smb2 create null dacl smbtorture test

Steve French smfrench at gmail.com
Fri Oct 14 05:18:10 UTC 2016


I was looking at smbtorture smb2.create subtests and noticed that
smbtorture.create.nulldacl fails against Windows and Samba, so was a
little puzzled whether it is meant to be a valid test or whether there
is additional configuration needed for it?

sfrench at ubuntu:~/cifs-2.6$ /usr/local/samba/bin/smbtorture
//localhost/test -U admin%password smb2.create.nulldacl
smbtorture 4.6.0pre1-GIT-fa99ae7
Using seed 1476421998
time: 2016-10-14 00:13:18.036173
test: nulldacl
time: 2016-10-14 00:13:18.036622
TESTING SEC_DESC WITH A NULL DACL
creating a file with a empty sd
get the original sd
set NULL DACL
get the sd
time: 2016-10-14 00:13:18.055395
failure: nulldacl [
../source4/torture/smb2/create.c:1356: DACL has been created on the server!


To windows it also fails:
sfrench at ubuntu:~/cifs-2.6$ /usr/local/samba/bin/smbtorture
//192.168.93.140/public -U admin%password smb2.create.nulldacl
smbtorture 4.6.0pre1-GIT-fa99ae7
Using seed 1476422194
time: 2016-10-14 00:16:34.346344
test: nulldacl
time: 2016-10-14 00:16:34.346766
TESTING SEC_DESC WITH A NULL DACL
creating a file with a empty sd
get the original sd
set NULL DACL
get the sd
try open for read control
try open for write
try open for read
try open for generic write
try open for generic read
set DACL with 0 aces
get the sd
try open for read control
try open for write => access_denied
time: 2016-10-14 00:16:34.441736
failure: nulldacl [
(../source4/torture/smb2/create.c:1454) Incorrect status
NT_STATUS_OBJECT_NAME_NOT_FOUND - should be NT_STATUS_ACCESS_DENIED

Ideas?
-- 
Thanks,

Steve



More information about the samba-technical mailing list