Takeshi Suyama
2016-Apr-26 00:52 UTC
[Samba] Can't access by NetBIOS Aliases or IP Address
Hi all. I am running Debian jessie server with Samba, which has joined the Active Directory domain. The domain controllers are Windows Server 2012 R2. After I upgraded Samba version from 4.1.17+dfsg-2+deb8u2 to 4.2.10+dfsg-0+deb8u2, I'm facing the problem that I can't access Samba share by NetBIOS Aliases or IP Address. The Samba's NetBIOS name is mysamba, and I can access by NetBIOS Name from windows pcs as follows. net use g: \\mysamba\myshare But, I can't access by NetBIOS aliases or IP address as follows. (mysamba01 is NetBIOS aliase) net use g: \\mysamba01\myshare or net use g: \\192.168.0.1\myshare The previous version, 4.1.17+dfsg-2+deb8u2 works fine, and I can access share by NetBIOS Aliases or IP Address. Any suggestions will be appreciated. ----------smb.conf---------- [global] dos charset = CP932 unix charset = UTF-8 workgroup = foo realm = foo.LOCAL netbios name = mysamba netbios aliases = mysamba01 security = ADS map to guest = Bad Password server max protocol = SMB2 follow symlinks = yes unix extensions = No load printers = No disable spoolss = Yes dns proxy = No wins server = 192.168.1.2 172.16.1.5 usershare allow guests = Yes panic action = /usr/share/samba/panic-action %d idmap config * : backend = tdb hosts allow = 192.168.1. 192.168.30. 192.168.31. printing = bsd wide links = Yes -- Takeshi Suyama <tsuyama94 at gmail.com>
Hm.. standard troubleshooting may be use smbclient -L on the samba server to list shares and make sure samba is responding to request. check the samba logs for info -- and if needed turn loglevel up in smb.conf if this was a joined server prior to upgrade, you may need to rejoin it to the domain On Mon, Apr 25, 2016 at 5:52 PM, Takeshi Suyama <tsuyama94 at gmail.com> wrote:> Hi all. > > I am running Debian jessie server with Samba, which has joined the Active > Directory domain. The domain controllers are Windows Server 2012 R2. > > After I upgraded Samba version from 4.1.17+dfsg-2+deb8u2 to > 4.2.10+dfsg-0+deb8u2, I'm facing the problem that I can't access Samba > share by NetBIOS Aliases or IP Address. > > The Samba's NetBIOS name is mysamba, and I can access by NetBIOS Name from > windows pcs as follows. > > net use g: \\mysamba\myshare > > But, I can't access by NetBIOS aliases or IP address as follows. > (mysamba01 is NetBIOS aliase) > > net use g: \\mysamba01\myshare > or > net use g: \\192.168.0.1\myshare > > The previous version, 4.1.17+dfsg-2+deb8u2 works fine, and I can access > share by NetBIOS Aliases or IP Address. > > Any suggestions will be appreciated. > > ----------smb.conf---------- > [global] > dos charset = CP932 > unix charset = UTF-8 > workgroup = foo > realm = foo.LOCAL > netbios name = mysamba > netbios aliases = mysamba01 > security = ADS > map to guest = Bad Password > server max protocol = SMB2 > follow symlinks = yes > unix extensions = No > load printers = No > disable spoolss = Yes > dns proxy = No > wins server = 192.168.1.2 172.16.1.5 > usershare allow guests = Yes > panic action = /usr/share/samba/panic-action %d > idmap config * : backend = tdb > hosts allow = 192.168.1. 192.168.30. 192.168.31. > printing = bsd > wide links = Yes > > > -- > Takeshi Suyama <tsuyama94 at gmail.com> > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >-- David Bear mobile: (602) 903-6476
Takeshi Suyama
2016-Apr-27 09:39 UTC
[Samba] Can't access by NetBIOS Aliases or IP Address
Hi, David. Thank you for your reply. I ran smbclient -L on the samba as follows. smbclient -L mysamba -U tsuyama -W foo.local Enter tsuyama's password: Domain=[SPS] OS=[Windows 6.1] Server=[Samba 4.2.10-Debian] Sharename Type Comment --------- ---- ------- IPC$ IPC IPC Service (mysamba server) Domain=[foo] OS=[Windows 6.1] Server=[Samba 4.2.10-Debian] Server Comment --------- ------- mysamba01 mysamba server COLUMBUS columbus server mysamba mysamba server Workgroup Master --------- ------- foo COLUMBUS COLUMBUS is another samba server. I set log level to 3. Here is the log for running smbclient -L. ------------------------------------------- [2016/04/27 18:10:46.451663, 3] ../lib/util/util_net.c:256(interpret_string_addr_internal) interpret_string_addr_internal: getaddrinfo failed for name myshare (flags 34) [temporary failure in name resolution] [2016/04/27 18:10:46.451998, 3] ../source3/lib/util_sock.c:1308(get_mydnsfullname) get_mydnsfullname: getaddrinfo failed for name myshare [unknown error] [2016/04/27 18:10:46.502300, 3] ../lib/util/util_net.c:256(interpret_string_addr_internal) interpret_string_addr_internal: getaddrinfo failed for name myshare (flags 34) [temporary failure in name resolution] [2016/04/27 18:10:46.502367, 3] ../source3/lib/util_sock.c:1308(get_mydnsfullname) get_mydnsfullname: getaddrinfo failed for name myshare [unknown error] [2016/04/27 18:10:46.505204, 3] ../auth/gensec/gensec_start.c:899(gensec_register) GENSEC backend 'gssapi_spnego' registered [2016/04/27 18:10:46.505272, 3] ../auth/gensec/gensec_start.c:899(gensec_register) GENSEC backend 'gssapi_krb5' registered [2016/04/27 18:10:46.505334, 3] ../auth/gensec/gensec_start.c:899(gensec_register) GENSEC backend 'gssapi_krb5_sasl' registered [2016/04/27 18:10:46.505390, 3] ../auth/gensec/gensec_start.c:899(gensec_register) GENSEC backend 'spnego' registered [2016/04/27 18:10:46.505440, 3] ../auth/gensec/gensec_start.c:899(gensec_register) GENSEC backend 'schannel' registered [2016/04/27 18:10:46.505493, 3] ../auth/gensec/gensec_start.c:899(gensec_register) GENSEC backend 'naclrpc_as_system' registered [2016/04/27 18:10:46.505552, 3] ../auth/gensec/gensec_start.c:899(gensec_register) GENSEC backend 'sasl-EXTERNAL' registered [2016/04/27 18:10:46.505600, 3] ../auth/gensec/gensec_start.c:899(gensec_register) GENSEC backend 'ntlmssp' registered [2016/04/27 18:10:46.505653, 3] ../auth/gensec/gensec_start.c:899(gensec_register) GENSEC backend 'ntlmssp_resume_ccache' registered [2016/04/27 18:10:46.505737, 3] ../auth/gensec/gensec_start.c:899(gensec_register) GENSEC backend 'http_basic' registered [2016/04/27 18:10:46.505787, 3] ../auth/gensec/gensec_start.c:899(gensec_register) GENSEC backend 'http_ntlm' registered [2016/04/27 18:10:46.505837, 3] ../auth/gensec/gensec_start.c:899(gensec_register) GENSEC backend 'krb5' registered [2016/04/27 18:10:46.505891, 3] ../auth/gensec/gensec_start.c:899(gensec_register) GENSEC backend 'fake_gssapi_krb5' registered [2016/04/27 18:10:46.615703, 3] ../lib/util/util_net.c:256(interpret_string_addr_internal) interpret_string_addr_internal: getaddrinfo failed for name myshare (flags 34) [temporary failure in name resolution] [2016/04/27 18:10:46.615798, 3] ../source3/lib/util_sock.c:1308(get_mydnsfullname) get_mydnsfullname: getaddrinfo failed for name myshare [unknown error] [2016/04/27 18:10:46.665065, 3] ../lib/util/util_net.c:256(interpret_string_addr_internal) interpret_string_addr_internal: getaddrinfo failed for name myshare (flags 34) [temporary failure in name resolution] [2016/04/27 18:10:46.665126, 3] ../source3/lib/util_sock.c:1308(get_mydnsfullname) get_mydnsfullname: getaddrinfo failed for name myshare [unknown error] [2016/04/27 18:10:46.665361, 3] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x62088215 [2016/04/27 18:10:46.666063, 3] ../auth/ntlmssp/ntlmssp_server.c:449(ntlmssp_server_preauth) Got user=[tsuyama] domain=[foo.LOCAL] workstation=[myshare] len1=24 len2=192 [2016/04/27 18:10:46.666162, 3] ../source3/param/loadparm.c:3636(lp_load_ex) lp_load_ex: refreshing parameters [2016/04/27 18:10:46.666347, 3] ../source3/param/loadparm.c:527(init_globals) Initialising global parameters [2016/04/27 18:10:46.666587, 3] ../source3/param/loadparm.c:2579(lp_do_section) Processing section "[global]" [2016/04/27 18:10:46.667157, 2] ../source3/param/loadparm.c:2596(lp_do_section) Processing section "[homes]" [2016/04/27 18:10:46.667395, 2] ../source3/param/loadparm.c:2596(lp_do_section) Processing section "[etc]" [2016/04/27 18:10:46.667563, 2] ../source3/param/loadparm.c:2596(lp_do_section) Processing section "[boot]" [2016/04/27 18:10:46.667676, 2] ../source3/param/loadparm.c:2596(lp_do_section) Processing section "[backup]" [2016/04/27 18:10:46.667846, 3] ../source3/param/loadparm.c:1476(lp_add_ipc) adding IPC service [2016/04/27 18:10:46.668168, 3] ../source3/libsmb/namequery.c:3133(get_dc_list) get_dc_list: preferred server list: ", *" [2016/04/27 18:10:46.668905, 3] ../source3/libads/ldap.c:541(ads_connect) Successfully contacted LDAP server 192.168.1.2 [2016/04/27 18:10:46.669048, 3] ../source3/libsmb/namequery.c:3133(get_dc_list) get_dc_list: preferred server list: ", *" [2016/04/27 18:10:46.669191, 3] ../source3/libsmb/namequery.c:3133(get_dc_list) get_dc_list: preferred server list: ", *" [2016/04/27 18:10:46.712981, 3] ../source3/lib/util_sock.c:636(open_socket_out_send) Connecting to 192.168.1.2 at port 445 [2016/04/27 18:10:46.717382, 3] ../source3/auth/auth.c:178(auth_check_ntlm_password) check_ntlm_password: Checking password for unmapped user [foo.LOCAL]\[tsuyama]@[myshare] with the new password interface [2016/04/27 18:10:46.717470, 3] ../source3/auth/auth.c:181(auth_check_ntlm_password) check_ntlm_password: mapped user is: [myshare]\[tsuyama]@[myshare] [2016/04/27 18:10:46.717614, 3] ../source3/auth/check_samsec.c:400(check_sam_security) check_sam_security: Couldn't find user 'tsuyama' in passdb. [2016/04/27 18:10:46.717681, 3] ../source3/auth/auth_winbind.c:60(check_winbind_security) check_winbind_security: Not using winbind, requested domain [myshare] was for this SAM. [2016/04/27 18:10:46.717730, 2] ../source3/auth/auth.c:315(auth_check_ntlm_password) check_ntlm_password: Authentication for user [tsuyama] -> [tsuyama] FAILED with error NT_STATUS_NO_SUCH_USER [2016/04/27 18:10:46.717825, 3] ../source3/auth/auth_util.c:1599(do_map_to_guest_server_info) No such user tsuyama [foo.LOCAL] - using guest account ------------------------------------------- The samba server joined the domain prior to upgrade, and I rejoined it to the domain. But the issue is the same as before. On Tue, 26 Apr 2016 22:02:04 -0700 David Bear <dwbear75 at gmail.com> wrote:> Hm.. standard troubleshooting may be > > use smbclient -L on the samba server to list shares and make sure samba is > responding to request. > > check the samba logs for info -- and if needed turn loglevel up in smb.conf > > if this was a joined server prior to upgrade, you may need to rejoin it to > the domain > > > On Mon, Apr 25, 2016 at 5:52 PM, Takeshi Suyama <tsuyama94 at gmail.com> wrote: > > > Hi all. > > > > I am running Debian jessie server with Samba, which has joined the Active > > Directory domain. The domain controllers are Windows Server 2012 R2. > > > > After I upgraded Samba version from 4.1.17+dfsg-2+deb8u2 to > > 4.2.10+dfsg-0+deb8u2, I'm facing the problem that I can't access Samba > > share by NetBIOS Aliases or IP Address. > > > > The Samba's NetBIOS name is mysamba, and I can access by NetBIOS Name from > > windows pcs as follows. > > > > net use g: \\mysamba\myshare > > > > But, I can't access by NetBIOS aliases or IP address as follows. > > (mysamba01 is NetBIOS aliase) > > > > net use g: \\mysamba01\myshare > > or > > net use g: \\192.168.0.1\myshare > > > > The previous version, 4.1.17+dfsg-2+deb8u2 works fine, and I can access > > share by NetBIOS Aliases or IP Address. > > > > Any suggestions will be appreciated. > > > > ----------smb.conf---------- > > [global] > > dos charset = CP932 > > unix charset = UTF-8 > > workgroup = foo > > realm = foo.LOCAL > > netbios name = mysamba > > netbios aliases = mysamba01 > > security = ADS > > map to guest = Bad Password > > server max protocol = SMB2 > > follow symlinks = yes > > unix extensions = No > > load printers = No > > disable spoolss = Yes > > dns proxy = No > > wins server = 192.168.1.2 172.16.1.5 > > usershare allow guests = Yes > > panic action = /usr/share/samba/panic-action %d > > idmap config * : backend = tdb > > hosts allow = 192.168.1. 192.168.30. 192.168.31. > > printing = bsd > > wide links = Yes > > > > > > -- > > Takeshi Suyama <tsuyama94 at gmail.com> > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > > > > > > -- > David Bear > mobile: (602) 903-6476-- Takeshi Suyama <tsuyama94 at gmail.com>
Takeshi Suyama
2016-May-08 23:49 UTC
[Samba] Can't access by NetBIOS Aliases or IP Address
Hi all. The problem has been finally solved. Please let me explain how to solve it. I just installed winbind package, and the samba server works fine again. I don't understand why winbind contributes to fix the problem. Take care. On Tue, 26 Apr 2016 22:02:04 -0700 David Bear <dwbear75 at gmail.com> wrote:> Hm.. standard troubleshooting may be > > use smbclient -L on the samba server to list shares and make sure samba is > responding to request. > > check the samba logs for info -- and if needed turn loglevel up in smb.conf > > if this was a joined server prior to upgrade, you may need to rejoin it to > the domain > > > On Mon, Apr 25, 2016 at 5:52 PM, Takeshi Suyama <tsuyama94 at gmail.com> wrote: > > > Hi all. > > > > I am running Debian jessie server with Samba, which has joined the Active > > Directory domain. The domain controllers are Windows Server 2012 R2. > > > > After I upgraded Samba version from 4.1.17+dfsg-2+deb8u2 to > > 4.2.10+dfsg-0+deb8u2, I'm facing the problem that I can't access Samba > > share by NetBIOS Aliases or IP Address. > > > > The Samba's NetBIOS name is mysamba, and I can access by NetBIOS Name from > > windows pcs as follows. > > > > net use g: \\mysamba\myshare > > > > But, I can't access by NetBIOS aliases or IP address as follows. > > (mysamba01 is NetBIOS aliase) > > > > net use g: \\mysamba01\myshare > > or > > net use g: \\192.168.0.1\myshare > > > > The previous version, 4.1.17+dfsg-2+deb8u2 works fine, and I can access > > share by NetBIOS Aliases or IP Address. > > > > Any suggestions will be appreciated. > > > > ----------smb.conf---------- > > [global] > > dos charset = CP932 > > unix charset = UTF-8 > > workgroup = foo > > realm = foo.LOCAL > > netbios name = mysamba > > netbios aliases = mysamba01 > > security = ADS > > map to guest = Bad Password > > server max protocol = SMB2 > > follow symlinks = yes > > unix extensions = No > > load printers = No > > disable spoolss = Yes > > dns proxy = No > > wins server = 192.168.1.2 172.16.1.5 > > usershare allow guests = Yes > > panic action = /usr/share/samba/panic-action %d > > idmap config * : backend = tdb > > hosts allow = 192.168.1. 192.168.30. 192.168.31. > > printing = bsd > > wide links = Yes > > > > > > -- > > Takeshi Suyama <tsuyama94 at gmail.com> > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > > > > > > -- > David Bear > mobile: (602) 903-6476-- Takeshi Suyama <tsuyama94 at gmail.com>