question about privileges

[Jeremy Allison]

On Fri, Jun 24, 2011 at 12:45:59PM -0700, Herb Lewis wrote:
> When running samba 3.6.rc2 I am getting errors trying to change acls
> on files on the samba share from an XP client. I notice that samba is
> now looking at privileges and I get the following error
> 
> create_file_unixpath: open on testadmin.txt failed - SEC_FLAG_SYSTEM_SECURITY denied.
> create_file_unixpath: NT_STATUS_PRIVILEGE_NOT_HELD
> 
> This didn't happen on my older version of samba because that piece of code
> was in an #if 0. Where are these privileges set? Is this something I do
> on the DC or something in samba?

Does this happen on every ACL set ? It should only happen
when the client is trying to set an audit ACL, which would
only happen if the requested ACL contained one.

Jeremy.