Bug 533 - smbcacls fails with kerberos auth, documentation inconsistency
Summary: smbcacls fails with kerberos auth, documentation inconsistency
Status: RESOLVED INVALID
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: libsmbclient (show other bugs)
Version: 3.0.0
Hardware: All Linux
: P3 normal
Target Milestone: none
Assignee: Jelmer Vernooij
QA Contact:
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-09-29 02:57 UTC by Alexander List
Modified: 2005-11-14 09:28 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Alexander List 2003-09-29 02:57:08 UTC 
Hello,
I have an ADS domain, W2K adv. server, Samba 3.0.0-final1 on Debian/i386.

after obtaining a ticket with kinit, I can connect to a share with smbclient
//server/sharename

However, when I try to list the ACLs on the share with

smbcacls -k //server/share filename, I get

failed session setup with NT_STATUS_LOGON_FAILURE
cli_full_connection failed! (NT_STATUS_LOGON_FAILURE)

PS: The manpage and the help text obtained with smbcacls --usage are
inconsistent IMHO. The manpage doesn't even mention kerberos authentication, and
according to the manpage, the syntax is 

smbcacls {server/share} {filename} [options]

smbcacls --usage tells me that options come first, then server/share and filename.

smbcacls --help should also include the output of --usage in the beginning.

If you need more debugging output, please let me know.

smbcacls -V
Version 3.0.0-Debian
Comment 1 Jelmer Vernooij 2003-10-19 16:10:58 UTC 
Can you get a network trace (or a log level 50 backtrace) of connecting to the
server using smbclient and smbcacls?
Comment 2 Gerald (Jerry) Carter (dead mail address) 2004-04-22 19:31:16 UTC 
no repsonse is several months.  Closing
Comment 3 Gerald (Jerry) Carter (dead mail address) 2005-11-14 09:28:11 UTC 
database cleanup