On Thu, Jul 27, 2006 at 09:52:40PM +0300, Anton N. Breusov wrote: > Hi! > > I'm experiencing problems with access to one of shares on server > with Samba working as PDC for windows clients, after I upgraded > Samba from 3.0.22 to 3.0.23 (this problem also present in > 3.0.23a). There are config section for this share: > > ---------------------------------------------------------------- > [domain] > comment = Domain users exchange share > path = /home/special/domain > guest ok = No > writeable = Yes > create mask = 0664 > directory mask = 0775 > ---------------------------------------------------------------- > > Access to directory in which share resides denied to "world", so > only members of group "domain" can access this share: > ---------------------------------------------------------------- > root#earth:~>ls -la /home/special/ > ... > drwxr-x--- 5 ntadm domain 512 1 Jul 18:52 domain > > In this group placed all users-members of domain, also me > (antonz) : > root#earth:~>cat /etc/group |grep domain > domain:*:250:ntadm,guest,antonz,oksana,valent ..... > > root#earth:~>id antonz > uid=1002(antonz) gid=1002(antonz) groups=1002(antonz), 0(wheel), > 53(bind), 80(www), 103(sshspec), 200(staff), 201(admin), > 202(automation), 250(domain) > ---------------------------------------------------------------- > > And this group "domain" also has mapping to domain-wide group > "Domain Users": > > ---------------------------------------------------------------- > root#earth:~>net groupmap list > .... > Domain Users (S-1-5-21-3971777737-3877677318-3229927643-513) -> domain > ---------------------------------------------------------------- > > Until recent upgrade everything was OK with access to this > share, but now I'm receiving "Error reading drive error" from > both Windows clients and smbclient: > > ---------------------------------------------------------------- > root#earth:~>smbclient -I 10.25.1.1 -U antonz > \\\\earth\\domain > Password: > Domain=[LIBRARY] OS=[Unix] Server=[Samba 3.0.23a] > smb: \> ls > NT_STATUS_NETWORK_ACCESS_DENIED listing \* > > 0 blocks of size 0. 61680 blocks available > smb: \>
It would be interesting to see what the token looks like for this access. Can you get a debug level 10 log from the smbclient access please ? Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba