[Samba] Weird ACL/permissions problem
Hi All I've a weird problem regarding ACLs and samba (on Linux as PDC and Windows as clients) Here are the details: *** [EMAIL PROTECTED] ~ $ id uid=2000(spaceman) gid=512(Domain Admins) groups=10(wheel),512(Domain Admins),513(Domain Users) censmb apps # ls -l test.txt -r--rwxr--+ 1 ujakubia users 0 Jun 18 13:14 test.txt censmb apps # getfacl test.txt # file: test.txt # owner: ujakubia # group: users user::r-- group::r-x group:Domain\040Admins:rwx mask::rwx other::r-- *** Now the problem is that I (spaceman) cannot delete this file via samba - I'm getting: smb_set_file_dosmode: file_set_dosmode of test.txt failed (Operation not permitted) But when I do "chmod u+w test.txt" I can delete this file. Where is the problem (as you can see I'm not an owner of this file)? ACLs are working correctly because I can delete this file directly on server. Regards KOELNER S.A. z siedzibą we Wrocławiu przy ul. Kwidzyńskiej 6, 51-416 Wrocław, zarejestrowana w rejestrze przedsiębiorców prowadzonym przez Sąd Rejonowy dla Wrocławia-Fabrycznej Wydział VI Gospodarczy Krajowego Rejestru Sądowego pod numerem KRS 033537, NIP 895-16-87-880, kapitał zakładowy: 32.560.000,00 zł w całości wpłacony -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] connection to IPC$ denied due to security descriptor
Marc-Henri PAMISEUX pisze: I've just find why ;) It's in my smb.conf, there is a problem with directive: valid users = @SmbDomAdmins,@SmbDomUsers,@SmbDomGuests,@SmbUsers please, comment it ! I don't have any "valid" directives in my global section. There must not be any "valid users" directive in the Global section. By the way, you have to set it in each share definition. There are not I hope that it will be resolv your error ;) If my answer did not give you satisfaction, can you post your smb.conf file ? Ok, http://prozac.bsdzine.org/~spaceman/samba I hope someone will find any errors. As i wrote before I can access shares and I can join domain, but I can't log into it. -- Karol Makowski KOELNER SA IT Department mailto: [EMAIL PROTECTED] [mobile: +48 661 94 00 57] [office: +48 71 32 09 287] jid: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] connection to IPC$ denied due to security descriptor
richid pisze: Hey all, I have a fileserver running Debian Etch and Samba 3.0.24 that I use to serve media and private home directories. I have a couple roommates, and therefore have a couple accounts on the box for those users. I had everything working perfectly until last week when my system drive took a crap. I've reinstalled everything exactly the same (I think?) but now I am having problems with some accounts not being able to connect to the shares. My username can connect to my home share and the communal media share just fine. When I try to connect to another users home share or to the media share with their username, I keep getting the password dialog box. I've ensured that they are in smbpasswd and that their password is correct. I've also verified this using smbclient. DETAILS: The log file is reporting this error when I try to connect: make_connection: connection to IPC$ denied due to security descriptor. I'm having the same problem after upgrading from 3.0.22 to 3.0.24 (or higher). I saw that serveral people are having exact same problem as us, but noone answered yet. I can join to domain but cannot login into it. Shares/printers are visible correctly. -- Karol Makowski KOELNER SA IT Department mailto: [EMAIL PROTECTED] [mobile: +48 661 94 00 57] [office: +48 71 32 09 287] jid: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] make_connection: connection to IPC$ denied due to security descriptor after upgrade
Hi All I've been using samba for some time as a PDC in our company. Everything was alright till I upgraded samba from 3.0.22 to 3.0.24 (and to 3.0.26 later). Now I can't log in to domain anymore. In samba logs there's a message: [2007/11/21 10:17:29, 0] smbd/service.c:make_connection_snum(850) make_connection: connection to IPC$ denied due to security descriptor. I was googling for it and found solution to delete share_info.tdb however that didn't helped. Do you have any ideas what's wrong? After downgrading samba to 3.0.22 everything goes back to normal and I can log in into domain again. I'm using: k3 samba # uname -a Linux k3 2.6.20-vs2.2.0-gentoo-ipmi-070618 #3 SMP Mon Jun 18 03:10:49 CEST 2007 x86_64 Intel(R) Xeon(R) CPU 5160 @ 3.00GHz GenuineIntel GNU/Linux k3 samba # smbd -V Version 3.0.26a Best Regards -- Karol Makowski KOELNER SA IT Department mailto: [EMAIL PROTECTED] [mobile: +48 661 94 00 57] [office: +48 71 32 09 287] jid: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba