Using a Windows 8, and a Windows 8.1 Pro machine, joined to a Samba domain.
I open up \\$SERVER\sysvol and right-click on one of the files. I then select properties, security, advanced, effective access. I select one of the other users in my domain (I logged in as administrator), and then 'view effective access'. The error I get is '0x80070057 the parameter is incorrect'. I can't see anything odd, except that in frame 91-93 the client asks for a TGS-REQ (S4U2Self) for a server of Administrator@REALM as an enterprise principal, perhaps being denied because Administrator is not a server account. Samba master gives 'KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN (see trace) Samba 4.2 give 'KRB5KDC_ERR_POLICY' (not attached) Is this the issue, if so, cue my discussion about MS-KILE clarifications :-) Thanks, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
win8-view-effective-access.pcapng
Description: application/pcapng
_______________________________________________ cifs-protocol mailing list [email protected] https://lists.samba.org/mailman/listinfo/cifs-protocol
