search for: security_descriptor

...t *handle, files_struct *fsp, const struct smb_filename *smb_fname, - DATA_BLOB *blob, + const DATA_BLOB *blob, struct security_descriptor **ppsd, bool *psd_is_from_fs) { Making the blob pointer parameter to validate_nt_acl_blob() const helps be realize it's an 'in' parameter the function should be messing with (and extra const is always good, right ?). Also, as you've re-written...

On Fri, Aug 26, 2016 at 04:03:49PM -0700, Jeremy Allison wrote: > On Fri, Aug 26, 2016 at 02:46:19PM -0700, Jeremy Allison via samba wrote: > > On Fri, Aug 26, 2016 at 06:44:05PM +0200, Ralph Böhme wrote: > > > > > > Cheerio! > > > -slow > > > > Still reviewing this - but a few things that will need changing: > > > > When adding the

...smb_fname->base_name )); 798 799 if (DEBUGLEVEL >= 10) { 800 DEBUG(10,("get_nt_acl_internal: acl for blob hash for %s is:\n", 801 smb_fname->base_name )); 802 NDR_PRINT_DEBUG(security_descriptor, psd_fs); These are gonna need fixing to remove the function names from the debugs (they are automatically added now). Still reviewing... > From dd4665a7930fad64ff649110cb087b69b08464f4 Mon Sep 17 00:00:00 2001 > From: Ralph Boehme <slow at samba.org> > Date: Wed, 24 Aug 2016 10:0...

On Fri, Aug 26, 2016 at 06:33:26PM +0200, Ralph Böhme via samba wrote: > On Thu, Aug 25, 2016 at 12:14:00PM -0700, Jeremy Allison wrote: > > On Wed, Aug 24, 2016 at 04:06:42PM +0200, Ralph Böhme via samba wrote: > > > > > > Yeah, as much as I'd like to avoid adding a new option, I guess we > > > have to do something about it, my latest take on this is >

Hello, I am attempting to install 'PC Verifier' for credit card processing. (I'm tired of having to boot into windows.) I've searched the archives and found mention of this error, but wasn't able to find a fix or solution. What is a 'fake SECURITY_DESCRIPTOR'? Is there a way to correct it? Here is the output from an installation attempt: wine /media/PCv1.75/setup.exe fixme:process:SetProcessWorkingSetSize (0xffffffff,-1,-1): stub - harmless fixme:advapi:GetFileSecurityW (L"C:\\windows\\temp\\GLF64af.tmp") : returns fake SECURITY_DESCRI...

...but it crashes late in the installation with the following error: Runtime error 216 at 004038BA I ran it from the command line to see the error messages: [greg@penguin disk]$ wine 'D:\Install.exe' fixme:advapi:GetFileSecurityW (L"C:\\windows\\temp\\GLF1a0a.tmp") : returns fake SECURITY_DESCRIPTOR fixme:advapi:GetFileSecurityW (L"C:\\PROG~FBU\\EuroTalk\\TALK~JUJ\\UNWISE.EXE") : returns fake SECURITY_DESCRIPTOR fixme:advapi:GetFileSecurityW (L"C:\\PROG~FBU\\EuroTalk\\TALK~JUJ\\TalkNow.exe") : returns fake SECURITY_DESCRIPTOR fixme:advapi:GetFileSecurityW (L"C:\\PROG~F...

Hello, I have successfully installed MDL ISIS Draw 2.5 (a program used in chemistry) under Wine (0.9.12 in Debian). Now, I need to install an addon (AutoNom2000, which is used to give IUPAC names of compounds) for this program. (This addon requires Windows 2000/XP; Wine was configured to "mimic" Windows 98 by default). When I try to run its installer, I get the following:

...91:0 668(get_nt_acl_common): ?? ??? ??? ?get_nt_acl_common: name=. -- trustee?? ??? ??? ??? ??? ??? ??? ??? ?S-1-5-21-2698934694-3277079463-324590320-513 4634(inherit_new_acl): ?? ??? ? ??? ??? ?inherit_new_acl: parent acl for sub_dir is: 022(ndr_print_debug): ?? ??? ? ??? ? ?? ?parent_desc: struct security_descriptor -- se_create_child_secdesc(): ?? ??? ??? ?S-1-5-21-2698934694-3277079463-324590320-513:0/0x07/0x001f01ff ?inherited as S-1-5-21-2698934694-3277079463-324590320-513:0/0x10/0x001f01ff 4762(inherit_new_acl): ?? ??? ??? ? ??? ?inherit_new_acl: child acl for sub_dir is: 422(ndr_print_debug): ?? ??? ? ??...

Is behavior of ACLs under Samba 3.3.0 (Sernet) completely different from that under version 3.2.7? The release notes only talks about some "fixes". I installed version 3.3.0 and got completely different result with the same filesystem and the exact same samba configuration. The ACLs behaved strangely and appeared very different under Windows ACL editor. Users were now unable to

...t; denotes that there are further permissions that you can read with > getfacl, but these are not the ones set from Windows, you need to use > 'samba-tool ntacl' to read those. > > Rowland > What is this telling me? > # samba-tool ntacl get /home/shares/archives > ???security_descriptor: struct security_descriptor > ???????revision ????????????????: SECURITY_DESCRIPTOR_REVISION_1 (1) > ???????type ????????????????????: 0x9004 (36868) > ??????????????0: SEC_DESC_OWNER_DEFAULTED > ??????????????0: SEC_DESC_GROUP_DEFAULTED > ??????????????1: SEC_DESC_DACL_PRESENT >...

On 11/04/2023 13:36, Gary Dale via samba wrote: > On 2023-04-11 04:15, Rowland Penny via samba wrote: >> >> >> What 'Debian distribution-specific' installation did you follow ? > The one linked to in AD DC wiki. Where abouts is this link ? I checked here: https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller But couldn't

...solute_path: Module '/usr/local/samba/lib/vfs/acl_xattr.so' loaded Initialising custom vfs hooks from [dfs_samba4] connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service Unknown Service (snum == -1) security_descriptor: struct security_descriptor revision: SECURITY_DESCRIPTOR_REVISION_1 (1) type: 0x9114 (37140) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 1: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DES...

hi , i have a few problems with usmgr on Version 3.2.4 ( Version 3.2.4-8.1-1931-SUSE-SL11.0 ) samba pdc ldap the download version from ms http://www.microsoft.com/Downloads/details.aspx?FamilyID=c0011ab8-3178-4701-a791-eafba0f42de2&displaylang=en doesnt work giving "device attached to the system is not functioning" whatever i do a old version from usermgr works partially but magic

...papi:SetupDefaultQueueCallbackA notification 16 params 334ad4,0 fixme:setupapi:SetupDefaultQueueCallbackA notification 16 params 334624,0 fixme:advapi:GetFileSecurityW (L"c:\\Program Files\\InstallShield Installation Information\\{DE29025A-091F-4998-AD2D-24C84421190F}\\") : returns fake SECURITY_DESCRIPTOR And when executing the application: err:storage:Storage32Impl_SmallBlocksToBigBlocks conversion failed: resRead = 0x8003001e, resWrite = 0x00000000 err:storage:Storage32Impl_SmallBlocksToBigBlocks conversion failed: resRead = 0x8003001e, resWrite = 0x00000000 err:storage:Storage32Impl_SmallBloc...

...uld get a more user-readable version of the security descriptor: # ldbsearch -H /usr/local/samba/private/sam.ldb -s base -b ou=mysecretou,dc=mydomain,dc=org,dc=uk nTSecurityDescriptor --show-binary # record 1 dn: ou=mysecretou,dc=mydomain,DC=ninja,DC=org,DC=uk nTSecurityDescriptor: NDR: struct security_descriptor revision : SECURITY_DESCRIPTOR_REVISION_1 (1) type : 0x9d17 (40215) 1: SEC_DESC_OWNER_DEFAULTED 1: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED [...]...

...gt; ../source3/modules/vfs_acl_common.c:554(get_nt_acl_internal) > get_nt_acl_internal: acl for blob hash for . is: > [2016/01/04 15:08:21.484352, 1, pid=10718, effective(110007232, > 110000513), real(110007232, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) > pdesc_next: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT >...

Maybe I'm doing somthing really stupid, but while copying some windows share onto a samba server, on some random subdirectory robocopy says ERROR 87 (0x00000057) Copying NTFS Security to Destination Directory... The samba logfile has lots of these lines. modules/vfs_posixacl.c:349(smb_acl_to_posix) smb_acl_to_posix: ACL is invalid for set (Das Argument ist ung?ltig) The strange thing is

...on of the security > descriptor: > > # ldbsearch -H /usr/local/samba/private/sam.ldb -s base -b > ou=mysecretou,dc=mydomain,dc=org,dc=uk nTSecurityDescriptor --show-binary > # record 1 > dn: ou=mysecretou,dc=mydomain,DC=ninja,DC=org,DC=uk > nTSecurityDescriptor: NDR: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9d17 (40215) > 1: SEC_DESC_OWNER_DEFAULTED > 1: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_D...

...mon.c:554(get_nt_acl_internal) >>> get_nt_acl_internal: acl for blob hash for . is: >>> [2016/01/04 15:08:21.484352, 1, pid=10718, effective(110007232, >>> 110000513), real(110007232, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) >>> pdesc_next: struct security_descriptor >>> revision : SECURITY_DESCRIPTOR_REVISION_1 (1) >>> type : 0x9004 (36868) >>> 0: SEC_DESC_OWNER_DEFAULTED >>> 0: SEC_DESC_GROUP_DEFAULTED >>>...

...ules/vfs_acl_common.c:554(get_nt_acl_internal) >> get_nt_acl_internal: acl for blob hash for . is: >> [2016/01/04 15:08:21.484352, 1, pid=10718, effective(110007232, >> 110000513), real(110007232, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) >> pdesc_next: struct security_descriptor >> revision : SECURITY_DESCRIPTOR_REVISION_1 (1) >> type : 0x9004 (36868) >> 0: SEC_DESC_OWNER_DEFAULTED >> 0: SEC_DESC_GROUP_DEFAULTED >> 1: SEC_DESC_DACL_P...