[Samba] Getting spnego error with 3.0.21pre11 with smbcacls

[Henrik Zagerholm]

Hi Jeremy!

I'll do that. I guess it is only port 445 that si interesting for you  
or?

regards
henrik

21 okt 2005 kl. 19.14 skrev Jeremy Allison:

> On Fri, Oct 21, 2005 at 06:07:18PM +0200, Henrik Zagerholm wrote:
>
>> Hi all!
>>
>> Using smbcacls I can change OWNER of a remote file on a Win XP Pro
>> Box but I can't delete or add ACL without getting SPNEGO errors.
>> Error level 3 output attached:
>> [henke at fedora henke]# smbcacls -D 'ACL:BBI-DEV\beakid:ALLOWED/
>> 0/0x00100116' -U Admin%secret //192.168.1.124/Data 'Niva 1.txt' -d 3
>>
>> Connecting to host=192.168.1.124
>> Connecting to 192.168.1.124 at port 445
>> Doing spnego session setup (blob length=16)
>> server didn't supply a full spnego negprot
>> Got challenge flags:
>> Got NTLMSSP neg_flags=0x628a0215
>> NTLMSSP: Set final flags:
>> Got NTLMSSP neg_flags=0x60080215
>> NTLMSSP Sign/Seal - Initialising with flags:
>> Got NTLMSSP neg_flags=0x60080215
>> Connecting to host=192.168.1.124
>> Connecting to 192.168.1.124 at port 445
>> Doing spnego session setup (blob length=16)
>> server didn't supply a full spnego negprot
>> Got challenge flags:
>> Got NTLMSSP neg_flags=0x628a0215
>> NTLMSSP: Set final flags:
>> Got NTLMSSP neg_flags=0x60080215
>> NTLMSSP Sign/Seal - Initialising with flags:
>> Got NTLMSSP neg_flags=0x60080215
>> rpc_pipe_bind: Remote machine 192.168.1.124 pipe \lsarpc fnum 0x4000
>> bind request returned ok.
>> lsa_io_sec_qos: length c does not match size 8
>> NT_TRANSACT_SET_SECURITY_DESC failed
>> ERROR: secdesc set failed: NT_STATUS_ACCESS_DENIED
>>
>
> Can you send me an ethereal capture trace of this
> please ?
>
> Jeremy.
>