(266) Client requested device type [IPC] for share [IPC$] [2003/11/12 09:20:02, 3] smbd/service.c:make_connection_snum(536) Connect path is '/tmp' for service [IPC$] [2003/11/12 09:20:02, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2003/11/12 09:20:02, 3] lib/util_seaccess.c:se_access_check(267) [2003/11/12 09:20:02, 3] lib/util_seaccess.c:se_access_check(268) se_access_check: user sid is S-1-5-21-2114876815-3017972899-1737424133-501 se_access_check: also S-1-5-21-2114876815-3017972899-1737424133-514 se_access...

...lt;abartlet at samba.org> * BUG 12395: build: Fix build with perl on debian sid. o Ralph Boehme <slow at samba.org> * BUG 12412: Fix typo in vfs_fruit: fruit:ressource -> fruit:resource. o Günther Deschner <gd at samba.org> * BUG 11197: spoolss: Use correct values for secdesc and devmode pointers. o Amitay Isaacs <amitay at gmail.com> * BUG 12366: provision: Add support for BIND 9.11.x. * BUG 12392: ctdb-locking: Reset real-time priority in lock helper. * BUG 12434: ctdb-recovery: Avoid NULL dereference in failure case. o Stefan Metzmacher <metze a...