samba - Oct 2024 - Kerberos ticket renew causes a brief network interruption

Hi Ralph Boehme,

A new system is installed with Ubuntu 24.04.1 and Samba 4.19.5
My hotfolderscan.exe tool runs now on a Windows 2022 system and use the Ubuntu
24 system as Samba share.
The hotfolderscan  tool has to run 10 hour before the Kerberos ticket renewal.
Both on the Ubuntu 24 and the Windows 2022 system, Wireshare is catching the
network packages.
Tomorrow I hope to see the result.


I found the same problem with the Kerberos ticket renewal on a Synology Nas.
Their initial response was that it was down to my Windows system or domain
controller.
The second line support engineers of Synology asked me also for network traces.
But after many messages back and forth en running my hotfolderscan tool on their
internal systems they have concluded that it is indeed a problem in Samba.

Best regards,
Hans van Leeuwen

-----Original Message-----
From: Ralph Boehme <slow at samba.org> 
Sent: Friday, October 25, 2024 11:08 AM
To: Hans van Leeuwen <HansvanLeeuwen at mailstreet.nl>
Cc: samba at lists.samba.org
Subject: Re: [Samba] Kerberos ticket renew causes a brief network interruption

On 10/25/24 10:35 AM, Hans van Leeuwen via samba wrote:
> Is seems that Samba doesn't handle the Kerberos ticket renewal on the
right way.
can you get us two network traces:

- last minute before and after session expiry against Samba
- last minute before and after session expiry against Windows

-slow

On 10/28/24 3:29 PM, Hans van Leeuwen wrote:
> A new system is installed with Ubuntu 24.04.1 and Samba 4.19.5 My
> hotfolderscan.exe tool runs now on a Windows 2022 system and use the
> Ubuntu 24 system as Samba share. The hotfolderscan  tool has to run
> 10 hour before the Kerberos ticket renewal. Both on the Ubuntu 24
> and the Windows 2022 system, Wireshare is catching the network
> packages. Tomorrow I hope to see the result.
unless I missing something, you aren't running the test twice, once 
against a Samba server, once against Windows?

-slow

-- 
SerNet Samba Team Lead https://sernet.de/
Samba Team Member      https://samba.org/
SAMBA+ packages       https://samba.plus/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.samba.org/pipermail/samba/attachments/20241028/b1fc8d98/OpenPGP_signature.sig>

Hi Ralph Boehme,

My hotfolderscan tool start om Monday 2:11 PM en the Kerberos ticket renewal
occurs on 11:19 PM.
The hotfolderscantool wrote in the logfile:
  2024-10-28 23:19:00 Error 2 No such file or directory
  2024-10-28 23:19:03 Share available again

That was after 9:08 hours and that is 32888 seconds.
That time do you also see in the Wireshark output in the attachment.

The hotfolderscantool stops on 11:19 PM and the Wireshake output shows that the
Keep-Alive packages are started from that time.

Best regards,
Hans van Leeuwen.


-----Original Message-----
From: Hans van Leeuwen 
Sent: Monday, October 28, 2024 3:29 PM
To: Ralph Boehme <slow at samba.org>
Cc: samba at lists.samba.org
Subject: RE: [Samba] Kerberos ticket renew causes a brief network interruption

Hi Ralph Boehme,

A new system is installed with Ubuntu 24.04.1 and Samba 4.19.5 My
hotfolderscan.exe tool runs now on a Windows 2022 system and use the Ubuntu 24
system as Samba share.
The hotfolderscan  tool has to run 10 hour before the Kerberos ticket renewal.
Both on the Ubuntu 24 and the Windows 2022 system, Wireshare is catching the
network packages.
Tomorrow I hope to see the result.


I found the same problem with the Kerberos ticket renewal on a Synology Nas.
Their initial response was that it was down to my Windows system or domain
controller.
The second line support engineers of Synology asked me also for network traces.
But after many messages back and forth en running my hotfolderscan tool on their
internal systems they have concluded that it is indeed a problem in Samba.

Best regards,
Hans van Leeuwen

-----Original Message-----
From: Ralph Boehme <slow at samba.org>
Sent: Friday, October 25, 2024 11:08 AM
To: Hans van Leeuwen <HansvanLeeuwen at mailstreet.nl>
Cc: samba at lists.samba.org
Subject: Re: [Samba] Kerberos ticket renew causes a brief network interruption

On 10/25/24 10:35 AM, Hans van Leeuwen via samba wrote:
> Is seems that Samba doesn't handle the Kerberos ticket renewal on the
right way.
can you get us two network traces:

- last minute before and after session expiry against Samba
- last minute before and after session expiry against Windows

-slow