[Samba] Shares not accessible when using FQDN

L.P.H. van Belle
Tue, 29 Aug 2017 10:01:50 -0000

If DNS is setup correct, then and your sure,
then show ipconfig /all from a working and failing pc.

And for i forget to mention.
Did you check if the time is in sync?  ( sorry must ask )

Greetz,

Louis


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> Gaetan SLONGO via samba
> Verzonden: dinsdag 29 augustus 2017 11:47
> Aan: Rowland Penny
> CC: samba at lists.samba.org
> Onderwerp: Re: [Samba] Shares not accessible when using FQDN
>
> Hi guys,
>
>
> Thank you for your answer. Meanwhile I have new informations,
> the problem also happen on a workstation in the domain.
> This should not be a DNS issue. I validated that and I can
> authenticate and list shares. Just cannot enter into them
> when i'm using the FQDN o_O
>
>
> Note : It works well on Linux clients.
>
>
> Here is the Samba config file :
>
>
> Thank you !
>
>
>
> # Global parameters
> [global]
> netbios name = MOE
> realm = ADS.DOMAIN.BE
> workgroup = DOMAIN
> netbios alias = CLUSTER
> server role = active directory domain controller kerberos
> method = secrets and keytab idmap_ldb:use rfc2307 = yes
> winbind use default domain = false winbind offline logon =
> false template shell = /bin/bash template homedir = /home/%u
> ntlm auth = yes log level = 4
>
>
>
>
> [netlogon]
> path = /var/lib/samba/sysvol/ads.DOMAIN.be/scripts
> read only = Yes
> browsable = no
>
>
> [sysvol]
> path = /var/lib/samba/sysvol
> read only = Yes
> browsable = no
>
>
>
>
> [software]
> comment = Installed productlines
> path = /opt/DOMAIN/actran_product
> read only = Yes
> create mask = 0660
> directory mask = 0770
> guest ok = No
>
>
> [license]
> comment = license
> path = /opt/licenses/msctwo
> read only = yes
> guest ok = No
>
>
>
>
> [homes]
> comment = Home Directories
> ;;valid users = root @smbusers
> browseable = no
> read only = No
> ;create mask = 0640 ; Changé à la demande d'Eloi create mask
> = 0600 ;directory mask = 0750 ; Changé à la demande d'Eloi
> directory mask = 0700 guest ok = no printable = no veto files
> = hide dot files = no
>
>
> ----- Mail original -----
>
> De: "Rowland Penny via samba" <samba at lists.samba.org>
> À: samba at lists.samba.org
> Envoyé: Mardi 29 Août 2017 11:31:37
> Objet : Re: [Samba] Shares not accessible when using FQDN
>
> On Tue, 29 Aug 2017 11:16:12 +0200 (CEST) Gaetan SLONGO via
> samba <samba at lists.samba.org> wrote:
>
> >
> >
> > Hi,
> >
> >
> > I'm facing to an issue where I cannot find solution.
> >
> >
> > Here is the test case :
> >
> >
> >
> >
> > * Samba 4.7, multi-server setup (multiple DC)
> > * Windows 7 and Windows 10 client (not domain member)
> > * Shares can be listed but no access to them in some case
> >
> >
> >
> > From my workstation if I access to
> \\myserver.domain\myshare I get an
> > error like "//UNC// is not accessible . you might nit have
> > permissions ... bla bla ... The parameter is incorrect"
> >
> >
> > On my samba server we can see the log below (at the end of that
> > mail).
> >
> >
> > However, it works when I do not append domain name to the UNC :
> > \\myserver\myshare ... Even more strange, it works on some
> > workstations but not all.. Client clients are OK.
> >
> >
> > Do you have any idea ?!?
> >
> >
> >
> >
> >
> > ==> /var/log/samba/log.smbd <==
> > [2017/08/29 10:59:55.925684,
> > 4] ../source3/smbd/uid.c:384(change_to_user) Skipping user change -
> > already user [2017/08/29 10:59:55.925776,
> > 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex)
> > smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
> > status[NT_STATUS_INVALID_PARAMETER] ||
> > at ../source3/smbd/smb2_ioctl.c:309 [2017/08/29 10:59:55.926835,
> > 4] ../source3/smbd/uid.c:384(change_to_user) Skipping user change -
> > already user [2017/08/29 10:59:55.926892,
> > 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex)
> > smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
> > status[NT_STATUS_INVALID_PARAMETER] ||
> > at ../source3/smbd/smb2_ioctl.c:309 [2017/08/29 10:59:56.088688,
> > 4] ../source3/smbd/uid.c:384(change_to_user) Skipping user change -
> > already user [2017/08/29 10:59:56.088746,
> > 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex)
> > smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
> > status[NT_STATUS_INVALID_PARAMETER] ||
> > at ../source3/smbd/smb2_ioctl.c:309 [2017/08/29 10:59:56.098659,
> > 4] ../source3/smbd/uid.c:384(change_to_user) Skipping user change -
> > already user [2017/08/29 10:59:56.098717,
> > 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex)
> > smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
> > status[NT_STATUS_INVALID_PARAMETER] ||
> > at ../source3/smbd/smb2_ioctl.c:309 [2017/08/29 10:59:56.104899,
> > 4] ../source3/smbd/uid.c:384(change_to_user) Skipping user change -
> > already user [2017/08/29 10:59:56.104957,
> > 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex)
> > smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
> > status[NT_STATUS_INVALID_PARAMETER] ||
> > at ../source3/smbd/smb2_ioctl.c:309 [2017/08/29 10:59:56.105755,
> > 4] ../source3/smbd/uid.c:384(change_to_user) Skipping user change -
> > already user [2017/08/29 10:59:56.105811,
> > 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex)
> > smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
> > status[NT_STATUS_INVALID_PARAMETER] ||
> > at ../source3/smbd/smb2_ioctl.c:309 [2017/08/29 10:59:56.106671,
> > 4] ../source3/smbd/uid.c:384(change_to_user) Skipping user change -
> > already user [2017/08/29 10:59:56.106727,
> > 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex)
> > smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
> > status[NT_STATUS_INVALID_PARAMETER] ||
> > at ../source3/smbd/smb2_ioctl.c:309 [2017/08/29 10:59:56.108001,
> > 4] ../source3/smbd/uid.c:384(change_to_user) Skipping user change -
> > already user [2017/08/29 10:59:56.108058,
> > 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex)
> > smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
> > status[NT_STATUS_INVALID_PARAMETER] ||
> > at ../source3/smbd/smb2_ioctl.c:309 [2017/08/29 10:59:56.109246,
> > 4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) setting sec
> > ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/08/29 10:59:56.109401,
> > 3] ../lib/util/access.c:361(allow_access) Allowed connection from
> > 10.17.253.156 (10.17.253.156) [2017/08/29 10:59:56.109525,
> > 3] ../source3/smbd/service.c:576(make_connection_snum) Connect path
> > is '/opt/fft/actran_product' for service [software]
[2017/08/29
> > 10:59:56.109566, 3] ../source3/smbd/vfs.c:113(vfs_init_default)
> > Initialising default vfs hooks [2017/08/29 10:59:56.109581,
> > 3] ../source3/smbd/vfs.c:139(vfs_init_custom) Initialising
> custom vfs
> > hooks from [/[Default VFS]/] [2017/08/29 10:59:56.109652,
> > 3] ../source3/smbd/vfs.c:139(vfs_init_custom) Initialising
> custom vfs
> > hooks from [acl_xattr] [2017/08/29 10:59:56.109668,
> > 3] ../source3/smbd/vfs.c:139(vfs_init_custom) Initialising
> custom vfs
> > hooks from [dfs_samba4] [2017/08/29 10:59:56.109691,
> > 2] ../source3/modules/vfs_acl_xattr.c:235(connect_acl_xattr)
> > connect_acl_xattr: setting 'inherit acls = true' 'dos
filemode =
> > true' and 'force unknown acl user = true' for service
software
> > [2017/08/29 10:59:56.112545,
> > 4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) setting sec
> > ctx (531, 100) - sec_ctx_stack_ndx = 0 [2017/08/29 10:59:56.112595,
> > 4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) setting sec
> > ctx (0, 0) - sec_ctx_stack_ndx = 0 [2017/08/29 10:59:56.112642,
> > 2] ../source3/smbd/service.c:822(make_connection_snum)
> 10.17.253.156
> > (ipv4:10.17.253.156:49202) connect to service software initially as
> > user FFT\qa (uid=531, gid=100) (pid 23058) [2017/08/29
> > 10:59:56.114037,
> > 4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) setting sec
> > ctx (531, 100) - sec_ctx_stack_ndx = 0 [2017/08/29 10:59:56.114105,
> > 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex)
> > smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
> > status[NT_STATUS_INVALID_PARAMETER] ||
> > at ../source3/smbd/smb2_ioctl.c:309 [2017/08/29 10:59:56.114916,
> > 4] ../source3/smbd/uid.c:384(change_to_user) Skipping user change -
> > already user [2017/08/29 10:59:56.114973,
> > 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex)
> > smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
> > status[NT_STATUS_INVALID_PARAMETER] ||
> > at ../source3/smbd/smb2_ioctl.c:309 [2017/08/29 10:59:56.756703,
> > 4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) setting sec
> > ctx (0, 0) - sec_ctx_stack_ndx = 0
> >
> >
> >
> >
> > Thank you
>
> Go on, I give in, how have you setup Samba ? ;-)
>
> Or to put it another way, can you please post your smb.conf.
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
>
> --
>
>
>
>
> www.it-optics.com
>
> Gaëtan SLONGO | Head of Infrastructure Department
> Boulevard Initialis, 28 - 7000 Mons, BELGIUM
> Company : 	+32 (0)65 84 23 85
> Direct : 	+32 (0)65 32 85 88
> Fax : 	+32 (0)65 84 66 76
> Skype ID : 	gslongo.pro
> GPG Key : 	gslongo-gpg_key.asc
>
>
> - Please consider your environmental responsibility before
> printing this e-mail -
>
>
>
>
>
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>