Re: Bug with initDB under windows 2003

Hi Magnus,

Magnus Wrote:
> I'd be interested in seeing the output from the command:> Subinacl /service NULL> > On a system where this does not work.>

Here is the output for "Subinacl /service NULL"
Both, for the Administrator user and for the Postgres user:

Postgres user:
>Subinacl /service NULLSeSecurityPrivilege : Access is denied.
WARNING :Unable to set SeSecurityPrivilege privilege. This privilege may be required.Error OpenSCManager : Access is denied.
Elapsed Time: 00 00:00:00Done: 0, Modified 0, Failed 0, Syntax errors 0
----------------------------------------------------------------------------------
Administrator user:

==============+Service NULL==============/control=0x0/owner =system/primary group =system/audit ace count =1/aace =everyone SYSTEM_AUDIT_ACE_TYPE-0x2 FAILED_ACCESS_ACE_FLAG-0x80 FAILED_ACCESS_ACE_FLAG-0x0x80 SERVICE_ALL_ACCESS/perm. ace count =6/pace =system ACCESS_ALLOWED_ACE_TYPE-0x0 SERVICE_QUERY_CONFIG-0x1 SERVICE_QUERY_STATUS-0x4 SERVICE_ENUMERATE_DEPEND-0x8 SERVICE_START-0x10 SERVICE_STOP-0x20 SERVICE_PAUSE_CONTINUE-0x40_INTERROGATE-0x80 READ_CONTROL-0x20000 SERVICE_USER_DEFINED_CONTROL-0x0100/pace =builtin\administrators ACCESS_ALLOWED_ACE_TYPE-0x0 SERVICE_ALL_ACCESS/pace =interactive ACCESS_ALLOWED_ACE_TYPE-0x0 SERVICE_QUERY_CONFIG-0x1 SERVICE_QUERY_STATUS-0x4 SERVICE_ENUMERATE_DEPEND-0x8 SERVICE_INTERROGATE-0x80 READ_CONTROL-0x20000 SERVICE_USER_DEFINED_CONTROL-0x0100/pace =service ACCESS_ALLOWED_ACE_TYPE-0x0 SERVICE_QUERY_CONFIG-0x1 SERVICE_QUERY_STATUS-0x4 SERVICE_ENUMERATE_DEPEND-0x8 SERVICE_INTERROGATE-0x80 READ_CONTROL-0x20000 SERVICE_USER_DEFINED_CONTROL-0x0100/pace =authenticated users ACCESS_ALLOWED_ACE_TYPE-0x0 SERVICE_USER_DEFINED_CONTROL-0x0100/pace =builtin\power users ACCESS_ALLOWED_ACE_TYPE-0x0 SERVICE_QUERY_CONFIG-0x1 SERVICE_QUERY_STATUS-0x4 SERVICE_ENUMERATE_DEPEND-0x8 SERVICE_START-0x10 SERVICE_STOP-0x20 SERVICE_PAUSE_CONTINUE-0x40_INTERROGATE-0x80 READ_CONTROL-0x20000 SERVICE_USER_DEFINED_CONTROL-0x0100
Elapsed Time: 00 00:00:00Done: 1, Modified 0, Failed 0, Syntax errors 0Last Done : NULL
----------------------------------------------------------------------------------------------------

As you can see it failed to set SeSecurityPrivilege privilege for the Postgres user.
Regards
Dror;

> Subject: Re: [HACKERS] Bug with initDB under windows 2003> Date: Fri, 18 Aug 2006 14:33:58 +0200> From: mha(at)sollentuna(dot)net> To: mha(at)sollentuna(dot)net; kleptog(at)svana(dot)org; dror_b(at)hotmail(dot)com> CC: pgsql-hackers(at)postgresql(dot)org> > > > Have you been able to determine *why* Microsoft made this> > braindead> > > decision? Or where it's documented? Their own knowledgebase is> > filled> > > with examples of using the device, so I imagine they'll have to> > post a> > > workaround somewhere...> > > > AFAIK, nobody has posted any links to information that shows that> > Microsoft actually *did* change this. I've searched their KB some> > (including the partner-only one for people with the paid> > agreements, which contains information about bugs that they don't> > want to be public), and find nothing about it.> > > > Unless you can reproduce this on a clean system, I'm definitely> > inclined to say this is caused by some other piece of software on> > the machine - firewall, antivirus, antispyware or virus/spyware> > itself.> > Actually, I've been able to find some more information about this, which> confirms that the problem is access rights on the NUL device, but it's> *NOT* set by a MS security patch.> > I'd be interested in seeing the output from the command:> Subinacl /service NULL> > On a system where this does not work.> > (If you get an empty update, make sure you have a version of subinacl> that corresponds to your windows version)> > (There are known apps that mess this up, but my NDA prevents me from> telling you which one(s)...)> > //Magnus> > > ---------------------------(end of broadcast)---------------------------> TIP 4: Have you searched our list archives?> > http://archives.postgresql.org
_________________________________________________________________
Try Live.com: where your online world comes together - with news, sports, weather, and much more.
http://www.live.com/getstarted