[Samba] Weird ACL/permissions problem

2008-06-18 Thread Karol Makowski

Hi All

I've a weird problem regarding ACLs and samba (on Linux as PDC and 
Windows as clients)


Here are the details:

***
[EMAIL PROTECTED] ~ $ id
uid=2000(spaceman) gid=512(Domain Admins) groups=10(wheel),512(Domain 
Admins),513(Domain Users)


censmb apps # ls -l test.txt
-r--rwxr--+ 1 ujakubia users 0 Jun 18 13:14 test.txt

censmb apps # getfacl test.txt
# file: test.txt
# owner: ujakubia
# group: users
user::r--
group::r-x
group:Domain\040Admins:rwx
mask::rwx
other::r--
***

Now the problem is that I (spaceman) cannot delete this file via samba - 
I'm getting:
smb_set_file_dosmode: file_set_dosmode of test.txt failed (Operation not 
permitted)


But when I do chmod u+w test.txt I can delete this file. Where is the 
problem (as you can see I'm not an owner of this file)? ACLs are working 
correctly because I can

delete this file directly on server.

Regards



KOELNER S.A. z siedzibą we Wrocławiu przy ul. Kwidzyńskiej 6,
51-416 Wrocław, zarejestrowana w rejestrze przedsiębiorców
prowadzonym przez Sąd Rejonowy dla Wrocławia-Fabrycznej
Wydział VI Gospodarczy Krajowego Rejestru Sądowego pod
numerem KRS 033537, NIP 895-16-87-880,
kapitał zakładowy: 32.560.000,00 zł w całości wpłacony
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] connection to IPC$ denied due to security descriptor

2007-11-22 Thread Karol Makowski

richid pisze:

Hey all,

I have a fileserver running Debian Etch and Samba 3.0.24 that I use to serve
media and private home directories.  I have a couple roommates, and
therefore have a couple accounts on the box for those users.  I had
everything working perfectly until last week when my system drive took a
crap.  I've reinstalled everything exactly the same (I think?) but now I am
having problems with some accounts not being able to connect to the shares. 
My username can connect to my home share and the communal media share just

fine.  When I try to connect to another users home share or to the media
share with their username, I keep getting the password dialog box.  I've
ensured that they are in smbpasswd and that their password is correct.  I've
also verified this using smbclient.  


DETAILS:

The log file is reporting this error when I try to connect:
make_connection: connection to IPC$ denied due to security descriptor.
  
I'm having the same problem after upgrading from 3.0.22 to 3.0.24 (or 
higher). I saw that serveral people are
having exact same problem as us, but noone answered yet. I can join to 
domain but cannot login into it.

Shares/printers are visible correctly.

--
Karol Makowski
KOELNER SA IT Department
mailto: [EMAIL PROTECTED]
[mobile: +48 661 94 00 57] [office: +48 71 32 09 287]
jid: [EMAIL PROTECTED]





--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] connection to IPC$ denied due to security descriptor

2007-11-22 Thread Karol Makowski

Marc-Henri PAMISEUX pisze:

I've just find why ;)
It's in my smb.conf, there is a problem with directive:
  valid users = @SmbDomAdmins,@SmbDomUsers,@SmbDomGuests,@SmbUsers
please, comment it !

  

I don't have any valid directives in my global section.

There must not be any valid users directive in the Global section. By
the way, you have to set it in each share definition.

  

There are not

I hope that it will be resolv your error ;)
If my answer did not give you satisfaction, can you post your smb.conf
file ?
  

Ok, http://prozac.bsdzine.org/~spaceman/samba

I hope someone will find any errors. As i wrote before I can access 
shares and I can join domain, but

I can't log into it.

--
Karol Makowski
KOELNER SA IT Department
mailto: [EMAIL PROTECTED]
[mobile: +48 661 94 00 57] [office: +48 71 32 09 287]
jid: [EMAIL PROTECTED]





--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] make_connection: connection to IPC$ denied due to security descriptor after upgrade

2007-11-21 Thread Karol Makowski

Hi All

I've been using samba for some time as a PDC in our company. Everything 
was alright till I upgraded samba
from 3.0.22 to 3.0.24 (and to 3.0.26 later). Now I can't log in to 
domain anymore. In samba logs there's a message:

[2007/11/21 10:17:29, 0] smbd/service.c:make_connection_snum(850)
 make_connection: connection to IPC$ denied due to security descriptor.

I was googling for it and found solution to delete share_info.tdb 
however that didn't helped. Do you have any ideas
what's wrong? After downgrading samba to 3.0.22 everything goes back to 
normal and I can log in into domain again.


I'm using:
k3 samba # uname -a
Linux k3 2.6.20-vs2.2.0-gentoo-ipmi-070618 #3 SMP Mon Jun 18 03:10:49 
CEST 2007 x86_64 Intel(R) Xeon(R) CPU 5160 @ 3.00GHz GenuineIntel GNU/Linux


k3 samba # smbd -V
Version 3.0.26a

Best Regards

--
Karol Makowski
KOELNER SA IT Department
mailto: [EMAIL PROTECTED]
[mobile: +48 661 94 00 57] [office: +48 71 32 09 287]
jid: [EMAIL PROTECTED]





--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba