From 88d2eca3b3b305a569fdd56936c8a92ee5843e4b Mon Sep 17 00:00:00 2001
From: Jeremy Allison <jra@samba.org>
Date: Wed, 16 Dec 2009 10:09:11 -0800
Subject: [PATCH] Add helpful debug of DACL for errors on ACL access. Jeremy.
 (cherry picked from commit b8c87c43dd9309b3d2fed5d5db5b38057a8e4e90)

---
 source3/smbd/open.c | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/source3/smbd/open.c b/source3/smbd/open.c
index 9dc8320b684..120de0f21ab 100644
--- a/source3/smbd/open.c
+++ b/source3/smbd/open.c
@@ -102,8 +102,6 @@ NTSTATUS smbd_check_open_rights(struct connection_struct *conn,
 				access_mask,
 				access_granted);
 
-	TALLOC_FREE(sd);
-
 	DEBUG(10,("smbd_check_open_rights: file %s requesting "
 		"0x%x returning 0x%x (%s)\n",
 		smb_fname_str_dbg(smb_fname),
@@ -111,6 +109,16 @@ NTSTATUS smbd_check_open_rights(struct connection_struct *conn,
 		(unsigned int)*access_granted,
 		nt_errstr(status) ));
 
+	if (!NT_STATUS_IS_OK(status)) {
+		if (DEBUGLEVEL >= 10) {
+			DEBUG(10,("smbd_check_open_rights: acl for %s is:\n",
+				smb_fname_str_dbg(smb_fname) ));
+			NDR_PRINT_DEBUG(security_descriptor, sd);
+		}
+	}
+
+	TALLOC_FREE(sd);
+
 	return status;
 }
 
-- 
2.11.4.GIT