From fe2f233f8007f0d5d1522c5275fe6ba387dfef93 Mon Sep 17 00:00:00 2001 From: Jeremy Allison Date: Wed, 16 Dec 2009 10:09:11 -0800 Subject: [PATCH] Add helpful debug of DACL for errors on ACL access. Jeremy. (cherry picked from commit b8c87c43dd9309b3d2fed5d5db5b38057a8e4e90) (cherry picked from commit 88d2eca3b3b305a569fdd56936c8a92ee5843e4b) --- source3/smbd/open.c | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/source3/smbd/open.c b/source3/smbd/open.c index 9dc8320b684..120de0f21ab 100644 --- a/source3/smbd/open.c +++ b/source3/smbd/open.c @@ -102,8 +102,6 @@ NTSTATUS smbd_check_open_rights(struct connection_struct *conn, access_mask, access_granted); - TALLOC_FREE(sd); - DEBUG(10,("smbd_check_open_rights: file %s requesting " "0x%x returning 0x%x (%s)\n", smb_fname_str_dbg(smb_fname), @@ -111,6 +109,16 @@ NTSTATUS smbd_check_open_rights(struct connection_struct *conn, (unsigned int)*access_granted, nt_errstr(status) )); + if (!NT_STATUS_IS_OK(status)) { + if (DEBUGLEVEL >= 10) { + DEBUG(10,("smbd_check_open_rights: acl for %s is:\n", + smb_fname_str_dbg(smb_fname) )); + NDR_PRINT_DEBUG(security_descriptor, sd); + } + } + + TALLOC_FREE(sd); + return status; } -- 2.11.4.GIT