Takeshi Suyama
2016-Apr-26 00:52 UTC
[Samba] Can't access by NetBIOS Aliases or IP Address
Hi all.
I am running Debian jessie server with Samba, which has joined the Active
Directory domain. The domain controllers are Windows Server 2012 R2.
After I upgraded Samba version from 4.1.17+dfsg-2+deb8u2 to
4.2.10+dfsg-0+deb8u2, I'm facing the problem that I can't access Samba
share by NetBIOS Aliases or IP Address.
The Samba's NetBIOS name is mysamba, and I can access by NetBIOS Name from
windows pcs as follows.
net use g: \\mysamba\myshare
But, I can't access by NetBIOS aliases or IP address as follows. (mysamba01
is NetBIOS aliase)
net use g: \\mysamba01\myshare
or
net use g: \\192.168.0.1\myshare
The previous version, 4.1.17+dfsg-2+deb8u2 works fine, and I can access share by
NetBIOS Aliases or IP Address.
Any suggestions will be appreciated.
----------smb.conf----------
[global]
dos charset = CP932
unix charset = UTF-8
workgroup = foo
realm = foo.LOCAL
netbios name = mysamba
netbios aliases = mysamba01
security = ADS
map to guest = Bad Password
server max protocol = SMB2
follow symlinks = yes
unix extensions = No
load printers = No
disable spoolss = Yes
dns proxy = No
wins server = 192.168.1.2 172.16.1.5
usershare allow guests = Yes
panic action = /usr/share/samba/panic-action %d
idmap config * : backend = tdb
hosts allow = 192.168.1. 192.168.30. 192.168.31.
printing = bsd
wide links = Yes
--
Takeshi Suyama <tsuyama94 at gmail.com>
Hm.. standard troubleshooting may be use smbclient -L on the samba server to list shares and make sure samba is responding to request. check the samba logs for info -- and if needed turn loglevel up in smb.conf if this was a joined server prior to upgrade, you may need to rejoin it to the domain On Mon, Apr 25, 2016 at 5:52 PM, Takeshi Suyama <tsuyama94 at gmail.com> wrote:> Hi all. > > I am running Debian jessie server with Samba, which has joined the Active > Directory domain. The domain controllers are Windows Server 2012 R2. > > After I upgraded Samba version from 4.1.17+dfsg-2+deb8u2 to > 4.2.10+dfsg-0+deb8u2, I'm facing the problem that I can't access Samba > share by NetBIOS Aliases or IP Address. > > The Samba's NetBIOS name is mysamba, and I can access by NetBIOS Name from > windows pcs as follows. > > net use g: \\mysamba\myshare > > But, I can't access by NetBIOS aliases or IP address as follows. > (mysamba01 is NetBIOS aliase) > > net use g: \\mysamba01\myshare > or > net use g: \\192.168.0.1\myshare > > The previous version, 4.1.17+dfsg-2+deb8u2 works fine, and I can access > share by NetBIOS Aliases or IP Address. > > Any suggestions will be appreciated. > > ----------smb.conf---------- > [global] > dos charset = CP932 > unix charset = UTF-8 > workgroup = foo > realm = foo.LOCAL > netbios name = mysamba > netbios aliases = mysamba01 > security = ADS > map to guest = Bad Password > server max protocol = SMB2 > follow symlinks = yes > unix extensions = No > load printers = No > disable spoolss = Yes > dns proxy = No > wins server = 192.168.1.2 172.16.1.5 > usershare allow guests = Yes > panic action = /usr/share/samba/panic-action %d > idmap config * : backend = tdb > hosts allow = 192.168.1. 192.168.30. 192.168.31. > printing = bsd > wide links = Yes > > > -- > Takeshi Suyama <tsuyama94 at gmail.com> > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >-- David Bear mobile: (602) 903-6476
Takeshi Suyama
2016-Apr-27 09:39 UTC
[Samba] Can't access by NetBIOS Aliases or IP Address
Hi, David.
Thank you for your reply.
I ran smbclient -L on the samba as follows.
smbclient -L mysamba -U tsuyama -W foo.local
Enter tsuyama's password:
Domain=[SPS] OS=[Windows 6.1] Server=[Samba 4.2.10-Debian]
Sharename Type Comment
--------- ---- -------
IPC$ IPC IPC Service (mysamba server)
Domain=[foo] OS=[Windows 6.1] Server=[Samba 4.2.10-Debian]
Server Comment
--------- -------
mysamba01 mysamba server
COLUMBUS columbus server
mysamba mysamba server
Workgroup Master
--------- -------
foo COLUMBUS
COLUMBUS is another samba server.
I set log level to 3. Here is the log for running smbclient -L.
-------------------------------------------
[2016/04/27 18:10:46.451663, 3]
../lib/util/util_net.c:256(interpret_string_addr_internal)
interpret_string_addr_internal: getaddrinfo failed for name myshare (flags 34)
[temporary failure in name resolution]
[2016/04/27 18:10:46.451998, 3]
../source3/lib/util_sock.c:1308(get_mydnsfullname)
get_mydnsfullname: getaddrinfo failed for name myshare [unknown error]
[2016/04/27 18:10:46.502300, 3]
../lib/util/util_net.c:256(interpret_string_addr_internal)
interpret_string_addr_internal: getaddrinfo failed for name myshare (flags 34)
[temporary failure in name resolution]
[2016/04/27 18:10:46.502367, 3]
../source3/lib/util_sock.c:1308(get_mydnsfullname)
get_mydnsfullname: getaddrinfo failed for name myshare [unknown error]
[2016/04/27 18:10:46.505204, 3]
../auth/gensec/gensec_start.c:899(gensec_register)
GENSEC backend 'gssapi_spnego' registered
[2016/04/27 18:10:46.505272, 3]
../auth/gensec/gensec_start.c:899(gensec_register)
GENSEC backend 'gssapi_krb5' registered
[2016/04/27 18:10:46.505334, 3]
../auth/gensec/gensec_start.c:899(gensec_register)
GENSEC backend 'gssapi_krb5_sasl' registered
[2016/04/27 18:10:46.505390, 3]
../auth/gensec/gensec_start.c:899(gensec_register)
GENSEC backend 'spnego' registered
[2016/04/27 18:10:46.505440, 3]
../auth/gensec/gensec_start.c:899(gensec_register)
GENSEC backend 'schannel' registered
[2016/04/27 18:10:46.505493, 3]
../auth/gensec/gensec_start.c:899(gensec_register)
GENSEC backend 'naclrpc_as_system' registered
[2016/04/27 18:10:46.505552, 3]
../auth/gensec/gensec_start.c:899(gensec_register)
GENSEC backend 'sasl-EXTERNAL' registered
[2016/04/27 18:10:46.505600, 3]
../auth/gensec/gensec_start.c:899(gensec_register)
GENSEC backend 'ntlmssp' registered
[2016/04/27 18:10:46.505653, 3]
../auth/gensec/gensec_start.c:899(gensec_register)
GENSEC backend 'ntlmssp_resume_ccache' registered
[2016/04/27 18:10:46.505737, 3]
../auth/gensec/gensec_start.c:899(gensec_register)
GENSEC backend 'http_basic' registered
[2016/04/27 18:10:46.505787, 3]
../auth/gensec/gensec_start.c:899(gensec_register)
GENSEC backend 'http_ntlm' registered
[2016/04/27 18:10:46.505837, 3]
../auth/gensec/gensec_start.c:899(gensec_register)
GENSEC backend 'krb5' registered
[2016/04/27 18:10:46.505891, 3]
../auth/gensec/gensec_start.c:899(gensec_register)
GENSEC backend 'fake_gssapi_krb5' registered
[2016/04/27 18:10:46.615703, 3]
../lib/util/util_net.c:256(interpret_string_addr_internal)
interpret_string_addr_internal: getaddrinfo failed for name myshare (flags 34)
[temporary failure in name resolution]
[2016/04/27 18:10:46.615798, 3]
../source3/lib/util_sock.c:1308(get_mydnsfullname)
get_mydnsfullname: getaddrinfo failed for name myshare [unknown error]
[2016/04/27 18:10:46.665065, 3]
../lib/util/util_net.c:256(interpret_string_addr_internal)
interpret_string_addr_internal: getaddrinfo failed for name myshare (flags 34)
[temporary failure in name resolution]
[2016/04/27 18:10:46.665126, 3]
../source3/lib/util_sock.c:1308(get_mydnsfullname)
get_mydnsfullname: getaddrinfo failed for name myshare [unknown error]
[2016/04/27 18:10:46.665361, 3]
../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0x62088215
[2016/04/27 18:10:46.666063, 3]
../auth/ntlmssp/ntlmssp_server.c:449(ntlmssp_server_preauth)
Got user=[tsuyama] domain=[foo.LOCAL] workstation=[myshare] len1=24 len2=192
[2016/04/27 18:10:46.666162, 3] ../source3/param/loadparm.c:3636(lp_load_ex)
lp_load_ex: refreshing parameters
[2016/04/27 18:10:46.666347, 3] ../source3/param/loadparm.c:527(init_globals)
Initialising global parameters
[2016/04/27 18:10:46.666587, 3] ../source3/param/loadparm.c:2579(lp_do_section)
Processing section "[global]"
[2016/04/27 18:10:46.667157, 2] ../source3/param/loadparm.c:2596(lp_do_section)
Processing section "[homes]"
[2016/04/27 18:10:46.667395, 2] ../source3/param/loadparm.c:2596(lp_do_section)
Processing section "[etc]"
[2016/04/27 18:10:46.667563, 2] ../source3/param/loadparm.c:2596(lp_do_section)
Processing section "[boot]"
[2016/04/27 18:10:46.667676, 2] ../source3/param/loadparm.c:2596(lp_do_section)
Processing section "[backup]"
[2016/04/27 18:10:46.667846, 3] ../source3/param/loadparm.c:1476(lp_add_ipc)
adding IPC service
[2016/04/27 18:10:46.668168, 3] ../source3/libsmb/namequery.c:3133(get_dc_list)
get_dc_list: preferred server list: ", *"
[2016/04/27 18:10:46.668905, 3] ../source3/libads/ldap.c:541(ads_connect)
Successfully contacted LDAP server 192.168.1.2
[2016/04/27 18:10:46.669048, 3] ../source3/libsmb/namequery.c:3133(get_dc_list)
get_dc_list: preferred server list: ", *"
[2016/04/27 18:10:46.669191, 3] ../source3/libsmb/namequery.c:3133(get_dc_list)
get_dc_list: preferred server list: ", *"
[2016/04/27 18:10:46.712981, 3]
../source3/lib/util_sock.c:636(open_socket_out_send)
Connecting to 192.168.1.2 at port 445
[2016/04/27 18:10:46.717382, 3]
../source3/auth/auth.c:178(auth_check_ntlm_password)
check_ntlm_password: Checking password for unmapped user
[foo.LOCAL]\[tsuyama]@[myshare] with the new password interface
[2016/04/27 18:10:46.717470, 3]
../source3/auth/auth.c:181(auth_check_ntlm_password)
check_ntlm_password: mapped user is: [myshare]\[tsuyama]@[myshare]
[2016/04/27 18:10:46.717614, 3]
../source3/auth/check_samsec.c:400(check_sam_security)
check_sam_security: Couldn't find user 'tsuyama' in passdb.
[2016/04/27 18:10:46.717681, 3]
../source3/auth/auth_winbind.c:60(check_winbind_security)
check_winbind_security: Not using winbind, requested domain [myshare] was for
this SAM.
[2016/04/27 18:10:46.717730, 2]
../source3/auth/auth.c:315(auth_check_ntlm_password)
check_ntlm_password: Authentication for user [tsuyama] -> [tsuyama] FAILED
with error NT_STATUS_NO_SUCH_USER
[2016/04/27 18:10:46.717825, 3]
../source3/auth/auth_util.c:1599(do_map_to_guest_server_info)
No such user tsuyama [foo.LOCAL] - using guest account
-------------------------------------------
The samba server joined the domain prior to upgrade, and I rejoined it
to the domain. But the issue is the same as before.
On Tue, 26 Apr 2016 22:02:04 -0700
David Bear <dwbear75 at gmail.com> wrote:
> Hm.. standard troubleshooting may be
>
> use smbclient -L on the samba server to list shares and make sure samba is
> responding to request.
>
> check the samba logs for info -- and if needed turn loglevel up in smb.conf
>
> if this was a joined server prior to upgrade, you may need to rejoin it to
> the domain
>
>
> On Mon, Apr 25, 2016 at 5:52 PM, Takeshi Suyama <tsuyama94 at
gmail.com> wrote:
>
> > Hi all.
> >
> > I am running Debian jessie server with Samba, which has joined the
Active
> > Directory domain. The domain controllers are Windows Server 2012 R2.
> >
> > After I upgraded Samba version from 4.1.17+dfsg-2+deb8u2 to
> > 4.2.10+dfsg-0+deb8u2, I'm facing the problem that I can't
access Samba
> > share by NetBIOS Aliases or IP Address.
> >
> > The Samba's NetBIOS name is mysamba, and I can access by NetBIOS
Name from
> > windows pcs as follows.
> >
> > net use g: \\mysamba\myshare
> >
> > But, I can't access by NetBIOS aliases or IP address as follows.
> > (mysamba01 is NetBIOS aliase)
> >
> > net use g: \\mysamba01\myshare
> > or
> > net use g: \\192.168.0.1\myshare
> >
> > The previous version, 4.1.17+dfsg-2+deb8u2 works fine, and I can
access
> > share by NetBIOS Aliases or IP Address.
> >
> > Any suggestions will be appreciated.
> >
> > ----------smb.conf----------
> > [global]
> > dos charset = CP932
> > unix charset = UTF-8
> > workgroup = foo
> > realm = foo.LOCAL
> > netbios name = mysamba
> > netbios aliases = mysamba01
> > security = ADS
> > map to guest = Bad Password
> > server max protocol = SMB2
> > follow symlinks = yes
> > unix extensions = No
> > load printers = No
> > disable spoolss = Yes
> > dns proxy = No
> > wins server = 192.168.1.2 172.16.1.5
> > usershare allow guests = Yes
> > panic action = /usr/share/samba/panic-action %d
> > idmap config * : backend = tdb
> > hosts allow = 192.168.1. 192.168.30. 192.168.31.
> > printing = bsd
> > wide links = Yes
> >
> >
> > --
> > Takeshi Suyama <tsuyama94 at gmail.com>
> >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
> >
>
>
>
> --
> David Bear
> mobile: (602) 903-6476
--
Takeshi Suyama <tsuyama94 at gmail.com>
Takeshi Suyama
2016-May-08 23:49 UTC
[Samba] Can't access by NetBIOS Aliases or IP Address
Hi all. The problem has been finally solved. Please let me explain how to solve it. I just installed winbind package, and the samba server works fine again. I don't understand why winbind contributes to fix the problem. Take care. On Tue, 26 Apr 2016 22:02:04 -0700 David Bear <dwbear75 at gmail.com> wrote:> Hm.. standard troubleshooting may be > > use smbclient -L on the samba server to list shares and make sure samba is > responding to request. > > check the samba logs for info -- and if needed turn loglevel up in smb.conf > > if this was a joined server prior to upgrade, you may need to rejoin it to > the domain > > > On Mon, Apr 25, 2016 at 5:52 PM, Takeshi Suyama <tsuyama94 at gmail.com> wrote: > > > Hi all. > > > > I am running Debian jessie server with Samba, which has joined the Active > > Directory domain. The domain controllers are Windows Server 2012 R2. > > > > After I upgraded Samba version from 4.1.17+dfsg-2+deb8u2 to > > 4.2.10+dfsg-0+deb8u2, I'm facing the problem that I can't access Samba > > share by NetBIOS Aliases or IP Address. > > > > The Samba's NetBIOS name is mysamba, and I can access by NetBIOS Name from > > windows pcs as follows. > > > > net use g: \\mysamba\myshare > > > > But, I can't access by NetBIOS aliases or IP address as follows. > > (mysamba01 is NetBIOS aliase) > > > > net use g: \\mysamba01\myshare > > or > > net use g: \\192.168.0.1\myshare > > > > The previous version, 4.1.17+dfsg-2+deb8u2 works fine, and I can access > > share by NetBIOS Aliases or IP Address. > > > > Any suggestions will be appreciated. > > > > ----------smb.conf---------- > > [global] > > dos charset = CP932 > > unix charset = UTF-8 > > workgroup = foo > > realm = foo.LOCAL > > netbios name = mysamba > > netbios aliases = mysamba01 > > security = ADS > > map to guest = Bad Password > > server max protocol = SMB2 > > follow symlinks = yes > > unix extensions = No > > load printers = No > > disable spoolss = Yes > > dns proxy = No > > wins server = 192.168.1.2 172.16.1.5 > > usershare allow guests = Yes > > panic action = /usr/share/samba/panic-action %d > > idmap config * : backend = tdb > > hosts allow = 192.168.1. 192.168.30. 192.168.31. > > printing = bsd > > wide links = Yes > > > > > > -- > > Takeshi Suyama <tsuyama94 at gmail.com> > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > > > > > > -- > David Bear > mobile: (602) 903-6476-- Takeshi Suyama <tsuyama94 at gmail.com>