Samba 2.2.0 problems editing ACLs via NT/Win9x

[Jim McDonough]

>> structure, instead of 2 or 3 on NT).  Here's how I think the request
goes
>> (borrowing names from other structs in rpc_srvsvc.h):
>> uint32  ptr_srv_name;
>> UNISTR2 uni_srv_name;
>> align to 4 bytes
>> uint32  ptr_qual_name;
>> UNISTR2 uni_qual_name;
>> align to 4 bytes
>> UNISTR2 uni_file_name;
>> align to 4 bytes
>> uint32 unknown; (is 0x00000007 in all my test cases)
>> uint32 unknown; (I've only seen 0)
>> uint32 unknown; (I've only seen 0)
>> uint16 unknown; (my guess is a status code, but others' experiences
would
>> be appreciated here, only seen 0)
>> align to 4 bytes
>
>a status is really strange in a query
I agree, and today I can't remember why yesterday I even thought this (I
was up late playing hockey the night before).

>and an alignment at the end of a struct is even more strange.
>
>Rule of thumb: you align BEFORE the data you want to marshall.
Again, I agree, but the number of bytes isn't always the same...that's why
I was guessing alignment...

Then, in the response:
>> then it gets kind of fuzzy for me...here's what I get next (actual
data):
>> 01 00 04 80 14 00 00 00 24 00 00 00 00 00 00 00  (the 4th byte was 84
>> sometimes)
>> 40 00 00 00 01 02 00 00 00 00 00 05 20 00 00 00
>> 20 02 00 00 01 05 00 00 00 00 00 05 15 00 00 00
>> F8 9F B4 74 DB EB 0C 50 83 BA F4 7F 01 02 00 00
>> 02 00
>
>I can decrypt at least 2 SID above.
>
>1-0x5-0x20-0x0220
>1-0x5-0x15-0x74b49ff8-0x500cebdb-7ff4ba83

The second SID is probably the user which opened the resource.  At least, I
believe it is the SID of my local userid on the Win2K box (how should I
check this?), which has the same userid/password as the domain user I
logged into the Win98 box with (current 2.2 cvs as PDC).  How would I check
what the first SID is?

Jim




----------------------------
Jim McDonough
Linux Technology Center
IBM Boulder

Notes: Jim McDonough/Boulder/IBM @ IBMUS
VNET: JMCD at IBMUSM54
Internet: jmcd at us.ibm.com

Phone: (303) 924-5822
T/L: 263-5822