[Samba] Using GPO to mount shares on Linux

L.P.H. van Belle
2017-10-25T08:23:19Z

Hai,

I commented below.

P.s. @Rowland, i dont believe this is a sssd problem but a old bug in samba.


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> Daniel Carrasco via samba
> Verzonden: dinsdag 24 oktober 2017 19:30
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Using GPO to mount shares on Linux
>
> Hello, I answer bellow.
>
> Thanks!!
>
> 2017-10-24 16:52 GMT+02:00 L.P.H. van Belle via samba
> <samba at lists.samba.org
> >:
>
> > Hai,
> >
> > I did a re-read of you thread.
> >
> > First.
> > If you use smblcient, without a samba installed, use -s
> > /path/alternative/smbclient.conf
> >
>
> I think that Samba is not installed on this client because
> I'm not using
> samba to join the domain. Just realmd, sssd and Kerberos. That's why
> there's no smb.conf file.
Sorry, i made a typo in my question, what i mean is, do make use of that
smb.conf
Or put put your settings in the smb.conf. Even if you dont have samba installed.
Smbclient = samba and looks for smb.conf, just saying it may help.

>
>
> >
> > If i did read it correct.
> > Your connecting from  xUbuntu (samba version ??) to
> (debian8) samba 4.2
> > member
> >
> > How did you join the xUbuntu?
> > https://docs.pagure.org/SSSD.sssd/users/ad_provider.html
> > Like this setup? ^^^
> >
>
> Now I don't know the samba version of the client because I
> cannot access to
> the computer, but looks like is the 4.5 version (xUbuntu
> 16.04 repository).
>
> I've used this guide:
> https://www.unixmen.com/how-to-join-an-ubuntu-desktop-into-an-
> active-directory-domain/
>
Thanks, i've been reading it, thanks, your solution is a mix of both howtos
i think.
But sssd is not my cookie..

>
>
> >
> > > This setup is working as expected (some windows bugs hide
> > > network drives, but is not samba problem).
> > Not a windows bug, but probely a ACL problem on sysvol,
> check windows
> > event logs.
> > Works fine here since samba 4.2 DC's.
> >
>
> This time looks like a bug in Windows Explorer, because I've already
> checked all:
>
>    - sysvol ACL
>    - GPO
>    - Clients have access to GPO files
>    - gpresult shows like all GPO are applied and all drives mounted
>    - There's no info about the problem on event log
>    - I can access all drives from CMD
>    - When I try to mount the drive manually using connect on
> explorer I can
>    see all mounted on drives list
>    - I cannot mount the drive until I umount the drives using cmd
>    - The problem is not always on the same drives and even
> sometimes all
>    drives are working
>    - The option to set the drive as visible in GPO is enabled
>    - The problem only happens on 2 computers of about 15 that
> have joined
>    the domain.
>    - ...
>
> Anyway, this don't care because I've already asked it on
> other thread ;)
Ok, good to see you did check a lot already.

Now, this part..
>    - I can access all drives from CMD
>    - When I try to mount the drive manually using connect on
> explorer I can
>    see all mounted on drives list
>    - I cannot mount the drive until I umount the drives using cmd

I do remember something about that..  I've seen that before..
I might be something with the pc connecting to samba and samba keeping a lock on
something.
I just cant find it where i did read this. Must be on the list some time ago.

Then i suggest, for the 4.2 for jessie since you cant upgrade, have a look at my
apt.
apt.van-belle.nl and use the latest 4.5.x or the backported version from
stretch.


>
>
>
> >
> > Now, i can only give a few advices.
> > 1) upgrade the debian jessie to debian stretch, and start with samba
> > 4.5.12 from debian.
> > 2) tell us the xUbuntu version and the samba (smbclient) version
> >
>
> I can't do this... I had problems with the old server after
> upgrade Debian to stretch, because I use xen with a Windows guest and the
xen version
> provided by Stretch just have a memory leak running Windows  guests. The
> process starts to consume memory and when host server is full
> the guest machines dies...
>
> Maybe one day I'll try to compile a newer version.
Did you ever give thought on XenServer (https://xenserver.org)
I use Xen (Debian) Hypervisors also in the past, i switched to xenserver.
Also free to use, and has some nice features.
I see the debian Xen is the same, why i did choose to drop debian Xen.
The security issues and boot issues..   :-(

And your sure you Xen Host is not balloning out.
(possible fix for that.
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1484682/comments/3 )

For a xen hypervisor, i would suggest ubuntu ( arg, yes i did say that, and i
even dont like ubuntu..) ;-)
I use Ubuntu for kodi only at home, but if you use the debian/ubuntu
xen-hypervisors, then go for ubuntu.
Because it more focues on that for companies.

>
>
> >
> > If i recall correct..
> > Sssd lower then 1.12 my have problems, but as Rowland also said,
> > I (we) know nothing about sssd here, except what i google.
> > If you did not read this one, please do.
> > https://jhrozek.wordpress.com/2015/08/19/performance-tuning-
> > sssd-for-large-ipa-ad-trust-deployments/
> > I dont know it it helps, but it shows some good settings
> and its good
> > explained.
> > And if you get it working, please share the solution.  ;-)
> >
>
> I'm not sure about the version but I think that is higher,
> because I've
> read about problems on sssd prior to a version and I've
> already checked it.
>
> Thanks for the links. I'll take a look because all info is welcome.
Your welkom, happy to hear that even this helps.


>
>
> >
> > Greetz,
> >
> > Louis
> >
> >
> >