samba - Oct 2018 - Windows Server 2019 / Windows 10 LTSC can't access samba shares on Debian stable 4.5.12

Hello,
my smb.conf is:

[global]
        workgroup = DIRECTORY
        interfaces = 10.10.10.1
        security = user
        map to guest = Bad User
        rndc command = /bin/true

[iso]
        comment = ISO
        browseable = No
        public = Yes
        guest only = Yes
        writable = No
        directory = /export/ISO

I'm using Debian 9.5 with samba version 4.5.12+dfsg-2+deb9u3. I can access
the
share find with windows xp - windows server 2016. However with Windows Server
2019 and Windows 10 LTSC I can't access it. Any idea what I have to change?
I
already tried to use samba-4.9.1 with the following configuration:

[global]
        workgroup = DIRECTORY
        interfaces = 10.10.10.1
        security = user
        map to guest = Bad User
        rndc command = /bin/true
        # server role = STANDALONE
        netbios name = filer

        cache directory = /local/samba-config/common/cache
        lock directory = /local/samba-config/common/lock
        log file = /local/samba-config/common/log/%m
        ntp signd socket directory = /local/samba-config/common/signd
        pid directory = /local/samba-config/common/pid
        private dir = /local/samba-config/common/private
        state directory = /local/samba-config/common/state

[iso]
        comment = ISO
        browseable = No
        public = Yes
        guest only = Yes
        writable = No
        directory = /export/ISO

Afterwards I started smbd and nmbd with the options '-c' and they did
work for
me with the following error message:

[2018/10/11 12:30:58.556337,  0] ../source3/lib/interface.c:652(load_interfaces)
  WARNING: no network interfaces found

10.10.10.1 is configured on the interface lo:

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group
default qlen 1
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet 10.10.10.1/32 brd 10.10.10.1 scope global lo:0
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever

I want users without authentication to access shares. One is r/w, all
others are r/o.

Cheers,
        Thomas

On Sat, 2018-10-13 at 09:17 +0200, Thomas Glanzmann via samba
wrote:
> Hello,
> my smb.conf is:
> 
> Afterwards I started smbd and nmbd with the options '-c' and they
did work for
> me with the following error message:
> 
> [2018/10/11 12:30:58.556337,  0]
../source3/lib/interface.c:652(load_interfaces)
>   WARNING: no network interfaces found
Do you actually have any ethernet interfaces up?  Why are you not
binding Samba to that?

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba

On Sat, 13 Oct 2018 09:17:21 +0200
Thomas Glanzmann via samba <samba at lists.samba.org> wrote:
> Hello,
> my smb.conf is:
> 
> [global]
>         workgroup = DIRECTORY
>         interfaces = 10.10.10.1
>         security = user
>         map to guest = Bad User
>         rndc command = /bin/true
> 
> [iso]
>         comment = ISO
>         browseable = No
>         public = Yes
>         guest only = Yes
>         writable = No
>         directory = /export/ISO
> 
> I'm using Debian 9.5 with samba version 4.5.12+dfsg-2+deb9u3. I can
> access the share find with windows xp - windows server 2016. However
So it works here
> with Windows Server 2019 and Windows 10 LTSC I can't access it. Any
and stops working here
> idea what I have to change? 
Very probably something on Windows, as it works with earlier versions
of Windows.

>I already tried to use samba-4.9.1 with
> the following configuration:
> 
> [global]
>         workgroup = DIRECTORY
>         interfaces = 10.10.10.1
>         security = user
>         map to guest = Bad User
>         rndc command = /bin/true
>         # server role = STANDALONE
>         netbios name = filer
> 
>         cache directory = /local/samba-config/common/cache
>         lock directory = /local/samba-config/common/lock
>         log file = /local/samba-config/common/log/%m
>         ntp signd socket directory = /local/samba-config/common/signd
>         pid directory = /local/samba-config/common/pid
>         private dir = /local/samba-config/common/private
>         state directory = /local/samba-config/common/state
> 
> [iso]
>         comment = ISO
>         browseable = No
>         public = Yes
>         guest only = Yes
>         writable = No
>         directory = /export/ISO
Where did you get 'directory' from, it should be 'path'
> 
> Afterwards I started smbd and nmbd with the options '-c' and they
did
> work for me with the following error message:
> 
> [2018/10/11 12:30:58.556337,
> 0] ../source3/lib/interface.c:652(load_interfaces) WARNING: no
> network interfaces found
> 
> 10.10.10.1 is configured on the interface lo:
> 
> 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
> group default qlen 1 link/loopback 00:00:00:00:00:00 brd
> 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo
>        valid_lft forever preferred_lft forever
>     inet 10.10.10.1/32 brd 10.10.10.1 scope global lo:0
>        valid_lft forever preferred_lft forever
>     inet6 ::1/128 scope host
>        valid_lft forever preferred_lft forever
I suppose the question is how did '10.10.10.1' get set to the loopback
device and not to an ethernet device ?
Does the error message go away if you remove the 'interfaces' line ?
> 
> I want users without authentication to access shares. One is r/w, all
> others are r/o.
Good luck with that, your share is only accessible by the 'guest' user.

Rowland

Hello Andrew,
> Do you actually have any ethernet interfaces up?  Why are you not
> binding Samba to that?
I do, but I run multiple samba servers on one machine. I have a few
active directory controllers bound on a per VLAN basis to different
interfaces. And one additional samba just for shares that should serve
all VLANs. That is why I have the 10.10.10.1 on the lo interface. I use
that with many different software including ntp, nginx, old samba that
ships with debian, nfs kernel server, etc.

However if that is no longer possible with the new samba. I try a dummy
interface, if that doesn't work either I'll find an ethernet interface
in a fake VLAN.

Cheers,
        Thomas

Hello everyone,
when using samba 4.9.1 as a standalone filer, I need to start smbd and
nmbd, don't I?

I'm using:
/local/samba/sbin/smbd -s /local/samba-config/common/smb.conf
/local/samba/sbin/nmbd -s /local/samba-config/common/smb.conf

However smbd. Seems to ignore my lock directory:

(infra) [/local/samba-config/common] grep gencache_notrans.tdb log/smbd
  Opening cache file at /local/samba-4.9.1/var/lock/gencache_notrans.tdb
  Could not get allrecord lock on gencache_notrans.tdb: Locking error

Find smb.conf and log files here:

https://thomas.glanzmann.de/tmp/samba491standalonefile.tar.gz

Cheers,
        Thomas