[Samba] Problems with access to share after upgrading to 3.0.23(a)

[Jeremy Allison]

On Thu, Jul 27, 2006 at 09:52:40PM +0300, Anton N. Breusov wrote:
> Hi!
> 
> I'm experiencing problems with access to one of shares on server
> with Samba working as PDC for windows clients, after I upgraded
> Samba from 3.0.22 to 3.0.23 (this problem also present in
> 3.0.23a). There are config section for this share:
> 
> ----------------------------------------------------------------
> [domain]
>         comment = Domain users exchange share
>         path = /home/special/domain
>         guest ok = No
>         writeable = Yes
>         create mask = 0664
>         directory mask = 0775
> ----------------------------------------------------------------
> 
> Access to directory in which share resides denied to "world", so
> only members of group "domain" can access this share:
> ----------------------------------------------------------------
> root#earth:~>ls -la /home/special/
> ...
> drwxr-x---   5 ntadm    domain    512  1 Jul 18:52 domain
> 
> In this group placed all users-members of domain, also me
> (antonz) :
> root#earth:~>cat /etc/group |grep domain
> domain:*:250:ntadm,guest,antonz,oksana,valent .....
> 
> root#earth:~>id antonz
> uid=1002(antonz) gid=1002(antonz) groups=1002(antonz), 0(wheel),
> 53(bind), 80(www), 103(sshspec), 200(staff), 201(admin),
> 202(automation), 250(domain)
> ----------------------------------------------------------------
> 
> And this group "domain" also has mapping to domain-wide group
> "Domain Users":
> 
> ----------------------------------------------------------------
> root#earth:~>net groupmap list
> ....
> Domain Users (S-1-5-21-3971777737-3877677318-3229927643-513) -> domain
> ----------------------------------------------------------------
> 
> Until recent upgrade everything was OK with access to this
> share, but now I'm receiving "Error reading drive error" from
> both Windows clients and smbclient:
> 
> ----------------------------------------------------------------
> root#earth:~>smbclient -I 10.25.1.1 -U antonz
> \\\\earth\\domain
> Password:
> Domain=[LIBRARY] OS=[Unix] Server=[Samba 3.0.23a]
> smb: \> ls
> NT_STATUS_NETWORK_ACCESS_DENIED listing \*
> 
>                 0 blocks of size 0. 61680 blocks available
> smb: \>

It would be interesting to see what the token looks like
for this access. Can you get a debug level 10 log from
the smbclient access please ?

Jeremy.