samba - Jul 2021 - WORKGROUP/Samba cannot be viewed in list in Other Locations

I enabled SMB1 from control.

Makoto Sakurai

2021?7?27?(?) 22:07 Rowland Penny via samba <samba at lists.samba.org>:
> On Tue, 2021-07-27 at 21:57 +0900, Dr. Makoto Sakurai wrote:
> > No, I don't  mean my Ubuntu cannot be found by Windows PC. It is
the
> > converse. I cannot see Windows 10 PC from my Ubuntu PC.
> >
>
> Windows 10 now has SMBv1 turned off by default, have you turned it back
> on ?
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

FIY

It says: (for the Windwos 10 PC's IP)

$ smbclient -L 192.168.1.15
Enter WORKGROUP\sakuraima's password:

Sharename       Type      Comment
---------       ----      -------
ADMIN$          Disk      Remote Admin
C$              Disk      Default share
D               Disk
D$              Disk      Default share
E               Disk
E$              Disk      Default share
IPC$            IPC       Remote IPC
iR-ADV C5750(2) Printer   iR-ADV C5750(2)
lpr             Printer   Brother DCP-J582N Printer
print$          Disk      Printer Driver
Users           Disk
Reconnecting with SMB1 for workgroup listing.
do_connect: Connection to 192.168.1.15 failed (Error
NT_STATUS_RESOURCE_NAME_NOT_FOUND)
Unable to connect with SMB1 -- no workgroup available

$ testparm -v
Load smb config files from /etc/samba/smb.conf
Loaded services file OK.
Weak crypto is allowed
Server role: ROLE_STANDALONE

Press enter to see a dump of your service definitions

# Global parameters
[global]
abort shutdown script add group script additional dns hostnames add machine
script addport command addprinter command add share command add user script add
user to group script afs token lifetime = 604800
afs username map aio max threads = 100
algorithmic rid base = 1000
allow dcerpc auth level connect = No
allow dns updates = secure only
allow insecure wide links = No
allow nt4 crypto = No
allow trusted domains = Yes
allow unsafe cluster upgrade = No
apply group policies = No
async smb echo handler = No
auth event notification = No
auto services binddns dir = /var/lib/samba/bind-dns
bind interfaces only = No
browse list = Yes
cache directory = /var/cache/samba
change notify = Yes
change share command check password script cldap port = 389
client ipc max protocol = default
client ipc min protocol = default
client ipc signing = default
client lanman auth = No
client ldap sasl wrapping = sign
client max protocol = default
client min protocol = NT1
client NTLMv2 auth = Yes
client plaintext auth = No
client schannel = Yes
client signing = default
client use spnego principal = No
client use spnego = Yes
cluster addresses clustering = No
config backend = file
config file create krb5 conf = Yes
ctdbd socket ctdb locktime warn threshold = 0
ctdb timeout = 0
cups connection timeout = 30
cups encrypt = No
cups server dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon,
lsarpc, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver
deadtime = 10080
debug class = No
debug encryption = No
debug hires timestamp = Yes
debug pid = No
debug prefix timestamp = No
debug uid = No
dedicated keytab file default service defer sharing violations = Yes
delete group script deleteprinter command delete share command delete user from
group script delete user script dgram port = 138
disable netbios = No
disable spoolss = No
dns forwarder dns proxy = Yes
dns update command = /usr/sbin/samba_dnsupdate
dns zone scavenging = No
domain logons = No
domain master = Auto
dos charset = CP932
dsdb event notification = No
dsdb group change notification = No
dsdb password event notification = No
enable asu support = No
enable core files = Yes
enable privileges = Yes
encrypt passwords = Yes
enhanced browsing = Yes
enumports command eventlog list get quota command getwd cache = Yes
gpo update command = /usr/sbin/samba-gpupdate
guest account = nobody
homedir map = auto.home
host msdfs = Yes
hostname lookups = No
idmap backend = tdb
idmap cache time = 604800
idmap gid idmap negative cache time = 120
idmap uid include system krb5 conf = Yes
init logon delay = 100
init logon delayed hosts interfaces iprint server keepalive = 300
kerberos encryption types = all
kerberos method = default
kernel change notify = Yes
kpasswd port = 464
krb5 port = 88
lanman auth = No
large readwrite = Yes
ldap admin dn ldap connection timeout = 2
ldap debug level = 0
ldap debug threshold = 10
ldap delete dn = No
ldap deref = auto
ldap follow referral = Auto
ldap group suffix ldap idmap suffix ldap machine suffix ldap max anonymous
request size = 256000
ldap max authenticated request size = 16777216
ldap max search request size = 256000
ldap page size = 1000
ldap passwd sync = no
ldap replication sleep = 1000
ldap server require strong auth = Yes
ldap ssl = start tls
ldap suffix ldap timeout = 15
ldap user suffix lm announce = Auto
lm interval = 60
load printers = Yes
local master = Yes
lock directory = /run/samba
lock spin time = 200
log file = /var/log/samba/log.%m
logging = file
log level = 1
log nt token command logon drive logon home = \\%N\%U
logon path = \\%N\%U\profile
logon script log writeable files on exit = No
lpq cache time = 30
lsa over netlogon = No
machine password timeout = 604800
mangle prefix = 1
mangling method = hash2
map to guest = Bad User
max disk size = 0
max log size = 1024
max mux = 50
max open files = 16384
max smbd processes = 0
max stat cache size = 512
max ttl = 259200
max wins ttl = 518400
max xmit = 16644
mdns name = netbios
message command min receivefile size = 0
min wins ttl = 21600
mit kdc command multicast dns register = Yes
name cache timeout = 660
name resolve order = lmhosts wins host bcast
nbt client socket address = 0.0.0.0
nbt port = 137
ncalrpc dir = /var/run/samba/ncalrpc
netbios aliases netbios name = SAMBA-PRINTER
netbios scope neutralize nt4 emulation = No
NIS homedir = No
nmbd bind explicit broadcast = Yes
nsupdate command = /usr/bin/nsupdate -g
ntlm auth = ntlmv2-only
nt pipe support = Yes
ntp signd socket directory = /var/lib/samba/ntp_signd
nt status support = Yes
null passwords = No
obey pam restrictions = Yes
old password allowed period = 60
oplock break wait time = 0
os2 driver map os level = 20
pam password change = Yes
panic action = /usr/share/samba/panic-action %d
passdb backend = tdbsam
passdb expand explicit = No
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:*
%n\n *password\supdated\ssuccessfully* .
passwd chat debug = No
passwd chat timeout = 2
passwd program = /usr/bin/passwd %u
password hash gpg key ids password hash userPassword schemes password server = *
perfcount module pid directory = /run/samba
preferred master = Auto
prefork backoff increment = 10
prefork children = 4
prefork maximum backoff = 120
preload modules printcap cache time = 750
printcap name private dir = /var/lib/samba/private
raw NTLMv2 auth = No
read raw = Yes
realm registry shares = No
reject md5 clients = No
reject md5 servers = No
remote announce remote browse sync rename user script require strong key = Yes
reset on zero vc = No
restrict anonymous = 0
root directory rpc big endian = No
rpc server dynamic port range = 49152-65535
rpc server port = 0
samba kcc command = /usr/sbin/samba_kcc
security = AUTO
server max protocol = SMB3
server min protocol = NT1
server multi channel support = No
server role = standalone server
server schannel = Yes
server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd,
ntp_signd, kcc, dnsupdate, dns
server signing = default
server string = %h server (Samba, Ubuntu)
set primary group script set quota command share backend = classic
show add printer wizard = Yes
shutdown script smb2 disable lock sequence checking = No
smb2 disable oplock break retry = No
smb2 leases = Yes
smb2 max credits = 8192
smb2 max read = 8388608
smb2 max trans = 8388608
smb2 max write = 8388608
smbd profiling level = off
smb passwd file = /etc/samba/smbpasswd
smb ports = 445 139
socket options = TCP_NODELAY
spn update command = /usr/sbin/samba_spnupdate
stat cache = Yes
state directory = /var/lib/samba
svcctl list syslog = 1
syslog only = No
template homedir = /home/%D/%U
template shell = /bin/false
time server = No
timestamp logs = Yes
tls cafile = tls/ca.pem
tls certfile = tls/cert.pem
tls crlfile tls dh params file tls enabled = Yes
tls keyfile = tls/key.pem
tls priority = NORMAL:-VERS-SSL3.0
tls verify peer = as_strict_as_possible
unicode = Yes
unix charset = UTF-8
unix extensions = Yes
unix password sync = Yes
use mmap = Yes
username level = 0
username map username map cache time = 0
username map script usershare allow guests = Yes
usershare max shares = 100
usershare owner only = Yes
usershare path = /var/lib/samba/usershares
usershare prefix allow list usershare prefix deny list usershare template share
utmp = No
utmp directory winbind cache time = 300
winbindd socket directory = /var/run/samba/winbindd
winbind enum groups = No
winbind enum users = No
winbind expand groups = 0
winbind max clients = 200
winbind max domain connections = 1
winbind nested groups = Yes
winbind normalize names = No
winbind nss info = template
winbind offline logon = No
winbind reconnect delay = 30
winbind refresh tickets = No
winbind request timeout = 60
winbind rpc only = No
winbind scan trusted domains = Yes
winbind sealed pipes = Yes
winbind separator = \
winbind use default domain = No
winbind use krb5 enterprise principals = No
wins hook wins proxy = No
wins server wins support = No
workgroup = WORKGROUP
write raw = Yes
wtmp directory idmap config * : backend = tdb
access based share enum = No
acl allow execute always = No
acl check permissions = Yes
acl group control = No
acl map full control = Yes
administrative share = No
admin users afs share = No
aio read size = 1
aio write behind aio write size = 1
allocation roundup size = 0
available = Yes
blocking locks = Yes
block size = 1024
browseable = Yes
case sensitive = Auto
check parent directory delete on close = No
comment copy create mask = 0744
csc policy = manual
cups options default case = lower
default devmode = Yes
delete readonly = No
delete veto files = No
dfree cache time = 0
dfree command directory mask = 0755
directory name cache size = 100
dmapi support = No
dont descend dos filemode = No
dos filetime resolution = No
dos filetimes = Yes
durable handles = Yes
ea support = Yes
fake directory create times = No
fake oplocks = No
follow symlinks = Yes
force create mode = 0000
force directory mode = 0000
force group force printername = No
force unknown acl user = No
force user fstype = NTFS
guest ok = No
guest only = No
hide dot files = Yes
hide files hide new files timeout = 0
hide special files = No
hide unreadable = No
hide unwriteable files = No
hosts allow = 192.168.1.
hosts deny include inherit acls = No
inherit owner = no
inherit permissions = No
invalid users kernel oplocks = No
kernel share modes = Yes
level2 oplocks = Yes
locking = Yes
lppause command lpq command = %p
lpresume command lprm command magic output magic script mangled names = illegal
mangling char = ~
map acl inherit = No
map archive = Yes
map hidden = No
map readonly = no
map system = No
max connections = 0
max print jobs = 1000
max reported print jobs = 0
min print space = 0
msdfs proxy msdfs root = No
msdfs shuffle referrals = No
nt acl support = Yes
ntvfs handler = unixuid, default
oplocks = Yes
path posix locking = Yes
postexec preexec preexec close = No
preserve case = Yes
printable = No
print command printer name printing = cups
printjob username = %U
print notify backchannel = No
queuepause command queueresume command read list read only = Yes
root postexec root preexec root preexec close = No
short preserve case = Yes
smbd async dosmode = No
smbd getinfo ask sharemode = Yes
smbd max async dosmode = 0
smbd search ask sharemode = Yes
smb encrypt = default
spotlight = No
spotlight backend = noindex
store dos attributes = Yes
strict allocate = No
strict locking = Auto
strict rename = No
strict sync = Yes
sync always = No
use client driver = No
use sendfile = No
valid users veto files veto oplock files vfs objects volume wide links = No
write list 

[printers]
browseable = No
comment = All Printers
create mask = 0700
hosts allow path = /var/spool/samba
printable = Yes


[print$]
comment = Printer Drivers
hosts allow path = /var/lib/samba/printers
write list = root @sakuraima

Best,

Makoto Sakurai

2021?7?27?(?) 22:09 Dr. Makoto Sakurai <makotosakurai18yokohama at
gmail.com>:
> I enabled SMB1 from control.
>
> Makoto Sakurai
>
> 2021?7?27?(?) 22:07 Rowland Penny via samba <samba at
lists.samba.org>:
>
>> On Tue, 2021-07-27 at 21:57 +0900, Dr. Makoto Sakurai wrote:
>> > No, I don't  mean my Ubuntu cannot be found by Windows PC. It
is the
>> > converse. I cannot see Windows 10 PC from my Ubuntu PC.
>> >
>>
>> Windows 10 now has SMBv1 turned off by default, have you turned it back
>> on ?
>>
>> Rowland
>>
>>
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>

On Tue, 2021-07-27 at 22:09 +0900, Dr. Makoto Sakurai
wrote:
> I enabled SMB1 from control.
> 
Samba turned off SMBv1 from 4.11.0 by setting 'client min protocol' and
'server min protocol' to 'SMB2_02' . To get SMBv1 back, you have
to set
them both to 'NT1', you do not have to change any other
'protocol'
settings and should remove any other 'protocol' lines.

You do need to add the 'idmap config' lines, install winbind if not
installed, remove sssd if installed and join the domain with 'net ads
join'

Network browsing is on the way out, you should learn to live without
it.

Rowland