search for: smbd_check_open_right

...t of supplementary groups. However when checking the open rights for a directory with ACLs that allow only the primary GID read/execute access to a directory for example the result is ACCESS DENIED. For example debug level 10 log line: [2013/08/30 13:38:45.318680, 10, pid=22761] smbd/open.c:139(smbd_check_open_rights) smbd_check_open_rights: file pgidaccessonlydir requesting 0x81 returning 0x1 (NT_STATUS_ACCESS_DENIED) This prevents access from a Windows 7 client. If we add the AD user account as a member of the PGID mapped AD group account as a workaround, then this would consume a supplementary group sl...

...asdf': Permission denied $ It says permission denied, but the `asdf' file is still created. I can't write any data to it, but I can create empty files. This is because in smbd/open.c if the file doesn't exist and O_CREAT flag is set then it lets you open the file without checking smbd_check_open_rights(). Or am I doing something wrong? I'm using Debian testing (wheezy). regards, dan carpenter

...handle = 0x0fffffffffffd160, name = "", security_info = 1, ppdesc = 0x0fffffffffffd378), line 1329 in "vfs_default.c" smb_vfs_call_get_nt_acl(handle = 0x0000000100104eac, name = "", security_info = 268435455, ppdesc = 0x09001000a00800b8), line 1754 in "vfs.c" smbd_check_open_rights(conn = 0x0000000110155aa0, smb_fname = 0x000000011015c290, access_mask = 16777216, access_granted = 0x0010008000100080), line 115 in "open.c" open_directory(conn = 0x0000000110155aa0, req = 0x000000011015c140, smb_dname = 0x000000011015c290, access_mask = 1048704, share_access = 0, creat...

Hello, I have a question because POSIX ACL with SMB2 max protocol does not work properly.Did you test VFS xattr acls with SMB2 max protocol? Is it working corectly? Best regards/Adrian Berlin --