[prev in list] [next in list] [prev in thread] [next in thread] 

List:       samba
Subject:    [Samba] Troubles deploying software via GPO on a simple share in DC
From:       Lorenzo Milesi via samba <samba () lists ! samba ! org>
Date:       2022-06-17 13:58:02
Message-ID: 1985701340.326613.1655474282169.JavaMail.zimbra () yetopen ! com
[Download RAW message or body]

Hi. 
I have a DC with a simple public share, with no ACL or such which could cause the \
weird behaviors of a "fileserver on a DC" (or at least this is what I learnt from \
past experiences - a simple share shouldn't trigger issues. But I must be mistaken, \
because...).

I use it to share files that should be available for GPO, like desktop background and \
MSI files. It used to work (TM) when it was first deployed, but for some time now, \
the share doesn't seem to work for the COMPUTER$ account.

I did test connection as a computer account user using
psexec.exe -i -s -d cmd.exe
then issue 
net use \\dc1\pub /user:%COMPUTERNAME%$
and I got "The command completed successfully."

But if I check the logs when trying to deploy software via GPO, I get error 1612 \
which means "resource unavailable" or something like that. Accessing the share from a \
logged in user works flawlessly.

I'm pasting below the configuration and some debug logs. i.e., \
fusioninventory-agent-deployment.vbs is a script residing in the \\dc1\pub share \
which clients are unable to access. sfondo_lockscreen.ps1 is another. To make sure, \
from a Win10 machine I've configured access to "Authenticated Users" to the whole \
share.

Please let me know if further information are required.
Thanks

Using Samba 4.13.17 from Van Belle repos, on Ubuntu 20.04.


/etc/samba/smb.conf
# Global parameters
[global]
	server services = -dns
	netbios name = DC1
	realm = WDC.DOMAIN.IT
	server role = active directory domain controller
	workgroup = WDC

        printcap name = /dev/null
        load printers = no
        disable spoolss = yes
        printing = bsd

	allow dns updates = disabled
	interfaces = eth1 lo
	bind interfaces only = yes

	# Per Radius https://wiki.samba.org/index.php/Authenticating_Freeradius_against_Active_Directory
  ntlm auth = mschapv2-and-ntlmv2-only

	log file = /var/log/samba/%m.log
log level = 10 all:10

[sysvol]
	path = /var/lib/samba/sysvol
	read only = No

[netlogon]
	path = /var/lib/samba/sysvol/wdc.domain.it/scripts
	read only = No

[pub]
	path = /dati/condivisioni/pub
	read only = No


# Log

[2022/06/16 15:27:37.520209, 10, pid=487534, effective(3000047, 3000018), \
real(3000047, 0), class=smb2] \
../../source3/smbd/smb2_server.c:3747(smbd_smb2_request_done_ex)  \
smbd_smb2_request_done_ex: mid [85] idx[1] status[NT_STATUS_OK] body[60] dyn[no:0] at \
../../source3/smbd/smb2_close.c:146 [2022/06/16 15:27:37.520233, 10, pid=487534, \
effective(3000047, 3000018), real(3000047, 0), class=smb2_credits] \
../../source3/smbd/smb2_server.c:963(smb2_set_operation_credit)  \
smb2_set_operation_credit: smb2_set_operation_credit: requested 1, charge 1, granted \
1, current possible/max 8066/8192, total granted/max/low/range 127/8192/86/127 \
[2022/06/16 15:27:37.520260,  5, pid=487534, effective(3000047, 3000018), \
real(3000047, 0)] ../../libcli/smb/smb2_signing.c:173(smb2_signing_sign_pdu)  signed \
SMB2 message [2022/06/16 15:27:37.520349, 10, pid=487494, effective(3000047, \
3000018), real(3000047, 0), class=smb2] \
../../source3/smbd/smb2_create.c:713(smbd_smb2_create_send)  smbd_smb2_create_send: \
name [fusioninventory-agent-deployment.vbs] [2022/06/16 15:27:37.520508, 10, \
pid=487494, effective(3000047, 3000018), real(3000047, 0), class=smb2] \
../../source3/smbd/smb2_create.c:1263(smbd_smb2_create_before_exec)  Got lease \
request size 52 [2022/06/16 15:27:37.520634,  1, pid=487494, effective(3000047, \
3000018), real(3000047, 0), class=rpc_parse] \
../../librpc/ndr/ndr.c:429(ndr_print_debug)  state->lease_ptr: struct smb2_lease
          lease_key: struct smb2_lease_key
              data: ARRAY(2)
                  data                     : 0xed85f790a41dad18 \
                (-1331385914217353960)
                  data                     : 0xcc591c619a106c09 \
(-3721912411522831351)  lease_state              : 0x00000007 (7)
                 1: SMB2_LEASE_READ          
                 1: SMB2_LEASE_HANDLE        
                 1: SMB2_LEASE_WRITE         
          lease_flags              : 0x00000000 (0)
          lease_duration           : 0x0000000000000000 (0)
          parent_lease_key: struct smb2_lease_key
              data: ARRAY(2)
                  data                     : 0x0000000000000000 (0)
                  data                     : 0x0000000000000000 (0)
          lease_version            : 0x0002 (2)
          lease_epoch              : 0x0000 (0)
[2022/06/16 15:27:37.521662, 10, pid=487494, effective(3000047, 3000018), \
real(3000047, 0), class=smb2] \
../../source3/smbd/smb2_create.c:818(smbd_smb2_create_send)  smbd_smb2_create_send: \
open execution phase [2022/06/16 15:27:37.521787, 10, pid=487494, effective(3000047, \
3000018), real(3000047, 0)] ../../source3/smbd/filename.c:987(unix_convert)  \
unix_convert: Called on file [fusioninventory-agent-deployment.vbs] [2022/06/16 \
15:27:37.521916, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../source3/smbd/statcache.c:286(stat_cache_lookup)  stat_cache_lookup: lookup \
failed for name [0000000000000000@FUSIONINVENTORY-AGENT-DEPLOYMENT.VBS] [2022/06/16 \
15:27:37.522040, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../source3/smbd/filename.c:1171(unix_convert)  unix_convert: Begin: name \
[fusioninventory-agent-deployment.vbs] dirpath [.] name \
[fusioninventory-agent-deployment.vbs] [2022/06/16 15:27:37.522175,  5, pid=487494, \
effective(3000047, 3000018), real(3000047, 0)] \
../../source3/smbd/statcache.c:168(stat_cache_add)  stat_cache_add: Added entry \
(55d42d91d870:size 35) 0000000000000000@FUSIONINVENTORY-AGENT-DEPLOYMENT.VBS -> \
0000000000000000@fusioninventory-agent-deployment.vbs [2022/06/16 15:27:37.522301, \
10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../source3/smbd/filename.c:1196(unix_convert)  unix_convert: Conversion of \
base_name finished [fusioninventory-agent-deployment.vbs] -> \
[fusioninventory-agent-deployment.vbs] [2022/06/16 15:27:37.522438, 10, pid=487494, \
effective(3000047, 3000018), real(3000047, 0)] \
../../source3/smbd/filename.c:1377(unix_convert)  unix_convert: Conversion finished \
[fusioninventory-agent-deployment.vbs] -> [fusioninventory-agent-deployment.vbs] \
[2022/06/16 15:27:37.522562, 10, pid=487494, effective(3000047, 3000018), \
real(3000047, 0), class=vfs] ../../source3/smbd/vfs.c:1327(check_reduced_name)  \
check_reduced_name: check_reduced_name [fusioninventory-agent-deployment.vbs] \
[/dati/condivisioni/pub] [2022/06/16 15:27:37.522697, 10, pid=487494, \
effective(3000047, 3000018), real(3000047, 0), class=vfs] \
../../source3/smbd/vfs.c:1389(check_reduced_name)  check_reduced_name realpath \
[fusioninventory-agent-deployment.vbs] -> \
[/dati/condivisioni/pub/fusioninventory-agent-deployment.vbs] [2022/06/16 \
15:27:37.522822,  5, pid=487494, effective(3000047, 3000018), real(3000047, 0), \
class=vfs] ../../source3/smbd/vfs.c:1495(check_reduced_name)  check_reduced_name: \
fusioninventory-agent-deployment.vbs reduced to \
/dati/condivisioni/pub/fusioninventory-agent-deployment.vbs [2022/06/16 \
15:27:37.522945, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../source3/smbd/open.c:6069(create_file_default)  create_file_default: \
create_file: access_mask = 0x120089 file_attributes = 0x0, share_access = 0x1, \
create_disposition = 0x1 create_options = 0x44 oplock_request = 0x100 private_flags = \
0x0 ea_list = (nil), sd = (nil), dirfsp = /dati/condivisioni/pub, fname = \
fusioninventory-agent-deployment.vbs [2022/06/16 15:27:37.523073, 10, pid=487494, \
effective(3000047, 3000018), real(3000047, 0)] \
../../source3/smbd/open.c:5584(create_file_unixpath)  create_file_unixpath: \
create_file_unixpath: access_mask = 0x120089 file_attributes = 0x0, share_access = \
0x1, create_disposition = 0x1 create_options = 0x44 oplock_request = 0x100 \
private_flags = 0x0 ea_list = (nil), sd = (nil), fname = \
fusioninventory-agent-deployment.vbs [2022/06/16 15:27:37.523201, 10, pid=487494, \
effective(3000047, 3000018), real(3000047, 0), class=locking] \
../../source3/locking/leases_db.c:81(leases_db_key)  leases_db_key: 
[2022/06/16 15:27:37.523326,  1, pid=487494, effective(3000047, 3000018), \
real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)  \
&db_key: struct leases_db_key  client_guid              : \
001c51dc-ed78-11ec-b903-70c94e8975c2  lease_key: struct smb2_lease_key
              data: ARRAY(2)
                  data                     : 0xed85f790a41dad18 \
                (-1331385914217353960)
                  data                     : 0xcc591c619a106c09 \
(-3721912411522831351) [2022/06/16 15:27:37.523756,  5, pid=487494, \
effective(3000047, 3000018), real(3000047, 0)] \
../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)  dbwrap_lock_order_lock: check \
lock order 1 for /run/samba/smbXsrv_open_global.tdb [2022/06/16 15:27:37.523885, 10, \
pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../lib/dbwrap/dbwrap.c:131(debug_lock_order)  lock order:  \
1:/run/samba/smbXsrv_open_global.tdb 2:<none> 3:<none> 4:<none> [2022/06/16 \
15:27:37.524521, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)  db_tdb_log_key: Locking key \
6FCE3A4D [2022/06/16 15:27:37.524652, 10, pid=487494, effective(3000047, 3000018), \
real(3000047, 0)] ../../lib/dbwrap/dbwrap_tdb.c:153(db_tdb_fetch_locked_internal)  \
db_tdb_fetch_locked_internal: Allocated locked data 0x55d42e11a280 [2022/06/16 \
15:27:37.524808, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../source3/smbd/smbXsrv_open.c:632(smbXsrv_open_global_verify_record)  \
smbXsrv_open_global_verify_record: empty value [2022/06/16 15:27:37.524960, 10, \
pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../source3/smbd/smbXsrv_open.c:750(smbXsrv_open_global_store)  \
smbXsrv_open_global_store: key '6FCE3A4D' stored [2022/06/16 15:27:37.525091,  1, \
pid=487494, effective(3000047, 3000018), real(3000047, 0), class=rpc_parse] \
../../librpc/ndr/ndr.c:429(ndr_print_debug)  &global_blob: struct \
smbXsrv_open_globalB  version                  : SMBXSRV_VERSION_0 (0)
          seqnum                   : 0x00000001 (1)
          info                     : union smbXsrv_open_globalU(case 0)
          info0                    : *
              info0: struct smbXsrv_open_global0
                  db_rec                   : *
                  server_id: struct server_id
                      pid                      : 0x0000000000077046 (487494)
                      task_id                  : 0x00000000 (0)
                      vnn                      : 0xffffffff (4294967295)
                      unique_id                : 0xdcdffa20936bc84d \
(-2531029447739717555)  open_global_id           : 0x6fce3a4d (1875786317)
                  open_persistent_id       : 0x000000006fce3a4d (1875786317)
                  open_volatile_id         : 0x00000000fb466882 (4215695490)
                  open_owner               : \
                S-1-5-21-3516824725-3155270197-1791756496-1215
                  open_time                : Thu Jun 16 03:27:38 PM 2022 CEST
                  create_guid              : 00000000-0000-0000-0000-000000000000
                  client_guid              : 001c51dc-ed78-11ec-b903-70c94e8975c2
                  app_instance_id          : 00000000-0000-0000-0000-000000000000
                  disconnect_time          : NTTIME(0)
                  durable_timeout_msec     : 0x00000000 (0)
                  durable                  : 0x00 (0)
                  backend_cookie           : DATA_BLOB length=0
                  channel_sequence         : 0x0000 (0)
                  channel_generation       : 0x0000000000000000 (0)
                  lock_sequence_array: ARRAY(64)
  [0000] FF FF FF FF FF FF FF FF   FF FF FF FF FF FF FF FF   ........ ........
  [0010] FF FF FF FF FF FF FF FF   FF FF FF FF FF FF FF FF   ........ ........
  [0020] FF FF FF FF FF FF FF FF   FF FF FF FF FF FF FF FF   ........ ........
  [0030] FF FF FF FF FF FF FF FF   FF FF FF FF FF FF FF FF   ........ ........
[2022/06/16 15:27:37.527101, 10, pid=487494, effective(3000047, 3000018), \
real(3000047, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)  db_tdb_log_key: \
Unlocking key 6FCE3A4D [2022/06/16 15:27:37.527227,  5, pid=487494, \
effective(3000047, 3000018), real(3000047, 0)] \
../../lib/dbwrap/dbwrap.c:178(dbwrap_lock_order_unlock)  dbwrap_lock_order_unlock: \
release lock order 1 for /run/samba/smbXsrv_open_global.tdb [2022/06/16 \
15:27:37.527353, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../source3/smbd/smbXsrv_open.c:916(smbXsrv_open_create)  smbXsrv_open_create: \
global_id (0x6fce3a4d) stored [2022/06/16 15:27:37.527474,  1, pid=487494, \
effective(3000047, 3000018), real(3000047, 0), class=rpc_parse] \
../../librpc/ndr/ndr.c:429(ndr_print_debug)  &open_blob: struct smbXsrv_openB
          version                  : SMBXSRV_VERSION_0 (0)
          reserved                 : 0x00000000 (0)
          info                     : union smbXsrv_openU(case 0)
          info0                    : *
              info0: struct smbXsrv_open
                  table                    : *
                  db_rec                   : NULL
                  local_id                 : 0xfb466882 (4215695490)
                  global                   : *
                      global: struct smbXsrv_open_global0
                          db_rec                   : NULL
                          server_id: struct server_id
                              pid                      : 0x0000000000077046 (487494)
                              task_id                  : 0x00000000 (0)
                              vnn                      : 0xffffffff (4294967295)
                              unique_id                : 0xdcdffa20936bc84d \
                (-2531029447739717555)
                          open_global_id           : 0x6fce3a4d (1875786317)
                          open_persistent_id       : 0x000000006fce3a4d (1875786317)
                          open_volatile_id         : 0x00000000fb466882 (4215695490)
                          open_owner               : \
                S-1-5-21-3516824725-3155270197-1791756496-1215
                          open_time                : Thu Jun 16 03:27:38 PM 2022 CEST
                          create_guid              : \
                00000000-0000-0000-0000-000000000000
                          client_guid              : \
                001c51dc-ed78-11ec-b903-70c94e8975c2
                          app_instance_id          : \
00000000-0000-0000-0000-000000000000  disconnect_time          : NTTIME(0)
                          durable_timeout_msec     : 0x00000000 (0)
                          durable                  : 0x00 (0)
                          backend_cookie           : DATA_BLOB length=0
                          channel_sequence         : 0x0000 (0)
                          channel_generation       : 0x0000000000000000 (0)
                          lock_sequence_array: ARRAY(64)
  [0000] FF FF FF FF FF FF FF FF   FF FF FF FF FF FF FF FF   ........ ........
  [0010] FF FF FF FF FF FF FF FF   FF FF FF FF FF FF FF FF   ........ ........
  [0020] FF FF FF FF FF FF FF FF   FF FF FF FF FF FF FF FF   ........ ........
  [0030] FF FF FF FF FF FF FF FF   FF FF FF FF FF FF FF FF   ........ ........
                  status                   : NT_STATUS_OK
                  idle_time                : Thu Jun 16 03:27:38 PM 2022 CEST
                  compat                   : NULL
                  flags                    : 0x00 (0)
                         0: SMBXSRV_OPEN_NEED_REPLAY_CACHE
                         0: SMBXSRV_OPEN_HAVE_REPLAY_CACHE
                  create_action            : 0x00000000 (0)
                  request_count            : 0x0000000000000000 (0)
                  pre_request_count        : 0x0000000000000000 (0)
[2022/06/16 15:27:37.530117,  5, pid=487494, effective(3000047, 3000018), \
real(3000047, 0)] ../../source3/smbd/files.c:154(file_new)  allocated file structure \
fnum 4215695490 (4 used) [2022/06/16 15:27:37.530251, 10, pid=487494, \
effective(3000047, 3000018), real(3000047, 0)] \
../../source3/smbd/files.c:824(file_name_hash)  file_name_hash: \
/dati/condivisioni/pub/fusioninventory-agent-deployment.vbs hash 0x70b74ad8 \
[2022/06/16 15:27:37.530383,  5, pid=487494, effective(3000047, 3000018), \
real(3000047, 0)] ../../source3/smbd/dosmode.c:181(unix_mode)  unix_mode: \
unix_mode(fusioninventory-agent-deployment.vbs) returning 0644 [2022/06/16 \
15:27:37.530588, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../source3/smbd/open.c:3509(open_file_ntcreate)  open_file_ntcreate: \
fname=fusioninventory-agent-deployment.vbs, dos_attrs=0x0 access_mask=0x120089 \
share_access=0x1 create_disposition = 0x1 create_options=0x44 unix mode=0644 \
oplock_request=256 private_flags = 0x0 [2022/06/16 15:27:37.530732,  5, pid=487494, \
effective(3000047, 3000018), real(3000047, 0)] \
../../source3/smbd/dosmode.c:422(get_ea_dos_attribute)  get_ea_dos_attribute: Cannot \
get attribute from EA on file fusioninventory-agent-deployment.vbs: Error = No data \
available [2022/06/16 15:27:37.530872, 10, pid=487494, effective(3000047, 3000018), \
real(3000047, 0)] ../../source3/smbd/open.c:3697(open_file_ntcreate)  \
open_file_ntcreate: fname=fusioninventory-agent-deployment.vbs, after mapping \
access_mask=0x120089 [2022/06/16 15:27:37.530995,  4, pid=487494, effective(3000047, \
3000018), real(3000047, 0)] ../../source3/smbd/open.c:3800(open_file_ntcreate)  \
calling open_file with flags=0x0 flags2=0x800 mode=0644, access_mask = 0x120089, \
open_access_mask = 0x120089 [2022/06/16 15:27:37.531319, 10, pid=487494, \
effective(3000047, 3000018), real(3000047, 0)] \
../../source3/modules/vfs_acl_common.c:776(get_nt_acl_common_at)  \
get_nt_acl_common_at: name=fusioninventory-agent-deployment.vbs [2022/06/16 \
15:27:37.531455,  4, pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../source3/smbd/sec_ctx.c:215(push_sec_ctx)  push_sec_ctx(3000047, 3000018) : \
sec_ctx_stack_ndx = 1 [2022/06/16 15:27:37.531582,  4, pid=487494, effective(3000047, \
3000018), real(3000047, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)  \
push_conn_ctx(1053193842) : conn_ctx_stack_ndx = 0 [2022/06/16 15:27:37.531718,  4, \
pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)  setting sec ctx (0, 0) - \
sec_ctx_stack_ndx = 1 [2022/06/16 15:27:37.531840,  5, pid=487494, effective(3000047, \
3000018), real(3000047, 0)] \
../../libcli/security/security_token.c:52(security_token_debug)  Security token: \
(NULL) [2022/06/16 15:27:37.531959,  5, pid=487494, effective(3000047, 3000018), \
real(3000047, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)  UNIX \
token of user 0  Primary group is 0 and contains 0 supplementary groups
[2022/06/16 15:27:37.532166,  4, pid=487494, effective(3000047, 3000018), \
real(3000047, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)  pop_sec_ctx \
(3000047, 3000018) - sec_ctx_stack_ndx = 0 [2022/06/16 15:27:37.532299, 10, \
pid=487494, effective(3000047, 3000018), real(3000047, 0), class=acls] \
../../source3/smbd/posix_acls.c:3531(posix_get_nt_acl)  posix_get_nt_acl: called for \
file fusioninventory-agent-deployment.vbs [2022/06/16 15:27:37.532471, 10, \
pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../source3/passdb/lookup_sid.c:1191(xid_to_sid)  xid_to_sid: UID 0 -> \
S-1-5-21-3516824725-3155270197-1791756496-500 from cache [2022/06/16 15:27:37.532620, \
10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../source3/passdb/lookup_sid.c:1191(xid_to_sid)  xid_to_sid: GID 3000004 -> \
S-1-5-21-3516824725-3155270197-1791756496-512 from cache [2022/06/16 15:27:37.532751, \
10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=acls] \
../../source3/smbd/posix_acls.c:2774(canonicalise_acl)  canonicalise_acl: Access ace \
entries before arrange : [2022/06/16 15:27:37.532872, 10, pid=487494, \
effective(3000047, 3000018), real(3000047, 0), class=acls] \
../../source3/smbd/posix_acls.c:2787(canonicalise_acl)  canon_ace index 0. Type = \
allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-- [2022/06/16 \
15:27:37.532997, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), \
class=acls] ../../source3/smbd/posix_acls.c:2787(canonicalise_acl)  canon_ace index \
1. Type = allow SID = S-1-5-21-3516824725-3155270197-1791756496-512 gid 3000004 \
SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms rw- [2022/06/16 15:27:37.533121, 10, \
pid=487494, effective(3000047, 3000018), real(3000047, 0), class=acls] \
../../source3/smbd/posix_acls.c:2787(canonicalise_acl)  canon_ace index 2. Type = \
allow SID = S-1-5-21-3516824725-3155270197-1791756496-500 uid 0 SMB_ACL_USER_OBJ \
ace_flags = 0x0 perms rw- [2022/06/16 15:27:37.533246, 10, pid=487494, \
effective(3000047, 3000018), real(3000047, 0), class=acls] \
../../source3/smbd/posix_acls.c:848(print_canon_ace_list)  print_canon_ace_list: \
canonicalise_acl: ace entries after arrange  canon_ace index 0. Type = allow SID = \
S-1-5-21-3516824725-3155270197-1791756496-500 uid 0 SMB_ACL_USER_OBJ ace_flags = 0x0 \
perms rw-  canon_ace index 1. Type = allow SID = \
S-1-5-21-3516824725-3155270197-1791756496-512 gid 3000004 SMB_ACL_GROUP_OBJ ace_flags \
= 0x0 perms rw-  canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER \
ace_flags = 0x0 perms r-- [2022/06/16 15:27:37.533570, 10, pid=487494, \
effective(3000047, 3000018), real(3000047, 0), class=acls] \
../../source3/smbd/posix_acls.c:1111(map_canon_ace_perms)  map_canon_ace_perms: \
Mapped (UNIX) 180 to (NT) 1f019f [2022/06/16 15:27:37.533700, 10, pid=487494, \
effective(3000047, 3000018), real(3000047, 0), class=acls] \
../../source3/smbd/posix_acls.c:1111(map_canon_ace_perms)  map_canon_ace_perms: \
Mapped (UNIX) 180 to (NT) 1f019f [2022/06/16 15:27:37.533822, 10, pid=487494, \
effective(3000047, 3000018), real(3000047, 0), class=acls] \
../../source3/smbd/posix_acls.c:1111(map_canon_ace_perms)  map_canon_ace_perms: \
Mapped (UNIX) 100 to (NT) 120089 [2022/06/16 15:27:37.533957, 10, pid=487494, \
effective(3000047, 3000018), real(3000047, 0)] \
../../source3/modules/vfs_acl_common.c:902(get_nt_acl_common_at)  \
get_nt_acl_common_at: returning acl for fusioninventory-agent-deployment.vbs is: \
[2022/06/16 15:27:37.534091,  1, pid=487494, effective(3000047, 3000018), \
real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)  psd: \
struct security_descriptor  revision                 : SECURITY_DESCRIPTOR_REVISION_1 \
(1)  type                     : 0x8004 (32772)
                 0: SEC_DESC_OWNER_DEFAULTED 
                 0: SEC_DESC_GROUP_DEFAULTED 
                 1: SEC_DESC_DACL_PRESENT    
                 0: SEC_DESC_DACL_DEFAULTED  
                 0: SEC_DESC_SACL_PRESENT    
                 0: SEC_DESC_SACL_DEFAULTED  
                 0: SEC_DESC_DACL_TRUSTED    
                 0: SEC_DESC_SERVER_SECURITY 
                 0: SEC_DESC_DACL_AUTO_INHERIT_REQ
                 0: SEC_DESC_SACL_AUTO_INHERIT_REQ
                 0: SEC_DESC_DACL_AUTO_INHERITED
                 0: SEC_DESC_SACL_AUTO_INHERITED
                 0: SEC_DESC_DACL_PROTECTED  
                 0: SEC_DESC_SACL_PROTECTED  
                 0: SEC_DESC_RM_CONTROL_VALID
                 1: SEC_DESC_SELF_RELATIVE   
          owner_sid                : *
              owner_sid                : \
S-1-5-21-3516824725-3155270197-1791756496-500  group_sid                : *
              group_sid                : \
S-1-5-21-3516824725-3155270197-1791756496-512  sacl                     : NULL
          dacl                     : *
              dacl: struct security_acl
                  revision                 : SECURITY_ACL_REVISION_NT4 (2)
                  size                     : 0x0064 (100)
                  num_aces                 : 0x00000003 (3)
                  aces: ARRAY(3)
                      aces: struct security_ace
                          type                     : SEC_ACE_TYPE_ACCESS_ALLOWED (0)
                          flags                    : 0x00 (0)
                                 0: SEC_ACE_FLAG_OBJECT_INHERIT
                                 0: SEC_ACE_FLAG_CONTAINER_INHERIT
                                 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT
                                 0: SEC_ACE_FLAG_INHERIT_ONLY
                                 0: SEC_ACE_FLAG_INHERITED_ACE
                              0x00: SEC_ACE_FLAG_VALID_INHERIT (0)
                                 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS
                                 0: SEC_ACE_FLAG_FAILED_ACCESS
                          size                     : 0x0024 (36)
                          access_mask              : 0x001f019f (2032031)
                          object                   : union \
                security_ace_object_ctr(case 0)
                          trustee                  : \
S-1-5-21-3516824725-3155270197-1791756496-500  aces: struct security_ace
                          type                     : SEC_ACE_TYPE_ACCESS_ALLOWED (0)
                          flags                    : 0x00 (0)
                                 0: SEC_ACE_FLAG_OBJECT_INHERIT
                                 0: SEC_ACE_FLAG_CONTAINER_INHERIT
                                 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT
                                 0: SEC_ACE_FLAG_INHERIT_ONLY
                                 0: SEC_ACE_FLAG_INHERITED_ACE
                              0x00: SEC_ACE_FLAG_VALID_INHERIT (0)
                                 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS
                                 0: SEC_ACE_FLAG_FAILED_ACCESS
                          size                     : 0x0024 (36)
                          access_mask              : 0x001f019f (2032031)
                          object                   : union \
                security_ace_object_ctr(case 0)
                          trustee                  : \
S-1-5-21-3516824725-3155270197-1791756496-512  aces: struct security_ace
                          type                     : SEC_ACE_TYPE_ACCESS_ALLOWED (0)
                          flags                    : 0x00 (0)
                                 0: SEC_ACE_FLAG_OBJECT_INHERIT
                                 0: SEC_ACE_FLAG_CONTAINER_INHERIT
                                 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT
                                 0: SEC_ACE_FLAG_INHERIT_ONLY
                                 0: SEC_ACE_FLAG_INHERITED_ACE
                              0x00: SEC_ACE_FLAG_VALID_INHERIT (0)
                                 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS
                                 0: SEC_ACE_FLAG_FAILED_ACCESS
                          size                     : 0x0014 (20)
                          access_mask              : 0x00120089 (1179785)
                          object                   : union \
security_ace_object_ctr(case 0)  trustee                  : S-1-1-0
[2022/06/16 15:27:37.538561, 10, pid=487494, effective(3000047, 3000018), \
real(3000047, 0)] ../../source3/smbd/open.c:201(smbd_check_access_rights)  \
smbd_check_access_rights: file fusioninventory-agent-deployment.vbs requesting \
0x120089 returning 0x120009 (NT_STATUS_OK) [2022/06/16 15:27:37.538716, 10, \
pid=487494, effective(3000047, 3000018), real(3000047, 0), class=vfs] \
../../source3/smbd/vfs.c:1327(check_reduced_name)  check_reduced_name: \
check_reduced_name [fusioninventory-agent-deployment.vbs] [/dati/condivisioni/pub] \
[2022/06/16 15:27:37.538875, 10, pid=487494, effective(3000047, 3000018), \
real(3000047, 0), class=vfs] ../../source3/smbd/vfs.c:1389(check_reduced_name)  \
check_reduced_name realpath [fusioninventory-agent-deployment.vbs] -> \
[/dati/condivisioni/pub/fusioninventory-agent-deployment.vbs] [2022/06/16 \
15:27:37.539000,  5, pid=487494, effective(3000047, 3000018), real(3000047, 0), \
class=vfs] ../../source3/smbd/vfs.c:1495(check_reduced_name)  check_reduced_name: \
fusioninventory-agent-deployment.vbs reduced to \
/dati/condivisioni/pub/fusioninventory-agent-deployment.vbs [2022/06/16 \
15:27:37.539138, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../source3/smbd/open.c:841(fd_open)  fd_open: name \
fusioninventory-agent-deployment.vbs, flags = 04000 mode = 0644, fd = 49 [2022/06/16 \
15:27:37.539272,  2, pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../source3/smbd/open.c:1524(open_file)  WDC\PC-CARLINI-STEF$ opened file \
fusioninventory-agent-deployment.vbs read=Yes write=No (numopen=4) [2022/06/16 \
15:27:37.539410, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../source3/lib/dbwrap/dbwrap_watch.c:452(dbwrap_watched_subrec_wakeup_fn)  \
dbwrap_watched_subrec_wakeup_fn: No watchers [2022/06/16 15:27:37.539561, 10, \
pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../source3/lib/dbwrap/dbwrap_watch.c:426(dbwrap_watched_do_locked)  \
dbwrap_watched_do_locked: dbwrap_watched_do_locked_fn returned NT_STATUS_OK \
[2022/06/16 15:27:37.539687,  5, pid=487494, effective(3000047, 3000018), \
real(3000047, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)  \
dbwrap_lock_order_lock: check lock order 1 for /run/samba/locking.tdb [2022/06/16 \
15:27:37.539808, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../lib/dbwrap/dbwrap.c:131(debug_lock_order)  lock order:  \
1:/run/samba/locking.tdb 2:<none> 3:<none> 4:<none> [2022/06/16 15:27:37.539941, 10, \
pid=487494, effective(3000047, 3000018), real(3000047, 0), class=locking] \
../../source3/locking/share_mode_lock.c:2142(share_mode_forall_entries)  \
share_mode_forall_entries: num_share_modes=0 [2022/06/16 15:27:37.540065, 10, \
pid=487494, effective(3000047, 3000018), real(3000047, 0), class=locking] \
../../source3/locking/share_mode_lock.c:2161(share_mode_forall_entries)  \
share_mode_forall_entries: num_share_entries=0, writeback=0 [2022/06/16 \
15:27:37.540185, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), \
class=locking] ../../source3/locking/locking.c:960(find_delete_on_close_token)  \
find_delete_on_close_token: name_hash = 0x70b74ad8 [2022/06/16 15:27:37.540312, 10, \
pid=487494, effective(3000047, 3000018), real(3000047, 0), class=locking] \
../../source3/locking/share_mode_lock.c:2142(share_mode_forall_entries)  \
share_mode_forall_entries: num_share_modes=0 [2022/06/16 15:27:37.540463, 10, \
pid=487494, effective(3000047, 3000018), real(3000047, 0), class=locking] \
../../source3/locking/share_mode_lock.c:2161(share_mode_forall_entries)  \
share_mode_forall_entries: num_share_entries=0, writeback=0 [2022/06/16 \
15:27:37.540591, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), \
class=locking] ../../source3/locking/brlock.c:1889(brl_get_locks_readonly)  seqnum=8, \
fsp->brlock_seqnum=0 [2022/06/16 15:27:37.540718, 10, pid=487494, effective(3000047, \
3000018), real(3000047, 0), class=locking] \
../../source3/locking/leases_db.c:81(leases_db_key)  leases_db_key: 
[2022/06/16 15:27:37.540841,  1, pid=487494, effective(3000047, 3000018), \
real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)  \
&db_key: struct leases_db_key  client_guid              : \
001c51dc-ed78-11ec-b903-70c94e8975c2  lease_key: struct smb2_lease_key
              data: ARRAY(2)
                  data                     : 0xed85f790a41dad18 \
                (-1331385914217353960)
                  data                     : 0xcc591c619a106c09 \
(-3721912411522831351) [2022/06/16 15:27:37.541246, 10, pid=487494, \
effective(3000047, 3000018), real(3000047, 0), class=locking] \
../../source3/locking/leases_db.c:81(leases_db_key)  leases_db_key: 
[2022/06/16 15:27:37.541372,  1, pid=487494, effective(3000047, 3000018), \
real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)  \
&db_key: struct leases_db_key  client_guid              : \
001c51dc-ed78-11ec-b903-70c94e8975c2  lease_key: struct smb2_lease_key
              data: ARRAY(2)
                  data                     : 0xed85f790a41dad18 \
                (-1331385914217353960)
                  data                     : 0xcc591c619a106c09 \
(-3721912411522831351) [2022/06/16 15:27:37.541792,  5, pid=487494, \
effective(3000047, 3000018), real(3000047, 0)] \
../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)  dbwrap_lock_order_lock: check \
lock order 4 for /run/samba/leases.tdb [2022/06/16 15:27:37.541921, 10, pid=487494, \
effective(3000047, 3000018), real(3000047, 0)] \
../../lib/dbwrap/dbwrap.c:131(debug_lock_order)  lock order:  \
1:/run/samba/locking.tdb 2:<none> 3:<none> 4:/run/samba/leases.tdb [2022/06/16 \
15:27:37.542060, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), \
class=locking] ../../source3/locking/leases_db.c:159(leases_db_do_locked_fn)  \
leases_db_do_locked_fn:  [2022/06/16 15:27:37.542186,  1, pid=487494, \
effective(3000047, 3000018), real(3000047, 0), class=rpc_parse] \
../../librpc/ndr/ndr.c:429(ndr_print_debug)  value: struct leases_db_value
          current_state            : 0x00000007 (7)
                 1: SMB2_LEASE_READ          
                 1: SMB2_LEASE_HANDLE        
                 1: SMB2_LEASE_WRITE         
          breaking                 : 0x00 (0)
          breaking_to_requested    : 0x00000000 (0)
                 0: SMB2_LEASE_READ          
                 0: SMB2_LEASE_HANDLE        
                 0: SMB2_LEASE_WRITE         
          breaking_to_required     : 0x00000000 (0)
                 0: SMB2_LEASE_READ          
                 0: SMB2_LEASE_HANDLE        
                 0: SMB2_LEASE_WRITE         
          lease_version            : 0x0002 (2)
          epoch                    : 0x0001 (1)
          num_files                : 0x00000001 (1)
          files: ARRAY(1)
              files: struct leases_db_file
                  id: struct file_id
                      devid                    : 0x000000000000fd01 (64769)
                      inode                    : 0x00000000002feb20 (3140384)
                      extid                    : 0x0000000000000000 (0)
                  servicepath              : *
                      servicepath              : '/dati/condivisioni/pub'
                  base_name                : *
                      base_name                : \
'fusioninventory-agent-deployment.vbs'  stream_name              : NULL
[2022/06/16 15:27:37.543908,  5, pid=487494, effective(3000047, 3000018), \
real(3000047, 0)] ../../lib/dbwrap/dbwrap.c:178(dbwrap_lock_order_unlock)  \
dbwrap_lock_order_unlock: release lock order 4 for /run/samba/leases.tdb [2022/06/16 \
15:27:37.547172, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] \
../../source3/smbd/open.c:2700(delay_for_oplock)  delay_for_oplock: lease_state=7
[2022/06/16 15:27:37.547308, 10, pid=487494, effective(3000047, 3000018), \
real(3000047, 0)] ../../source3/smbd/open.c:2723(delay_for_oplock)  delay_for_oplock: \
oplock type 0x100 on file fusioninventory-agent-deployment.vbs [2022/06/16 \
15:27:37.547446, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), \
class=locking] ../../source3/locking/share_mode_lock.c:1894(set_share_mode)  \
set_share_mode: num_share_modes=0 [2022/06/16 15:27:37.547574, 10, pid=487494, \
effective(3000047, 3000018), real(3000047, 0), class=locking] \
../../source3/locking/share_mode_lock.c:376(share_mode_entry_put)  \
share_mode_entry_put: share_mode_entry:



-- 
Lorenzo Milesi - lorenzo.milesi@yetopen.com 
CTO @ YetOpen Srl
YetOpen - https://www.yetopen.com/

Corso Martiri della Liberazione 114 - 23900 Lecco - ITALY - | 4801 Glenwood Avenue - \
Suite 200 - Raleigh, NC 27612 - USA - Tel +39 0341 220 205 - info.it@yetopen.com  | \
Phone +1 919-817-8106 - info.us@yetopen.com

Think green - Non stampare questa e-mail se non necessario / Don't print this email \
unless necessary

-------- D.Lgs. 196/2003 e GDPR 679/2016 --------
Tutte le informazioni contenute in questo messaggio sono riservate ed a uso esclusivo \
del destinatario. Tutte le informazioni ivi contenute, compresi eventuali allegati, \
sono da ritenere confidenziali e riservate secondo i termini del vigente D.Lgs. \
196/2003 in materia di privacy e del Regolamento europeo 679/2016 - GDPR - e quindi \
ne e' proibita l'utilizzazione ulteriore non autorizzata. Nel caso in cui questo \
messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza copiarlo, \
stamparlo, a non inoltrarlo a terzi e ad avvertirci non appena possibile. Grazie.

Confidentiality notice: this email message including any attachment is for the sole \
use of the intended recipient and may contain confidential and privileged \
information; pursuant to Legislative Decree 196/2003 and the European General Data \
Protection Regulation 679/2016 - GDPR - any unauthorized review, use, disclosure or \
distribution is prohibited. If you are not the intended recepient please delete this \
message without copying, printing or forwarding it to others, and alert us as soon as \
possible. Thank you.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic