Bug 10237 - "valid users" option triggers "create_connection_session_info failed: NT_STATUS_ACCESS_DENIED"
"valid users" option triggers "create_connection_session_info failed: NT_STAT...
Status: NEW
Product: Samba 4.1 and newer
Classification: Unclassified
Component: File services
4.1.0
x64 Windows 7
: P5 normal
: ---
Assigned To: Samba QA Contact
Samba QA Contact
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2013-10-30 10:22 UTC by Marc Muehlfeld
Modified: 2016-01-11 15:31 UTC (History)
2 users (show)

See Also:


Attachments
level 10 debug log (285.73 KB, application/x-gzip)
2013-10-30 10:22 UTC, Marc Muehlfeld
no flags Details
smb.conf (2.34 KB, text/plain)
2013-10-30 10:25 UTC, Marc Muehlfeld
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Marc Muehlfeld 2013-10-30 10:22:31 UTC
Created attachment 9343 [details]
level 10 debug log

I upgraded a 3.6 machine to 4.1.0. Everything seems to work fine. But whenever I execute a program on a share with a "valid users" option, I receive several of the following error in the log (we run only at log level = 1):

[2013/10/30 11:09:20.618755,  1, pid=122095, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:550(make_connection_snum)
  create_connection_session_info failed: NT_STATUS_ACCESS_DENIED


When I increase the log level (find the level 10 debug log attached), then it looks like the message is caused by the machine account:

[2013/10/30 11:09:20.618684, 10, pid=122095, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:215(user_ok_token)
  User MUC\it-01$ not in 'valid users'
[2013/10/30 11:09:20.618735,  2, pid=122095, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:418(create_connection_session_info)
  user 'MUC\it-01$' (from session setup) not permitted to access this share (packages)
[2013/10/30 11:09:20.618755,  1, pid=122095, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:550(make_connection_snum)
  create_connection_session_info failed: NT_STATUS_ACCESS_DENIED


If I remove the "valid users" statement, then the error doesn't appear when I execute programs on the share.


Currently we can't configure the share permissions through windows, that's why we continue using "valid users". And as this parameter is still available it should be still supported, I guess.


Is it a bug or just logged at a to low level?
Comment 1 Marc Muehlfeld 2013-10-30 10:25:09 UTC
Created attachment 9344 [details]
smb.conf
Comment 2 Marc Muehlfeld 2013-10-30 10:30:56 UTC
One additional note: It's the same on 3.6.19. So it's not only related to 4.1 or the migration.