Looks like we do not have self-tests for smbcacls

Richard Sharpe realrichardsharpe at gmail.com
Wed Jul 12 00:34:56 UTC 2017


Hi folks,

I was trying to set an ACL via smbcacls with the following command:

smbcacls //localhost/someshare some-dir --sddl -Uetc -S
'some-long-sddl-dumped-from-windows-with-smbcacls'

and I got this error:

../source3/rpc_client/cli_pipe.c:568: RPC fault code
DCERPC_NCA_S_OP_RNG_ERROR received from host localhost!

And when I look in the logfile I see:

              level                    : LSA_POLICY_INFO_DOMAIN (3)
[2017/07/12 00:27:29.877240,  4, pid=24646, effective(361800500,
361800513), real(361800500, 0), class=rpc_srv]
../source3/rpc_server/srv_pipe.c:1485(api_rpcTNP)
  api_rpcTNP: fault(469827586) return.
[2017/07/12 00:27:29.877257,  1, pid=24646, effective(361800500,
361800513), real(361800500, 0)]
../librpc/ndr/ndr.c:413(ndr_print_debug)
       &r: struct ncacn_packet
          rpc_vers                 : 0x05 (5)
          rpc_vers_minor           : 0x00 (0)
          ptype                    : DCERPC_PKT_FAULT (3)
          pfc_flags                : 0x23 (35)
                 1: DCERPC_PFC_FLAG_FIRST
                 1: DCERPC_PFC_FLAG_LAST
                 0: DCERPC_PFC_FLAG_PENDING_CANCEL_OR_HDR_SIGNING
                 0: DCERPC_PFC_FLAG_CONC_MPX
                 1: DCERPC_PFC_FLAG_DID_NOT_EXECUTE
                 0: DCERPC_PFC_FLAG_MAYBE
                 0: DCERPC_PFC_FLAG_OBJECT_UUID
          drep: ARRAY(4)
              [0]                      : 0x10 (16)
              [1]                      : 0x00 (0)
              [2]                      : 0x00 (0)
              [3]                      : 0x00 (0)
          frag_length              : 0x0020 (32)
          auth_length              : 0x0000 (0)
          call_id                  : 0x00000003 (3)
          u                        : union dcerpc_payload(case 3)
          fault: struct dcerpc_fault
              alloc_hint               : 0x00000000 (0)
              context_id               : 0x0000 (0)
              cancel_count             : 0x00 (0)
              status                   : DCERPC_NCA_S_OP_RNG_ERROR (469827586)
              _pad                     : DATA_BLOB length=4


-- 
Regards,
Richard Sharpe
(何以解憂?唯有杜康。--曹操)



More information about the samba-technical mailing list