[cifs-protocol] View effective Access - Parameter is incorrect

[Andrew Bartlett]

Using a Windows 8, and a Windows 8.1 Pro machine, joined to a Samba
domain.

I open up \\$SERVER\sysvol and right-click on one of the files.  I then
select properties, security, advanced, effective access.

I select one of the other users in my domain (I logged in as
administrator), and then 'view effective access'.  The error I get is
'0x80070057 the parameter is incorrect'.

I can't see anything odd, except that in frame 91-93 the client asks for
a TGS-REQ (S4U2Self) for a server of Administrator at REALM as an
enterprise principal, perhaps being denied because Administrator is not
a server account. 

Samba master gives 'KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN (see trace)
Samba 4.2 give 'KRB5KDC_ERR_POLICY' (not attached)

Is this the issue, if so, cue my discussion about MS-KILE
clarifications :-)

Thanks,

Andrew Bartlett
-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba



-------------- next part --------------
A non-text attachment was scrubbed...
Name: win8-view-effective-access.pcapng
Type: application/x-pcapng
Size: 53876 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20150303/4d5cc130/attachment-0001.bin>