[cifs-protocol] View effective Access - Parameter is incorrect
abartlet at samba.org
Mon Mar 2 21:00:22 MST 2015
On Tue, 2015-03-03 at 15:12 +1300, Andrew Bartlett wrote:
> Using a Windows 8, and a Windows 8.1 Pro machine, joined to a Samba
> I open up \\$SERVER\sysvol and right-click on one of the files. I then
> select properties, security, advanced, effective access.
> I select one of the other users in my domain (I logged in as
> administrator), and then 'view effective access'. The error I get is
> '0x80070057 the parameter is incorrect'.
> I can't see anything odd, except that in frame 91-93 the client asks for
> a TGS-REQ (S4U2Self) for a server of Administrator at REALM as an
> enterprise principal, perhaps being denied because Administrator is not
> a server account.
> Samba master gives 'KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN (see trace)
> Samba 4.2 give 'KRB5KDC_ERR_POLICY' (not attached)
> Is this the issue, if so, cue my discussion about MS-KILE
> clarifications :-)
Oddly, when looking at a comparitive trace of Windows 8.1 to Windows
2012R2, I can't even see a S4U2Self request.
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
More information about the cifs-protocol