RES: RES: [Samba] Re: ACLs with Problem

Paul,



>1. Which user is logged on the the windows workstation trying to modify
>a file on the samba share?
Henrique are user, this user is in the list of administrators of the =
samba, but he is not administrator of the PDC (windows 2003).
It looks at the parameters below of smb.conf:
admin users =3D corniani, administrator, henrique

>2. What are the ACLs on that file before you try to change them and =
what
>are they after the operation failed?
Are the ACLs on that file before:
[root@redfree teste]# getfacl teste.txt
# file: teste.txt
# owner: root
# group: Domain Users
user::rwx
user:henrique:rw-
group::r--
mask::rw-
other::r--

After:
[root@redfree teste]# getfacl teste.txt
# file: teste.txt
# owner: root
# group: Domain Users
user::rwx
user:henrique:rw-
group::r--
mask::rw-
other::r--

Nothing one gets excited after the failed.

>3. What is the output of the samba log when you try to change ACLs on
>the file?

Look my big logs:

unix_mode(teste.txt) returning 0744
[2005/09/26 17:11:44, 2] smbd/open.c:open_file(372)
henrique opened file teste.txt read=3DNo write=3DNo (numopen=3D2)
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
Transaction 156 of length 88
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:44, 3] =
smbd/nttrans.c:call_nt_transact_query_security_desc(196 5)
call_nt_transact_query_security_desc: file =3D teste.txt, info_wanted =
=3D 0x4
[2005/09/26 17:11:44, 3] =
smbd/nttrans.c:call_nt_transact_query_security_desc(199 2)
call_nt_transact_query_security_desc: sd_size =3D 120.
[2005/09/26 17:11:44, 3] smbd/error.c:error_packet(147)
error packet at smbd/nttrans.c(95) cmd=3D160 (SMBnttrans) =
NT_STATUS_BUFFER_TOO_SMALL
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
Transaction 157 of length 88
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:44, 3] =
smbd/nttrans.c:call_nt_transact_query_security_desc(196 5)
call_nt_transact_query_security_desc: file =3D teste.txt, info_wanted =
=3D 0x4
[2005/09/26 17:11:44, 3] =
smbd/nttrans.c:call_nt_transact_query_security_desc(199 2)
call_nt_transact_query_security_desc: sd_size =3D 120.
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
Transaction 158 of length 92
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
switch message SMBntcreateX (pid 1361) conn 0x8033e238
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:44, 3] smbd/dosmode.c:unix_mode(121)
unix_mode(.) returning 0744
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
Transaction 159 of length 88
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:44, 3] =
smbd/nttrans.c:call_nt_transact_query_security_desc(196 5)
call_nt_transact_query_security_desc: file =3D ., info_wanted =3D 0x4
[2005/09/26 17:11:44, 3] =
smbd/nttrans.c:call_nt_transact_query_security_desc(199 2)
call_nt_transact_query_security_desc: sd_size =3D 120.
[2005/09/26 17:11:44, 3] smbd/error.c:error_packet(147)
error packet at smbd/nttrans.c(95) cmd=3D160 (SMBnttrans) =
NT_STATUS_BUFFER_TOO_SMALL
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
Transaction 160 of length 88
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:44, 3] =
smbd/nttrans.c:call_nt_transact_query_security_desc(196 5)
call_nt_transact_query_security_desc: file =3D ., info_wanted =3D 0x4
[2005/09/26 17:11:44, 3] =
smbd/nttrans.c:call_nt_transact_query_security_desc(199 2)
call_nt_transact_query_security_desc: sd_size =3D 120.
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
Transaction 161 of length 45
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
switch message SMBclose (pid 1361) conn 0x8033e238
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:44, 3] smbd/reply.c:reply_close(3233)
close directory fnum=3D8243
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
Transaction 162 of length 88
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:44, 3] =
smbd/nttrans.c:call_nt_transact_query_security_desc(196 5)
call_nt_transact_query_security_desc: file =3D teste.txt, info_wanted =
=3D 0x7
[2005/09/26 17:11:44, 3] =
smbd/nttrans.c:call_nt_transact_query_security_desc(199 2)
call_nt_transact_query_security_desc: sd_size =3D 152.
[2005/09/26 17:11:44, 3] smbd/error.c:error_packet(147)
error packet at smbd/nttrans.c(95) cmd=3D160 (SMBnttrans) =
NT_STATUS_BUFFER_TOO_SMALL
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
Transaction 163 of length 88
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:44, 3] =
smbd/nttrans.c:call_nt_transact_query_security_desc(196 5)
call_nt_transact_query_security_desc: file =3D teste.txt, info_wanted =
=3D 0x7
[2005/09/26 17:11:44, 3] =
smbd/nttrans.c:call_nt_transact_query_security_desc(199 2)
call_nt_transact_query_security_desc: sd_size =3D 152.
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
Transaction 164 of length 45
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
switch message SMBclose (pid 1361) conn 0x8033e238
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:44, 3] smbd/reply.c:reply_close(3247)
close fd=3D-1 fnum=3D8241 (numopen=3D2)
[2005/09/26 17:11:44, 2] smbd/close.c:close_normal_file(270)
ECPNET\henrique closed file teste.txt (numopen=3D1)
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
Transaction 165 of length 104
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
switch message SMBntcreateX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:44, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (10918, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:44, 3] smbd/nttrans.c:nt_open_pipe(351)
nt_open_pipe: Known pipe lsarpc opening.
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
Transaction 166 of length 140
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
switch message SMBwriteX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:44, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(891)
api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsass
[2005/09/26 17:11:44, 3] rpc_server/srv_pipe.c:check_bind_req(765)
check_bind_req for \PIPE\lsarpc
[2005/09/26 17:11:44, 3] smbd/pipes.c:reply_pipe_write_and_X(207)
writeX-IPC pnum=3D70b3 nwritten=3D72
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
Transaction 167 of length 63
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
switch message SMBreadX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:44, 3] smbd/pipes.c:reply_pipe_read_and_X(252)
readX-IPC pnum=3D70b3 min=3D1024 max=3D1024 nread=3D68
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
Transaction 168 of length 200
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
Transaction 168 of length 200
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:44, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=3D112 params=3D0 setup=3D2
[2005/09/26 17:11:44, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/09/26 17:11:44, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "lsarpc" (pnum 70b3)
[2005/09/26 17:11:44, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 71
[2005/09/26 17:11:44, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
api_rpcTNP: rpc command: LSA_OPENPOLICY2
[2005/09/26 17:11:44, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181)
lsa_io_sec_qos: length c does not match size 8
[2005/09/26 17:11:44, 3] lib/util_seaccess.c:se_access_check(250)
[2005/09/26 17:11:44, 3] lib/util_seaccess.c:se_access_check(251)
se_access_check: user sid is =
S-1-5-21-292644099-1531732898-830254507-22836
se_access_check: also S-1-5-21-292644099-1531732898-830254507-21003
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-5-21-641689743-798303756-4037891328-513
se_access_check: also S-1-5-21-39586307-262093593-238184688-1270
se_access_check: also S-1-5-21-39586307-262093593-238184688-1425
se_access_check: also S-1-5-21-39586307-262093593-238184688-5217
se_access_check: also S-1-5-21-39586307-262093593-238184688-1880
se_access_check: also S-1-5-21-39586307-262093593-238184688-1841
se_access_check: also S-1-5-21-39586307-262093593-238184688-2856
se_access_check: also S-1-5-21-39586307-262093593-238184688-2855
se_access_check: also S-1-5-32-545
se_access_check: also S-1-5-21-641689743-798303756-4037891328-3668
se_access_check: also S-1-5-21-641689743-798303756-4037891328-3669
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2471
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2521
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2459
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2500
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2520
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2460
se_access_check: also S-1-5-21-641689743-798303756-4037891328-4125
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2515
[2005/09/26 17:11:44, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 842
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
Transaction 169 of length 134
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:44, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=3D46 params=3D0 setup=3D2
[2005/09/26 17:11:44, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/09/26 17:11:44, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "lsarpc" (pnum 70b3)
[2005/09/26 17:11:44, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:44, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY
[2005/09/26 17:11:44, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 30
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
Transaction 170 of length 132
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:44, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=3D44 params=3D0 setup=3D2
[2005/09/26 17:11:44, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/09/26 17:11:44, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "lsarpc" (pnum 70b3)
[2005/09/26 17:11:44, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:44, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
api_rpcTNP: rpc command: LSA_CLOSE
[2005/09/26 17:11:44, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2005/09/26 17:11:44, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:44, 3] smbd/process.c:process_smb(1114)
Transaction 171 of length 45
[2005/09/26 17:11:44, 3] smbd/process.c:switch_message(900)
switch message SMBclose (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 172 of length 104
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBntcreateX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/nttrans.c:nt_open_pipe(351)
nt_open_pipe: Known pipe lsarpc opening.
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 173 of length 140
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBwriteX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(891)
api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsass
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:check_bind_req(765)
check_bind_req for \PIPE\lsarpc
[2005/09/26 17:11:46, 3] smbd/pipes.c:reply_pipe_write_and_X(207)
writeX-IPC pnum=3D70b4 nwritten=3D72
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 174 of length 63
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBreadX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/pipes.c:reply_pipe_read_and_X(252)
readX-IPC pnum=3D70b4 min=3D1024 max=3D1024 nread=3D68
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 175 of length 114
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=3D26 params=3D0 setup=3D2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "lsarpc" (pnum 70b4)
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 71
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 176 of length 45
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBclose (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 177 of length 104
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBntcreateX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/nttrans.c:nt_open_pipe(351)
nt_open_pipe: Known pipe winreg opening.
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 178 of length 140
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBwriteX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(891)
api_pipe_bind_req: \PIPE\winreg -> \PIPE\winreg
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:check_bind_req(765)
check_bind_req for \PIPE\winreg
[2005/09/26 17:11:46, 3] smbd/pipes.c:reply_pipe_write_and_X(207)
writeX-IPC pnum=3D70b5 nwritten=3D72
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 179 of length 63
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBreadX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/pipes.c:reply_pipe_read_and_X(252)
readX-IPC pnum=3D70b5 min=3D1024 max=3D1024 nread=3D68
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 180 of length 124
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=3D36 params=3D0 setup=3D2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "winreg" (pnum 70b5)
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 71
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
api_rpcTNP: rpc command: REG_OPEN_HKLM
[2005/09/26 17:11:46, 3] lib/util_seaccess.c:se_access_check(250)
[2005/09/26 17:11:46, 3] lib/util_seaccess.c:se_access_check(251)
se_access_check: user sid is =
S-1-5-21-292644099-1531732898-830254507-22836
se_access_check: also S-1-5-21-292644099-1531732898-830254507-21003
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-5-21-641689743-798303756-4037891328-513
se_access_check: also S-1-5-21-39586307-262093593-238184688-1270
se_access_check: also S-1-5-21-39586307-262093593-238184688-1425
se_access_check: also S-1-5-21-39586307-262093593-238184688-5217
se_access_check: also S-1-5-21-39586307-262093593-238184688-1880
se_access_check: also S-1-5-21-39586307-262093593-238184688-1841
se_access_check: also S-1-5-21-39586307-262093593-238184688-2856
se_access_check: also S-1-5-21-39586307-262093593-238184688-2855
se_access_check: also S-1-5-32-545
se_access_check: also S-1-5-21-641689743-798303756-4037891328-3668
se_access_check: also S-1-5-21-641689743-798303756-4037891328-3669
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2471
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2521
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2459
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2500
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2520
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2460
se_access_check: also S-1-5-21-641689743-798303756-4037891328-4125
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2515
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 510
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 181 of length 256
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=3D168 params=3D0 setup=3D2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "winreg" (pnum 70b5)
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
api_rpcTNP: rpc command: REG_OPEN_ENTRY
[2005/09/26 17:11:46, 3] lib/util_seaccess.c:se_access_check(250)
[2005/09/26 17:11:46, 3] lib/util_seaccess.c:se_access_check(251)
se_access_check: user sid is =
S-1-5-21-292644099-1531732898-830254507-22836
se_access_check: also S-1-5-21-292644099-1531732898-830254507-21003
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-5-21-641689743-798303756-4037891328-513
se_access_check: also S-1-5-21-39586307-262093593-238184688-1270
se_access_check: also S-1-5-21-39586307-262093593-238184688-1425
se_access_check: also S-1-5-21-39586307-262093593-238184688-5217
se_access_check: also S-1-5-21-39586307-262093593-238184688-1880
se_access_check: also S-1-5-21-39586307-262093593-238184688-1841
se_access_check: also S-1-5-21-39586307-262093593-238184688-2856
se_access_check: also S-1-5-21-39586307-262093593-238184688-2855
se_access_check: also S-1-5-32-545
se_access_check: also S-1-5-21-641689743-798303756-4037891328-3668
se_access_check: also S-1-5-21-641689743-798303756-4037891328-3669
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2471
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2521
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2459
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2500
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2520
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2460
se_access_check: also S-1-5-21-641689743-798303756-4037891328-4125
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2515
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 620
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 182 of length 204
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=3D116 params=3D0 setup=3D2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "winreg" (pnum 70b5)
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
api_rpcTNP: rpc command: REG_QUERY_VALUE
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 64
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 183 of length 216
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=3D128 params=3D0 setup=3D2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "winreg" (pnum 70b5)
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
api_rpcTNP: rpc command: REG_QUERY_VALUE
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 80
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 184 of length 132
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=3D44 params=3D0 setup=3D2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "winreg" (pnum 70b5)
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
api_rpcTNP: rpc command: REG_CLOSE
[2005/09/26 17:11:46, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 185 of length 132
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=3D44 params=3D0 setup=3D2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "winreg" (pnum 70b5)
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
api_rpcTNP: rpc command: REG_CLOSE
[2005/09/26 17:11:46, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 186 of length 45
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBclose (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 187 of length 104
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBntcreateX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/nttrans.c:nt_open_pipe(351)
nt_open_pipe: Known pipe lsarpc opening.
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 188 of length 140
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBwriteX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(891)
api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsass
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:check_bind_req(765)
check_bind_req for \PIPE\lsarpc
[2005/09/26 17:11:46, 3] smbd/pipes.c:reply_pipe_write_and_X(207)
writeX-IPC pnum=3D70b6 nwritten=3D72
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 189 of length 63
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBreadX (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/pipes.c:reply_pipe_read_and_X(252)
readX-IPC pnum=3D70b6 min=3D1024 max=3D1024 nread=3D68
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 190 of length 188
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=3D100 params=3D0 setup=3D2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "lsarpc" (pnum 70b6)
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 71
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
api_rpcTNP: rpc command: LSA_OPENPOLICY2
[2005/09/26 17:11:46, 3] lib/util_seaccess.c:se_access_check(250)
[2005/09/26 17:11:46, 3] lib/util_seaccess.c:se_access_check(251)
se_access_check: user sid is =
S-1-5-21-292644099-1531732898-830254507-22836
se_access_check: also S-1-5-21-292644099-1531732898-830254507-21003
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-5-21-641689743-798303756-4037891328-513
se_access_check: also S-1-5-21-39586307-262093593-238184688-1270
se_access_check: also S-1-5-21-39586307-262093593-238184688-1425
se_access_check: also S-1-5-21-39586307-262093593-238184688-5217
se_access_check: also S-1-5-21-39586307-262093593-238184688-1880
se_access_check: also S-1-5-21-39586307-262093593-238184688-1841
se_access_check: also S-1-5-21-39586307-262093593-238184688-2856
se_access_check: also S-1-5-21-39586307-262093593-238184688-2855
se_access_check: also S-1-5-32-545
se_access_check: also S-1-5-21-641689743-798303756-4037891328-3668
se_access_check: also S-1-5-21-641689743-798303756-4037891328-3669
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2471
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2521
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2459
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2500
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2520
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2460
se_access_check: also S-1-5-21-641689743-798303756-4037891328-4125
se_access_check: also S-1-5-21-641689743-798303756-4037891328-2515
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 830
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 191 of length 134
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=3D46 params=3D0 setup=3D2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "lsarpc" (pnum 70b6)
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 14
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 192 of length 132
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBtrans (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:46, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=3D44 params=3D0 setup=3D2
[2005/09/26 17:11:46, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/09/26 17:11:46, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "lsarpc" (pnum 70b6)
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] rpc_server/srv_pipe.c:api_rpcTNP(1550)
api_rpcTNP: rpc command: LSA_CLOSE
[2005/09/26 17:11:46, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2005/09/26 17:11:46, 3] =
rpc_server/srv_pipe_hnd.c:free_pipe_context(543)
free_pipe_context: destroying talloc pool of size 0
[2005/09/26 17:11:46, 3] smbd/process.c:process_smb(1114)
Transaction 193 of length 45
[2005/09/26 17:11:46, 3] smbd/process.c:switch_message(900)
switch message SMBclose (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:51, 3] smbd/process.c:process_smb(1114)
Transaction 194 of length 110
[2005/09/26 17:11:51, 3] smbd/process.c:switch_message(900)
switch message SMBntcreateX (pid 1361) conn 0x8033e238
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:51, 3] smbd/dosmode.c:unix_mode(121)
unix_mode(teste.txt) returning 0744
[2005/09/26 17:11:51, 2] smbd/open.c:open_file(372)
henrique opened file teste.txt read=3DNo write=3DNo (numopen=3D2)
[2005/09/26 17:11:51, 3] smbd/process.c:process_smb(1114)
Transaction 195 of length 76
[2005/09/26 17:11:51, 3] smbd/process.c:switch_message(900)
switch message SMBtrans2 (pid 1361) conn 0x8033e238
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:51, 3] smbd/trans2.c:call_trans2qfilepathinfo(2760)
call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level =3D 1006
[2005/09/26 17:11:51, 3] smbd/trans2.c:call_trans2qfilepathinfo(2871)
call_trans2qfilepathinfo teste.txt (fnum =3D 8244) level=3D1006 =
call=3D7 total_data=3D0
[2005/09/26 17:11:51, 3] smbd/process.c:process_smb(1114)
Transaction 196 of length 276
[2005/09/26 17:11:51, 3] smbd/process.c:switch_message(900)
switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:51, 3] =
smbd/nttrans.c:call_nt_transact_set_security_desc(2081)
call_nt_transact_set_security_desc: file =3D teste.txt, sent =
0x80000004
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 10001) : sec_ctx_stack_ndx =3D 1
[2005/09/26 17:11:51, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx =3D 0
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx =3D 1
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:51, 3] =
passdb/lookup_sid.c:fetch_sid_from_gid_cache(232)
fetch sid from gid cache 10001 -> =
S-1-5-21-641689743-798303756-4037891328-513
[2005/09/26 17:11:51, 3] smbd/dosmode.c:unix_mode(121)
unix_mode(teste.txt) returning 0744
[2005/09/26 17:11:51, 3] =
smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2581 )
convert_canon_ace_to_posix_perms: Too many ACE entries for file =
teste.txt to convert to posix perms.
[2005/09/26 17:11:51, 3] smbd/posix_acls.c:set_nt_acl(3257)
set_nt_acl: failed to convert file acl to posix permissions for file =
teste.txt.
[2005/09/26 17:11:51, 3] smbd/error.c:error_packet(147)
error packet at smbd/nttrans.c(2088) cmd=3D160 (SMBnttrans) =
NT_STATUS_ACCESS_DENIED
[2005/09/26 17:11:51, 3] smbd/process.c:process_smb(1114)
Transaction 197 of length 45
[2005/09/26 17:11:51, 3] smbd/process.c:switch_message(900)
switch message SMBclose (pid 1361) conn 0x8033e238
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:51, 3] smbd/reply.c:reply_close(3247)
close fd=3D-1 fnum=3D8244 (numopen=3D2)
[2005/09/26 17:11:51, 2] smbd/close.c:close_normal_file(270)
ECPNET\henrique closed file teste.txt (numopen=3D1)
[2005/09/26 17:11:51, 3] smbd/process.c:process_smb(1114)
Transaction 198 of length 110
[2005/09/26 17:11:51, 3] smbd/process.c:switch_message(900)
switch message SMBntcreateX (pid 1361) conn 0x8033e238
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:51, 3] smbd/dosmode.c:unix_mode(121)
unix_mode(teste.txt) returning 0744
[2005/09/26 17:11:51, 2] smbd/open.c:open_file(372)
henrique opened file teste.txt read=3DNo write=3DNo (numopen=3D2)
[2005/09/26 17:11:51, 3] smbd/process.c:process_smb(1114)
Transaction 199 of length 220
[2005/09/26 17:11:51, 3] smbd/process.c:switch_message(900)
switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:51, 3] =
smbd/nttrans.c:call_nt_transact_set_security_desc(2081)
call_nt_transact_set_security_desc: file =3D teste.txt, sent 0x4
[2005/09/26 17:11:51, 3] =
passdb/lookup_sid.c:fetch_sid_from_uid_cache(158)
fetch sid from uid cache 0 -> =
S-1-5-21-292644099-1531732898-830254507-1000
[2005/09/26 17:11:51, 3] =
passdb/lookup_sid.c:fetch_sid_from_gid_cache(232)
fetch sid from gid cache 10001 -> =
S-1-5-21-641689743-798303756-4037891328-513
[2005/09/26 17:11:51, 3] passdb/lookup_sid.c:fetch_uid_from_cache(179)
fetch uid from cache 10004 -> =
S-1-5-21-641689743-798303756-4037891328-2009
[2005/09/26 17:11:51, 3] smbd/dosmode.c:unix_mode(121)
unix_mode(teste.txt) returning 0744
[2005/09/26 17:11:51, 3] =
smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2581 )
convert_canon_ace_to_posix_perms: Too many ACE entries for file =
teste.txt to convert to posix perms.
[2005/09/26 17:11:51, 3] smbd/posix_acls.c:set_nt_acl(3257)
set_nt_acl: failed to convert file acl to posix permissions for file =
teste.txt.
[2005/09/26 17:11:51, 3] smbd/error.c:error_packet(147)
error packet at smbd/nttrans.c(2088) cmd=3D160 (SMBnttrans) =
NT_STATUS_ACCESS_DENIED
[2005/09/26 17:11:51, 3] smbd/process.c:process_smb(1114)
Transaction 200 of length 45
[2005/09/26 17:11:51, 3] smbd/process.c:switch_message(900)
switch message SMBclose (pid 1361) conn 0x8033e238
[2005/09/26 17:11:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:51, 3] smbd/reply.c:reply_close(3247)
close fd=3D-1 fnum=3D8245 (numopen=3D2)
[2005/09/26 17:11:51, 2] smbd/close.c:close_normal_file(270)
ECPNET\henrique closed file teste.txt (numopen=3D1)
[2005/09/26 17:11:53, 3] smbd/process.c:process_smb(1114)
Transaction 201 of length 110
[2005/09/26 17:11:53, 3] smbd/process.c:switch_message(900)
switch message SMBntcreateX (pid 1361) conn 0x8033e238
[2005/09/26 17:11:53, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:53, 3] smbd/dosmode.c:unix_mode(121)
unix_mode(teste.txt) returning 0744
[2005/09/26 17:11:53, 2] smbd/open.c:open_file(372)
henrique opened file teste.txt read=3DNo write=3DNo (numopen=3D2)
[2005/09/26 17:11:53, 3] smbd/process.c:process_smb(1114)
Transaction 202 of length 276
[2005/09/26 17:11:53, 3] smbd/process.c:switch_message(900)
switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:53, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:53, 3] =
smbd/nttrans.c:call_nt_transact_set_security_desc(2081)
call_nt_transact_set_security_desc: file =3D teste.txt, sent =
0x80000004
[2005/09/26 17:11:53, 3] =
passdb/lookup_sid.c:fetch_sid_from_uid_cache(158)
fetch sid from uid cache 0 -> =
S-1-5-21-292644099-1531732898-830254507-1000
[2005/09/26 17:11:53, 3] =
passdb/lookup_sid.c:fetch_sid_from_gid_cache(232)
fetch sid from gid cache 10001 -> =
S-1-5-21-641689743-798303756-4037891328-513
[2005/09/26 17:11:53, 3] passdb/lookup_sid.c:fetch_uid_from_cache(179)
fetch uid from cache 10004 -> =
S-1-5-21-641689743-798303756-4037891328-2009
[2005/09/26 17:11:53, 3] smbd/dosmode.c:unix_mode(121)
unix_mode(teste.txt) returning 0744
[2005/09/26 17:11:53, 3] =
smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2581 )
convert_canon_ace_to_posix_perms: Too many ACE entries for file =
teste.txt to convert to posix perms.
[2005/09/26 17:11:53, 3] smbd/posix_acls.c:set_nt_acl(3257)
set_nt_acl: failed to convert file acl to posix permissions for file =
teste.txt.
[2005/09/26 17:11:53, 3] smbd/error.c:error_packet(147)
error packet at smbd/nttrans.c(2088) cmd=3D160 (SMBnttrans) =
NT_STATUS_ACCESS_DENIED
[2005/09/26 17:11:53, 3] smbd/process.c:process_smb(1114)
Transaction 203 of length 45
[2005/09/26 17:11:53, 3] smbd/process.c:switch_message(900)
switch message SMBclose (pid 1361) conn 0x8033e238
[2005/09/26 17:11:53, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:53, 3] smbd/reply.c:reply_close(3247)
close fd=3D-1 fnum=3D8246 (numopen=3D2)
[2005/09/26 17:11:53, 2] smbd/close.c:close_normal_file(270)
ECPNET\henrique closed file teste.txt (numopen=3D1)
[2005/09/26 17:11:53, 3] smbd/process.c:process_smb(1114)
Transaction 204 of length 110
[2005/09/26 17:11:53, 3] smbd/process.c:switch_message(900)
switch message SMBntcreateX (pid 1361) conn 0x8033e238
[2005/09/26 17:11:53, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:53, 3] smbd/dosmode.c:unix_mode(121)
unix_mode(teste.txt) returning 0744
[2005/09/26 17:11:53, 2] smbd/open.c:open_file(372)
henrique opened file teste.txt read=3DNo write=3DNo (numopen=3D2)
[2005/09/26 17:11:53, 3] smbd/process.c:process_smb(1114)
Transaction 205 of length 220
[2005/09/26 17:11:53, 3] smbd/process.c:switch_message(900)
switch message SMBnttrans (pid 1361) conn 0x8033e238
[2005/09/26 17:11:53, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:53, 3] =
smbd/nttrans.c:call_nt_transact_set_security_desc(2081)
call_nt_transact_set_security_desc: file =3D teste.txt, sent 0x4
[2005/09/26 17:11:53, 3] =
passdb/lookup_sid.c:fetch_sid_from_uid_cache(158)
fetch sid from uid cache 0 -> =
S-1-5-21-292644099-1531732898-830254507-1000
[2005/09/26 17:11:53, 3] =
passdb/lookup_sid.c:fetch_sid_from_gid_cache(232)
fetch sid from gid cache 10001 -> =
S-1-5-21-641689743-798303756-4037891328-513
[2005/09/26 17:11:53, 3] passdb/lookup_sid.c:fetch_uid_from_cache(179)
fetch uid from cache 10004 -> =
S-1-5-21-641689743-798303756-4037891328-2009
[2005/09/26 17:11:53, 3] smbd/dosmode.c:unix_mode(121)
unix_mode(teste.txt) returning 0744
[2005/09/26 17:11:53, 3] =
smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2581 )
convert_canon_ace_to_posix_perms: Too many ACE entries for file =
teste.txt to convert to posix perms.
[2005/09/26 17:11:53, 3] smbd/posix_acls.c:set_nt_acl(3257)
set_nt_acl: failed to convert file acl to posix permissions for file =
teste.txt.
[2005/09/26 17:11:53, 3] smbd/error.c:error_packet(147)
error packet at smbd/nttrans.c(2088) cmd=3D160 (SMBnttrans) =
NT_STATUS_ACCESS_DENIED
[2005/09/26 17:11:53, 3] smbd/process.c:process_smb(1114)
Transaction 206 of length 45
[2005/09/26 17:11:53, 3] smbd/process.c:switch_message(900)
switch message SMBclose (pid 1361) conn 0x8033e238
[2005/09/26 17:11:53, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:53, 3] smbd/reply.c:reply_close(3247)
close fd=3D-1 fnum=3D8247 (numopen=3D2)
[2005/09/26 17:11:53, 2] smbd/close.c:close_normal_file(270)
ECPNET\henrique closed file teste.txt (numopen=3D1)
[2005/09/26 17:11:56, 3] smbd/process.c:process_smb(1114)
Transaction 207 of length 40
[2005/09/26 17:11:56, 3] smbd/process.c:switch_message(900)
switch message SMBntcancel (pid 1361) conn 0x8033e238
[2005/09/26 17:11:56, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:56, 3] smbd/error.c:error_packet(147)
error packet at smbd/notify.c(55) cmd=3D160 (SMBnttrans) =
NT_STATUS_CANCELLED
[2005/09/26 17:11:56, 3] smbd/notify_kernel.c:kernel_remove_notify(144)
kernel_remove_notify: fd=3D28
[2005/09/26 17:11:56, 3] smbd/nttrans.c:reply_ntcancel(1565)
reply_ntcancel: cancel called on mid =3D 4352.
[2005/09/26 17:11:56, 3] smbd/process.c:process_smb(1114)
Transaction 208 of length 45
[2005/09/26 17:11:56, 3] smbd/process.c:switch_message(900)
switch message SMBclose (pid 1361) conn 0x8033e238
[2005/09/26 17:11:56, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10001) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:56, 3] smbd/reply.c:reply_close(3233)
close directory fnum=3D8226
[2005/09/26 17:11:58, 3] smbd/process.c:process_smb(1114)
Transaction 209 of length 39
[2005/09/26 17:11:58, 3] smbd/process.c:switch_message(900)
switch message SMBtdis (pid 1361) conn 0x8033bdc8
[2005/09/26 17:11:58, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:58, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:58, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:58, 3] smbd/service.c:close_cnum(835)
10.0.1.37 (10.0.1.37) closed connection to service IPC$
[2005/09/26 17:11:58, 3] smbd/connection.c:yield_connection(69)
Yielding connection to IPC$
[2005/09/26 17:11:58, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:58, 3] smbd/process.c:process_smb(1114)
Transaction 210 of length 43
[2005/09/26 17:11:58, 3] smbd/process.c:switch_message(900)
switch message SMBulogoffX (pid 1361) conn 0x0
[2005/09/26 17:11:58, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:58, 3] smbd/reply.c:reply_ulogoffX(1560)
ulogoffX vuid=3D101
[2005/09/26 17:11:58, 3] smbd/process.c:process_smb(1114)
Transaction 211 of length 39
[2005/09/26 17:11:58, 3] smbd/process.c:switch_message(900)
switch message SMBtdis (pid 1361) conn 0x8033e238
[2005/09/26 17:11:58, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:58, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:58, 1] smbd/service.c:close_cnum(835)
10.0.1.37 (10.0.1.37) closed connection to service Teste1
[2005/09/26 17:11:58, 3] smbd/connection.c:yield_connection(69)
Yielding connection to Teste1
[2005/09/26 17:11:58, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:58, 3] smbd/process.c:timeout_processing(1366)
timeout_processing: End of file from client (client has disconnected).
[2005/09/26 17:11:58, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx =3D 0
[2005/09/26 17:11:58, 2] smbd/server.c:exit_server(608)
Closing connections
[2005/09/26 17:11:58, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2005/09/26 17:11:58, 3] smbd/server.c:exit_server(652)
Server exit (normal exit)
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba