Bug 9053 - Permission Problems with Windows7 and Windows Server 2008
Summary: Permission Problems with Windows7 and Windows Server 2008
Status: NEW
Alias: None
Product: Samba 3.6
Classification: Unclassified
Component: File services (show other bugs)
Version: 3.6.6
Hardware: x86 Linux
: P5 major
Target Milestone: ---
Assignee: Volker Lendecke
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-07-19 09:55 UTC by Sven Geggus
Modified: 2013-07-06 17:17 UTC (History)
0 users

See Also:

Attachments
Samba configuration file (1.09 KB, text/plain)
2012-07-19 09:55 UTC, Sven Geggus 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sven Geggus 2012-07-19 09:55:23 UTC 
Created attachment 7712 [details]
Samba configuration file

I encounter strange NT_STATUS_ACCESS_DENIED troubles when trying to access group readable directories (filemode 750 or comparable ACL) from Windows 7 or Windows 2008 Terminal Server.

Everything works fine using "smbclient -k" from a Linux Machine or older Versions of Windows (XP, Windows Server 2003).

The Server is fully integrated into active directory. Username and group mapping seems to look fine.

An anonymized Version of the smb.conf has been attached. Samba Version is this one (http://packages.debian.org/squeeze-backports/samba) from Debian.

Here is what the logfile looks like (log level = 8) when trying to access a directory called "testdir-geg". I can also provide the logfile for a successful access from smbclient if desired.

[2012/07/18 13:56:24.486879,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 18026
  Primary group is 1800 and contains 6 supplementary groups
  Group[  0]: 4294967295
  Group[  1]: 1802
  Group[  2]: 1000000
  Group[  3]: 1000001
  Group[  4]: 1000002
  Group[  5]: 55001
[2012/07/18 13:56:24.486974,  5] smbd/uid.c:317(change_to_user_internal)
  Impersonated user: uid=(0,18026), gid=(0,1800)
[2012/07/18 13:56:24.487007,  4] smbd/vfs.c:780(vfs_ChDir)
  vfs_ChDir to /storage/debug-iad
[2012/07/18 13:56:24.487052,  5] smbd/filename.c:257(unix_convert)
  unix_convert called on file "testdir-geg"
[2012/07/18 13:56:24.487080,  5] smbd/filename.c:416(unix_convert)
  unix_convert begin: name = testdir-geg, dirpath = , start = testdir-geg
[2012/07/18 13:56:24.487109,  5] smbd/statcache.c:143(stat_cache_add)
  stat_cache_add: Added entry (7f89d661e810:size b) TESTDIR-GEG -> testdir-geg
[2012/07/18 13:56:24.487135,  5] smbd/filename.c:439(unix_convert)
  conversion of base_name finished testdir-geg -> testdir-geg
[2012/07/18 13:56:24.487159,  3] smbd/vfs.c:905(check_reduced_name)
  check_reduced_name [testdir-geg] [/storage/debug-iad]
[2012/07/18 13:56:24.487188,  3] smbd/vfs.c:1039(check_reduced_name)
  check_reduced_name: testdir-geg reduced to /storage/debug-iad/testdir-geg
[2012/07/18 13:56:24.487219,  5] smbd/files.c:126(file_new)
  allocated file structure 9869, fnum = 13965 (1 used)
[2012/07/18 13:56:24.487256,  3] smbd/dosmode.c:159(unix_mode)
  unix_mode(testdir-geg) returning 0744
[2012/07/18 13:56:24.487283,  8] smbd/dosmode.c:621(dos_mode)
  dos_mode: testdir-geg
[2012/07/18 13:56:24.487308,  8] smbd/dosmode.c:199(dos_mode_from_sbuf)
  dos_mode_from_sbuf returning d
[2012/07/18 13:56:24.487338,  8] smbd/dosmode.c:672(dos_mode)
  dos_mode returning d
[2012/07/18 13:56:24.487388,  4] smbd/open.c:2069(open_file_ntcreate)
  calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask= 0x81, open_access_mask = 0x81
[2012/07/18 13:56:24.487429,  5] smbd/files.c:464(file_free)
  freed files structure 13965 (0 used)
[2012/07/18 13:56:24.487455,  5] smbd/open.c:2597(open_directory)
  open_directory: opening directory testdir-geg, access_mask = 0x81, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attribut
es = 0x10
[2012/07/18 13:56:24.487583,  3] smbd/error.c:81(error_packet_set)
  error packet at smbd/error.c(161) cmd=162 (SMBntcreateX)
NT_STATUS_ACCESS_DENIED