smb2 create null dacl smbtorture test

[Stefan Metzmacher]

Hi Steve,

Am 14.10.2016 um 07:18 schrieb Steve French:
> I was looking at smbtorture smb2.create subtests and noticed that
> smbtorture.create.nulldacl fails against Windows and Samba, so was a
> little puzzled whether it is meant to be a valid test or whether there
> is additional configuration needed for it?
> 
> sfrench at ubuntu:~/cifs-2.6$ /usr/local/samba/bin/smbtorture
> //localhost/test -U admin%password smb2.create.nulldacl
> smbtorture 4.6.0pre1-GIT-fa99ae7
> Using seed 1476421998
> time: 2016-10-14 00:13:18.036173
> test: nulldacl
> time: 2016-10-14 00:13:18.036622
> TESTING SEC_DESC WITH A NULL DACL
> creating a file with a empty sd
> get the original sd
> set NULL DACL
> get the sd
> time: 2016-10-14 00:13:18.055395
> failure: nulldacl [
> ../source4/torture/smb2/create.c:1356: DACL has been created on the server!
> 
> 
> To windows it also fails:
> sfrench at ubuntu:~/cifs-2.6$ /usr/local/samba/bin/smbtorture
> //192.168.93.140/public -U admin%password smb2.create.nulldacl
> smbtorture 4.6.0pre1-GIT-fa99ae7
> Using seed 1476422194
> time: 2016-10-14 00:16:34.346344
> test: nulldacl
> time: 2016-10-14 00:16:34.346766
> TESTING SEC_DESC WITH A NULL DACL
> creating a file with a empty sd
> get the original sd
> set NULL DACL
> get the sd
> try open for read control
> try open for write
> try open for read
> try open for generic write
> try open for generic read
> set DACL with 0 aces
> get the sd
> try open for read control
> try open for write => access_denied
> time: 2016-10-14 00:16:34.441736
> failure: nulldacl [
> (../source4/torture/smb2/create.c:1454) Incorrect status
> NT_STATUS_OBJECT_NAME_NOT_FOUND - should be NT_STATUS_ACCESS_DENIED

What Windows version are you testing against?

It works against Windows 2008R2 and Windows 2012R2 just fine for me.

Can you provide captures?

metze

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20161014/071a2b3e/signature.sig>