-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dmitry Melekhov wrote:

| I just checked latest svn with
| svn co svn://svnanon.samba.org/samba/branches/SAMBA_3_0_RELEASE
| samba-SAMBA_3_0_RELEASE
|
| And I still have the same problem.
|
| net  -S dm -U root rpc rights grant  'TEST\dm'  SeMachineAccountPrivilege
| Password:
| Failed to grant privileges for TEST\dm (NT_STATUS_ACCESS_DENIED)
|
| log.smb is attached...

That was just a partial log file.  I need to see the initial
SMBsessionsetup&X call.  The only way to get back
NT_STATUS_ACCESS_DENIED herre is :

if ( user.uid != sec_initial_uid()
        && !nt_token_check_domain_rid( p->pipe_user.nt_user_token,
        DOMAIN_GROUP_RID_ADMINS ) )
{
        return NT_STATUS_ACCESS_DENIED;
}

| Now (with latest SVN) it looks better :
|
| net  -S dm -U dm rpc rights grant  'TEST\mail'
| SeMachineAccountPrivilege
| Password:
| Failed to grant privileges for TEST\dm (NT_STATUS_ACCESS_DENIED)

Can you send me your smb.conf, the output from `id dm`, the
output from 'net groupmap list', and the output from 'net getlocalsid'?
Thanks.




cheers, jerry ===================================================================== Alleviating the pain of Windows(tm) ------- http://www.samba.org GnuPG Key ----- http://www.plainjoe.org/gpg_public.asc "I never saved anything for the swim back." Ethan Hawk in Gattaca -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCA30EIR7qMdg1EfYRArV/AJ9s+i3noq2D5YhJ4+AqYggxD9JW0ACeO8lJ
4uhRmQhLUqf2HklxgqBBi0A=
=WuGB
-----END PGP SIGNATURE-----
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to