[Samba] privileges in 3.11?

[Tilo Lutz]

Hi

> > I try to assing privileges in 3.11 and get error.
> > 
> > If  I try to do this from root:
> > 
> > net -S dm -U root rpc rights grant  'TEST\mail'
> SeMachineAccountPrivilege
> > Password:
> > Failed to grant privileges for TEST\dm (NT_STATUS_ACCESS_DENIED)
> 
> > I use tdbsam...
> I got the same problem. I use the ldap backend.

Here's the debug output:
home:/usr/local/sbin # net rpc rights grant tilo SeMachineAccountPrivilege
-d 3
[2005/02/03 12:22:36, 3] param/loadparm.c:lp_load(3915)
  lp_load: refreshing parameters
[2005/02/03 12:22:36, 3] param/loadparm.c:init_globals(1314)
  Initialising global parameters
[2005/02/03 12:22:36, 3] param/params.c:pm_process(566)
  params.c:pm_process() - Processing configuration file
"/etc/samba/smb.conf"
[2005/02/03 12:22:36, 3] param/loadparm.c:do_section(3408)
  Processing section "[global]"
[2005/02/03 12:22:36, 2] lib/interface.c:add_interface(79)
  added interface ip=192.168.0.7 bcast=192.168.255.255 nmask=255.255.0.0
[2005/02/03 12:22:36, 2] lib/interface.c:add_interface(79)
  added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
Password:
[2005/02/03 12:22:39, 3] libsmb/cliconnect.c:cli_start_connection(1389)
  Connecting to host=127.0.0.1
[2005/02/03 12:22:39, 3] lib/util_sock.c:open_socket_out(752)
  Connecting to 127.0.0.1 at port 445
[2005/02/03 12:22:39, 3] libsmb/cliconnect.c:cli_session_setup_spnego(708)
  Doing spnego session setup (blob length=58)
[2005/02/03 12:22:39, 3] libsmb/cliconnect.c:cli_session_setup_spnego(733)
  got OID=1 3 6 1 4 1 311 2 2 10
[2005/02/03 12:22:39, 3] libsmb/cliconnect.c:cli_session_setup_spnego(740)
  got principal=NONE
[2005/02/03 12:22:39, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(878)
  Got challenge flags:
[2005/02/03 12:22:39, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
  Got NTLMSSP neg_flags=0x60890215
[2005/02/03 12:22:39, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(900)
  NTLMSSP: Set final flags:
[2005/02/03 12:22:39, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
  Got NTLMSSP neg_flags=0x60080215
[2005/02/03 12:22:39, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319)
  NTLMSSP Sign/Seal - Initialising with flags:
[2005/02/03 12:22:39, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
  Got NTLMSSP neg_flags=0x60080215
[2005/02/03 12:22:39, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181)
  lsa_io_sec_qos: length c does not match size 8
[2005/02/03 12:22:39, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181)
  lsa_io_sec_qos: length c does not match size 8
Failed to grant privileges for tilo (NT_STATUS_ACCESS_DENIED)
[2005/02/03 12:22:39, 1] utils/net_rpc.c:run_rpc_command(138)
  rpc command function failed! (NT_STATUS_ACCESS_DENIED)
[2005/02/03 12:22:39, 2] utils/net.c:main(859)
  return code = 1
home:/usr/local/sbin #


Cheers, Tilo