[samba-jp:20886] Re: 移動プロファイルの設定

[WATANABE Kazufumi]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

渡邉です。

> フォルダのアクセス権以外の問題のような気がします。
なるほど、それならばと3.4.3で同じビルドオプション
（confugureオプション？）にてmake;make installしてみましたが、
結果としては同じ状態になってしまいました。


それでsambaは3.4.3のままlog level = 10にてログを取りました。
ログイン処理だけでもの凄い量のlogが吐かれることにビックリしましたが、
今のところ全く理解できていません。恥ずかしながら


経過報告と致しまして。
昨日のメッセージ箇所はたぶんこのところ。
[2009/11/02 20:10:02,  5] auth/token_util.c:522(debug_nt_user_token)
  NT user token: (NULL)
[2009/11/02 20:10:02,  5] auth/token_util.c:548(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2009/11/02 20:10:02,  5] smbd/uid.c:368(change_to_root_user)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2009/11/02 20:10:02,  4] smbd/reply.c:675(reply_tcon_and_X)
  Client requested device type [?????] for share [PROFILES]
[2009/11/02 20:10:02,  5] smbd/service.c:1202(make_connection)
  making a connection to 'normal' service profiles
[2009/11/02 20:10:02,  2] smbd/service.c:584(create_connection_server_info)
  guest user (from session setup) not permitted to access this share (profiles)
[2009/11/02 20:10:02,  1] smbd/service.c:676(make_connection_snum)
  create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2009/11/02 20:10:02,  3] smbd/error.c:60(error_packet_set)
  error packet at smbd/reply.c(684) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED



このメッセージの前にある怪しいところとなると、
[2009/11/02 20:10:02,  4] smbd/uid.c:256(change_to_user)
  change_to_user: Skipping user change - already user
[2009/11/02 20:10:02,  3] smbd/error.c:60(error_packet_set)
  error packet at smbd/trans2.c(7758) cmd=50 (SMBtrans2)
NT_STATUS_NETWORK_ACCESS_DENIED


あとはldapで引けていない様なこのあたりでしょうか？
[2009/11/02 20:10:02,  5] auth/token_util.c:522(debug_nt_user_token)
  NT user token: (NULL)
[2009/11/02 20:10:02,  5] auth/token_util.c:548(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2009/11/02 20:10:02,  5] lib/smbldap.c:1261(smbldap_search_ext)
  smbldap_search_ext: base => [dc=hogehoge,dc=local], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0))], scope => [2]
[2009/11/02 20:10:02,  4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0))
[2009/11/02 20:10:02,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/11/02 20:10:02, 10] passdb/lookup_sid.c:1247(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-1-0
[2009/11/02 20:10:02, 10] lib/gencache.c:194(gencache_get)
  Cache entry with key = IDMAP/SID2GID/S-1-5-2 couldn't be found
[2009/11/02 20:10:02, 10] passdb/lookup_sid.c:1502(sid_to_gid)
  winbind failed to find a gid for sid S-1-5-2
[2009/11/02 20:10:02,  3] smbd/sec_ctx.c:210(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/11/02 20:10:02,  3] smbd/uid.c:428(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/11/02 20:10:02,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/11/02 20:10:02,  5] auth/token_util.c:522(debug_nt_user_token)
  NT user token: (NULL)
[2009/11/02 20:10:02,  5] auth/token_util.c:548(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2009/11/02 20:10:02,  5] lib/smbldap.c:1261(smbldap_search_ext)
  smbldap_search_ext: base => [dc=hogehoge,dc=local], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))], scope => [2]
[2009/11/02 20:10:02,  4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))
[2009/11/02 20:10:02,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/11/02 20:10:02, 10] passdb/lookup_sid.c:1247(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-5-2
[2009/11/02 20:10:02, 10] lib/gencache.c:194(gencache_get)
  Cache entry with key = IDMAP/SID2GID/S-1-5-32-546 couldn't be found
[2009/11/02 20:10:02, 10] passdb/lookup_sid.c:1502(sid_to_gid)
  winbind failed to find a gid for sid S-1-5-32-546
[2009/11/02 20:10:02,  3] smbd/sec_ctx.c:210(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/11/02 20:10:02,  3] smbd/uid.c:428(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/11/02 20:10:02,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/11/02 20:10:02,  5] auth/token_util.c:522(debug_nt_user_token)
  NT user token: (NULL)
[2009/11/02 20:10:02,  5] auth/token_util.c:548(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2009/11/02 20:10:02,  5] lib/smbldap.c:1261(smbldap_search_ext)
  smbldap_search_ext: base => [dc=hogehoge,dc=local], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-546))], scope => [2]
[2009/11/02 20:10:02,  4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-546))
[2009/11/02 20:10:02,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/11/02 20:10:02, 10] passdb/lookup_sid.c:1247(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-5-32-546
[2009/11/02 20:10:02, 10] auth/auth_ntlmssp.c:139(auth_ntlmssp_check_password)
  Got NT session key of length 16
[2009/11/02 20:10:02, 10] auth/auth_ntlmssp.c:146(auth_ntlmssp_check_password)
  Got LM session key of length 16
[2009/11/02 20:10:02, 10] libsmb/ntlmssp.c:851(ntlmssp_server_auth)
  ntlmssp_server_auth: Using unmodified nt session key.
[2009/11/02 20:10:02,  3] libsmb/ntlmssp_sign.c:342(ntlmssp_sign_init)
  NTLMSSP Sign/Seal - Initialising with flags:


- --
WATANABE Kazufumi <folly ＠ an.wakwak.com>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkruzAsACgkQJUqMoalCbqVJEQCgkkmPvvtfDapYXYo9bGLRF6cj
zEoAoKYlzV9V0iobGa9LWQkK7/vcpItw
=XWrO
-----END PGP SIGNATURE-----