[Samba] What is WERR_ACCESS_DENIED

[Rob Tanner]

Hi,

I searched through the list archives and saw this question asked but not 
answered, so I'm hoping someone can help me.

I am trying to use rpcclient to set a printer driver and it's failing 
with the error message: WERR_ACCESS_DENIED.  I've included the full 
output of the command at debug 4 level below.

Here's the probably pertinent information.  First, this use to work.  
But since I did the initial printer setup I have also modified samba to 
use the security=ads model, making full use of winbind such that as a 
user I login as DOMAIN_NAME\user (e.g., CATNET\rtanner).  I suspect 
that's what's causing the problem, but I'm not sure how to get around it.

Any ideas?

Thanks,
Rob


****************  rpcclient output ******************

[root at berkeley ~]# rpcclient berkeley -d 4 -U berkeley\\root at password -c 
"setdriver \"CircDesk LJ5M\" \"HP LaserJet 5/5M - Standard\""
added interface ip=10.171.255.21 bcast=10.171.255.255 nmask=255.255.0.0
Connecting to host=berkeley
Connecting to 10.171.255.21 at port 445
Serverzone is 25200
Doing spnego session setup (blob length=109)
got OID=1 2 840 113554 1 2 2
got OID=1 2 840 48018 1 2 2
got OID=1 3 6 1 4 1 311 2 2 10
got principal=berkeley$@CATNET.WFO.LINFIELD.EDU
Got challenge flags:
Got NTLMSSP neg_flags=0x60890215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_CHAL_TARGET_INFO
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x60080215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x60080215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
lsa_io_sec_qos: length c does not match size 8
result was WERR_ACCESS_DENIED

-- 

Rob Tanner
UNIX Services Manager
Linfield College, McMinnville OR