thr3ads.net - samba - [Samba] Unable to browse system shares of a newly migrated AD DC [Apr 2015]

If this information is useful, please help other people find it:
Share via:

Andrey Repin

2015-Mar-27 20:01 UTC

[Samba] Unable to browse system shares of a newly migrated AD DC

Greetings, All!

I'm trying final steps of my long upgrade process, but I've got hit by
the
unexpected.

When everything seemingly run fine in the end, I'm unable to browse the
local
shares of the DC.

# smbclient -L localhost -U%
Domain=[CCENTER] OS=[Unix] Server=[Samba 4.1.11-Ubuntu]

        Sharename       Type      Comment
        ---------       ----      -------
Error returning browse list: NT_STATUS_ACCESS_DENIED
Domain=[CCENTER] OS=[Unix] Server=[Samba 4.1.11-Ubuntu]

        Server               Comment
        ---------            -------

        Workgroup            Master
        ---------            -------

At the same time,

# wbinfo -t
checking the trust secret for domain CCENTER via RPC calls succeeded

and `wbinfo -u' correctly listing the domain members.

I've tried to instal libnss-winbind, but that seems to not have helped.

# ls -ld /var/lib/samba/sysvol/ads.ccenter.lan/scripts/
drwxrwx---+ 2 30001 544 4096 Mar 27 21:41
/var/lib/samba/sysvol/ads.ccenter.lan/scripts/

# testparm -s
Load smb config files from /etc/samba/smb.conf
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[netlogon]"
Processing section "[sysvol]"
Loaded services file OK.
Server role: ROLE_ACTIVE_DIRECTORY_DC
[global]
        workgroup = CCENTER
        realm = ads.ccenter.lan
        interfaces = lo, 192.168.17.0/24
        server role = active directory domain controller
        passdb backend = samba_dsdb
        rpc_server:tcpip = no
        rpc_daemon:spoolssd = embedded
        rpc_server:spoolss = embedded
        rpc_server:winreg = embedded
        rpc_server:ntsvcs = embedded
        rpc_server:eventlog = embedded
        rpc_server:srvsvc = embedded
        rpc_server:svcctl = embedded
        rpc_server:default = external
        idmap config CCENTER:range = 1000 - 50000
        idmap config CCENTER:backend = ad
        idmap config *:range = 100000 - 999999
        idmap_ldb:use rfc2307 = yes
        idmap config * : backend = tdb
        map archive = No
        map readonly = no
        store dos attributes = Yes
        vfs objects = dfs_samba4, acl_xattr

[netlogon]
        path = /var/lib/samba/sysvol/ads.ccenter.lan/scripts
        read only = No

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No

Anything I can try to resolve the problem? Or should I try upgrade with
different options?
Upgrade log attached.
(This is a test installation, so don't be concerned with passwords. I'd
likely restart it several more times before I get the process all straight.)


-- 
WBR,
Andrey Repin (anrdaemon at yandex.ru) 27.03.2015, <22:40>

Sorry for my terrible english...

Rowland Penny

2015-Mar-27 20:34 UTC

head link

[Samba] Unable to browse system shares of a newly migrated AD DC

On 27/03/15 20:01, Andrey Repin wrote:> Greetings, All!
>
> I'm trying final steps of my long upgrade process, but I've got hit
by the
> unexpected.
>
> When everything seemingly run fine in the end, I'm unable to browse the
local
> shares of the DC.
>
> # smbclient -L localhost -U%
> Domain=[CCENTER] OS=[Unix] Server=[Samba 4.1.11-Ubuntu]
>
>          Sharename       Type      Comment
>          ---------       ----      -------
> Error returning browse list: NT_STATUS_ACCESS_DENIED
> Domain=[CCENTER] OS=[Unix] Server=[Samba 4.1.11-Ubuntu]
>
>          Server               Comment
>          ---------            -------
>
>          Workgroup            Master
>          ---------            -------
>
> At the same time,
>
> # wbinfo -t
> checking the trust secret for domain CCENTER via RPC calls succeeded
>
> and `wbinfo -u' correctly listing the domain members.
>
> I've tried to instal libnss-winbind, but that seems to not have helped.
>
> # ls -ld /var/lib/samba/sysvol/ads.ccenter.lan/scripts/
> drwxrwx---+ 2 30001 544 4096 Mar 27 21:41
/var/lib/samba/sysvol/ads.ccenter.lan/scripts/
>
> # testparm -s
> Load smb config files from /etc/samba/smb.conf
> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
> Processing section "[netlogon]"
> Processing section "[sysvol]"
> Loaded services file OK.
> Server role: ROLE_ACTIVE_DIRECTORY_DC
> [global]
>          workgroup = CCENTER
>          realm = ads.ccenter.lan
>          interfaces = lo, 192.168.17.0/24
>          server role = active directory domain controller
>          passdb backend = samba_dsdb
>          rpc_server:tcpip = no
>          rpc_daemon:spoolssd = embedded
>          rpc_server:spoolss = embedded
>          rpc_server:winreg = embedded
>          rpc_server:ntsvcs = embedded
>          rpc_server:eventlog = embedded
>          rpc_server:srvsvc = embedded
>          rpc_server:svcctl = embedded
>          rpc_server:default = external
>          idmap config CCENTER:range = 1000 - 50000
>          idmap config CCENTER:backend = ad
>          idmap config *:range = 100000 - 999999
>          idmap_ldb:use rfc2307 = yes
>          idmap config * : backend = tdb
>          map archive = No
>          map readonly = no
>          store dos attributes = Yes
>          vfs objects = dfs_samba4, acl_xattr
>
> [netlogon]
>          path = /var/lib/samba/sysvol/ads.ccenter.lan/scripts
>          read only = No
>
> [sysvol]
>          path = /var/lib/samba/sysvol
>          read only = No
>
> Anything I can try to resolve the problem? Or should I try upgrade with
> different options?
> Upgrade log attached.
> (This is a test installation, so don't be concerned with passwords.
I'd
> likely restart it several more times before I get the process all
straight.)
>
>
>
>
OK, remove most of the lines you have added, so you smb.conf looks 
something like this:

[global]
         workgroup = CCENTER
         realm = ads.ccenter.lan
         netbios name = DC_NAME
         server role = active directory domain controller
         forwarder = 8.8.8.8
         idmap_ldb:use rfc2307 = yes
         interfaces = lo, 192.168.17.0/24

[netlogon]
         path = /var/lib/samba/sysvol/ads.ccenter.lan/scripts
         read only = No

[sysvol]
         path = /var/lib/samba/sysvol
         read only = No


Check that you have these packages are installed: libnss-winbind 
libpam-winbind libpam-krb5

check that the passwd & group lines in /etc/nsswitch.conf have
'winbind'
added to them.

Rowland

Andrey Repin

2015-Mar-27 22:47 UTC

head link

[Samba] Unable to browse system shares of a newly migrated AD DC

Greetings, Rowland Penny!
>> I'm trying final steps of my long upgrade process, but I've got
hit by the
>> unexpected.
>>
>> When everything seemingly run fine in the end, I'm unable to browse
the local
>> shares of the DC.
>>
>> # smbclient -L localhost -U%
>> Domain=[CCENTER] OS=[Unix] Server=[Samba 4.1.11-Ubuntu]
>>
>>          Sharename       Type      Comment
>>          ---------       ----      -------
>> Error returning browse list: NT_STATUS_ACCESS_DENIED
>> Domain=[CCENTER] OS=[Unix] Server=[Samba 4.1.11-Ubuntu]
>>
>>          Server               Comment
>>          ---------            -------
>>
>>          Workgroup            Master
>>          ---------            -------
>>
>> At the same time,
>>
>> # wbinfo -t
>> checking the trust secret for domain CCENTER via RPC calls succeeded
>>
>> and `wbinfo -u' correctly listing the domain members.
>>
>> I've tried to instal libnss-winbind, but that seems to not have
helped.
>>
>> # ls -ld /var/lib/samba/sysvol/ads.ccenter.lan/scripts/
>> drwxrwx---+ 2 30001 544 4096 Mar 27 21:41
/var/lib/samba/sysvol/ads.ccenter.lan/scripts/
>>
>> # testparm -s
>> Load smb config files from /etc/samba/smb.conf
>> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit
(16384)
>> Processing section "[netlogon]"
>> Processing section "[sysvol]"
>> Loaded services file OK.
>> Server role: ROLE_ACTIVE_DIRECTORY_DC
>> [global]
>>          workgroup = CCENTER
>>          realm = ads.ccenter.lan
>>          interfaces = lo, 192.168.17.0/24
>>          server role = active directory domain controller
>>          passdb backend = samba_dsdb
>>          rpc_server:tcpip = no
>>          rpc_daemon:spoolssd = embedded
>>          rpc_server:spoolss = embedded
>>          rpc_server:winreg = embedded
>>          rpc_server:ntsvcs = embedded
>>          rpc_server:eventlog = embedded
>>          rpc_server:srvsvc = embedded
>>          rpc_server:svcctl = embedded
>>          rpc_server:default = external
>>          idmap config CCENTER:range = 1000 - 50000
>>          idmap config CCENTER:backend = ad
>>          idmap config *:range = 100000 - 999999
>>          idmap_ldb:use rfc2307 = yes
>>          idmap config * : backend = tdb
>>          map archive = No
>>          map readonly = no
>>          store dos attributes = Yes
>>          vfs objects = dfs_samba4, acl_xattr
>>
>> [netlogon]
>>          path = /var/lib/samba/sysvol/ads.ccenter.lan/scripts
>>          read only = No
>>
>> [sysvol]
>>          path = /var/lib/samba/sysvol
>>          read only = No
>>
>> Anything I can try to resolve the problem? Or should I try upgrade with
>> different options?
>> Upgrade log attached.
>> (This is a test installation, so don't be concerned with passwords.
I'd
>> likely restart it several more times before I get the process all
straight.)
>>
>>
>>
>>
> OK, remove most of the lines you have added, so you smb.conf looks 
> something like this:
I tried with that config initially, with same results, but ok. I'll try
again.
> [global]
>          workgroup = CCENTER
>          realm = ads.ccenter.lan
>          netbios name = DC_NAME
>          server role = active directory domain controller
>          forwarder = 8.8.8.8
>          idmap_ldb:use rfc2307 = yes
>          interfaces = lo, 192.168.17.0/24
> [netlogon]
>          path = /var/lib/samba/sysvol/ads.ccenter.lan/scripts
>          read only = No
> [sysvol]
>          path = /var/lib/samba/sysvol
>          read only = No
> Check that you have these packages are installed: libnss-winbind 
> libpam-winbind
Um. Missed! x.x
> libpam-krb5
No such package. Is it known by any other name? Ubuntu 12.04 here, if that
matters. Samba from ppa:9v-shaun-42/samba4.
> check that the passwd & group lines in /etc/nsswitch.conf have
'winbind'
> added to them.
I've added

passwd:         compat winbind
group:          compat winbind

and restarted the migration one more time.
Something... happened.

# ls -ld /var/lib/samba/sysvol/ads.ccenter.lan/scripts/
drwxrwx---+ 2 CCENTER\Administrator 544 4096 Mar 28 01:33
/var/lib/samba/sysvol/ads.ccenter.lan/scripts/
# ls -lnd /var/lib/samba/sysvol/ads.ccenter.lan/scripts/
drwxrwx---+ 2 30001 544 4096 Mar 28 01:33
/var/lib/samba/sysvol/ads.ccenter.lan/scripts/

But

# smbclient -L localhost -U%
Domain=[CCENTER] OS=[Unix] Server=[Samba 4.1.11-Ubuntu]

        Sharename       Type      Comment
        ---------       ----      -------
Error returning browse list: NT_STATUS_ACCESS_DENIED
Domain=[CCENTER] OS=[Unix] Server=[Samba 4.1.11-Ubuntu]

        Server               Comment
        ---------            -------

        Workgroup            Master
        ---------            -------

# cat /etc/nsswitch.conf
# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed,
try:
# `info libc "Name Service Switch"' for information about this
file.

passwd:         compat winbind
group:          compat winbind
shadow:         compat

hosts:          files dns
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis

# samba-tool testparm --suppress-prompt
# Global parameters
[global]
        workgroup = CCENTER
        realm = ads.ccenter.lan
        netbios name = DC1
        interfaces = lo, 192.168.17.0/24
        server role = active directory domain controller
        dns forwarder = 192.168.17.1
        idmap_ldb:use rfc2307 = yes

[netlogon]
        path = /var/lib/samba/sysvol/ads.ccenter.lan/scripts
        read only = No

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No


--
WBR,
Andrey Repin (anrdaemon at yandex.ru) 28.03.2015, <01:20>

Sorry for my terrible english...

Andrey Repin

2015-Mar-29 22:16 UTC

head link

[Samba] Unable to browse system shares of a newly migrated AD DC

Greetings, Rowland Penny!

Got some logs. But... they do not make much sense.
It seems to fail to chdir to /tmp. But I can do it with sudo just fine under
the same credentials.
What's going on?

[2015/03/30 01:05:38.027147,  3, effective(0, 0), real(0, 0)]
../source3/lib/access.c:338(allow_access)
  Allowed connection from 127.0.0.1 (127.0.0.1)
[2015/03/30 01:05:38.027425,  3, effective(0, 0), real(0, 0)]
../source3/smbd/oplock.c:870(init_oplocks)
  init_oplocks: initializing messages.
[2015/03/30 01:05:38.027695,  3, effective(0, 0), real(0, 0)]
../source3/smbd/process.c:1802(process_smb)
  Transaction 0 of length 194 (0 toread)
[2015/03/30 01:05:38.027728,  3, effective(0, 0), real(0, 0)]
../source3/smbd/process.c:1405(switch_message)
  switch message SMBnegprot (pid 882) conn 0x0
[2015/03/30 01:05:38.033749,  3, effective(0, 0), real(0, 0)]
../source3/smbd/negprot.c:563(reply_negprot)
  Requested protocol [PC NETWORK PROGRAM 1.0]
[2015/03/30 01:05:38.033869,  3, effective(0, 0), real(0, 0)]
../source3/smbd/negprot.c:563(reply_negprot)
  Requested protocol [MICROSOFT NETWORKS 1.03]
[2015/03/30 01:05:38.033930,  3, effective(0, 0), real(0, 0)]
../source3/smbd/negprot.c:563(reply_negprot)
  Requested protocol [MICROSOFT NETWORKS 3.0]
[2015/03/30 01:05:38.033989,  3, effective(0, 0), real(0, 0)]
../source3/smbd/negprot.c:563(reply_negprot)
  Requested protocol [LANMAN1.0]
[2015/03/30 01:05:38.034055,  3, effective(0, 0), real(0, 0)]
../source3/smbd/negprot.c:563(reply_negprot)
  Requested protocol [LM1.2X002]
[2015/03/30 01:05:38.034116,  3, effective(0, 0), real(0, 0)]
../source3/smbd/negprot.c:563(reply_negprot)
  Requested protocol [DOS LANMAN2.1]
[2015/03/30 01:05:38.034177,  3, effective(0, 0), real(0, 0)]
../source3/smbd/negprot.c:563(reply_negprot)
  Requested protocol [LANMAN2.1]
[2015/03/30 01:05:38.034234,  3, effective(0, 0), real(0, 0)]
../source3/smbd/negprot.c:563(reply_negprot)
  Requested protocol [Samba]
[2015/03/30 01:05:38.034323,  3, effective(0, 0), real(0, 0)]
../source3/smbd/negprot.c:563(reply_negprot)
  Requested protocol [NT LANMAN 1.0]
[2015/03/30 01:05:38.034376,  3, effective(0, 0), real(0, 0)]
../source3/smbd/negprot.c:563(reply_negprot)
  Requested protocol [NT LM 0.12]
[2015/03/30 01:05:38.066076,  2, effective(0, 0), real(0, 0)]
../lib/util/modules.c:191(do_smb_load_module)
  Module 'samba4' loaded
[2015/03/30 01:05:38.067018,  3, effective(0, 0), real(0, 0)]
../auth/gensec/gensec_start.c:870(gensec_register)
  GENSEC backend 'gssapi_spnego' registered
[2015/03/30 01:05:38.067085,  3, effective(0, 0), real(0, 0)]
../auth/gensec/gensec_start.c:870(gensec_register)
  GENSEC backend 'gssapi_krb5' registered
[2015/03/30 01:05:38.067129,  3, effective(0, 0), real(0, 0)]
../auth/gensec/gensec_start.c:870(gensec_register)
  GENSEC backend 'gssapi_krb5_sasl' registered
[2015/03/30 01:05:38.067173,  3, effective(0, 0), real(0, 0)]
../auth/gensec/gensec_start.c:870(gensec_register)
  GENSEC backend 'schannel' registered
[2015/03/30 01:05:38.067215,  3, effective(0, 0), real(0, 0)]
../auth/gensec/gensec_start.c:870(gensec_register)
  GENSEC backend 'spnego' registered
[2015/03/30 01:05:38.067280,  3, effective(0, 0), real(0, 0)]
../auth/gensec/gensec_start.c:870(gensec_register)
  GENSEC backend 'ntlmssp' registered
[2015/03/30 01:05:38.067330,  3, effective(0, 0), real(0, 0)]
../auth/gensec/gensec_start.c:870(gensec_register)
  GENSEC backend 'krb5' registered
[2015/03/30 01:05:38.067371,  3, effective(0, 0), real(0, 0)]
../auth/gensec/gensec_start.c:870(gensec_register)
  GENSEC backend 'fake_gssapi_krb5' registered
[2015/03/30 01:05:38.068387,  3, effective(0, 0), real(0, 0)]
../lib/ldb-samba/ldb_wrap.c:320(ldb_wrap_connect)
  ldb_wrap open of secrets.ldb
[2015/03/30 01:05:38.069598,  3, effective(0, 0), real(0, 0)]
../source4/auth/ntlm/auth.c:673(auth_register)
  AUTH backend 'sam' registered
[2015/03/30 01:05:38.069684,  3, effective(0, 0), real(0, 0)]
../source4/auth/ntlm/auth.c:673(auth_register)
  AUTH backend 'sam_ignoredomain' registered
[2015/03/30 01:05:38.069729,  3, effective(0, 0), real(0, 0)]
../source4/auth/ntlm/auth.c:673(auth_register)
  AUTH backend 'anonymous' registered
[2015/03/30 01:05:38.069802,  3, effective(0, 0), real(0, 0)]
../source4/auth/ntlm/auth.c:673(auth_register)
  AUTH backend 'winbind' registered
[2015/03/30 01:05:38.069848,  3, effective(0, 0), real(0, 0)]
../source4/auth/ntlm/auth.c:673(auth_register)
  AUTH backend 'winbind_wbclient' registered
[2015/03/30 01:05:38.069910,  3, effective(0, 0), real(0, 0)]
../source4/auth/ntlm/auth.c:673(auth_register)
  AUTH backend 'name_to_ntstatus' registered
[2015/03/30 01:05:38.069958,  3, effective(0, 0), real(0, 0)]
../source4/auth/ntlm/auth.c:673(auth_register)
  AUTH backend 'unix' registered
[2015/03/30 01:05:38.088423,  3, effective(0, 0), real(0, 0)]
../source3/smbd/negprot.c:384(reply_nt1)
  using SPNEGO
[2015/03/30 01:05:38.088497,  3, effective(0, 0), real(0, 0)]
../source3/smbd/negprot.c:671(reply_negprot)
  Selected protocol NT LANMAN 1.0
[2015/03/30 01:05:38.088901,  3, effective(0, 0), real(0, 0)]
../source3/smbd/process.c:1802(process_smb)
  Transaction 1 of length 92 (0 toread)
[2015/03/30 01:05:38.088973,  3, effective(0, 0), real(0, 0)]
../source3/smbd/process.c:1405(switch_message)
  switch message SMBsesssetupX (pid 882) conn 0x0
[2015/03/30 01:05:38.094128,  3, effective(0, 0), real(0, 0)]
../source3/smbd/sesssetup.c:604(reply_sesssetup_and_X)
  wct=13 flg2=0xc843
[2015/03/30 01:05:38.094250,  3, effective(0, 0), real(0, 0)]
../source3/smbd/sesssetup.c:818(reply_sesssetup_and_X)
  Domain=[]  NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[null]
[2015/03/30 01:05:38.094299,  3, effective(0, 0), real(0, 0)]
../source3/smbd/sesssetup.c:834(reply_sesssetup_and_X)
  sesssetupX:name=[]\[]@[127.0.0.1]
[2015/03/30 01:05:38.094367,  3, effective(0, 0), real(0, 0)]
../source3/smbd/sesssetup.c:89(check_guest_password)
  Got anonymous request
[2015/03/30 01:05:38.096168,  3, effective(0, 0), real(0, 0)]
../source4/auth/ntlm/auth.c:270(auth_check_password_send)
  auth_check_password_send: Checking password for unmapped user []\[]@[]
  auth_check_password_send: mapped user is: [CCENTER]\[]@[]
[2015/03/30 01:05:38.098786,  3, effective(0, 0), real(0, 0)]
../source3/smbd/process.c:1802(process_smb)
  Transaction 2 of length 88 (0 toread)
[2015/03/30 01:05:38.098854,  3, effective(0, 0), real(0, 0)]
../source3/smbd/process.c:1405(switch_message)
  switch message SMBtconX (pid 882) conn 0x0
[2015/03/30 01:05:38.099031,  3, effective(0, 0), real(0, 0)]
../source3/lib/access.c:338(allow_access)
  Allowed connection from 127.0.0.1 (127.0.0.1)
[2015/03/30 01:05:38.099142,  3, effective(0, 0), real(0, 0)]
../source3/smbd/service.c:612(make_connection_snum)
  Connect path is '/tmp' for service [IPC$]
[2015/03/30 01:05:38.099903,  3, effective(0, 0), real(0, 0)]
../source3/smbd/vfs.c:113(vfs_init_default)
  Initialising default vfs hooks
[2015/03/30 01:05:38.099972,  3, effective(0, 0), real(0, 0)]
../source3/smbd/vfs.c:139(vfs_init_custom)
  Initialising custom vfs hooks from [/[Default VFS]/]
[2015/03/30 01:05:38.100022,  3, effective(0, 0), real(0, 0)]
../source3/smbd/vfs.c:139(vfs_init_custom)
  Initialising custom vfs hooks from [acl_xattr]
[2015/03/30 01:05:38.118613,  2, effective(0, 0), real(0, 0)]
../lib/util/modules.c:191(do_smb_load_module)
  Module 'acl_xattr' loaded
[2015/03/30 01:05:38.118757,  3, effective(0, 0), real(0, 0)]
../source3/smbd/vfs.c:139(vfs_init_custom)
  Initialising custom vfs hooks from [dfs_samba4]
[2015/03/30 01:05:38.125409,  2, effective(0, 0), real(0, 0)]
../lib/util/modules.c:191(do_smb_load_module)
  Module 'dfs_samba4' loaded
[2015/03/30 01:05:38.125440,  2, effective(0, 0), real(0, 0)]
../source3/modules/vfs_acl_xattr.c:193(connect_acl_xattr)
  connect_acl_xattr: setting 'inherit acls = true' 'dos filemode =
true' and 'force unknown acl user = true' for service IPC$
[2015/03/30 01:05:38.127532,  3, effective(0, 0), real(0, 0)]
../source3/smbd/service.c:856(make_connection_snum)
  127.0.0.1 (ipv4:127.0.0.1:45066) connect to service IPC$ initially as user NT
AUTHORITY\ANONYMOUS LOGON (uid=65534, gid=3000009) (pid 882)
[2015/03/30 01:05:38.127627,  3, effective(0, 0), real(0, 0)]
../source3/smbd/reply.c:1024(reply_tcon_and_X)
  tconX service=IPC$ 
[2015/03/30 01:05:38.128477,  3, effective(0, 0), real(0, 0)]
../source3/smbd/process.c:1802(process_smb)
  Transaction 3 of length 106 (0 toread)
[2015/03/30 01:05:38.128537,  3, effective(0, 0), real(0, 0)]
../source3/smbd/process.c:1405(switch_message)
  switch message SMBntcreateX (pid 882) conn 0xb893b588
[2015/03/29 22:05:38.128622,  3, effective(65534, 3000009), real(65534, 0)]
../source3/smbd/service.c:197(set_current_service)
  chdir (/tmp) failed, reason: Permission denied
[2015/03/29 22:05:38.128674,  3, effective(65534, 3000009), real(65534, 0)]
../source3/smbd/error.c:82(error_packet_set)
  NT error packet at ../source3/smbd/process.c(1524) cmd=162 (SMBntcreateX)
NT_STATUS_ACCESS_DENIED
[2015/03/29 22:05:38.138398,  3, effective(65534, 3000009), real(65534, 0)]
../source3/smbd/process.c:1802(process_smb)
  Transaction 4 of length 118 (0 toread)
[2015/03/29 22:05:38.138453,  3, effective(65534, 3000009), real(65534, 0)]
../source3/smbd/process.c:1405(switch_message)
  switch message SMBtrans (pid 882) conn 0xb893b588
[2015/03/29 22:05:38.138494,  3, effective(65534, 3000009), real(65534, 0)]
../source3/smbd/service.c:197(set_current_service)
  chdir (/tmp) failed, reason: Permission denied
[2015/03/29 22:05:38.138529,  3, effective(65534, 3000009), real(65534, 0)]
../source3/smbd/error.c:82(error_packet_set)
  NT error packet at ../source3/smbd/process.c(1524) cmd=37 (SMBtrans)
NT_STATUS_ACCESS_DENIED
[2015/03/29 22:05:38.139702,  3, effective(65534, 3000009), real(65534, 0)]
../source3/smbd/process.c:1802(process_smb)
  Transaction 5 of length 39 (0 toread)
[2015/03/29 22:05:38.139771,  3, effective(65534, 3000009), real(65534, 0)]
../source3/smbd/process.c:1405(switch_message)
  switch message SMBtdis (pid 882) conn 0xb893b588
[2015/03/30 01:05:38.139897,  3, effective(0, 0), real(0, 0)]
../source3/smbd/service.c:1130(close_cnum)
  127.0.0.1 (ipv4:127.0.0.1:45066) closed connection to service IPC$
[2015/03/30 01:05:38.141264,  3, effective(0, 0), real(0, 0)]
../source3/smbd/server_exit.c:221(exit_server_common)
  Server exit (failed to receive smb request)


--
WBR,
Andrey Repin (anrdaemon at yandex.ru) 30.03.2015, <01:15>

Sorry for my terrible english...

Andrey Repin

2015-Apr-02 23:27 UTC

head link

[Samba] Unable to browse system shares of a newly migrated AD DC

Greetings, All!
> I'm trying final steps of my long upgrade process, but I've got hit
by the
> unexpected.
> When everything seemingly run fine in the end, I'm unable to browse the
local
> shares of the DC.
> # smbclient -L localhost -U%
> Domain=[CCENTER] OS=[Unix] Server=[Samba 4.1.11-Ubuntu]
>         Sharename       Type      Comment
>         ---------       ----      -------
> Error returning browse list: NT_STATUS_ACCESS_DENIED
> Domain=[CCENTER] OS=[Unix] Server=[Samba 4.1.11-Ubuntu]
>         Server               Comment
>         ---------            -------
>         Workgroup            Master
>         ---------            -------
Turned out, the /tmp directory was not accessible to the user "nobody"
for
some mysterious reason. (So that

sudo -u '#65534' ls -l /tmp || echo 'Fail!'

resulted in "Fail!")

Repeating the tests with freshly generated setup turned out successfully.
At least, in this specific case.


-- 
With best regards,
Andrey Repin
Friday, April 3, 2015 02:24:47

Sorry for my terrible english...

Rowland Penny

2015-Apr-03 08:45 UTC

head link

[Samba] Unable to browse system shares of a newly migrated AD DC

On 03/04/15 00:27, Andrey Repin wrote:> Greetings, All!
>
>> I'm trying final steps of my long upgrade process, but I've got
hit by the
>> unexpected.
>> When everything seemingly run fine in the end, I'm unable to browse
the local
>> shares of the DC.
>> # smbclient -L localhost -U%
>> Domain=[CCENTER] OS=[Unix] Server=[Samba 4.1.11-Ubuntu]
>>          Sharename       Type      Comment
>>          ---------       ----      -------
>> Error returning browse list: NT_STATUS_ACCESS_DENIED
>> Domain=[CCENTER] OS=[Unix] Server=[Samba 4.1.11-Ubuntu]
>>          Server               Comment
>>          ---------            -------
>>          Workgroup            Master
>>          ---------            -------
> Turned out, the /tmp directory was not accessible to the user
"nobody" for
> some mysterious reason. (So that
>
> sudo -u '#65534' ls -l /tmp || echo 'Fail!'
>
> resulted in "Fail!")
>
> Repeating the tests with freshly generated setup turned out successfully.
> At least, in this specific case.
>
>
I said that you probably had a problem with /tmp 3 days ago (but not in 
those words)

Rowland

Reasonably Related Threads

Search for more maybe matching threads

samba - Apr 2015 - Unable to browse system shares of a newly migrated AD DC

[Samba] Unable to browse system shares of a newly migrated AD DC

[Samba] Unable to browse system shares of a newly migrated AD DC

[Samba] Unable to browse system shares of a newly migrated AD DC

[Samba] Unable to browse system shares of a newly migrated AD DC

[Samba] Unable to browse system shares of a newly migrated AD DC

[Samba] Unable to browse system shares of a newly migrated AD DC

Reasonably Related Threads