Bug 5978 - User is not able to create Files and Directorys complete
Summary: User is not able to create Files and Directorys complete
Status: NEW
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: File Services (show other bugs)
Version: 3.0.28a
Hardware: Other Linux
: P3 normal
Target Milestone: none
Assignee: Samba Bugzilla Account
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-12-17 07:15 UTC by Bernd Unger
Modified: 2008-12-17 07:15 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Bernd Unger 2008-12-17 07:15:31 UTC
Ubuntu 8.04-server with samba 3.0.28a

User is not able to create Files and Directorys complete

Directory segm1:
If User GBWERKE+mw tries to create a directory in the folder segm1 he is able to create the Directory but not to rename this. In German the directory is named "Neuer Ordner".
He is able to remove that directory afterwards.
If the User GBWERKE+mw tries to create a text file he is able to create it, but he isn't able to rename it. And also he can't add content to that file.
He can remove that file.
I am (GBWERKE+bu) also a member of GBWERKE+i_segm1, but I can do full work (and don't have the full disk access)
 
Directory segm2:
Both of us we can do the full job in a folder where we have permissions by GBWERKE+i_segm2

#The ACLs of the Directorys
# file: segm1
# owner: root
# group: root
user::rwx
group::r-x
group:GBWERKE+adm_gettreerights:r-x
group:GBWERKE+adm_backup:r-x
group:GBWERKE+adm_glwadmins:rwx
group:GBWERKE+i_segm1:rwx
group:GBWERKE+i_segm1_ro:r-x
mask::rwx
other::---
default:user::rwx
default:group::r-x
default:group:GBWERKE+adm_gettreerights:r-x
default:group:GBWERKE+adm_backup:r-x
default:group:GBWERKE+i_segm1:rwx
default:group:GBWERKE+i_segm1_ro:r-x
default:mask::rwx
default:other::---

# file: segm2
# owner: root
# group: root
user::rwx
group::r-x
group:GBWERKE+adm_gettreerights:r-x
group:GBWERKE+adm_backup:r-x
group:GBWERKE+adm_glwadmins:rwx
group:GBWERKE+i_segm2:rwx
group:GBWERKE+i_segm2_feingeraetewerkstatt:r-x
mask::rwx
other::---
default:user::rwx
default:group::r-x
default:group:GBWERKE+adm_gettreerights:r-x
default:group:GBWERKE+adm_backup:r-x
default:group:GBWERKE+i_segm2:rwx
default:group:GBWERKE+i_segm2_feingeraetewerkstatt:r-x
default:mask::rwx
default:other::---

#Unixrights of the directories
drwxrwx---+ 29 root root 4096 2008-12-15 17:28 segm1
drwxrwx---+ 24 root root 4096 2008-12-15 17:26 segm2

#groupmemberships of the samplepersons
GBWERKE+i_segm1_schichtm:x:5011:.......
GBWERKE+i_segm2:x:5117:GBWERKE+mw,....,GBWERKE+bu
GBWERKE+i_segm1:x:5150:GBWERKE+mw,....,GBWERKE+bu
GBWERKE+i_segm1_ro:x:5213:......
GBWERKE+i_segm2_feingeraetewerkstatt:x:5232:......

I am able to verify this fact with other users in other folders by other group memberships.

=========================================================================================
here is my level8 dump where user GBWERKE+mw trys to access to folder segm1:

[2008/12/13 11:59:20, 3] smbd/error.c:error_packet_set(106)
  error packet at smbd/notify.c(142) cmd=160 (SMBnttrans) NT_STATUS_CANCELLED
[2008/12/13 11:59:20, 3] smbd/nttrans.c:reply_ntcancel(1644)
  reply_ntcancel: cancel called on mid = 28482.
[2008/12/13 11:59:20, 3] smbd/process.c:process_smb(1069)
  Transaction 98 of length 40
[2008/12/13 11:59:20, 3] smbd/process.c:switch_message(927)
  switch message SMBntcancel (pid 28308) conn 0x84b1c48
[2008/12/13 11:59:20, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2008/12/13 11:59:20, 3] smbd/error.c:error_packet_set(106)
  error packet at smbd/notify.c(142) cmd=160 (SMBnttrans) NT_STATUS_CANCELLED
[2008/12/13 11:59:20, 3] smbd/nttrans.c:reply_ntcancel(1644)
  reply_ntcancel: cancel called on mid = 28547.
[2008/12/13 11:59:20, 3] smbd/process.c:process_smb(1069)
  Transaction 99 of length 74
[2008/12/13 11:59:20, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 28308) conn 0x84b1c48
[2008/12/13 11:59:20, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1087)
  fetch sid from gid cache 10000 -> S-1-5-21-3326029727-3936357930-2395393809-1132
[2008/12/13 11:59:20, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (1285, 10000) - sec_ctx_stack_ndx = 0
[2008/12/13 11:59:20, 3] smbd/trans2.c:call_trans2qfsinfo(2285)
  call_trans2qfsinfo: level = 1007
[2008/12/13 11:59:20, 3] lib/sysquotas.c:sys_get_quota(448)
  sys_get_vfs_quota() failed for mntpath[/srv/glw1] bdev[/dev/mapper/vg0-LVglw1] qtype[2] id[1285]: Invalid argument
[2008/12/13 11:59:20, 3] lib/sysquotas.c:sys_get_quota(448)
  sys_get_vfs_quota() failed for mntpath[/srv/glw1] bdev[/dev/mapper/vg0-LVglw1] qtype[4] id[10000]: Invalid argument
[2008/12/13 11:59:20, 4] smbd/trans2.c:call_trans2qfsinfo(2745)
  SMBtrans2 info_level = 1007
[2008/12/13 11:59:20, 3] smbd/process.c:process_smb(1069)
  Transaction 100 of length 45
[2008/12/13 11:59:20, 3] smbd/process.c:switch_message(927)
  switch message SMBclose (pid 28308) conn 0x84b1c48
[2008/12/13 11:59:20, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/12/13 11:59:20, 3] smbd/reply.c:reply_close(3329)
  close directory fnum=6612
[2008/12/13 11:59:24, 3] smbd/process.c:process_smb(1069)
  Transaction 101 of length 94
[2008/12/13 11:59:24, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 28308) conn 0x84b1c48
[2008/12/13 11:59:24, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(3304)
  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(3355)
  call_trans2qfilepathinfo intern (fnum = -1) level=1004 call=5 total_data=0
[2008/12/13 11:59:24, 3] smbd/process.c:process_smb(1069)
  Transaction 102 of length 74
[2008/12/13 11:59:24, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 28308) conn 0x84b1c48
[2008/12/13 11:59:24, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2qfsinfo(2285)
  call_trans2qfsinfo: level = 258
[2008/12/13 11:59:24, 4] smbd/trans2.c:call_trans2qfsinfo(2745)
  SMBtrans2 info_level = 258
[2008/12/13 11:59:24, 3] smbd/process.c:process_smb(1069)
  Transaction 103 of length 74
[2008/12/13 11:59:24, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 28308) conn 0x84b1c48
[2008/12/13 11:59:24, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2qfsinfo(2285)
  call_trans2qfsinfo: level = 261
[2008/12/13 11:59:24, 4] smbd/trans2.c:call_trans2qfsinfo(2745)
  SMBtrans2 info_level = 261
[2008/12/13 11:59:24, 3] smbd/process.c:process_smb(1069)
  Transaction 104 of length 104
[2008/12/13 11:59:24, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 28308) conn 0x84b1c48
[2008/12/13 11:59:24, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2findfirst(1704)
  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384
[2008/12/13 11:59:24, 3] smbd/dir.c:dptr_create(515)
  creating new dirptr 256 for path intern, expect_close = 1
[2008/12/13 11:59:24, 4] smbd/trans2.c:call_trans2findfirst(1837)
  dptr_num is 256, wcard = *, attr = 22
[2008/12/13 11:59:24, 4] smbd/dir.c:dptr_close_internal(238)
  closing dptr key 256
[2008/12/13 11:59:24, 4] smbd/trans2.c:call_trans2findfirst(1926)
  SMBtrans2 mask=* directory=intern dirtype=22 numentries=14
[2008/12/13 11:59:24, 3] smbd/process.c:process_smb(1069)
  Transaction 105 of length 106
[2008/12/13 11:59:24, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 28308) conn 0x84b1c48
[2008/12/13 11:59:24, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(3304)
  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(3355)
  call_trans2qfilepathinfo intern/segm1 (fnum = -1) level=1004 call=5 total_data=0
[2008/12/13 11:59:24, 3] smbd/process.c:process_smb(1069)
  Transaction 106 of length 146
[2008/12/13 11:59:24, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 28308) conn 0x84b1c48
[2008/12/13 11:59:24, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2findfirst(1704)
  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384
[2008/12/13 11:59:24, 3] smbd/dir.c:dptr_create(515)
  creating new dirptr 256 for path intern/segm1, expect_close = 1
[2008/12/13 11:59:24, 4] smbd/trans2.c:call_trans2findfirst(1837)
  dptr_num is 256, wcard = Neuer Ordner (2), attr = 22
[2008/12/13 11:59:24, 4] smbd/dir.c:dptr_close_internal(238)
  closing dptr key 256
[2008/12/13 11:59:24, 4] smbd/trans2.c:call_trans2findfirst(1926)
  SMBtrans2 mask=Neuer Ordner (2) directory=intern/segm1 dirtype=22 numentries=1
[2008/12/13 11:59:24, 3] smbd/process.c:process_smb(1069)
  Transaction 107 of length 140
[2008/12/13 11:59:24, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 28308) conn 0x84b1c48
[2008/12/13 11:59:24, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(3304)
  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(3355)
  call_trans2qfilepathinfo intern/segm1/Neuer Ordner (2) (fnum = -1) level=1004 call=5 total_data=0
[2008/12/13 11:59:24, 3] smbd/process.c:process_smb(1069)
  Transaction 108 of length 140
[2008/12/13 11:59:24, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 28308) conn 0x84b1c48
[2008/12/13 11:59:24, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(3304)
  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(3355)
  call_trans2qfilepathinfo intern/segm1/Neuer Ordner (2) (fnum = -1) level=1004 call=5 total_data=0
[2008/12/13 11:59:24, 3] smbd/process.c:process_smb(1069)
  Transaction 109 of length 146
[2008/12/13 11:59:24, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 28308) conn 0x84b1c48
[2008/12/13 11:59:24, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2findfirst(1704)
  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384
[2008/12/13 11:59:24, 3] smbd/dir.c:dptr_create(515)
  creating new dirptr 256 for path intern/segm1, expect_close = 1
[2008/12/13 11:59:24, 4] smbd/trans2.c:call_trans2findfirst(1837)
  dptr_num is 256, wcard = Neuer Ordner (2), attr = 22
[2008/12/13 11:59:24, 4] smbd/dir.c:dptr_close_internal(238)
  closing dptr key 256
[2008/12/13 11:59:24, 4] smbd/trans2.c:call_trans2findfirst(1926)
  SMBtrans2 mask=Neuer Ordner (2) directory=intern/segm1 dirtype=22 numentries=1
[2008/12/13 11:59:24, 3] smbd/process.c:process_smb(1069)
  Transaction 110 of length 150
[2008/12/13 11:59:24, 3] smbd/process.c:switch_message(927)
  switch message SMBntcreateX (pid 28308) conn 0x84b1c48
[2008/12/13 11:59:24, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/12/13 11:59:24, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1087)
  fetch sid from gid cache 4000 -> S-1-5-21-3326029727-3936357930-2395393809-2394
[2008/12/13 11:59:24, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1087)
  fetch sid from gid cache 4001 -> S-1-5-21-3326029727-3936357930-2395393809-3235
[2008/12/13 11:59:24, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1087)
  fetch sid from gid cache 4002 -> S-1-5-21-3326029727-3936357930-2395393809-3246
[2008/12/13 11:59:24, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1087)
  fetch sid from gid cache 5150 -> S-1-5-21-3326029727-3936357930-2395393809-3089
[2008/12/13 11:59:24, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1087)
  fetch sid from gid cache 5213 -> S-1-5-21-3326029727-3936357930-2395393809-3169
[2008/12/13 11:59:24, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1087)
  fetch sid from gid cache 4000 -> S-1-5-21-3326029727-3936357930-2395393809-2394
[2008/12/13 11:59:24, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1087)
  fetch sid from gid cache 4001 -> S-1-5-21-3326029727-3936357930-2395393809-3235
[2008/12/13 11:59:24, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1087)
  fetch sid from gid cache 5150 -> S-1-5-21-3326029727-3936357930-2395393809-3089
[2008/12/13 11:59:24, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1087)
  fetch sid from gid cache 5213 -> S-1-5-21-3326029727-3936357930-2395393809-3169
[2008/12/13 11:59:24, 3] lib/util_seaccess.c:se_access_check(250)
[2008/12/13 11:59:24, 3] lib/util_seaccess.c:se_access_check(251)

*** 1 *** (Bernd)

  se_access_check: user sid is S-1-5-21-3326029727-3936357930-2395393809-2438
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-1132
  se_access_check: also S-1-1-0
  se_access_check: also S-1-5-2
  se_access_check: also S-1-5-11
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3237
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3050
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3021
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-2969
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3039
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3167
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-2957
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3194
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-513
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3043
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3156
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3026
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3197
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3155
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3136
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3242
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-1132
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3117
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-2964
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3241
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3014
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3199
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3119
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3065
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3061
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3243
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3238
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3236
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-2973
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3007
  se_access_check: also S-1-5-32-545
[2008/12/13 11:59:24, 3] smbd/error.c:error_packet_set(106)
  error packet at smbd/nttrans.c(697) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
[2008/12/13 11:59:24, 3] smbd/process.c:process_smb(1069)
  Transaction 111 of length 140
[2008/12/13 11:59:24, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 28308) conn 0x84b1c48
[2008/12/13 11:59:24, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(3304)
  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(3355)
  call_trans2qfilepathinfo intern/segm1/Neuer Ordner (2) (fnum = -1) level=1004 call=5 total_data=0
[2008/12/13 11:59:24, 3] smbd/process.c:process_smb(1069)
  Transaction 112 of length 140
[2008/12/13 11:59:24, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 28308) conn 0x84b1c48
[2008/12/13 11:59:24, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(3304)
  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(3355)
  call_trans2qfilepathinfo intern/segm1/Neuer Ordner (2) (fnum = -1) level=1004 call=5 total_data=0
[2008/12/13 11:59:24, 3] smbd/process.c:process_smb(1069)
  Transaction 113 of length 120
[2008/12/13 11:59:24, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 28308) conn 0x84b1c48
[2008/12/13 11:59:24, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(3304)
  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
[2008/12/13 11:59:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(3340)
  call_trans2qfilepathinfo: SMB_VFS_STAT of intern/segm1/rename failed (No such file or directory)
[2008/12/13 11:59:24, 3] smbd/error.c:unix_error_packet(56)
  unix_error_packet: error string = No such file or directory
[2008/12/13 11:59:24, 3] smbd/error.c:error_packet_set(106)
  error packet at smbd/trans2.c(3341) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
 

================================================================================================ 
 here is my level8 dump where user GBWERKE+mw tries to do the same work in the to folder segm2:
 
 
 2008/12/13 12:02:02, 5] smbd/uid.c:change_to_root_user(288)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2008/12/13 12:02:02, 3] smbd/process.c:process_smb(1069)
  Transaction 266 of length 45
[2008/12/13 12:02:02, 5] lib/util.c:show_msg(484)
[2008/12/13 12:02:02, 5] lib/util.c:show_msg(494)
  size=41
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=65279
  smb_uid=101
  smb_mid=39426
  smt_wct=3
  smb_vwv[ 0]= 6664 (0x1A08)
  smb_vwv[ 1]=65535 (0xFFFF)
  smb_vwv[ 2]=65535 (0xFFFF)
  smb_bcc=0
[2008/12/13 12:02:02, 3] smbd/process.c:switch_message(927)
  switch message SMBclose (pid 28308) conn 0x84b1c48
[2008/12/13 12:02:02, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1087)
  fetch sid from gid cache 10000 -> S-1-5-21-3326029727-3936357930-2395393809-1132
[2008/12/13 12:02:02, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (1285, 10000) - sec_ctx_stack_ndx = 0
[2008/12/13 12:02:02, 5] auth/auth_util.c:debug_nt_user_token(454)
  NT user token of user S-1-5-21-3326029727-3936357930-2395393809-2438
  contains 36 SIDs
  SID[  0]: S-1-5-21-3326029727-3936357930-2395393809-2438
  SID[  1]: S-1-5-21-3326029727-3936357930-2395393809-1132
  SID[  2]: S-1-1-0
  SID[  3]: S-1-5-2
  SID[  4]: S-1-5-11
  SID[  5]: S-1-5-21-3326029727-3936357930-2395393809-3237
  SID[  6]: S-1-5-21-3326029727-3936357930-2395393809-3050
  SID[  7]: S-1-5-21-3326029727-3936357930-2395393809-3021
  SID[  8]: S-1-5-21-3326029727-3936357930-2395393809-2969
  SID[  9]: S-1-5-21-3326029727-3936357930-2395393809-3039
  SID[ 10]: S-1-5-21-3326029727-3936357930-2395393809-3167
  SID[ 11]: S-1-5-21-3326029727-3936357930-2395393809-2957
  SID[ 12]: S-1-5-21-3326029727-3936357930-2395393809-3194
  SID[ 13]: S-1-5-21-3326029727-3936357930-2395393809-513
  SID[ 14]: S-1-5-21-3326029727-3936357930-2395393809-3043
  SID[ 15]: S-1-5-21-3326029727-3936357930-2395393809-3156
  SID[ 16]: S-1-5-21-3326029727-3936357930-2395393809-3026
  SID[ 17]: S-1-5-21-3326029727-3936357930-2395393809-3197
  SID[ 18]: S-1-5-21-3326029727-3936357930-2395393809-3155
  SID[ 19]: S-1-5-21-3326029727-3936357930-2395393809-3136
  SID[ 20]: S-1-5-21-3326029727-3936357930-2395393809-3242
  SID[ 21]: S-1-5-21-3326029727-3936357930-2395393809-1132
  SID[ 22]: S-1-5-21-3326029727-3936357930-2395393809-3117
  SID[ 23]: S-1-5-21-3326029727-3936357930-2395393809-2964
  SID[ 24]: S-1-5-21-3326029727-3936357930-2395393809-3241
  SID[ 25]: S-1-5-21-3326029727-3936357930-2395393809-3014
  SID[ 26]: S-1-5-21-3326029727-3936357930-2395393809-3199
  SID[ 27]: S-1-5-21-3326029727-3936357930-2395393809-3119
  SID[ 28]: S-1-5-21-3326029727-3936357930-2395393809-3065
  SID[ 29]: S-1-5-21-3326029727-3936357930-2395393809-3061
  SID[ 30]: S-1-5-21-3326029727-3936357930-2395393809-3243
  SID[ 31]: S-1-5-21-3326029727-3936357930-2395393809-3238
  SID[ 32]: S-1-5-21-3326029727-3936357930-2395393809-3236
  SID[ 33]: S-1-5-21-3326029727-3936357930-2395393809-2973
  SID[ 34]: S-1-5-21-3326029727-3936357930-2395393809-3007
  SID[ 35]: S-1-5-32-545
  SE_PRIV  0x0 0x0 0x0 0x0
[2008/12/13 12:02:02, 5] auth/auth_util.c:debug_unix_user_token(474)
  UNIX token of user 1285
  Primary group is 10000 and contains 32 supplementary groups
  Group[  0]: 5150
  Group[  1]: 7002
  Group[  2]: 5123
  Group[  3]: 5100
  Group[  4]: 5068
  Group[  5]: 5115
  Group[  6]: 5211
  Group[  7]: 5056
  Group[  8]: 5233
  Group[  9]: 10007
  Group[ 10]: 5117
  Group[ 11]: 5202
  Group[ 12]: 5104
  Group[ 13]: 5237
  Group[ 14]: 5200
  Group[ 15]: 5187
  Group[ 16]: 7005
  Group[ 17]: 10000
  Group[ 18]: 5172
  Group[ 19]: 5062
  Group[ 20]: 7004
  Group[ 21]: 5095
  Group[ 22]: 5239
  Group[ 23]: 5173
  Group[ 24]: 5135
  Group[ 25]: 5131
  Group[ 26]: 7006
  Group[ 27]: 7003
  Group[ 28]: 7001
  Group[ 29]: 5072
  Group[ 30]: 5091
  Group[ 31]: 50001
[2008/12/13 12:02:02, 5] smbd/uid.c:change_to_user(273)
  change_to_user uid=(1285,1285) gid=(0,10000)
[2008/12/13 12:02:02, 3] smbd/reply.c:reply_close(3338)
  close fd=16 fnum=6664 (numopen=2)
[2008/12/13 12:02:02, 2] smbd/close.c:close_normal_file(406)
  GBWERKE+mw closed file intern/segm2/Niesky207.xls (numopen=1) NT_STATUS_OK
[2008/12/13 12:02:02, 5] smbd/files.c:file_free(454)
  freed files structure 6664 (1 used)
[2008/12/13 12:02:02, 5] lib/util.c:show_msg(484)
[2008/12/13 12:02:02, 5] lib/util.c:show_msg(494)
  size=35
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=1
  smb_pid=65279
  smb_uid=101
  smb_mid=39426
  smt_wct=0
  smb_bcc=0
[2008/12/13 12:02:02, 3] smbd/process.c:process_smb(1069)
  Transaction 267 of length 144
[2008/12/13 12:02:02, 5] lib/util.c:show_msg(484)
[2008/12/13 12:02:02, 5] lib/util.c:show_msg(494)
  size=140
  smb_com=0xa2
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=532
  smb_uid=101
  smb_mid=39490
  smt_wct=24
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=57054 (0xDEDE)
  smb_vwv[ 2]=13824 (0x3600)
  smb_vwv[ 3]= 5632 (0x1600)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=35072 (0x8900)
  smb_vwv[ 8]=  512 (0x200)
  smb_vwv[ 9]=    0 (0x0)
  smb_vwv[10]=    0 (0x0)
  smb_vwv[11]=    0 (0x0)
  smb_vwv[12]=    0 (0x0)
  smb_vwv[13]=32768 (0x8000)
  smb_vwv[14]=    0 (0x0)
  smb_vwv[15]=  256 (0x100)
  smb_vwv[16]=    0 (0x0)
  smb_vwv[17]=  256 (0x100)
  smb_vwv[18]=    0 (0x0)
  smb_vwv[19]=16384 (0x4000)
  smb_vwv[20]=    0 (0x0)
  smb_vwv[21]=  512 (0x200)
  smb_vwv[22]=    0 (0x0)
  smb_vwv[23]=  768 (0x300)
  smb_bcc=57
[2008/12/13 12:02:02, 3] smbd/process.c:switch_message(927)
  switch message SMBntcreateX (pid 28308) conn 0x84b1c48
[2008/12/13 12:02:02, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/12/13 12:02:02, 5] smbd/filename.c:unix_convert(147)
  unix_convert called on file "intern/segm2/Niesky207.xls"
[2008/12/13 12:02:02, 3] smbd/dosmode.c:unix_mode(142)
  unix_mode(intern/segm2/Niesky207.xls) returning 0774
[2008/12/13 12:02:02, 5] smbd/files.c:file_new(123)
  allocated file structure 2570, fnum = 6666 (2 used)
[2008/12/13 12:02:02, 4] smbd/open.c:open_file_ntcreate(1605)
  calling open_file with flags=0x0 flags2=0x0 mode=0774, access_mask = 0x20089, open_access_mask = 0x20089
[2008/12/13 12:02:02, 2] smbd/open.c:open_file(391)
  mw opened file intern/segm2/Niesky207.xls read=Yes write=No (numopen=2)
[2008/12/13 12:02:02, 3] smbd/oplock_linux.c:linux_set_kernel_oplock(180)
  linux_set_kernel_oplock: got kernel oplock on file intern/segm2/Niesky207.xls, dev = fe01, inode = 5587315, file_id = 74
[2008/12/13 12:02:02, 5] smbd/oplock.c:set_file_oplock(126)
  set_file_oplock: granted oplock on file intern/segm2/Niesky207.xls, 0xfe01/5587315/74, tv_sec = 4943962a, tv_usec = 1bdc7
[2008/12/13 12:02:02, 5] smbd/files.c:file_new(123)
  allocated file structure 2571, fnum = 6667 (3 used)
[2008/12/13 12:02:02, 5] smbd/open.c:open_file_stat(2269)
  open_file_stat: 'opening' file intern/segm2/Niesky207.xls
[2008/12/13 12:02:02, 5] smbd/posix_acls.c:get_nt_acl(2795)
  get_nt_acl : file ACL present, directory ACL absent
[2008/12/13 12:02:02, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(1010)
  fetch sid from uid cache 1110 -> S-1-5-21-3326029727-3936357930-2395393809-2748
[2008/12/13 12:02:02, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1087)
  fetch sid from gid cache 4000 -> S-1-5-21-3326029727-3936357930-2395393809-2394
[2008/12/13 12:02:02, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1087)
  fetch sid from gid cache 4001 -> S-1-5-21-3326029727-3936357930-2395393809-3235
[2008/12/13 12:02:02, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1087)
  fetch sid from gid cache 4002 -> S-1-5-21-3326029727-3936357930-2395393809-3246
[2008/12/13 12:02:02, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1087)
  fetch sid from gid cache 5117 -> S-1-5-21-3326029727-3936357930-2395393809-3043
[2008/12/13 12:02:02, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1087)
  fetch sid from gid cache 5232 -> S-1-5-21-3326029727-3936357930-2395393809-3193
[2008/12/13 12:02:02, 5] smbd/files.c:file_free(454)
  freed files structure 6667 (2 used)
[2008/12/13 12:02:02, 3] lib/util_seaccess.c:se_access_check(250)
[2008/12/13 12:02:02, 3] lib/util_seaccess.c:se_access_check(251)

*** 2 *** (Bernd)

  se_access_check: user sid is S-1-5-21-3326029727-3936357930-2395393809-2438
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-1132
  se_access_check: also S-1-1-0
  se_access_check: also S-1-5-2
  se_access_check: also S-1-5-11
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3237
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3050
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3021
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-2969
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3039
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3167
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-2957
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3194
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-513
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3043
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3156
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3026
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3197
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3155
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3136
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3242
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-1132
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3117
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-2964
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3241
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3014
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3199
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3119
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3065
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3061
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3243
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3238
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3236
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-2973
  se_access_check: also S-1-5-21-3326029727-3936357930-2395393809-3007
  se_access_check: also S-1-5-32-545
[2008/12/13 12:02:02, 5] lib/util_seaccess.c:se_access_check(308)
  se_access_check: access (2) granted.
[2008/12/13 12:02:02, 5] smbd/nttrans.c:reply_ntcreate_and_X(940)
  reply_ntcreate_and_X: fnum = 6666, open name = intern/segm2/Niesky207.xls
[2008/12/13 12:02:02, 5] lib/util.c:show_msg(484)
[2008/12/13 12:02:02, 5] lib/util.c:show_msg(494)
  size=135
  smb_com=0xa2
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=1
  smb_pid=532
  smb_uid=101
  smb_mid=39490
  smt_wct=42
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=    0 (0x0)
  smb_vwv[ 2]= 2562 (0xA02)
  smb_vwv[ 3]=  282 (0x11A)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]= 7824 (0x1E90)
  smb_vwv[ 7]= 5163 (0x142B)
  smb_vwv[ 8]=51487 (0xC91F)
  smb_vwv[ 9]=32769 (0x8001)
  smb_vwv[10]= 1316 (0x524)
  smb_vwv[11]=48212 (0xBC54)
  smb_vwv[12]=51548 (0xC95C)
  smb_vwv[13]=    1 (0x1)
  smb_vwv[14]= 7824 (0x1E90)
  smb_vwv[15]= 5163 (0x142B)
  smb_vwv[16]=51487 (0xC91F)
  smb_vwv[17]=    1 (0x1)
  smb_vwv[18]= 7824 (0x1E90)
  smb_vwv[19]= 5163 (0x142B)
  smb_vwv[20]=51487 (0xC91F)
  smb_vwv[21]= 8193 (0x2001)
  smb_vwv[22]=    0 (0x0)
  smb_vwv[23]=    0 (0x0)
  smb_vwv[24]= 4096 (0x1000)
  smb_vwv[25]=    0 (0x0)
  smb_vwv[26]=    0 (0x0)
  smb_vwv[27]=    0 (0x0)
  smb_vwv[28]=   84 (0x54)
  smb_vwv[29]=    0 (0x0)
  smb_vwv[30]=    0 (0x0)
  smb_vwv[31]=    0 (0x0)
  smb_vwv[32]= 1792 (0x700)
  smb_vwv[33]=    0 (0x0)
  smb_vwv[34]=    0 (0x0)
  smb_vwv[35]=    0 (0x0)
  smb_vwv[36]=    0 (0x0)
  smb_vwv[37]=    0 (0x0)
  smb_vwv[38]=    0 (0x0)
  smb_vwv[39]=    0 (0x0)
  smb_vwv[40]=    0 (0x0)
  smb_vwv[41]=    0 (0x0)
  smb_bcc=0
[2008/12/13 12:02:02, 3] smbd/process.c:process_smb(1069)
  Transaction 268 of length 63
[2008/12/13 12:02:02, 5] lib/util.c:show_msg(484)
[2008/12/13 12:02:02, 5] lib/util.c:show_msg(494)
  size=59
  smb_com=0x2e
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=59399
  smb_tid=1
  smb_pid=65279
  smb_uid=101
  smb_mid=39554
  smt_wct=12
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=57054 (0xDEDE)
  smb_vwv[ 2]= 6666 (0x1A0A)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=21504 (0x5400)
  smb_vwv[ 6]=21504 (0x5400)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=21504 (0x5400)
  smb_vwv[10]=    0 (0x0)
  smb_vwv[11]=    0 (0x0)
  smb_bcc=0
[2008/12/13 12:02:02, 3] smbd/process.c:switch_message(927)
  switch message SMBreadX (pid 28308) conn 0x84b1c48
[2008/12/13 12:02:02, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/12/13 12:02:02, 3] smbd/reply.c:send_file_readX(2641)
  send_file_readX fnum=6666 max=21504 nread=21504
[2008/12/13 12:02:02, 5] lib/util.c:show_msg(484)
[2008/12/13 12:02:02, 5] lib/util.c:show_msg(494)
  size=21563
  smb_com=0x2e
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=1
  smb_pid=65279
  smb_uid=101
  smb_mid=39554
  smt_wct=12
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=    0 (0x0)
  smb_vwv[ 2]=65535 (0xFFFF)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=21504 (0x5400)
  smb_vwv[ 6]=   59 (0x3B)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_vwv[10]=    0 (0x0)
  smb_vwv[11]=    0 (0x0)
  smb_bcc=21504
[2008/12/13 12:02:02, 3] smbd/process.c:process_smb(1069)
  Transaction 269 of length 140
[2008/12/13 12:02:02, 5] lib/util.c:show_msg(484)
[2008/12/13 12:02:02, 5] lib/util.c:show_msg(494)
  size=136
  smb_com=0x32
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=532
  smb_uid=101
  smb_mid=39618
  smt_wct=15
  smb_vwv[ 0]=   68 (0x44)
  smb_vwv[ 1]=    0 (0x0)
  smb_vwv[ 2]=   10 (0xA)
  smb_vwv[ 3]=16384 (0x4000)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=   68 (0x44)
  smb_vwv[10]=   68 (0x44)
  smb_vwv[11]=    0 (0x0)
  smb_vwv[12]=    0 (0x0)
  smb_vwv[13]=    1 (0x1)
  smb_vwv[14]=    1 (0x1)
  smb_bcc=71
[2008/12/13 12:02:02, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 28308) conn 0x84b1c48
[2008/12/13 12:02:02, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/12/13 12:02:02, 3] smbd/trans2.c:call_trans2findfirst(1704)
  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384
[2008/12/13 12:02:02, 5] smbd/filename.c:unix_convert(147)
  unix_convert called on file "intern/segm2/Niesky207.xls"
[2008/12/13 12:02:02, 5] smbd/trans2.c:call_trans2findfirst(1769)
  dir=intern/segm2, mask = Niesky207.xls
[2008/12/13 12:02:02, 5] smbd/dir.c:dptr_create(392)
  dptr_create dir=intern/segm2
[2008/12/13 12:02:02, 3] smbd/dir.c:dptr_create(515)
  creating new dirptr 256 for path intern/segm2, expect_close = 1
[2008/12/13 12:02:02, 4] smbd/trans2.c:call_trans2findfirst(1837)
  dptr_num is 256, wcard = Niesky207.xls, attr = 22
[2008/12/13 12:02:02, 5] smbd/trans2.c:get_lanman2_dir_entry(1255)
  get_lanman2_dir_entry found intern/segm2/Niesky207.xls fname=Niesky207.xls
[2008/12/13 12:02:02, 5] smbd/trans2.c:call_trans2findfirst(1890)
  call_trans2findfirst - (2) closing dptr_num 256
[2008/12/13 12:02:02, 4] smbd/dir.c:dptr_close_internal(238)
  closing dptr key 256
[2008/12/13 12:02:02, 5] lib/util.c:show_msg(484)
[2008/12/13 12:02:02, 5] lib/util.c:show_msg(494)
  size=188
  smb_com=0x32
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51265
  smb_tid=1
  smb_pid=532
  smb_uid=101
  smb_mid=39618
  smt_wct=10
  smb_vwv[ 0]=   10 (0xA)
  smb_vwv[ 1]=  120 (0x78)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=   10 (0xA)
  smb_vwv[ 4]=   56 (0x38)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=  120 (0x78)
  smb_vwv[ 7]=   68 (0x44)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_bcc=133
[2008/12/13 12:02:02, 4] smbd/trans2.c:call_trans2findfirst(1926)
  SMBtrans2 mask=Niesky207.xls directory=intern/segm2 dirtype=22 numentries=1
[2008/12/13 12:02:06, 3] smbd/process.c:process_smb(1069)
  Transaction 270 of length 45
[2008/12/13 12:02:06, 5] lib/util.c:show_msg(484)
[2008/12/13 12:02:06, 5] lib/util.c:show_msg(494)
  size=41
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=65279
  smb_uid=101
  smb_mid=39682
  smt_wct=3
  smb_vwv[ 0]= 6666 (0x1A0A)
  smb_vwv[ 1]=65535 (0xFFFF)
  smb_vwv[ 2]=65535 (0xFFFF)
  smb_bcc=0
[2008/12/13 12:02:06, 3] smbd/process.c:switch_message(927)
  switch message SMBclose (pid 28308) conn 0x84b1c48
=====================================================================

Yes of course, you need some infos more

The uid;sid of the Problemuser: GBWERKE+MW: 1285;S-1-5-21-3326029727-3936357930-2395393809-2438 User (1)
the Groupmembershiplist by wbinfo:
wbinfo --user-domgroups S-1-5-21-3326029727-3936357930-2395393809-2438
S-1-5-21-3326029727-3936357930-2395393809-2438
S-1-5-21-3326029727-3936357930-2395393809-3089
S-1-5-21-3326029727-3936357930-2395393809-3237
S-1-5-21-3326029727-3936357930-2395393809-3050
S-1-5-21-3326029727-3936357930-2395393809-3021
S-1-5-21-3326029727-3936357930-2395393809-2969
S-1-5-21-3326029727-3936357930-2395393809-3039
S-1-5-21-3326029727-3936357930-2395393809-3167
S-1-5-21-3326029727-3936357930-2395393809-2957
S-1-5-21-3326029727-3936357930-2395393809-3194
S-1-5-21-3326029727-3936357930-2395393809-513
S-1-5-21-3326029727-3936357930-2395393809-3258
S-1-5-21-3326029727-3936357930-2395393809-3043
S-1-5-21-3326029727-3936357930-2395393809-3156
S-1-5-21-3326029727-3936357930-2395393809-3026
S-1-5-21-3326029727-3936357930-2395393809-3197
S-1-5-21-3326029727-3936357930-2395393809-3155
S-1-5-21-3326029727-3936357930-2395393809-3136
S-1-5-21-3326029727-3936357930-2395393809-3242
S-1-5-21-3326029727-3936357930-2395393809-1132
S-1-5-21-3326029727-3936357930-2395393809-3117
S-1-5-21-3326029727-3936357930-2395393809-2964
S-1-5-21-3326029727-3936357930-2395393809-3241
S-1-5-21-3326029727-3936357930-2395393809-3014
S-1-5-21-3326029727-3936357930-2395393809-3199
S-1-5-21-3326029727-3936357930-2395393809-3119
S-1-5-21-3326029727-3936357930-2395393809-3065
S-1-5-21-3326029727-3936357930-2395393809-3061
S-1-5-21-3326029727-3936357930-2395393809-3243
S-1-5-21-3326029727-3936357930-2395393809-3238
S-1-5-21-3326029727-3936357930-2395393809-3236
S-1-5-21-3326029727-3936357930-2395393809-2973
S-1-5-21-3326029727-3936357930-2395393809-3007

The SID of i_segm1: 
wbinfo --name-to-sid GBWERKE+i_segm1
S-1-5-21-3326029727-3936357930-2395393809-3089 Domain Group (2)

The SID of i_segm2:
wbinfo --name-to-sid GBWERKE+i_segm2
S-1-5-21-3326029727-3936357930-2395393809-3043 Domain Group (2)

It looks like an lack of the SID from GBWERKE+i_segm1 in the Enumeration,
where the Access check is done (*** 1*** ; *** 2 ***) 

I tested the Behavior with debian etch and samba 3.0.33. The same error.
I tested the Behavior with debian etch and samba 3.2.6. Looks o.k. But is was only a short test.