7661 – Can't set ACLs from Security tab on Windows

Bug 7661 - Can't set ACLs from Security tab on Windows

Summary: Can't set ACLs from Security tab on Windows

Status:	RESOLVED DUPLICATE of bug 7509

Alias:	None

Product:	Samba 3.5
Classification:	Unclassified
Component:	File services (show other bugs)
Version:	3.5.4
Hardware:	x64 Linux

Importance:	P3 normal
Target Milestone:	---
Assignee:	Volker Lendecke
QA Contact:	Samba QA Contact

URL:
Keywords:

Depends on:
Blocks:

Reported:	2010-09-03 14:04 UTC by Dadoo
Modified:	2011-09-02 01:10 UTC (History)
CC List:	3 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Dadoo 2010-09-03 14:04:53 UTC

We are unable to set permissions from the Properties->Security tab on Windows. The error reported (by Windows) is "Unable to save permission changes on <file>. The parameter is incorrect." Looking through the source, I have discovered that function "smb_acl_to_posix", in file "modules/vfs_posixacl.c" is trying to create an ACL with more than one ACL_USER_OBJ. (POSIX rules require exactly one.)

I have attached a debug level 10 log of the session. I tried to attach the entire log (thinking you may need to see the startup info, configuration options, etc.), but it was over 800k, so you know how that turned out. As a result, I trimmed it down to the parts I think are relevant.

=====

[2010/09/03 12:08:57.147803, 10] smbd/posix_acls.c:3842(set_nt_acl)
  set_nt_acl: called for file Flex
[2010/09/03 12:08:57.147831,  5] smbd/posix_acls.c:1191(unpack_nt_owners)
  unpack_nt_owners: validating owner_sids.
[2010/09/03 12:08:57.147850,  5] smbd/posix_acls.c:1238(unpack_nt_owners)
  unpack_nt_owners: owner_sids validated.
[2010/09/03 12:08:57.147897, 10] smbd/posix_acls.c:1904(create_canon_ace_lists)
  create_canon_ace_lists: adding file ACL:
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1196 gid 2033 (2033) SMB_ACL_GROUP ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.148024, 10] smbd/posix_acls.c:1809(create_canon_ace_lists)
  create_canon_ace_lists: adding dir ACL:
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-500 uid 2004 (2004) SMB_ACL_USER ace_flags = 0x3 perms rwx
[2010/09/03 12:08:57.148104, 10] smbd/posix_acls.c:1904(create_canon_ace_lists)
  create_canon_ace_lists: adding file ACL:
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-500 uid 2004 (2004) SMB_ACL_USER ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.148177, 10] smbd/posix_acls.c:1809(create_canon_ace_lists)
  create_canon_ace_lists: adding dir ACL:
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-2795 uid 2001 (2001) SMB_ACL_USER ace_flags = 0x3 perms rwx
[2010/09/03 12:08:57.148247, 10] smbd/posix_acls.c:1904(create_canon_ace_lists)
  create_canon_ace_lists: adding file ACL:
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-2795 uid 2001 (2001) SMB_ACL_USER ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.148318, 10] smbd/posix_acls.c:1809(create_canon_ace_lists)
  create_canon_ace_lists: adding dir ACL:
  canon_ace index 0. Type = allow SID = S-1-3-1 gid 2007 (2007) SMB_ACL_GROUP_OBJ ace_flags = 0xb perms ---
[2010/09/03 12:08:57.148389, 10] smbd/posix_acls.c:1809(create_canon_ace_lists)
  create_canon_ace_lists: adding dir ACL:
  canon_ace index 0. Type = allow SID = S-1-3-0 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0xb perms rwx
[2010/09/03 12:08:57.148459, 10] smbd/posix_acls.c:1809(create_canon_ace_lists)
  create_canon_ace_lists: adding dir ACL:
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1117 uid 2005 (2005) SMB_ACL_USER ace_flags = 0x3 perms rwx
[2010/09/03 12:08:57.148529, 10] smbd/posix_acls.c:1904(create_canon_ace_lists)
  create_canon_ace_lists: adding file ACL:
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1117 uid 2005 (2005) SMB_ACL_USER ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.148599, 10] smbd/posix_acls.c:1809(create_canon_ace_lists)
  create_canon_ace_lists: adding dir ACL:
  canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0xb perms ---
[2010/09/03 12:08:57.148628, 10] smbd/posix_acls.c:1904(create_canon_ace_lists)
  create_canon_ace_lists: adding file ACL:
  canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.148658, 10] smbd/posix_acls.c:1904(create_canon_ace_lists)
  create_canon_ace_lists: adding file ACL:
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1008 gid 2007 (2007) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.148730, 10] smbd/posix_acls.c:1809(create_canon_ace_lists)
  create_canon_ace_lists: adding dir ACL:
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0x3 perms rwx
[2010/09/03 12:08:57.148801, 10] smbd/posix_acls.c:1904(create_canon_ace_lists)
  create_canon_ace_lists: adding file ACL:
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.148888, 10] smbd/posix_acls.c:1809(create_canon_ace_lists)
  create_canon_ace_lists: adding dir ACL:
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1366 uid 2006 (2006) SMB_ACL_USER ace_flags = 0x3 perms rwx
[2010/09/03 12:08:57.148959, 10] smbd/posix_acls.c:1904(create_canon_ace_lists)
  create_canon_ace_lists: adding file ACL:
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1366 uid 2006 (2006) SMB_ACL_USER ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.149038, 10] smbd/posix_acls.c:1506(check_owning_objs)
  check_owning_objs: ACL had owning user/group entries.
[2010/09/03 12:08:57.149058, 10] smbd/posix_acls.c:1506(check_owning_objs)
  check_owning_objs: ACL had owning user/group entries.
[2010/09/03 12:08:57.149076, 10] smbd/posix_acls.c:841(print_canon_ace_list)
  print_canon_ace_list: file ace - before merge
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1196 gid 2033 (2033) SMB_ACL_GROUP ace_flags = 0x0 perms rwx
  canon_ace index 1. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-500 uid 2004 (2004) SMB_ACL_USER ace_flags = 0x0 perms rwx
  canon_ace index 2. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-2795 uid 2001 (2001) SMB_ACL_USER ace_flags = 0x0 perms rwx
  canon_ace index 3. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1117 uid 2005 (2005) SMB_ACL_USER ace_flags = 0x0 perms rwx
  canon_ace index 4. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms rwx
  canon_ace index 5. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1008 gid 2007 (2007) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms rwx
  canon_ace index 6. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx
  canon_ace index 7. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1366 uid 2006 (2006) SMB_ACL_USER ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.149467, 10] smbd/posix_acls.c:841(print_canon_ace_list)
  print_canon_ace_list: dir ace - before merge
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-500 uid 2004 (2004) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 1. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-2795 uid 2001 (2001) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 2. Type = allow SID = S-1-3-1 gid 2007 (2007) SMB_ACL_GROUP_OBJ ace_flags = 0xb perms ---
  canon_ace index 3. Type = allow SID = S-1-3-0 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0xb perms rwx
  canon_ace index 4. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1117 uid 2005 (2005) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 5. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0xb perms ---
  canon_ace index 6. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0x3 perms rwx
  canon_ace index 7. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 8. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1366 uid 2006 (2006) SMB_ACL_USER ace_flags = 0x3 perms rwx
[2010/09/03 12:08:57.149924, 10] smbd/posix_acls.c:841(print_canon_ace_list)
  print_canon_ace_list: file ace - before deny
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1196 gid 2033 (2033) SMB_ACL_GROUP ace_flags = 0x0 perms rwx
  canon_ace index 1. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-500 uid 2004 (2004) SMB_ACL_USER ace_flags = 0x0 perms rwx
  canon_ace index 2. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-2795 uid 2001 (2001) SMB_ACL_USER ace_flags = 0x0 perms rwx
  canon_ace index 3. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1117 uid 2005 (2005) SMB_ACL_USER ace_flags = 0x0 perms rwx
  canon_ace index 4. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms rwx
  canon_ace index 5. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1008 gid 2007 (2007) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms rwx
  canon_ace index 6. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx
  canon_ace index 7. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1366 uid 2006 (2006) SMB_ACL_USER ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.150313, 10] smbd/posix_acls.c:841(print_canon_ace_list)
  print_canon_ace_list: dir ace - before deny
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-500 uid 2004 (2004) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 1. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-2795 uid 2001 (2001) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 2. Type = allow SID = S-1-3-1 gid 2007 (2007) SMB_ACL_GROUP_OBJ ace_flags = 0xb perms ---
  canon_ace index 3. Type = allow SID = S-1-3-0 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0xb perms rwx
  canon_ace index 4. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1117 uid 2005 (2005) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 5. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0xb perms ---
  canon_ace index 6. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0x3 perms rwx
  canon_ace index 7. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 8. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1366 uid 2006 (2006) SMB_ACL_USER ace_flags = 0x3 perms rwx
[2010/09/03 12:08:57.150758, 10] smbd/posix_acls.c:841(print_canon_ace_list)
  print_canon_ace_list: file ace - before valid
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1196 gid 2033 (2033) SMB_ACL_GROUP ace_flags = 0x0 perms rwx
  canon_ace index 1. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-500 uid 2004 (2004) SMB_ACL_USER ace_flags = 0x0 perms rwx
  canon_ace index 2. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-2795 uid 2001 (2001) SMB_ACL_USER ace_flags = 0x0 perms rwx
  canon_ace index 3. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1117 uid 2005 (2005) SMB_ACL_USER ace_flags = 0x0 perms rwx
  canon_ace index 4. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms rwx
  canon_ace index 5. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1008 gid 2007 (2007) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms rwx
  canon_ace index 6. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx
  canon_ace index 7. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1366 uid 2006 (2006) SMB_ACL_USER ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.151161, 10] smbd/posix_acls.c:841(print_canon_ace_list)
  print_canon_ace_list: dir ace - before valid
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-500 uid 2004 (2004) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 1. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-2795 uid 2001 (2001) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 2. Type = allow SID = S-1-3-1 gid 2007 (2007) SMB_ACL_GROUP_OBJ ace_flags = 0xb perms ---
  canon_ace index 3. Type = allow SID = S-1-3-0 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0xb perms rwx
  canon_ace index 4. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1117 uid 2005 (2005) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 5. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0xb perms ---
  canon_ace index 6. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0x3 perms rwx
  canon_ace index 7. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 8. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1366 uid 2006 (2006) SMB_ACL_USER ace_flags = 0x3 perms rwx
[2010/09/03 12:08:57.151598,  3] smbd/dosmode.c:166(unix_mode)
  unix_mode(Flex) returning 0744
[2010/09/03 12:08:57.151618, 10] smbd/posix_acls.c:841(print_canon_ace_list)
  print_canon_ace_list: file ace - return
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1196 gid 2033 (2033) SMB_ACL_GROUP ace_flags = 0x0 perms rwx
  canon_ace index 1. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-500 uid 2004 (2004) SMB_ACL_USER ace_flags = 0x0 perms rwx
  canon_ace index 2. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-2795 uid 2001 (2001) SMB_ACL_USER ace_flags = 0x0 perms rwx
  canon_ace index 3. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1117 uid 2005 (2005) SMB_ACL_USER ace_flags = 0x0 perms rwx
  canon_ace index 4. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms rwx
  canon_ace index 5. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1008 gid 2007 (2007) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms rwx
  canon_ace index 6. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx
  canon_ace index 7. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1366 uid 2006 (2006) SMB_ACL_USER ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.152035, 10] smbd/posix_acls.c:841(print_canon_ace_list)
  print_canon_ace_list: dir ace - return
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-500 uid 2004 (2004) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 1. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-2795 uid 2001 (2001) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 2. Type = allow SID = S-1-3-1 gid 2007 (2007) SMB_ACL_GROUP_OBJ ace_flags = 0xb perms ---
  canon_ace index 3. Type = allow SID = S-1-3-0 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0xb perms rwx
  canon_ace index 4. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1117 uid 2005 (2005) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 5. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0xb perms ---
  canon_ace index 6. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0x3 perms rwx
  canon_ace index 7. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 8. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1366 uid 2006 (2006) SMB_ACL_USER ace_flags = 0x3 perms rwx
[2010/09/03 12:08:57.152510, 10] smbd/posix_acls.c:2724(set_canon_ace_list)
  set_canon_ace_list: setting ACL:
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1196 gid 2033 (2033) SMB_ACL_GROUP ace_flags = 0x0 perms rwx
  canon_ace index 1. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-500 uid 2004 (2004) SMB_ACL_USER ace_flags = 0x0 perms rwx
  canon_ace index 2. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-2795 uid 2001 (2001) SMB_ACL_USER ace_flags = 0x0 perms rwx
  canon_ace index 3. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1117 uid 2005 (2005) SMB_ACL_USER ace_flags = 0x0 perms rwx
  canon_ace index 4. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms rwx
  canon_ace index 5. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1008 gid 2007 (2007) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms rwx
  canon_ace index 6. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx
  canon_ace index 7. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1366 uid 2006 (2006) SMB_ACL_USER ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.152919, 10] smbd/posix_acls.c:2824(set_canon_ace_list)
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1196 gid 2033 (2033) SMB_ACL_GROUP ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.152986, 10] smbd/posix_acls.c:2824(set_canon_ace_list)
  canon_ace index 1. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-500 uid 2004 (2004) SMB_ACL_USER ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.153052, 10] smbd/posix_acls.c:2824(set_canon_ace_list)
  canon_ace index 2. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-2795 uid 2001 (2001) SMB_ACL_USER ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.153118, 10] smbd/posix_acls.c:2824(set_canon_ace_list)
  canon_ace index 3. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1117 uid 2005 (2005) SMB_ACL_USER ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.153191, 10] smbd/posix_acls.c:2824(set_canon_ace_list)
  canon_ace index 4. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.153215, 10] smbd/posix_acls.c:2824(set_canon_ace_list)
  canon_ace index 5. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1008 gid 2007 (2007) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.153282, 10] smbd/posix_acls.c:2824(set_canon_ace_list)
  canon_ace index 6. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.153347, 10] smbd/posix_acls.c:2824(set_canon_ace_list)
  canon_ace index 7. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1366 uid 2006 (2006) SMB_ACL_USER ace_flags = 0x0 perms rwx
[2010/09/03 12:08:57.153414, 10] modules/vfs_posixacl.c:89(posixacl_sys_acl_set_file)
  Calling acl_set_file: Flex, 0
[2010/09/03 12:08:57.153447, 10] modules/vfs_posixacl.c:282(smb_acl_to_posix)
  Initial ACL is:
[2010/09/03 12:08:57.153481, 10] modules/vfs_posixacl.c:305(smb_acl_to_posix)
  Iteration 0: ACL type is GROUP
[2010/09/03 12:08:57.153502, 10] modules/vfs_posixacl.c:340(smb_acl_to_posix)
  Iteration 0: ACL gid is 2033.
[2010/09/03 12:08:57.153532, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 0 is:
  group:2033:rwx
[2010/09/03 12:08:57.153607, 10] modules/vfs_posixacl.c:297(smb_acl_to_posix)
  Iteration 1: ACL type is USER
[2010/09/03 12:08:57.153626, 10] modules/vfs_posixacl.c:332(smb_acl_to_posix)
  Iteration 1: ACL uid is 2004.
[2010/09/03 12:08:57.153644, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 1 is:
  user:2004:rwx
  group:2033:rwx
[2010/09/03 12:08:57.153750, 10] modules/vfs_posixacl.c:297(smb_acl_to_posix)
  Iteration 2: ACL type is USER
[2010/09/03 12:08:57.153768, 10] modules/vfs_posixacl.c:332(smb_acl_to_posix)
  Iteration 2: ACL uid is 2001.
[2010/09/03 12:08:57.153786, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 2 is:
  user:2001:rwx
  user:2004:rwx
  group:2033:rwx
[2010/09/03 12:08:57.153948, 10] modules/vfs_posixacl.c:297(smb_acl_to_posix)
  Iteration 3: ACL type is USER
[2010/09/03 12:08:57.153966, 10] modules/vfs_posixacl.c:332(smb_acl_to_posix)
  Iteration 3: ACL uid is 2005.
[2010/09/03 12:08:57.153985, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 3 is:
  user:2001:rwx
  user:2004:rwx
  user:2005:rwx
  group:2033:rwx
[2010/09/03 12:08:57.154163, 10] modules/vfs_posixacl.c:313(smb_acl_to_posix)
  Iteration 4: ACL type is OTHER
[2010/09/03 12:08:57.154182, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 4 is:
  user:2001:rwx
  user:2004:rwx
  user:2005:rwx
  group:2033:rwx
  other::rwx
[2010/09/03 12:08:57.154364, 10] modules/vfs_posixacl.c:309(smb_acl_to_posix)
  Iteration 5: ACL type is GROUP_OBJ
[2010/09/03 12:08:57.154383, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 5 is:
  user:2001:rwx
  user:2004:rwx
  user:2005:rwx
  group::rwx
  group:2033:rwx
  other::rwx
[2010/09/03 12:08:57.154568, 10] modules/vfs_posixacl.c:301(smb_acl_to_posix)
  Iteration 6: ACL type is USER_OBJ
[2010/09/03 12:08:57.154587, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 6 is:
  user::rwx
  user:2001:rwx
  user:2004:rwx
  user:2005:rwx
  group::rwx
  group:2033:rwx
  other::rwx
[2010/09/03 12:08:57.154781, 10] modules/vfs_posixacl.c:297(smb_acl_to_posix)
  Iteration 7: ACL type is USER
[2010/09/03 12:08:57.154801, 10] modules/vfs_posixacl.c:332(smb_acl_to_posix)
  Iteration 7: ACL uid is 2006.
[2010/09/03 12:08:57.154819, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 7 is:
  user::rwx
  user:2001:rwx
  user:2004:rwx
  user:2005:rwx
  user:2006:rwx
  group::rwx
  group:2033:rwx
  other::rwx
[2010/09/03 12:08:57.155065, 10] modules/vfs_posixacl.c:317(smb_acl_to_posix)
  Iteration 8: ACL type is MASK
[2010/09/03 12:08:57.155091, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 8 is:
  user::rwx
  user:2001:rwx
  user:2004:rwx
  user:2005:rwx
  user:2006:rwx
  group::rwx
  group:2033:rwx
  mask::rwx
  other::rwx
[2010/09/03 12:08:57.155330, 10] modules/vfs_posixacl.c:357(smb_acl_to_posix)
  Final ACL is:
  user::rwx
  user:2001:rwx
  user:2004:rwx
  user:2005:rwx
  user:2006:rwx
  group::rwx
  group:2033:rwx
  mask::rwx
  other::rwx
[2010/09/03 12:08:57.155613, 10] smbd/posix_acls.c:2724(set_canon_ace_list)
  set_canon_ace_list: setting ACL:
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-500 uid 2004 (2004) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 1. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-2795 uid 2001 (2001) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 2. Type = allow SID = S-1-3-1 gid 2007 (2007) SMB_ACL_GROUP_OBJ ace_flags = 0xb perms ---
  canon_ace index 3. Type = allow SID = S-1-3-0 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0xb perms rwx
  canon_ace index 4. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1117 uid 2005 (2005) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 5. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0xb perms ---
  canon_ace index 6. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0x3 perms rwx
  canon_ace index 7. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER ace_flags = 0x3 perms rwx
  canon_ace index 8. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1366 uid 2006 (2006) SMB_ACL_USER ace_flags = 0x3 perms rwx
[2010/09/03 12:08:57.156072, 10] smbd/posix_acls.c:2824(set_canon_ace_list)
  canon_ace index 0. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-500 uid 2004 (2004) SMB_ACL_USER ace_flags = 0x3 perms rwx
[2010/09/03 12:08:57.156137, 10] smbd/posix_acls.c:2824(set_canon_ace_list)
  canon_ace index 1. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-2795 uid 2001 (2001) SMB_ACL_USER ace_flags = 0x3 perms rwx
[2010/09/03 12:08:57.156201, 10] smbd/posix_acls.c:2824(set_canon_ace_list)
  canon_ace index 2. Type = allow SID = S-1-3-1 gid 2007 (2007) SMB_ACL_GROUP_OBJ ace_flags = 0xb perms ---
[2010/09/03 12:08:57.156265, 10] smbd/posix_acls.c:2824(set_canon_ace_list)
  canon_ace index 3. Type = allow SID = S-1-3-0 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0xb perms rwx
[2010/09/03 12:08:57.156329, 10] smbd/posix_acls.c:2824(set_canon_ace_list)
  canon_ace index 4. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1117 uid 2005 (2005) SMB_ACL_USER ace_flags = 0x3 perms rwx
[2010/09/03 12:08:57.156393, 10] smbd/posix_acls.c:2824(set_canon_ace_list)
  canon_ace index 5. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0xb perms ---
[2010/09/03 12:08:57.156416, 10] smbd/posix_acls.c:2824(set_canon_ace_list)
  canon_ace index 6. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER_OBJ ace_flags = 0x3 perms rwx
[2010/09/03 12:08:57.156480, 10] smbd/posix_acls.c:2824(set_canon_ace_list)
  canon_ace index 7. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1480 uid 2003 (2003) SMB_ACL_USER ace_flags = 0x3 perms rwx
[2010/09/03 12:08:57.156545, 10] smbd/posix_acls.c:2824(set_canon_ace_list)
  canon_ace index 8. Type = allow SID = S-1-5-21-395126150-784156682-2033415169-1366 uid 2006 (2006) SMB_ACL_USER ace_flags = 0x3 perms rwx
[2010/09/03 12:08:57.156610, 10] modules/vfs_posixacl.c:89(posixacl_sys_acl_set_file)
  Calling acl_set_file: Flex, 1
[2010/09/03 12:08:57.156630, 10] modules/vfs_posixacl.c:282(smb_acl_to_posix)
  Initial ACL is:
[2010/09/03 12:08:57.156649, 10] modules/vfs_posixacl.c:297(smb_acl_to_posix)
  Iteration 0: ACL type is USER
[2010/09/03 12:08:57.156667, 10] modules/vfs_posixacl.c:332(smb_acl_to_posix)
  Iteration 0: ACL uid is 2004.
[2010/09/03 12:08:57.156686, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 0 is:
  user:2004:rwx
[2010/09/03 12:08:57.156756, 10] modules/vfs_posixacl.c:297(smb_acl_to_posix)
  Iteration 1: ACL type is USER
[2010/09/03 12:08:57.156774, 10] modules/vfs_posixacl.c:332(smb_acl_to_posix)
  Iteration 1: ACL uid is 2001.
[2010/09/03 12:08:57.156793, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 1 is:
  user:2001:rwx
  user:2004:rwx
[2010/09/03 12:08:57.156909, 10] modules/vfs_posixacl.c:309(smb_acl_to_posix)
  Iteration 2: ACL type is GROUP_OBJ
[2010/09/03 12:08:57.156928, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 2 is:
  user:2001:rwx
  user:2004:rwx
  group::---
[2010/09/03 12:08:57.157034, 10] modules/vfs_posixacl.c:301(smb_acl_to_posix)
  Iteration 3: ACL type is USER_OBJ
[2010/09/03 12:08:57.157052, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 3 is:
  user::rwx
  user:2001:rwx
  user:2004:rwx
  group::---
[2010/09/03 12:08:57.157163, 10] modules/vfs_posixacl.c:297(smb_acl_to_posix)
  Iteration 4: ACL type is USER
[2010/09/03 12:08:57.157181, 10] modules/vfs_posixacl.c:332(smb_acl_to_posix)
  Iteration 4: ACL uid is 2005.
[2010/09/03 12:08:57.157200, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 4 is:
  user::rwx
  user:2001:rwx
  user:2004:rwx
  user:2005:rwx
  group::---
[2010/09/03 12:08:57.157348, 10] modules/vfs_posixacl.c:313(smb_acl_to_posix)
  Iteration 5: ACL type is OTHER
[2010/09/03 12:08:57.157367, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 5 is:
  user::rwx
  user:2001:rwx
  user:2004:rwx
  user:2005:rwx
  group::---
  other::---
[2010/09/03 12:08:57.157518, 10] modules/vfs_posixacl.c:301(smb_acl_to_posix)
  Iteration 6: ACL type is USER_OBJ
[2010/09/03 12:08:57.157536, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 6 is:
  user::rwx
  user::rwx
  user:2001:rwx
  user:2004:rwx
  user:2005:rwx
  group::---
  other::---
[2010/09/03 12:08:57.157694, 10] modules/vfs_posixacl.c:297(smb_acl_to_posix)
  Iteration 7: ACL type is USER
[2010/09/03 12:08:57.157712, 10] modules/vfs_posixacl.c:332(smb_acl_to_posix)
  Iteration 7: ACL uid is 2003.
[2010/09/03 12:08:57.157730, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 7 is:
  user::rwx
  user::rwx
  user:2001:rwx
  user:2003:rwx
  user:2004:rwx
  user:2005:rwx
  group::---
  other::---
[2010/09/03 12:08:57.157939, 10] modules/vfs_posixacl.c:297(smb_acl_to_posix)
  Iteration 8: ACL type is USER
[2010/09/03 12:08:57.157958, 10] modules/vfs_posixacl.c:332(smb_acl_to_posix)
  Iteration 8: ACL uid is 2006.
[2010/09/03 12:08:57.157976, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 8 is:
  user::rwx
  user::rwx
  user:2001:rwx
  user:2003:rwx
  user:2004:rwx
  user:2005:rwx
  user:2006:rwx
  group::---
  other::---
[2010/09/03 12:08:57.158209, 10] modules/vfs_posixacl.c:317(smb_acl_to_posix)
  Iteration 9: ACL type is MASK
[2010/09/03 12:08:57.158228, 10] modules/vfs_posixacl.c:354(smb_acl_to_posix)
  ACL after iteration 9 is:
  user::rwx
  user::rwx
  user:2001:rwx
  user:2003:rwx
  user:2004:rwx
  user:2005:rwx
  user:2006:rwx
  group::---
  mask::rwx
  other::---
[2010/09/03 12:08:57.158468, 10] modules/vfs_posixacl.c:357(smb_acl_to_posix)
  Final ACL is:
  user::rwx
  user::rwx
  user:2001:rwx
  user:2003:rwx
  user:2004:rwx
  user:2005:rwx
  user:2006:rwx
  group::---
  mask::rwx
  other::---
[2010/09/03 12:08:57.158712,  0] modules/vfs_posixacl.c:360(smb_acl_to_posix)
  smb_acl_to_posix: ACL is invalid for set (Invalid argument)
[2010/09/03 12:08:57.158740,  2] smbd/posix_acls.c:2895(set_canon_ace_list)
  set_canon_ace_list: sys_acl_set_file type directory default failed for file Flex (Invalid argument).
[2010/09/03 12:08:57.158763,  3] smbd/posix_acls.c:3979(set_nt_acl)
  set_nt_acl: failed to set default acl on directory Flex (Invalid argument).
[2010/09/03 12:08:57.158791,  3] smbd/error.c:80(error_packet_set)
  error packet at smbd/nttrans.c(1909) cmd=160 (SMBnttrans) NT_STATUS_INVALID_PARAMETER

Comment 1 lennig 2011-01-25 06:49:51 UTC

In my situation error occurs only if user is the owner of directory.

Comment 2 Adam Buchbinder 2011-03-03 20:54:07 UTC

This looks like it might be the same issue as bug 7509; is it? It seems to relate to files or shares which have 'CREATOR GROUP' and 'CREATOR OWNER' listed in their ACLs in the Windows security properties view.

Comment 3 Jeremy Allison 2011-09-02 01:10:09 UTC


*** This bug has been marked as a duplicate of bug 7509 ***