[Samba] Troubles deploying software via GPO on a simple share in DC
Lorenzo Milesi
lorenzo.milesi at yetopen.com
Fri Jun 17 13:58:02 UTC 2022
Hi.
I have a DC with a simple public share, with no ACL or such which could cause the weird behaviors of a "fileserver on a DC" (or at least this is what I learnt from past experiences - a simple share shouldn't trigger issues. But I must be mistaken, because...).
I use it to share files that should be available for GPO, like desktop background and MSI files. It used to work (TM) when it was first deployed, but for some time now, the share doesn't seem to work for the COMPUTER$ account.
I did test connection as a computer account user using
psexec.exe -i -s -d cmd.exe
then issue
net use \\dc1\pub /user:%COMPUTERNAME%$
and I got "The command completed successfully."
But if I check the logs when trying to deploy software via GPO, I get error 1612 which means "resource unavailable" or something like that. Accessing the share from a logged in user works flawlessly.
I'm pasting below the configuration and some debug logs. i.e., fusioninventory-agent-deployment.vbs is a script residing in the \\dc1\pub share which clients are unable to access. sfondo_lockscreen.ps1 is another.
To make sure, from a Win10 machine I've configured access to "Authenticated Users" to the whole share.
Please let me know if further information are required.
Thanks
Using Samba 4.13.17 from Van Belle repos, on Ubuntu 20.04.
/etc/samba/smb.conf
# Global parameters
[global]
server services = -dns
netbios name = DC1
realm = WDC.DOMAIN.IT
server role = active directory domain controller
workgroup = WDC
printcap name = /dev/null
load printers = no
disable spoolss = yes
printing = bsd
allow dns updates = disabled
interfaces = eth1 lo
bind interfaces only = yes
# Per Radius https://wiki.samba.org/index.php/Authenticating_Freeradius_against_Active_Directory
ntlm auth = mschapv2-and-ntlmv2-only
log file = /var/log/samba/%m.log
log level = 10 all:10
[sysvol]
path = /var/lib/samba/sysvol
read only = No
[netlogon]
path = /var/lib/samba/sysvol/wdc.domain.it/scripts
read only = No
[pub]
path = /dati/condivisioni/pub
read only = No
# Log
[2022/06/16 15:27:37.520209, 10, pid=487534, effective(3000047, 3000018), real(3000047, 0), class=smb2] ../../source3/smbd/smb2_server.c:3747(smbd_smb2_request_done_ex)
smbd_smb2_request_done_ex: mid [85] idx[1] status[NT_STATUS_OK] body[60] dyn[no:0] at ../../source3/smbd/smb2_close.c:146
[2022/06/16 15:27:37.520233, 10, pid=487534, effective(3000047, 3000018), real(3000047, 0), class=smb2_credits] ../../source3/smbd/smb2_server.c:963(smb2_set_operation_credit)
smb2_set_operation_credit: smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 8066/8192, total granted/max/low/range 127/8192/86/127
[2022/06/16 15:27:37.520260, 5, pid=487534, effective(3000047, 3000018), real(3000047, 0)] ../../libcli/smb/smb2_signing.c:173(smb2_signing_sign_pdu)
signed SMB2 message
[2022/06/16 15:27:37.520349, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=smb2] ../../source3/smbd/smb2_create.c:713(smbd_smb2_create_send)
smbd_smb2_create_send: name [fusioninventory-agent-deployment.vbs]
[2022/06/16 15:27:37.520508, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=smb2] ../../source3/smbd/smb2_create.c:1263(smbd_smb2_create_before_exec)
Got lease request size 52
[2022/06/16 15:27:37.520634, 1, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
state->lease_ptr: struct smb2_lease
lease_key: struct smb2_lease_key
data: ARRAY(2)
data : 0xed85f790a41dad18 (-1331385914217353960)
data : 0xcc591c619a106c09 (-3721912411522831351)
lease_state : 0x00000007 (7)
1: SMB2_LEASE_READ
1: SMB2_LEASE_HANDLE
1: SMB2_LEASE_WRITE
lease_flags : 0x00000000 (0)
lease_duration : 0x0000000000000000 (0)
parent_lease_key: struct smb2_lease_key
data: ARRAY(2)
data : 0x0000000000000000 (0)
data : 0x0000000000000000 (0)
lease_version : 0x0002 (2)
lease_epoch : 0x0000 (0)
[2022/06/16 15:27:37.521662, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=smb2] ../../source3/smbd/smb2_create.c:818(smbd_smb2_create_send)
smbd_smb2_create_send: open execution phase
[2022/06/16 15:27:37.521787, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/filename.c:987(unix_convert)
unix_convert: Called on file [fusioninventory-agent-deployment.vbs]
[2022/06/16 15:27:37.521916, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/statcache.c:286(stat_cache_lookup)
stat_cache_lookup: lookup failed for name [0000000000000000 at FUSIONINVENTORY-AGENT-DEPLOYMENT.VBS]
[2022/06/16 15:27:37.522040, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/filename.c:1171(unix_convert)
unix_convert: Begin: name [fusioninventory-agent-deployment.vbs] dirpath [.] name [fusioninventory-agent-deployment.vbs]
[2022/06/16 15:27:37.522175, 5, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/statcache.c:168(stat_cache_add)
stat_cache_add: Added entry (55d42d91d870:size 35) 0000000000000000 at FUSIONINVENTORY-AGENT-DEPLOYMENT.VBS -> 0000000000000000 at fusioninventory-agent-deployment.vbs
[2022/06/16 15:27:37.522301, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/filename.c:1196(unix_convert)
unix_convert: Conversion of base_name finished [fusioninventory-agent-deployment.vbs] -> [fusioninventory-agent-deployment.vbs]
[2022/06/16 15:27:37.522438, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/filename.c:1377(unix_convert)
unix_convert: Conversion finished [fusioninventory-agent-deployment.vbs] -> [fusioninventory-agent-deployment.vbs]
[2022/06/16 15:27:37.522562, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=vfs] ../../source3/smbd/vfs.c:1327(check_reduced_name)
check_reduced_name: check_reduced_name [fusioninventory-agent-deployment.vbs] [/dati/condivisioni/pub]
[2022/06/16 15:27:37.522697, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=vfs] ../../source3/smbd/vfs.c:1389(check_reduced_name)
check_reduced_name realpath [fusioninventory-agent-deployment.vbs] -> [/dati/condivisioni/pub/fusioninventory-agent-deployment.vbs]
[2022/06/16 15:27:37.522822, 5, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=vfs] ../../source3/smbd/vfs.c:1495(check_reduced_name)
check_reduced_name: fusioninventory-agent-deployment.vbs reduced to /dati/condivisioni/pub/fusioninventory-agent-deployment.vbs
[2022/06/16 15:27:37.522945, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/open.c:6069(create_file_default)
create_file_default: create_file: access_mask = 0x120089 file_attributes = 0x0, share_access = 0x1, create_disposition = 0x1 create_options = 0x44 oplock_request = 0x100 private_flags = 0x0 ea_list = (nil), sd = (nil), dirfsp = /dati/condivisioni/pub, fname = fusioninventory-agent-deployment.vbs
[2022/06/16 15:27:37.523073, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/open.c:5584(create_file_unixpath)
create_file_unixpath: create_file_unixpath: access_mask = 0x120089 file_attributes = 0x0, share_access = 0x1, create_disposition = 0x1 create_options = 0x44 oplock_request = 0x100 private_flags = 0x0 ea_list = (nil), sd = (nil), fname = fusioninventory-agent-deployment.vbs
[2022/06/16 15:27:37.523201, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=locking] ../../source3/locking/leases_db.c:81(leases_db_key)
leases_db_key:
[2022/06/16 15:27:37.523326, 1, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&db_key: struct leases_db_key
client_guid : 001c51dc-ed78-11ec-b903-70c94e8975c2
lease_key: struct smb2_lease_key
data: ARRAY(2)
data : 0xed85f790a41dad18 (-1331385914217353960)
data : 0xcc591c619a106c09 (-3721912411522831351)
[2022/06/16 15:27:37.523756, 5, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)
dbwrap_lock_order_lock: check lock order 1 for /run/samba/smbXsrv_open_global.tdb
[2022/06/16 15:27:37.523885, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../lib/dbwrap/dbwrap.c:131(debug_lock_order)
lock order: 1:/run/samba/smbXsrv_open_global.tdb 2:<none> 3:<none> 4:<none>
[2022/06/16 15:27:37.524521, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Locking key 6FCE3A4D
[2022/06/16 15:27:37.524652, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../lib/dbwrap/dbwrap_tdb.c:153(db_tdb_fetch_locked_internal)
db_tdb_fetch_locked_internal: Allocated locked data 0x55d42e11a280
[2022/06/16 15:27:37.524808, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/smbXsrv_open.c:632(smbXsrv_open_global_verify_record)
smbXsrv_open_global_verify_record: empty value
[2022/06/16 15:27:37.524960, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/smbXsrv_open.c:750(smbXsrv_open_global_store)
smbXsrv_open_global_store: key '6FCE3A4D' stored
[2022/06/16 15:27:37.525091, 1, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&global_blob: struct smbXsrv_open_globalB
version : SMBXSRV_VERSION_0 (0)
seqnum : 0x00000001 (1)
info : union smbXsrv_open_globalU(case 0)
info0 : *
info0: struct smbXsrv_open_global0
db_rec : *
server_id: struct server_id
pid : 0x0000000000077046 (487494)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0xdcdffa20936bc84d (-2531029447739717555)
open_global_id : 0x6fce3a4d (1875786317)
open_persistent_id : 0x000000006fce3a4d (1875786317)
open_volatile_id : 0x00000000fb466882 (4215695490)
open_owner : S-1-5-21-3516824725-3155270197-1791756496-1215
open_time : Thu Jun 16 03:27:38 PM 2022 CEST
create_guid : 00000000-0000-0000-0000-000000000000
client_guid : 001c51dc-ed78-11ec-b903-70c94e8975c2
app_instance_id : 00000000-0000-0000-0000-000000000000
disconnect_time : NTTIME(0)
durable_timeout_msec : 0x00000000 (0)
durable : 0x00 (0)
backend_cookie : DATA_BLOB length=0
channel_sequence : 0x0000 (0)
channel_generation : 0x0000000000000000 (0)
lock_sequence_array: ARRAY(64)
[0000] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........
[0010] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........
[0020] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........
[0030] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........
[2022/06/16 15:27:37.527101, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Unlocking key 6FCE3A4D
[2022/06/16 15:27:37.527227, 5, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../lib/dbwrap/dbwrap.c:178(dbwrap_lock_order_unlock)
dbwrap_lock_order_unlock: release lock order 1 for /run/samba/smbXsrv_open_global.tdb
[2022/06/16 15:27:37.527353, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/smbXsrv_open.c:916(smbXsrv_open_create)
smbXsrv_open_create: global_id (0x6fce3a4d) stored
[2022/06/16 15:27:37.527474, 1, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&open_blob: struct smbXsrv_openB
version : SMBXSRV_VERSION_0 (0)
reserved : 0x00000000 (0)
info : union smbXsrv_openU(case 0)
info0 : *
info0: struct smbXsrv_open
table : *
db_rec : NULL
local_id : 0xfb466882 (4215695490)
global : *
global: struct smbXsrv_open_global0
db_rec : NULL
server_id: struct server_id
pid : 0x0000000000077046 (487494)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0xdcdffa20936bc84d (-2531029447739717555)
open_global_id : 0x6fce3a4d (1875786317)
open_persistent_id : 0x000000006fce3a4d (1875786317)
open_volatile_id : 0x00000000fb466882 (4215695490)
open_owner : S-1-5-21-3516824725-3155270197-1791756496-1215
open_time : Thu Jun 16 03:27:38 PM 2022 CEST
create_guid : 00000000-0000-0000-0000-000000000000
client_guid : 001c51dc-ed78-11ec-b903-70c94e8975c2
app_instance_id : 00000000-0000-0000-0000-000000000000
disconnect_time : NTTIME(0)
durable_timeout_msec : 0x00000000 (0)
durable : 0x00 (0)
backend_cookie : DATA_BLOB length=0
channel_sequence : 0x0000 (0)
channel_generation : 0x0000000000000000 (0)
lock_sequence_array: ARRAY(64)
[0000] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........
[0010] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........
[0020] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........
[0030] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........
status : NT_STATUS_OK
idle_time : Thu Jun 16 03:27:38 PM 2022 CEST
compat : NULL
flags : 0x00 (0)
0: SMBXSRV_OPEN_NEED_REPLAY_CACHE
0: SMBXSRV_OPEN_HAVE_REPLAY_CACHE
create_action : 0x00000000 (0)
request_count : 0x0000000000000000 (0)
pre_request_count : 0x0000000000000000 (0)
[2022/06/16 15:27:37.530117, 5, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/files.c:154(file_new)
allocated file structure fnum 4215695490 (4 used)
[2022/06/16 15:27:37.530251, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/files.c:824(file_name_hash)
file_name_hash: /dati/condivisioni/pub/fusioninventory-agent-deployment.vbs hash 0x70b74ad8
[2022/06/16 15:27:37.530383, 5, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/dosmode.c:181(unix_mode)
unix_mode: unix_mode(fusioninventory-agent-deployment.vbs) returning 0644
[2022/06/16 15:27:37.530588, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/open.c:3509(open_file_ntcreate)
open_file_ntcreate: fname=fusioninventory-agent-deployment.vbs, dos_attrs=0x0 access_mask=0x120089 share_access=0x1 create_disposition = 0x1 create_options=0x44 unix mode=0644 oplock_request=256 private_flags = 0x0
[2022/06/16 15:27:37.530732, 5, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/dosmode.c:422(get_ea_dos_attribute)
get_ea_dos_attribute: Cannot get attribute from EA on file fusioninventory-agent-deployment.vbs: Error = No data available
[2022/06/16 15:27:37.530872, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/open.c:3697(open_file_ntcreate)
open_file_ntcreate: fname=fusioninventory-agent-deployment.vbs, after mapping access_mask=0x120089
[2022/06/16 15:27:37.530995, 4, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/open.c:3800(open_file_ntcreate)
calling open_file with flags=0x0 flags2=0x800 mode=0644, access_mask = 0x120089, open_access_mask = 0x120089
[2022/06/16 15:27:37.531319, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/modules/vfs_acl_common.c:776(get_nt_acl_common_at)
get_nt_acl_common_at: name=fusioninventory-agent-deployment.vbs
[2022/06/16 15:27:37.531455, 4, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(3000047, 3000018) : sec_ctx_stack_ndx = 1
[2022/06/16 15:27:37.531582, 4, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(1053193842) : conn_ctx_stack_ndx = 0
[2022/06/16 15:27:37.531718, 4, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2022/06/16 15:27:37.531840, 5, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2022/06/16 15:27:37.531959, 5, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2022/06/16 15:27:37.532166, 4, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (3000047, 3000018) - sec_ctx_stack_ndx = 0
[2022/06/16 15:27:37.532299, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=acls] ../../source3/smbd/posix_acls.c:3531(posix_get_nt_acl)
posix_get_nt_acl: called for file fusioninventory-agent-deployment.vbs
[2022/06/16 15:27:37.532471, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/passdb/lookup_sid.c:1191(xid_to_sid)
xid_to_sid: UID 0 -> S-1-5-21-3516824725-3155270197-1791756496-500 from cache
[2022/06/16 15:27:37.532620, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/passdb/lookup_sid.c:1191(xid_to_sid)
xid_to_sid: GID 3000004 -> S-1-5-21-3516824725-3155270197-1791756496-512 from cache
[2022/06/16 15:27:37.532751, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=acls] ../../source3/smbd/posix_acls.c:2774(canonicalise_acl)
canonicalise_acl: Access ace entries before arrange :
[2022/06/16 15:27:37.532872, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=acls] ../../source3/smbd/posix_acls.c:2787(canonicalise_acl)
canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r--
[2022/06/16 15:27:37.532997, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=acls] ../../source3/smbd/posix_acls.c:2787(canonicalise_acl)
canon_ace index 1. Type = allow SID = S-1-5-21-3516824725-3155270197-1791756496-512 gid 3000004 SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms rw-
[2022/06/16 15:27:37.533121, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=acls] ../../source3/smbd/posix_acls.c:2787(canonicalise_acl)
canon_ace index 2. Type = allow SID = S-1-5-21-3516824725-3155270197-1791756496-500 uid 0 SMB_ACL_USER_OBJ ace_flags = 0x0 perms rw-
[2022/06/16 15:27:37.533246, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=acls] ../../source3/smbd/posix_acls.c:848(print_canon_ace_list)
print_canon_ace_list: canonicalise_acl: ace entries after arrange
canon_ace index 0. Type = allow SID = S-1-5-21-3516824725-3155270197-1791756496-500 uid 0 SMB_ACL_USER_OBJ ace_flags = 0x0 perms rw-
canon_ace index 1. Type = allow SID = S-1-5-21-3516824725-3155270197-1791756496-512 gid 3000004 SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms rw-
canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r--
[2022/06/16 15:27:37.533570, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=acls] ../../source3/smbd/posix_acls.c:1111(map_canon_ace_perms)
map_canon_ace_perms: Mapped (UNIX) 180 to (NT) 1f019f
[2022/06/16 15:27:37.533700, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=acls] ../../source3/smbd/posix_acls.c:1111(map_canon_ace_perms)
map_canon_ace_perms: Mapped (UNIX) 180 to (NT) 1f019f
[2022/06/16 15:27:37.533822, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=acls] ../../source3/smbd/posix_acls.c:1111(map_canon_ace_perms)
map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089
[2022/06/16 15:27:37.533957, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/modules/vfs_acl_common.c:902(get_nt_acl_common_at)
get_nt_acl_common_at: returning acl for fusioninventory-agent-deployment.vbs is:
[2022/06/16 15:27:37.534091, 1, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
psd: struct security_descriptor
revision : SECURITY_DESCRIPTOR_REVISION_1 (1)
type : 0x8004 (32772)
0: SEC_DESC_OWNER_DEFAULTED
0: SEC_DESC_GROUP_DEFAULTED
1: SEC_DESC_DACL_PRESENT
0: SEC_DESC_DACL_DEFAULTED
0: SEC_DESC_SACL_PRESENT
0: SEC_DESC_SACL_DEFAULTED
0: SEC_DESC_DACL_TRUSTED
0: SEC_DESC_SERVER_SECURITY
0: SEC_DESC_DACL_AUTO_INHERIT_REQ
0: SEC_DESC_SACL_AUTO_INHERIT_REQ
0: SEC_DESC_DACL_AUTO_INHERITED
0: SEC_DESC_SACL_AUTO_INHERITED
0: SEC_DESC_DACL_PROTECTED
0: SEC_DESC_SACL_PROTECTED
0: SEC_DESC_RM_CONTROL_VALID
1: SEC_DESC_SELF_RELATIVE
owner_sid : *
owner_sid : S-1-5-21-3516824725-3155270197-1791756496-500
group_sid : *
group_sid : S-1-5-21-3516824725-3155270197-1791756496-512
sacl : NULL
dacl : *
dacl: struct security_acl
revision : SECURITY_ACL_REVISION_NT4 (2)
size : 0x0064 (100)
num_aces : 0x00000003 (3)
aces: ARRAY(3)
aces: struct security_ace
type : SEC_ACE_TYPE_ACCESS_ALLOWED (0)
flags : 0x00 (0)
0: SEC_ACE_FLAG_OBJECT_INHERIT
0: SEC_ACE_FLAG_CONTAINER_INHERIT
0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT
0: SEC_ACE_FLAG_INHERIT_ONLY
0: SEC_ACE_FLAG_INHERITED_ACE
0x00: SEC_ACE_FLAG_VALID_INHERIT (0)
0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS
0: SEC_ACE_FLAG_FAILED_ACCESS
size : 0x0024 (36)
access_mask : 0x001f019f (2032031)
object : union security_ace_object_ctr(case 0)
trustee : S-1-5-21-3516824725-3155270197-1791756496-500
aces: struct security_ace
type : SEC_ACE_TYPE_ACCESS_ALLOWED (0)
flags : 0x00 (0)
0: SEC_ACE_FLAG_OBJECT_INHERIT
0: SEC_ACE_FLAG_CONTAINER_INHERIT
0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT
0: SEC_ACE_FLAG_INHERIT_ONLY
0: SEC_ACE_FLAG_INHERITED_ACE
0x00: SEC_ACE_FLAG_VALID_INHERIT (0)
0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS
0: SEC_ACE_FLAG_FAILED_ACCESS
size : 0x0024 (36)
access_mask : 0x001f019f (2032031)
object : union security_ace_object_ctr(case 0)
trustee : S-1-5-21-3516824725-3155270197-1791756496-512
aces: struct security_ace
type : SEC_ACE_TYPE_ACCESS_ALLOWED (0)
flags : 0x00 (0)
0: SEC_ACE_FLAG_OBJECT_INHERIT
0: SEC_ACE_FLAG_CONTAINER_INHERIT
0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT
0: SEC_ACE_FLAG_INHERIT_ONLY
0: SEC_ACE_FLAG_INHERITED_ACE
0x00: SEC_ACE_FLAG_VALID_INHERIT (0)
0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS
0: SEC_ACE_FLAG_FAILED_ACCESS
size : 0x0014 (20)
access_mask : 0x00120089 (1179785)
object : union security_ace_object_ctr(case 0)
trustee : S-1-1-0
[2022/06/16 15:27:37.538561, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/open.c:201(smbd_check_access_rights)
smbd_check_access_rights: file fusioninventory-agent-deployment.vbs requesting 0x120089 returning 0x120009 (NT_STATUS_OK)
[2022/06/16 15:27:37.538716, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=vfs] ../../source3/smbd/vfs.c:1327(check_reduced_name)
check_reduced_name: check_reduced_name [fusioninventory-agent-deployment.vbs] [/dati/condivisioni/pub]
[2022/06/16 15:27:37.538875, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=vfs] ../../source3/smbd/vfs.c:1389(check_reduced_name)
check_reduced_name realpath [fusioninventory-agent-deployment.vbs] -> [/dati/condivisioni/pub/fusioninventory-agent-deployment.vbs]
[2022/06/16 15:27:37.539000, 5, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=vfs] ../../source3/smbd/vfs.c:1495(check_reduced_name)
check_reduced_name: fusioninventory-agent-deployment.vbs reduced to /dati/condivisioni/pub/fusioninventory-agent-deployment.vbs
[2022/06/16 15:27:37.539138, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/open.c:841(fd_open)
fd_open: name fusioninventory-agent-deployment.vbs, flags = 04000 mode = 0644, fd = 49
[2022/06/16 15:27:37.539272, 2, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/open.c:1524(open_file)
WDC\PC-CARLINI-STEF$ opened file fusioninventory-agent-deployment.vbs read=Yes write=No (numopen=4)
[2022/06/16 15:27:37.539410, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/lib/dbwrap/dbwrap_watch.c:452(dbwrap_watched_subrec_wakeup_fn)
dbwrap_watched_subrec_wakeup_fn: No watchers
[2022/06/16 15:27:37.539561, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/lib/dbwrap/dbwrap_watch.c:426(dbwrap_watched_do_locked)
dbwrap_watched_do_locked: dbwrap_watched_do_locked_fn returned NT_STATUS_OK
[2022/06/16 15:27:37.539687, 5, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)
dbwrap_lock_order_lock: check lock order 1 for /run/samba/locking.tdb
[2022/06/16 15:27:37.539808, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../lib/dbwrap/dbwrap.c:131(debug_lock_order)
lock order: 1:/run/samba/locking.tdb 2:<none> 3:<none> 4:<none>
[2022/06/16 15:27:37.539941, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=locking] ../../source3/locking/share_mode_lock.c:2142(share_mode_forall_entries)
share_mode_forall_entries: num_share_modes=0
[2022/06/16 15:27:37.540065, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=locking] ../../source3/locking/share_mode_lock.c:2161(share_mode_forall_entries)
share_mode_forall_entries: num_share_entries=0, writeback=0
[2022/06/16 15:27:37.540185, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=locking] ../../source3/locking/locking.c:960(find_delete_on_close_token)
find_delete_on_close_token: name_hash = 0x70b74ad8
[2022/06/16 15:27:37.540312, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=locking] ../../source3/locking/share_mode_lock.c:2142(share_mode_forall_entries)
share_mode_forall_entries: num_share_modes=0
[2022/06/16 15:27:37.540463, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=locking] ../../source3/locking/share_mode_lock.c:2161(share_mode_forall_entries)
share_mode_forall_entries: num_share_entries=0, writeback=0
[2022/06/16 15:27:37.540591, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=locking] ../../source3/locking/brlock.c:1889(brl_get_locks_readonly)
seqnum=8, fsp->brlock_seqnum=0
[2022/06/16 15:27:37.540718, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=locking] ../../source3/locking/leases_db.c:81(leases_db_key)
leases_db_key:
[2022/06/16 15:27:37.540841, 1, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&db_key: struct leases_db_key
client_guid : 001c51dc-ed78-11ec-b903-70c94e8975c2
lease_key: struct smb2_lease_key
data: ARRAY(2)
data : 0xed85f790a41dad18 (-1331385914217353960)
data : 0xcc591c619a106c09 (-3721912411522831351)
[2022/06/16 15:27:37.541246, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=locking] ../../source3/locking/leases_db.c:81(leases_db_key)
leases_db_key:
[2022/06/16 15:27:37.541372, 1, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&db_key: struct leases_db_key
client_guid : 001c51dc-ed78-11ec-b903-70c94e8975c2
lease_key: struct smb2_lease_key
data: ARRAY(2)
data : 0xed85f790a41dad18 (-1331385914217353960)
data : 0xcc591c619a106c09 (-3721912411522831351)
[2022/06/16 15:27:37.541792, 5, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)
dbwrap_lock_order_lock: check lock order 4 for /run/samba/leases.tdb
[2022/06/16 15:27:37.541921, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../lib/dbwrap/dbwrap.c:131(debug_lock_order)
lock order: 1:/run/samba/locking.tdb 2:<none> 3:<none> 4:/run/samba/leases.tdb
[2022/06/16 15:27:37.542060, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=locking] ../../source3/locking/leases_db.c:159(leases_db_do_locked_fn)
leases_db_do_locked_fn:
[2022/06/16 15:27:37.542186, 1, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
value: struct leases_db_value
current_state : 0x00000007 (7)
1: SMB2_LEASE_READ
1: SMB2_LEASE_HANDLE
1: SMB2_LEASE_WRITE
breaking : 0x00 (0)
breaking_to_requested : 0x00000000 (0)
0: SMB2_LEASE_READ
0: SMB2_LEASE_HANDLE
0: SMB2_LEASE_WRITE
breaking_to_required : 0x00000000 (0)
0: SMB2_LEASE_READ
0: SMB2_LEASE_HANDLE
0: SMB2_LEASE_WRITE
lease_version : 0x0002 (2)
epoch : 0x0001 (1)
num_files : 0x00000001 (1)
files: ARRAY(1)
files: struct leases_db_file
id: struct file_id
devid : 0x000000000000fd01 (64769)
inode : 0x00000000002feb20 (3140384)
extid : 0x0000000000000000 (0)
servicepath : *
servicepath : '/dati/condivisioni/pub'
base_name : *
base_name : 'fusioninventory-agent-deployment.vbs'
stream_name : NULL
[2022/06/16 15:27:37.543908, 5, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../lib/dbwrap/dbwrap.c:178(dbwrap_lock_order_unlock)
dbwrap_lock_order_unlock: release lock order 4 for /run/samba/leases.tdb
[2022/06/16 15:27:37.547172, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/open.c:2700(delay_for_oplock)
delay_for_oplock: lease_state=7
[2022/06/16 15:27:37.547308, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0)] ../../source3/smbd/open.c:2723(delay_for_oplock)
delay_for_oplock: oplock type 0x100 on file fusioninventory-agent-deployment.vbs
[2022/06/16 15:27:37.547446, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=locking] ../../source3/locking/share_mode_lock.c:1894(set_share_mode)
set_share_mode: num_share_modes=0
[2022/06/16 15:27:37.547574, 10, pid=487494, effective(3000047, 3000018), real(3000047, 0), class=locking] ../../source3/locking/share_mode_lock.c:376(share_mode_entry_put)
share_mode_entry_put: share_mode_entry:
--
Lorenzo Milesi - lorenzo.milesi at yetopen.com
CTO @ YetOpen Srl
YetOpen - https://www.yetopen.com/
Corso Martiri della Liberazione 114 - 23900 Lecco - ITALY - | 4801 Glenwood Avenue - Suite 200 - Raleigh, NC 27612 - USA -
Tel +39 0341 220 205 - info.it at yetopen.com | Phone +1 919-817-8106 - info.us at yetopen.com
Think green - Non stampare questa e-mail se non necessario / Don't print this email unless necessary
-------- D.Lgs. 196/2003 e GDPR 679/2016 --------
Tutte le informazioni contenute in questo messaggio sono riservate ed a uso esclusivo del destinatario.
Tutte le informazioni ivi contenute, compresi eventuali allegati, sono da ritenere confidenziali e riservate secondo i termini
del vigente D.Lgs. 196/2003 in materia di privacy e del Regolamento europeo 679/2016 - GDPR - e quindi ne e' proibita l'utilizzazione ulteriore non autorizzata.
Nel caso in cui questo messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza copiarlo, stamparlo, a non inoltrarlo a terzi e ad avvertirci non appena possibile.
Grazie.
Confidentiality notice: this email message including any attachment is for the sole use of the intended recipient and may contain confidential and privileged information;
pursuant to Legislative Decree 196/2003 and the European General Data Protection Regulation 679/2016 - GDPR - any unauthorized review, use, disclosure or distribution
is prohibited. If you are not the intended recepient please delete this message without copying, printing or forwarding it to others, and alert us as soon as possible.
Thank you.
More information about the samba
mailing list