search for: set_nt_acl

...at the logs I found something which looked out of place. I am currently using (I tried many different variations): WindowsXP SP1; SFU version 3.5 RedHat version 7.2; Samba version 3.0.7 Below is from the client log after turning the debug level to 10: [2004/09/21 15:06:46, 10] smbd/posix_acls.c:set_nt_acl(2990) set_nt_acl: called for file test1.txt [2004/09/21 15:06:46, 5] smbd/posix_acls.c:unpack_nt_owners(909) unpack_nt_owners: validating owner_sids. [2004/09/21 15:06:46, 10] passdb/lookup_sid.c:sid_to_uid(401) sid_to_uid: winbind lookup for non-local sid S-1-5-21-1951701912-1418144344-11478...

...] Initialising custom vfs hooks from [dfs_samba4] connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service sysvol unpack_nt_owners: owner sid mapped to uid 3000030 unpack_nt_owners: group sid mapped to gid 3000000 set_nt_acl: chown /var/lib/samba/sysvol. uid = 3000030, gid = 3000000. Initialising default vfs hooks Initialising custom vfs hooks from [/[Default VFS]/] Initialising custom vfs hooks from [acl_xattr] Initialising custom vfs hooks from [dfs_samba4] connect_acl_xattr: setting 'inherit acls = true' ...

...ning of sysvolreset on my system. I am aware that I have a great deal of files in my 'netlogon' directory which is why the problem is so apparent for me. sysvolreset takes approx 5+ minutes to complete. Tracing out samba-tool shows that the slowdown is caused by the samba function 'set_nt_acl'. This function takes approx 120ms to run, which when multiplied up by a few thousand files (2,000 in my case) you very quickly end up in minutes. running samba-tool using cProfile ('python2.7 -m cProfile /usr/bin/samba-tool ntacl sysvolreset') gives the following results: http://pa...

...option in smb.conf, and that is now working as expected. Problem is, if I have the same scenario for a directory, it doesn't work (also Access denied). I managed to grab some debug=10 logs, and here's the relevant snippet: --- LOG BEGINS --- [2003/01/09 12:24:52, 10] smbd/posix_acls.c:set_nt_acl(2177) set_nt_acl: called for file Corp Services/mytestdir [2003/01/09 12:24:52, 5] smbd/posix_acls.c:unpack_nt_owners(433) unpack_nt_owners: validating owner_sids. [2003/01/09 12:24:52, 10] nsswitch/wb_client.c:winbind_lookup_sid(111) winbind_lookup_sid: SUCCESS: SID S-1-5-21-1881940921-5...

...hares below, I get 'Access Denied' ext3 - share: log file: [2002/07/31 10:37:54, 3] smbd/posix_acls.c:convert_canon_ace_to_posix_perms(1810) convert_canon_ace_to_posix_perms: Too many ACE entries for file Neuer Ordner to convert to posix perms. [2002/07/31 10:37:54, 3] smbd/posix_acls.c:set_nt_acl(2243) set_nt_acl: failed to convert file acl to posix permissions for file Neuer Ordner. [2002/07/31 10:37:54, 3] smbd/error.c:error_packet(91) error string = Function not implemented [2002/07/31 10:37:54, 3] smbd/error.c:error_packet(110) error packet at smbd/nttrans.c(1714) cmd=160 (SMBnttr...

...wners(433) unpack_nt_owners: validating owner_sids. [2002/08/29 10:40:00, 5] smbd/posix_acls.c:unpack_nt_owners(474) unpack_nt_owners: owner_sids validated. [2002/08/29 10:40:00, 3] smbd/dosmode.c:unix_mode(111) unix_mode(test5.txt) returning 0777 [2002/08/29 10:40:00, 3] smbd/posix_acls.c:set_nt_acl(2249) set_nt_acl: chmod test5.txt. perms = 0777. [2002/08/29 10:40:00, 3] smbd/posix_acls.c:set_nt_acl(2253) set_nt_acl: chmod test5.txt, 0777 failed. Error = Operation not permitted. [2002/08/29 10:40:00, 3] smbd/error.c:error_packet(91) error string = Operation not permitted [2002/08/29...

...ite-packages/samba/provision/__init__.py", line 1486, in set_dir_acl setntacl(lp, path, acl, domsid, use_ntvfs=use_ntvfs, skip_invalid_chown=True, passdb=passdb, service=service) File "/opt/samba/lib/python2.7/site-packages/samba/ntacls.py", line 162, in setntacl smbd.set_nt_acl(file, security.SECINFO_OWNER | security.SECINFO_GROUP | security.SECINFO_DACL | security.SECINFO_SACL, sd, service=service) One DC 1, is erro in process ERROR(runtime): uncaught exception - (-1073741823, 'Undetermined error') File "/opt/samba/lib/python2.7/site-packages/samba/n...

....c:unix_mode(111) unix_mode(FC2-i386-disc1.iso) returning 0744 [2004/05/25 09:09:34, 3] smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2500) convert_canon_ace_to_posix_perms: Too many ACE entries for file FC2-i386-disc1.iso to convert to posix perms. [2004/05/25 09:09:34, 3] smbd/posix_acls.c:set_nt_acl(3141) set_nt_acl: failed to convert file acl to posix permissions for file FC2-i386-disc1.iso. [2004/05/25 09:09:34, 3] smbd/error.c:error_packet(94) error string = Function not implemented [2004/05/25 09:09:34, 3] smbd/error.c:error_packet(118) error packet at smbd/nttrans.c(1827) cmd=160 (SMBn...

...g sysvolreset, don't give any issues but doesn't resolve the issue. How do I manually delete a GPO Policy? Or any experience how to resolve this? I will try to upgrade to a current version 4.11.6. Regards, Mario Snippet of samba-tool ntacl sysvolreset -Uadministrator -d4 in last part. set_nt_acl: chown /var/lib/samba/sysvol/ abridor.lumad.sandbox.net/Policies/{6AC1786C-016F-11D2-945F-00C04FB984F9}/MACHINE/Registry.pol. uid = 0, gid = 512. Initialising default vfs hooks Initialising custom vfs hooks from [/[Default VFS]/] Initialising custom vfs hooks from [acl_xattr] Initialising custom vf...

...t;> line 1486, in set_dir_acl >> setntacl(lp, path, acl, domsid, use_ntvfs=use_ntvfs, >> skip_invalid_chown=True, passdb=passdb, service=service) >> File "/opt/samba/lib/python2.7/site-packages/samba/ntacls.py", line >> 162, in setntacl >> smbd.set_nt_acl(file, security.SECINFO_OWNER | >> security.SECINFO_GROUP | security.SECINFO_DACL | >> security.SECINFO_SACL, sd, service=service) >> >> One DC 1, is erro in process >> >> ERROR(runtime): uncaught exception - (-1073741823, 'Undetermined error') >>...

...007/06/18 16:22:33, 3] passdb/lookup_sid.c:fetch_gid_from_cache(253) fetch gid from cache 38916 -> S-1-5-21-273419216-XXXXXXXXX-XXXXXXXXXX-XXXXX [2007/06/18 16:22:33, 5] smbd/posix_acls.c:unpack_nt_owners(962) unpack_nt_owners: owner_sids validated. [2007/06/18 16:22:33, 3] smbd/posix_acls.c:set_nt_acl(3134) set_nt_acl: chown site/home/user1/test2. uid = 24983, gid = 38916. [2007/06/18 16:22:33, 3] smbd/posix_acls.c:set_nt_acl(3138) set_nt_acl: chown site/home/user1/test2, 24983, 38916 failed. Error = Operation not permitted. [2007/06/18 16:22:33, 10] locking/locking.c:del_share_entry(658)...

...:06, 3] smbd/dosmode.c:unix_mode(111) unix_mode(TestACL) returning 0760 [2002/08/20 18:01:06, 3] smbd/posix_acls.c:convert_canon_ace_to_posix_perms(1809) convert_canon_ace_to_posix_perms: Too many ACE entries for file TestACL to convert to posix perms. [2002/08/20 18:01:06, 3] smbd/posix_acls.c:set_nt_acl(2242) set_nt_acl: failed to convert file acl to posix permissions for file TestACL. [2002/08/20 18:01:06, 3] smbd/error.c:error_packet(91) error string = Function not implemented [2002/08/20 18:01:06, 3] smbd/error.c:error_packet(106) error packet at smbd/nttrans.c(1714) cmd=160 (SMBnttrans)...

...test100.txt (Operation not supported). [2012/07/03 17:19:29.725341, 3] smbd/posix_acls.c:2932(convert_canon_ace_to_posix_perms) convert_canon_ace_to_posix_perms: Too many ACE entries for file NeoSphere/test100.txt to convert to posix perms. [2012/07/03 17:19:29.725378, 3] smbd/posix_acls.c:4001(set_nt_acl) set_nt_acl: failed to convert file acl to posix permissions for file NeoSphere/test100.txt. [2012/07/03 17:19:29.725415, 3] smbd/error.c:81(error_packet_set) error packet at smbd/nttrans.c(2106) cmd=160 (SMBnttrans) NT_STATUS_ACCESS_DENIED In posix_acls.c we can see that in such a scenario...

...(121) unix_mode(WINDOWSRegDefrag.dat) returning 0744 [2005/11/17 23:12:22, 3] smbd/ posix_acls.c:convert_canon_ace_to_posix_perms(2585) convert_canon_ace_to_posix_perms: Too many ACE entries for file WINDOWSRegDefrag.dat to convert to posix perms. [2005/11/17 23:12:22, 3] smbd/posix_acls.c:set_nt_acl(3265) set_nt_acl: failed to convert file acl to posix permissions for file WINDOWSRegDefrag.dat. [2005/11/17 23:12:22, 3] smbd/error.c:error_packet(147) error packet at smbd/nttrans.c(2088) cmd=160 (SMBnttrans) NT_STATUS_ACCESS_DENIED [2005/11/17 23:12:22, 3] smbd/process.c:process_smb(11...

...ile "/usr/lib/python2.7/dist-packages/samba/provision/__init__.py", line 1502, in set_gpos_acl     use_ntvfs=use_ntvfs, skip_invalid_chown=True, passdb=passdb, service=SYSVOL_SERVICE)   File "/usr/lib/python2.7/dist-packages/samba/ntacls.py", line 162, in setntacl     smbd.set_nt_acl(file, security.SECINFO_OWNER | security.SECINFO_GROUP | security.SECINFO_DACL | security.SECINFO_SACL, sd, service=service) --- AFAIK this error is thrown when the script tries to set an NT permission on a missing file; it usually happens when a new GPO is created on the primary DC and it's...

...failed for file VFX/greg-test/foo (Operation not supported). [2003/12/31 16:46:07, 3] smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2499) convert_canon_ace_to_posix_perms: Too many ACE entries for file VFX/greg-test/foo to convert to posix perms. [2003/12/31 16:46:07, 3] smbd/posix_acls.c:set_nt_acl(3140) set_nt_acl: failed to convert file acl to posix permissions for file VFX/greg-test/foo. [2003/12/31 16:46:07, 3] smbd/error.c:error_packet(94) error string = Operation not supported As the file appears from UNIX: drwxr-xr-x 2 greg Domain Users 96 Dec 31 16:29 foo The dir t...

...ile "/usr/lib/python2.7/site-packages/samba/provision/__init__.py", line 1579, in set_gpos_acl     use_ntvfs=use_ntvfs, skip_invalid_chown=True, passdb=passdb, service=SYSVOL_SERVICE)   File "/usr/lib/python2.7/site-packages/samba/ntacls.py", line 162, in setntacl     smbd.set_nt_acl(file, security.SECINFO_OWNER | security.SECINFO_GROUP | security.SECINFO_DACL | security.SECINFO_SACL, sd, service=service) ================================================================================================================== open: error=2 (No such file or directory) - what  file o...

...0.15-SerNet-RedHat-7.el6 (AD DC) and zfs-0.6.2-1.el6.x86_64. I cannot change permissions on files from either Windows ('Access Denied') or the samba-tool on shares from local zfs mounts: # samba-tool ntacl set 'O:LAG:S-1-22-2-0D:PAI(A;OICI;0x001301bf;;;WD)' CompanyName/ Company/ fset_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_ACCESS_DENIED. ERROR(runtime): uncaught exception - (-1073741790, 'Access denied') File "/usr/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line 175, in _run return self.run(*args, **kwargs) File "/usr/lib64/python2.6...

...3] smbd/dosmode.c:unix_mode(147) unix_mode(acl2.test) returning 0744 [2007/01/29 12:23:17, 3] smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2579) convert_canon_ace_to_posix_perms: Too many ACE entries for file acl2.test to convert to posix perms. [2007/01/29 12:23:17, 3] smbd/posix_acls.c:set_nt_acl(3269) set_nt_acl: failed to convert file acl to posix permissions for file acl2.test. (D) What am I missing - how can I approach the issue and find out, why ACLs do not work on my system? Kind regards, Jens

.../lib64/python2.7/site-packages/samba/provision/__init__.py" , line 1502, in set_gpos_acl use_ntvfs=use_ntvfs, skip_invalid_chown=True, passdb=passdb, service=SYSVOL_SERVICE) File "/usr/local/samba/lib64/python2.7/site-packages/samba/ntacls.py", line 162, in setntacl smbd.set_nt_acl(file, security.SECINFO_OWNER | security.SECINFO_GROUP | security.SECINFO_DACL | security.SECINFO_SACL, sd, service=service) I have absolutely no idea what to do to resolve this. Any input would be greatly appreciated - thanks in advance!