samba - Jun 2018 - hosts allow option is not applaying without restart smbd

On Thu, 21 Jun 2018 09:54:06 +0200
john doe via samba <samba at lists.samba.org> wrote:
> Bottom posting
> 
> On 6/21/2018 9:38 AM, adam_xu--- via samba wrote:
> > Hi, Rowland, I have the same issue too. I can't find any useful
> > info after I ran 'man smbcontrol',  could you give us a
clearer
> > answer. Thanks.
> > 
> > 
> > 
> > Yours Adam
> >   
> > From: Rowland Penny via samba
> > Date: 2018-06-20 17:40
> > To: samba
> > Subject: Re: [Samba] hosts allow option is not applaying without
> > restart smbd On Wed, 20 Jun 2018 16:22:36 +0700
> > Vladimir Eltsov via samba <samba at lists.samba.org> wrote:
> >   
> >> Hello.
> >>
> >> I have a lot of servers with CentOS 7 and samba 4 (classic domain
> >> controllers), differnt versions (4.4.4, 4.6.2...).
> >>
> >> I have found that changes hosts allow option are not applaying
> >> without restart smbd.
> >>
> >> I have tried:
> >> systemctl reload smbd.service
> >> killall -1 smbd
> >> pkill -HUP smbd
> >> smbcontrol smbd reload-config
> >>
> >> but client I have added does not have access.
> >>
> >> I see strange messages in system log:
> >>
> >> Jun 20 15:50:20 nvkzsrv smbd[29943]: [2018/06/20 15:50:20.705223,
> >> 0] ../source3/lib/access.c:338(allow_access)
> >> Jun 20 15:50:20 nvkzsrv smbd[29943]:  Denied connection from
> >> 192.168.36.36 (192.168.36.36)
> >>
> >> Where 192.168.36.36 is an address I have added in hosts allow.
> >>
> >> Changes are applaying when I restart smbd, but I can not do it
> >> while there are a lot of opened files on servers.
> >>
> >> Can someone explain me what does it mean?
> >>
> >> How can I applay changes without restart smbd?
> >>
> >>
> >> Thanks in advance.
> >>
> >   
> > run 'man smbcontrol'
> >   
> > Rowland
> >   
> > 
> 
> My guess would be:
> 
> From:
> 
> https://www.samba.org/samba/docs/current/man-html/smbcontrol.1.html
> 
> "reload-config
> Force daemon to reload smb.conf configuration file. Can be sent to
> smbd, nmbd, or winbindd."
> 
I guess when 'man smbcontrol' was run, there was no output, probably
because the Samba docs packages aren't installed ??

So, yes the above is correct.

Rowland

Hello.

I have read man smbcontrol.

I wrote in start message:
> I have tried:
> systemctl reload smbd.service
> killall -1 smbd
> pkill -HUP smbd
> smbcontrol smbd reload-config
These commands are not working as expected - IP adresses added to hosts
allow do not have access.

Vladimir Eltsov

21.06.2018 15:27, Rowland Penny via samba пишет:
> I have tried:
> systemctl reload smbd.service
> killall -1 smbd
> pkill -HUP smbd
> smbcontrol smbd reload-config

On Thu, 21 Jun 2018 19:17:14 +0700
Vladimir Eltsov via samba <samba at lists.samba.org> wrote:
> Hello.
> 
> I have read man smbcontrol.
> 
> I wrote in start message:
> 
> > I have tried:
> > systemctl reload smbd.service
> > killall -1 smbd
> > pkill -HUP smbd
Forget 'systemctl reload'
Forget 'killall'
Forget 'pkill'
> > smbcontrol smbd reload-config
This is the one that should work, this should make smbd reload smb.conf
You could try 'smbcontrol all reload-config'
You should also note, that this will probably need to be run by root or
with sudo.

If it still doesn't work, try raising the log level and see if anything
pops out.

Rowland