samba - Oct 2017 - Fwd: Cannot connect to Samba share (4.1.11) from Windows 10

Hi!

I have a Samba server version 4.1.11 running on Ubuntu Server 14.04. I
cannot connect from Windows 10 (but I can from Windows 7).

The server and the clients are not on the same LAN.

The error message given by Windows is that the server is online but
not responding. However the Samba logs say otherwise.

I have attached the logs for a failed connection attempt from Windows
10, and those for a successful attempt from Windows 7 (for
comparison).

Briefly, unlike the successful attempt, the failed one starts with:

    switch message SMBnegprot (pid 2855) conn 0x0

then it requests a number of different protocols before selecting
SMB2_FF. Then, after some security negotiations, it switches to
protocol SMB 2.???, then SMB3_00, followed by:

    Server exit (NT_STATUS_END_OF_FILE).

The successful attempt selects protocol SMB2_10 from the start, but
this protocol is not even requested by Windows 10.

Here are the logs :

Failed attempt (from Windows 10)
http://pastebin.com/M0xmBuY3

Successful attempt (from Windows 7)
http://pastebin.com/jF8VzaiA

smb.conf
http://pastebin.com/CWYqGuBa

Windows 10 will try to negotiate SMB3_11, which Samba4 doesn't yet support
except in the current 4.3 release candidate. I suspect for now disabling
SMB2/3 on the Windows 10 client is your best, if not ideal, option.

Instructions for doing.this can be found
here:https://support.microsoft.com/en-us/kb/2696547



--
View this message in context:
http://samba.2283325.n4.nabble.com/Fwd-Cannot-connect-to-Samba-share-4-1-11-from-Windows-10-tp4690894p4690934.html
Sent from the Samba - General mailing list archive at Nabble.com.

Hai, 

In my test i did not do anything but join the domain with windows 10, 
worked fine. 

Tested here at my office, and at home. 

Environments: 
Office,
Debian Wheezy Samba 4 ADDC's, sernet samba 4.2.3
Member servers wheezy and Jessie, debian samba 4.1.17 and sernet samba 4.2.3 

At home
Ubuntu 14.04 sernet samba 4.2.3 
A standalone server with shares open, no auth. 

I suggest upgrade you samba version first, before messing up your windows. 
If you cant access you server with  \\servername try \\servername.domain.tld 


Greetz, 

Louis
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens soonerdave
> Verzonden: maandag 7 september 2015 15:52
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Fwd: Cannot connect to Samba share (4.1.11) from
> Windows 10
> 
> Windows 10 will try to negotiate SMB3_11, which Samba4 doesn't yet
support
> except in the current 4.3 release candidate. I suspect for now disabling
> SMB2/3 on the Windows 10 client is your best, if not ideal, option.
> 
> Instructions for doing.this can be found
> here:https://support.microsoft.com/en-us/kb/2696547
> 
> 
> 
> --
> View this message in context: http://samba.2283325.n4.nabble.com/Fwd-
> Cannot-connect-to-Samba-share-4-1-11-from-Windows-10-
> tp4690894p4690934.html
> Sent from the Samba - General mailing list archive at Nabble.com.
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

That's great, Adrien! I'm glad this was helpful for you. It at least
keeps
you from having to drop the DC's security level to  NT1 :)



On Mon, Sep 7, 2015 at 10:17 AM, Adrien Husson <adhusson at gmail.com>
wrote:
> On Mon, Sep 7, 2015 at 3:52 PM, soonerdave <soonerdew at gmail.com>
wrote:
> > I suspect for now disabling
> > SMB2/3 on the Windows 10 client is your best, if not ideal, option.
> >
> > Instructions for doing.this can be found
> > here:https://support.microsoft.com/en-us/kb/2696547
>
> Thank you very much, it worked!
>

Dear all,

Le 07.09.2015 à 15:52, soonerdave a écrit :
> Windows 10 will try to negotiate SMB3_11, which Samba4 doesn't yet
support
> except in the current 4.3 release candidate. I suspect for now disabling
> SMB2/3 on the Windows 10 client is your best, if not ideal, option.
>
> Instructions for doing.this can be found
> here: https://support.microsoft.com/en-us/kb/2696547
I have the same problem. (Samba 4.1.11 and Windows 10 not able to join 
domain because our best protocol is SMB3_00)

But to be sure I understand correctly :

  * It is possible to modify Windows 10 to use older protocols ?
  * If yes, we should disable SMB3 on Windows 10 ?
  * But if I read the Microsoft document above I don't understand what
    exactly I should do to disable SMB3 ?

Thanks a lot in advance for any help or advice !

Denis