samba - May 2020 - Unable to access shares by server alias

Hai, 

Verify dig -x $(hostname -i)
Then dig A $(hostname -f)

As long as these match any CNAME should work. 


Greetz, 

Louis 
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Marco Gaiarin via samba
> Verzonden: maandag 11 mei 2020 9:21
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Unable to access shares by server alias
> 
> Mandi! Lorenzo Milesi via samba
>   In chel di` si favelave...
> 
> > We migrated a S4 workgroup to S4 AD DC, I'm trying to allow 
> users to access the new \\fileserver with the old host name 
> \\server. I added a CNAME record to the AD DNS zone
> 
> I do that. And works.
> 
> Sure 'server' is not a 'too generic' name that can be
resolved
> elsewere?
> 
> -- 
> dott. Marco Gaiarin				        GNUPG 
> Key ID: 240A3D66
>   Associazione ``La Nostra Famiglia''          
> http://www.lanostrafamiglia.it/
>   Polo FVG   -   Via della Bont?, 7 - 33078   -   San Vito al 
> Tagliamento (PN)
>   marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   
> f +39-0434-842797
> 
> 		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
>       http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
> 	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>

> Verify dig -x $(hostname -i)
> Then dig A $(hostname -f)
> 
> As long as these match any CNAME should work.
These works, but why these should match a CNAME? hostname returns the
"main" host...

Anyway to make a test I configured a new CNAME

#?dig server.wdc.mydomain.it
;; ANSWER SECTION:
server.wdc.mydomain.it. 900 IN	CNAME	fileserver.wdc.mydomain.it.
fileserver.wdc.mydomain.it. 900 IN A	10.0.0.3

So the CNAME works. I also configured spn:

# samba-tool spn list fileserver$
[...]
         host/server.wdc.mydomain.it
         host/SERVER
[...]


But when I try accessing the shares with \\SERVER\whatever

[2020/05/21 17:09:10.440340,  3]
../../source3/smbd/smb2_server.c:3274(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
status[NT_STATUS_INVALID_PARAMETER] || at ../../source3/smbd/smb2_ioctl.c:312
-- 
Lorenzo Milesi - lorenzo.milesi at yetopen.it

YetOpen S.r.l. - https://www.yetopen.it/
Via Salerno 18 - 23900 Lecco - ITALY -
Tel +39 0341 220 205 - Fax +39 178 6070 222

Think green - Non stampare questa e-mail se non necessario / Don't print
this email unless necessary

-------- D.Lgs. 196/2003 e GDPR 679/2016 --------
Tutte le informazioni contenute in questo messaggio sono riservate ed a uso
esclusivo del destinatario.
Tutte le informazioni ivi contenute, compresi eventuali allegati, sono da
ritenere confidenziali e riservate secondo i termini
del vigente D.Lgs. 196/2003 in materia di privacy e del Regolamento europeo
679/2016 - GDPR - e quindi ne e' proibita l'utilizzazione ulteriore non
autorizzata.
Nel caso in cui questo messaggio Le fosse pervenuto per errore, La invitiamo ad
eliminarlo senza copiarlo, stamparlo, a non inoltrarlo a terzi e ad avvertirci
non appena possibile.
Grazie.

Confidentiality notice: this email message including any attachment is for the
sole use of the intended recipient and may contain confidential and privileged
information;
pursuant to Legislative Decree 196/2003 and the European General Data Protection
Regulation 679/2016 - GDPR - any unauthorized review, use, disclosure or
distribution
is prohibited. If you are not the intended recepient please delete this message
without copying, printing or forwarding it to others, and alert us as soon as
possible.
Thank you.

On 22/05/2020 06:38, Lorenzo Milesi via samba wrote:
>> Verify dig -x $(hostname -i)
>> Then dig A $(hostname -f)
>>
>> As long as these match any CNAME should work.
> These works, but why these should match a CNAME? hostname returns the
"main" host...
>
> Anyway to make a test I configured a new CNAME
>
> #?dig server.wdc.mydomain.it
> ;; ANSWER SECTION:
> server.wdc.mydomain.it. 900 IN	CNAME	fileserver.wdc.mydomain.it.
> fileserver.wdc.mydomain.it. 900 IN A	10.0.0.3
>
> So the CNAME works. I also configured spn:
>
> # samba-tool spn list fileserver$
> [...]
>           host/server.wdc.mydomain.it
>           host/SERVER
> [...]
>
>
> But when I try accessing the shares with \\SERVER\whatever
>
> [2020/05/21 17:09:10.440340,  3]
../../source3/smbd/smb2_server.c:3274(smbd_smb2_request_error_ex)
>    smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
status[NT_STATUS_INVALID_PARAMETER] || at ../../source3/smbd/smb2_ioctl.c:312
The problem is that you are mixing up netbios and short hostnames. 
'netbios' relies on SMBv1 and hostnames rely on DNS, AD requires DNS, so
if you want your computer to have more than one name, you must use a 
CNAME. The next problem has come over the horizon, SMBv1 is going away, 
recent versions of Windows and Samba have it turned off by default and 
you need it for browsing. You had better get used to another way of 
doing things, there is ongoing work to remove SMBv1 entirely from Samba.

Rowland