[Samba] privileges in 3.11?

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dmitry Melekhov wrote:

| I just checked latest svn with
| svn co svn://svnanon.samba.org/samba/branches/SAMBA_3_0_RELEASE
| samba-SAMBA_3_0_RELEASE
|
| And I still have the same problem.
|
| net  -S dm -U root rpc rights grant  'TEST\dm'  SeMachineAccountPrivilege
| Password:
| Failed to grant privileges for TEST\dm (NT_STATUS_ACCESS_DENIED)
|
| log.smb is attached...

That was just a partial log file.  I need to see the initial
SMBsessionsetup&X call.  The only way to get back
NT_STATUS_ACCESS_DENIED herre is :

if ( user.uid != sec_initial_uid()
	&& !nt_token_check_domain_rid( p->pipe_user.nt_user_token,
	DOMAIN_GROUP_RID_ADMINS ) )
{
	return NT_STATUS_ACCESS_DENIED;
}

| Now (with latest SVN) it looks better :
|
| net  -S dm -U dm rpc rights grant  'TEST\mail'
| SeMachineAccountPrivilege
| Password:
| Failed to grant privileges for TEST\dm (NT_STATUS_ACCESS_DENIED)

Can you send me your smb.conf, the output from `id dm`, the
output from 'net groupmap list', and the output from 'net getlocalsid'?
Thanks.




cheers, jerry
=====================================================================
Alleviating the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"I never saved anything for the swim back."     Ethan Hawk in Gattaca
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCA30EIR7qMdg1EfYRArV/AJ9s+i3noq2D5YhJ4+AqYggxD9JW0ACeO8lJ
4uhRmQhLUqf2HklxgqBBi0A=
=WuGB
-----END PGP SIGNATURE-----