[Samba] still ACL bug in 3.0.14a

Yannick Bergeron burgergold at hotmail.com
Mon Apr 18 15:06:01 GMT 2005


I've tried 3.0.14a this morning with --with-acl-support and it wasn't 
working. I've applied your patch to posix_acls.c, rebuild everything from 
scratch and the problem persist.

logfile

[2005/04/18 11:03:36, 10] smbd/reply.c:can_delete(1502)
  can_delete: CBBSP/CBBSP6/New Text Document.txt, dirtype = 0
[2005/04/18 11:03:36, 8] smbd/dosmode.c:dos_mode(283)
  dos_mode: CBBSP/CBBSP6/New Text Document.txt
[2005/04/18 11:03:36, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
  dos_mode_from_sbuf returning a
[2005/04/18 11:03:36, 8] smbd/dosmode.c:dos_mode(315)
  dos_mode returning a
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_file(2289)
  Entering sys_acl_get_file
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_file(2290)
  path_p is CBBSP/CBBSP6
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_file(2309)
  Got facl and returned it
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_init(2730)
  Entering sys_acl_init
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_init(2743)
  Exiting sys_acl_init
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_file(2331)
  acl_entry is 807235736
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_file(2332)
  acl_last(file_acl) id 807235736
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_file(2426)
  i is 1
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_file(2455)
  idp->id_len = 8
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_file(2480)
  new_acl_entry->ace_access = 448
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_file(2426)
  i is 2
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_file(2455)
  idp->id_len = 8
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_file(2480)
  new_acl_entry->ace_access = 448
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_file(2426)
  i is 3
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_file(2455)
  idp->id_len = 8
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_file(2480)
  new_acl_entry->ace_access = 0
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_entry(2192)
  This is the count: 0
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_entry(2210)
  *entry_p is 804394468
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_entry(2211)
  *entry_p->ace_access is 448
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_tag_type(2226)
  the tagtype is 3
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_permset(2253)
  Starting AIX sys_acl_get_permset
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_permset(2255)
  **permset_p is 448
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_permset(2262)
  Ending AIX sys_acl_get_permset
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_entry(2192)
  This is the count: 1
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_entry(2210)
  *entry_p is 804394468
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_entry(2211)
  *entry_p->ace_access is 448
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_tag_type(2226)
  the tagtype is 4
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_permset(2253)
  Starting AIX sys_acl_get_permset
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_permset(2255)
  **permset_p is 448
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_permset(2262)
  Ending AIX sys_acl_get_permset
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_entry(2192)
  This is the count: 2
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_entry(2210)
  *entry_p is 804394468
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_entry(2211)
  *entry_p->ace_access is 0
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_tag_type(2226)
  the tagtype is 5
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_permset(2253)
  Starting AIX sys_acl_get_permset
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_permset(2255)
  **permset_p is 0
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_permset(2262)
  Ending AIX sys_acl_get_permset
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_entry(2192)
  This is the count: -1
[2005/04/18 11:03:36, 10] lib/sysacls.c:sys_acl_get_entry(2192)
  This is the count: -1
[2005/04/18 11:03:36, 10] 
smbd/posix_acls.c:check_posix_acl_group_write(3912)
  check_posix_acl_group_write: ret = -1 before check_stat:
[2005/04/18 11:03:36, 10] 
smbd/posix_acls.c:check_posix_acl_group_write(3938)
  check_posix_acl_group_write: file CBBSP/CBBSP6 failed to match on user or 
group in token (ret = -1).
[2005/04/18 11:03:36, 10] 
smbd/posix_acls.c:check_posix_acl_group_write(3945)
  check_posix_acl_group_write: file CBBSP/CBBSP6 returning (ret = -1).
[2005/04/18 11:03:36, 3] smbd/error.c:error_packet(129)
  error packet at smbd/nttrans.c(800) cmd=162 (SMBntcreateX) 
NT_STATUS_ACCESS_DENIED

>From: "Gerald (Jerry) Carter" <jerry at samba.org>
>To: Jeremy Allison <jra at samba.org>
>CC: Yannick Bergeron <burgergold at hotmail.com>
>Subject: Re: [Samba] still ACL bug in 3.0.14a
>Date: Sat, 16 Apr 2005 11:52:11 -0500
>
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>Jeremy Allison wrote:
>| On Fri, Apr 15, 2005 at 01:31:40PM -0700, Jeremy Allison wrote:
>|>I'm starting to think this is the cause of the problems for people.
>|>I can check this by compiling without acl support and seeing if I
>|>can reproduce the bug.
>|
>| Yep - confirmed it. For the people who are reporting this bug, you're
>| failing to add the --with-acl-support when configuring Samba.
>|
>| I agree this is a change compared to 3.0.11, but is obviously
>| needed when you're dealing with ACLs. I'll talk with Jerry to
>| see if we can get a tech note prepared.
>
>Jeremy,
>
>I agree that the current behavior is correct and necessary for
>the "can delete" check we need.     We'll get something mailed
>out on Monday.
>
>
>
>
>
>cheers, jerry
>=====================================================================
>Alleviating the pain of Windows(tm)      ------- http://www.samba.org
>GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
>"I never saved anything for the swim back."     Ethan Hawk in Gattaca
>-----BEGIN PGP SIGNATURE-----
>Version: GnuPG v1.2.5 (GNU/Linux)
>Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
>
>iD8DBQFCYUK7IR7qMdg1EfYRAgcDAJ0TvPLcJQ0EHvTdabaK/xXCo6Js2wCg5G3X
>BrBDGsPhWX3vXVTBwPUEJ/U=
>=DaL3
>-----END PGP SIGNATURE-----




More information about the samba mailing list