Created attachment 7712 [details] Samba configuration file I encounter strange NT_STATUS_ACCESS_DENIED troubles when trying to access group readable directories (filemode 750 or comparable ACL) from Windows 7 or Windows 2008 Terminal Server. Everything works fine using "smbclient -k" from a Linux Machine or older Versions of Windows (XP, Windows Server 2003). The Server is fully integrated into active directory. Username and group mapping seems to look fine. An anonymized Version of the smb.conf has been attached. Samba Version is this one (http://packages.debian.org/squeeze-backports/samba) from Debian. Here is what the logfile looks like (log level = 8) when trying to access a directory called "testdir-geg". I can also provide the logfile for a successful access from smbclient if desired. [2012/07/18 13:56:24.486879, 5] auth/token_util.c:527(debug_unix_user_token) UNIX token of user 18026 Primary group is 1800 and contains 6 supplementary groups Group[ 0]: 4294967295 Group[ 1]: 1802 Group[ 2]: 1000000 Group[ 3]: 1000001 Group[ 4]: 1000002 Group[ 5]: 55001 [2012/07/18 13:56:24.486974, 5] smbd/uid.c:317(change_to_user_internal) Impersonated user: uid=(0,18026), gid=(0,1800) [2012/07/18 13:56:24.487007, 4] smbd/vfs.c:780(vfs_ChDir) vfs_ChDir to /storage/debug-iad [2012/07/18 13:56:24.487052, 5] smbd/filename.c:257(unix_convert) unix_convert called on file "testdir-geg" [2012/07/18 13:56:24.487080, 5] smbd/filename.c:416(unix_convert) unix_convert begin: name = testdir-geg, dirpath = , start = testdir-geg [2012/07/18 13:56:24.487109, 5] smbd/statcache.c:143(stat_cache_add) stat_cache_add: Added entry (7f89d661e810:size b) TESTDIR-GEG -> testdir-geg [2012/07/18 13:56:24.487135, 5] smbd/filename.c:439(unix_convert) conversion of base_name finished testdir-geg -> testdir-geg [2012/07/18 13:56:24.487159, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [testdir-geg] [/storage/debug-iad] [2012/07/18 13:56:24.487188, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: testdir-geg reduced to /storage/debug-iad/testdir-geg [2012/07/18 13:56:24.487219, 5] smbd/files.c:126(file_new) allocated file structure 9869, fnum = 13965 (1 used) [2012/07/18 13:56:24.487256, 3] smbd/dosmode.c:159(unix_mode) unix_mode(testdir-geg) returning 0744 [2012/07/18 13:56:24.487283, 8] smbd/dosmode.c:621(dos_mode) dos_mode: testdir-geg [2012/07/18 13:56:24.487308, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2012/07/18 13:56:24.487338, 8] smbd/dosmode.c:672(dos_mode) dos_mode returning d [2012/07/18 13:56:24.487388, 4] smbd/open.c:2069(open_file_ntcreate) calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask= 0x81, open_access_mask = 0x81 [2012/07/18 13:56:24.487429, 5] smbd/files.c:464(file_free) freed files structure 13965 (0 used) [2012/07/18 13:56:24.487455, 5] smbd/open.c:2597(open_directory) open_directory: opening directory testdir-geg, access_mask = 0x81, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attribut es = 0x10 [2012/07/18 13:56:24.487583, 3] smbd/error.c:81(error_packet_set) error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED