Lorenzo Milesi
2020-May-29 05:03 UTC
[Samba] get_ea_dos_attribute: Cannot get attribute from EA on file .: Error = No data available
Samba 4.12.1, single server with AD+DC on Ubuntu 18.04. Filesystem: /dev/sdb1 on /home type ext4 (rw,relatime,stripe=32750,data=ordered) It all work as expected, but I occasionally get the error in subject which denies access to shares. Restarting Samba will restore functionality. What can be the cause of this problem? Thanks. [2020/05/27 18:24:35.795379, 8] ../../source3/smbd/smb2_query_directory.c:493(smbd_smb2_query_directory_send) smbd_smb2_query_directory_send: dirpath=<2017 PAE/2 secondo-terzo trimestre 2017 inviati/2 Asdrubale 2/Tizio Caio> dontdescend=<>, in_output_buffer_length = 65528 [2020/05/27 18:24:35.795404, 6] ../../source3/smbd/dir.c:820(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x55f3ceabc250 now at offset 0 [2020/05/27 18:24:35.795423, 8] ../../source3/smbd/dosmode.c:779(dos_mode) dos_mode: 2017 PAE/2 secondo-terzo trimestre 2017 inviati/2 Asdrubale 2/Tizio Caio/. [2020/05/27 18:24:35.795439, 5] ../../source3/smbd/dosmode.c:449(get_ea_dos_attribute) get_ea_dos_attribute: Cannot get attribute from EA on file 2017 PAE/2 secondo-terzo trimestre 2017 inviati/2 Asdrubale 2/Tizio Caio/.: Error = No data available [2020/05/27 18:24:35.795455, 5] ../../source3/smbd/dosmode.c:72(dos_mode_debug_print) dos_mode_debug_print: dos_mode returning (0x10): "d" -- Lorenzo Milesi - lorenzo.milesi at yetopen.it YetOpen S.r.l. - https://www.yetopen.it/ Via Salerno 18 - 23900 Lecco - ITALY - Tel +39 0341 220 205 - Fax +39 178 6070 222 Think green - Non stampare questa e-mail se non necessario / Don't print this email unless necessary -------- D.Lgs. 196/2003 e GDPR 679/2016 -------- Tutte le informazioni contenute in questo messaggio sono riservate ed a uso esclusivo del destinatario. Tutte le informazioni ivi contenute, compresi eventuali allegati, sono da ritenere confidenziali e riservate secondo i termini del vigente D.Lgs. 196/2003 in materia di privacy e del Regolamento europeo 679/2016 - GDPR - e quindi ne e' proibita l'utilizzazione ulteriore non autorizzata. Nel caso in cui questo messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza copiarlo, stamparlo, a non inoltrarlo a terzi e ad avvertirci non appena possibile. Grazie. Confidentiality notice: this email message including any attachment is for the sole use of the intended recipient and may contain confidential and privileged information; pursuant to Legislative Decree 196/2003 and the European General Data Protection Regulation 679/2016 - GDPR - any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recepient please delete this message without copying, printing or forwarding it to others, and alert us as soon as possible. Thank you.
Rowland penny
2020-Jun-01 15:28 UTC
[Samba] get_ea_dos_attribute: Cannot get attribute from EA on file .: Error = No data available
On 29/05/2020 06:03, Lorenzo Milesi via samba wrote:> Samba 4.12.1, single server with AD+DC on Ubuntu 18.04. Filesystem: > /dev/sdb1 on /home type ext4 (rw,relatime,stripe=32750,data=ordered) > > It all work as expected, but I occasionally get the error in subject which denies access to shares. Restarting Samba will restore functionality. > What can be the cause of this problem? > Thanks. > > [2020/05/27 18:24:35.795379, 8] ../../source3/smbd/smb2_query_directory.c:493(smbd_smb2_query_directory_send) > smbd_smb2_query_directory_send: dirpath=<2017 PAE/2 secondo-terzo trimestre 2017 inviati/2 Asdrubale 2/Tizio Caio> dontdescend=<>, in_output_buffer_length = 65528 > [2020/05/27 18:24:35.795404, 6] ../../source3/smbd/dir.c:820(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x55f3ceabc250 now at offset 0 > [2020/05/27 18:24:35.795423, 8] ../../source3/smbd/dosmode.c:779(dos_mode) > dos_mode: 2017 PAE/2 secondo-terzo trimestre 2017 inviati/2 Asdrubale 2/Tizio Caio/. > [2020/05/27 18:24:35.795439, 5] ../../source3/smbd/dosmode.c:449(get_ea_dos_attribute) > get_ea_dos_attribute: Cannot get attribute from EA on file 2017 PAE/2 secondo-terzo trimestre 2017 inviati/2 Asdrubale 2/Tizio Caio/.: Error = No data available > [2020/05/27 18:24:35.795455, 5] ../../source3/smbd/dosmode.c:72(dos_mode_debug_print) > dos_mode_debug_print: dos_mode returning (0x10): "d" >Can you please give us more info, how you compiled Samba, what is in your smb.conf, etc Rowland
Lorenzo Milesi
2020-Jun-03 06:54 UTC
[Samba] get_ea_dos_attribute: Cannot get attribute from EA on file .: Error = No data available
I'm pasting below the output of the debug script you sent me some time ago.
Other than this Samba has been compiled with standard options, just ./configure,
following the wiki guide with the offered bootstrap file for ubuntu18.04.
root at fileserver:~# smbd -b
Paths:
SBINDIR: /usr/local/samba/sbin
BINDIR: /usr/local/samba/bin
CONFIGFILE: /usr/local/samba/etc/smb.conf
LOGFILEBASE: /usr/local/samba/var
LMHOSTSFILE: /usr/local/samba/etc/lmhosts
LIBDIR: /usr/local/samba/lib
DATADIR: /usr/local/samba/share
SAMBA_DATADIR: /usr/local/samba/share/samba
MODULESDIR: /usr/local/samba/lib
SHLIBEXT: so
LOCKDIR: /usr/local/samba/var/lock
STATEDIR: /usr/local/samba/var/locks
CACHEDIR: /usr/local/samba/var/cache
PIDDIR: /usr/local/samba/var/run
SMB_PASSWD_FILE: /usr/local/samba/private/smbpasswd
PRIVATE_DIR: /usr/local/samba/private
BINDDNS_DIR: /usr/local/samba/bind-dns
System Headers:
HAVE_SYS_ACL_H
HAVE_SYS_AUXV_H
HAVE_SYS_CAPABILITY_H
HAVE_SYS_CDEFS_H
HAVE_SYS_DIR_H
HAVE_SYS_EPOLL_H
HAVE_SYS_EVENTFD_H
HAVE_SYS_FCNTL_H
HAVE_SYS_FILE_H
HAVE_SYS_INOTIFY_H
HAVE_SYS_IOCTL_H
HAVE_SYS_IPC_H
HAVE_SYS_KERNEL_PROC_CORE_PATTERN
HAVE_SYS_MMAN_H
HAVE_SYS_MOUNT_H
HAVE_SYS_PARAM_H
HAVE_SYS_PRCTL_H
HAVE_SYS_QUOTAS
HAVE_SYS_QUOTA_H
HAVE_SYS_RESOURCE_H
HAVE_SYS_SELECT_H
HAVE_SYS_SENDFILE_H
HAVE_SYS_SHM_H
HAVE_SYS_SOCKET_H
HAVE_SYS_STATFS_H
HAVE_SYS_STATVFS_H
HAVE_SYS_STAT_H
HAVE_SYS_STROPTS_H
HAVE_SYS_SYSCALL_H
HAVE_SYS_SYSCTL_H
HAVE_SYS_SYSLOG_H
HAVE_SYS_SYSMACROS_H
HAVE_SYS_TERMIOS_H
HAVE_SYS_TIMEB_H
HAVE_SYS_TIMES_H
HAVE_SYS_TIME_H
HAVE_SYS_TYPES_H
HAVE_SYS_UCONTEXT_H
HAVE_SYS_UIO_H
HAVE_SYS_UNISTD_H
HAVE_SYS_UN_H
HAVE_SYS_UTSNAME_H
HAVE_SYS_VFS_H
HAVE_SYS_WAIT_H
HAVE_SYS_XATTR_H
Headers:
HAVE_ACL_LIBACL_H
HAVE_ALLOCA_H
HAVE_ARCHIVE_H
HAVE_ARPA_INET_H
HAVE_ARPA_NAMESER_H
HAVE_ASM_TYPES_H
HAVE_ASM_UNISTD_H
HAVE_ASSERT_H
HAVE_ATTR_ATTRIBUTES_H
HAVE_ATTR_XATTR_H
HAVE_AVAHI_COMMON_WATCH_H
HAVE_BSD_LIBUTIL_H
HAVE_BSD_STRING_H
HAVE_BSD_UNISTD_H
HAVE_CEPHFS_LIBCEPHFS_H
HAVE_COM_ERR_H
HAVE_CONFIG_H
HAVE_CRYPT_H
HAVE_CTYPE_H
HAVE_CUPS_CUPS_H
HAVE_CUPS_LANGUAGE_H
HAVE_CURSES_H
HAVE_DBUS_DBUS_H
HAVE_DIRENT_H
HAVE_DLFCN_H
HAVE_ENDIAN_H
HAVE_ERRNO_H
HAVE_ERR_H
HAVE_EXECINFO_H
HAVE_FCNTL_H
HAVE_FLOAT_H
HAVE_FNMATCH_H
HAVE_FORM_H
HAVE_FTW_H
HAVE_GETOPT_H
HAVE_GLIB_H
HAVE_GLOB_H
HAVE_GLUSTERFS_API_GLFS_H
HAVE_GNUTLS_GNUTLS_H
HAVE_GPFS_H
HAVE_GPGME_H
HAVE_GRP_H
HAVE_GSSAPI_GSSAPI_H
HAVE_GSSAPI_GSSAPI_KRB5_H
HAVE_GSSAPI_GSSAPI_SPNEGO_H
HAVE_ICONV_H
HAVE_IFADDRS_H
HAVE_INTTYPES_H
HAVE_KRB5_H
HAVE_KRB5_LOCATE_PLUGIN_H
HAVE_LANGINFO_H
HAVE_LASTLOG_H
HAVE_LBER_H
HAVE_LDAP_H
HAVE_LIBGEN_H
HAVE_LIBINTL_H
HAVE_LIBUNWIND_H
HAVE_LIMITS_H
HAVE_LINUX_ETHTOOL_H
HAVE_LINUX_FALLOC_H
HAVE_LINUX_FCNTL_H
HAVE_LINUX_FS_H
HAVE_LINUX_IOCTL_H
HAVE_LINUX_NETLINK_H
HAVE_LINUX_RTNETLINK_H
HAVE_LINUX_SOCKIOS_H
HAVE_LINUX_TYPES_H
HAVE_LMDB_H
HAVE_LOCALE_H
HAVE_MALLOC_H
HAVE_MEMORY_H
HAVE_MENU_H
HAVE_MNTENT_H
HAVE_NCURSES_H
HAVE_NETDB_H
HAVE_NETINET_IN_H
HAVE_NETINET_IN_SYSTM_H
HAVE_NETINET_IP_H
HAVE_NETINET_TCP_H
HAVE_NET_IF_H
HAVE_NSS_H
HAVE_PANEL_H
HAVE_POLL_H
HAVE_POPT_H
HAVE_PTHREAD_H
HAVE_PTY_H
HAVE_PWD_H
HAVE_PYTHON_H
HAVE_READLINE_HISTORY_H
HAVE_READLINE_READLINE_H
HAVE_RESOLV_H
HAVE_RPCSVC_NIS_H
HAVE_RPCSVC_RQUOTA_H
HAVE_RPCSVC_YPCLNT_H
HAVE_RPCSVC_YP_PROT_H
HAVE_RPC_RPC_H
HAVE_RPC_TYPES_H
HAVE_RPC_XDR_H
HAVE_SCHED_H
HAVE_SECURITY_PAM_APPL_H
HAVE_SECURITY_PAM_EXT_H
HAVE_SECURITY_PAM_MODULES_H
HAVE_SECURITY__PAM_MACROS_H
HAVE_SETJMP_H
HAVE_SHADOW_H
HAVE_SIGNAL_H
HAVE_STDARG_H
HAVE_STDATOMIC_H
HAVE_STDBOOL_H
HAVE_STDDEF_H
HAVE_STDINT_H
HAVE_STDIO_H
HAVE_STDLIB_H
HAVE_STRINGS_H
HAVE_STRING_H
HAVE_STROPTS_H
HAVE_SYSCALL_H
HAVE_SYSLOG_H
HAVE_TERMCAP_H
HAVE_TERMIOS_H
HAVE_TERMIO_H
HAVE_TERM_H
HAVE_TIME_H
HAVE_UNICODE_USTRING_H
HAVE_UNISTD_H
HAVE_UTIME_H
HAVE_XFS_XQM_H
HAVE_ZLIB_H
UTMP Options:
HAVE_GETUTMPX
HAVE_UTMPX_H
HAVE_UTMP_H
HAVE_UT_UT_EXIT
HAVE_UT_UT_HOST
HAVE_UT_UT_ID
HAVE_UT_UT_NAME
HAVE_UT_UT_PID
HAVE_UT_UT_TIME
HAVE_UT_UT_TV
HAVE_UT_UT_TYPE
HAVE_UT_UT_USER
PUTUTLINE_RETURNS_UTMP
SIZEOF_UTMP_UT_LINE
WITH_UTMP
HAVE_* Defines:
HAVE_64_BIT_SIZE_T_FOR_LMDB
HAVE_ACL_GET_FILE
HAVE_ADDR_TYPE_IN_KRB5_ADDRESS
HAVE_ADS
HAVE_AP_OPTS_USE_SUBKEY
HAVE_ARCHIVE_READ_FREE
HAVE_ARCHIVE_READ_SUPPORT_FILTER_ALL
HAVE_ASPRINTF
HAVE_ATEXIT
HAVE_ATOMIC_THREAD_FENCE
HAVE_ATOMIC_THREAD_FENCE_SUPPORT
HAVE_AVAHI_STRERROR
HAVE_BACKTRACE
HAVE_BACKTRACE_SYMBOLS
HAVE_BASENAME
HAVE_BER_SCANF
HAVE_BER_SOCKBUF_ADD_IO
HAVE_BER_TAG_T
HAVE_BINDTEXTDOMAIN
HAVE_BIND_TEXTDOMAIN_CODESET
HAVE_BLKCNT_T
HAVE_BLKSIZE_T
HAVE_BOOL
HAVE_BZERO
HAVE_C99_VSNPRINTF
HAVE_CAP_GET_PROC
HAVE_CEPH
HAVE_CEPH_STATX
HAVE_CHARSET_CP850
HAVE_CHARSET_UTF_8
HAVE_CHECKSUM_IN_KRB5_CHECKSUM
HAVE_CHMOD
HAVE_CHOWN
HAVE_CHROOT
HAVE_CLEARENV
HAVE_CLOCK_GETTIME
HAVE_CLOCK_MONOTONIC
HAVE_CLOCK_PROCESS_CPUTIME_ID
HAVE_CLOCK_REALTIME
HAVE_CLOSEFROM
HAVE_COMPARISON_FN_T
HAVE_COMPILER_WILL_OPTIMIZE_OUT_FNS
HAVE_CONNECT
HAVE_CONSTRUCTOR_ATTRIBUTE
HAVE_CPPFUNCTION
HAVE_CRYPT
HAVE_CRYPT_R
HAVE_CUPS
HAVE_DBUS
HAVE_DBUS_1
HAVE_DECL_ASPRINTF
HAVE_DECL_BINDTEXTDOMAIN
HAVE_DECL_BIND_TEXTDOMAIN_CODESET
HAVE_DECL_DGETTEXT
HAVE_DECL_DLOPEN
HAVE_DECL_EWOULDBLOCK
HAVE_DECL_FDATASYNC
HAVE_DECL_FS_COMPR_FL
HAVE_DECL_FS_IOC_GETFLAGS
HAVE_DECL_GETGRENT_R
HAVE_DECL_GETPWENT_R
HAVE_DECL_GETTEXT
HAVE_DECL_GETTIMEOFDAY
HAVE_DECL_H_ERRNO
HAVE_DECL_KRB5_AUTH_CON_SET_REQ_CKSUMTYPE
HAVE_DECL_KRB5_GET_CREDENTIALS_FOR_USER
HAVE_DECL_MALLOC
HAVE_DECL_MEMALIGN
HAVE_DECL_PTHREAD_MUTEX_ROBUST
HAVE_DECL_READAHEAD
HAVE_DECL_RL_EVENT_HOOK
HAVE_DECL_SNPRINTF
HAVE_DECL_STRPTIME
HAVE_DECL_TEXTDOMAIN
HAVE_DECL_VASPRINTF
HAVE_DECL_VSNPRINTF
HAVE_DECL__RES
HAVE_DESTRUCTOR_ATTRIBUTE
HAVE_DEVICE_MAJOR_FN
HAVE_DEVICE_MINOR_FN
HAVE_DGETTEXT
HAVE_DIRENT_D_OFF
HAVE_DIRFD
HAVE_DIRFD_DECL
HAVE_DIRNAME
HAVE_DLCLOSE
HAVE_DLERROR
HAVE_DLOPEN
HAVE_DLSYM
HAVE_DN_EXPAND
HAVE_DPRINTF
HAVE_DUP2
HAVE_ENCTYPE_AES128_CTS_HMAC_SHA1_96
HAVE_ENCTYPE_AES256_CTS_HMAC_SHA1_96
HAVE_ENCTYPE_ARCFOUR_HMAC
HAVE_ENCTYPE_ARCFOUR_HMAC_MD5
HAVE_ENCTYPE_ARCFOUR_HMAC_MD5_56
HAVE_ENDHOSTENT
HAVE_ENDMNTENT
HAVE_ENVIRON_DECL
HAVE_EPOLL
HAVE_EPOLL_CREATE
HAVE_ERR
HAVE_ERRNO_DECL
HAVE_ERRX
HAVE_ETHTOOL
HAVE_ETYPE_IN_ENCRYPTEDDATA
HAVE_EVENTFD
HAVE_EXECL
HAVE_E_DATA_POINTER_IN_KRB5_ERROR
HAVE_FALLOCATE
HAVE_FALLOC_FL_PUNCH_HOLE
HAVE_FALLTHROUGH_ATTRIBUTE
HAVE_FCHMOD
HAVE_FCHOWN
HAVE_FCNTL_LOCK
HAVE_FCVT
HAVE_FDATASYNC
HAVE_FDOPENDIR
HAVE_FLAGS_IN_KRB5_CREDS
HAVE_FLOCK
HAVE_FMEMOPEN
HAVE_FREEADDRINFO
HAVE_FREEIFADDRS
HAVE_FREE_CHECKSUM
HAVE_FRSIZE
HAVE_FSEEKO
HAVE_FSID_INT
HAVE_FSTATAT
HAVE_FSYNC
HAVE_FTRUNCATE
HAVE_FTRUNCATE_EXTEND
HAVE_FUNCTION_MACRO
HAVE_FUTIMENS
HAVE_FUTIMES
HAVE_F_OWNER_EX
HAVE_F_SETLEASE_DECL
HAVE_GAI_STRERROR
HAVE_GCC_VOLATILE_MEMORY_PROTECTION
HAVE_GETADDRINFO
HAVE_GETAUXVAL
HAVE_GETCWD
HAVE_GETGRENT
HAVE_GETGRENT_R
HAVE_GETGRENT_R_DECL
HAVE_GETGRGID_R
HAVE_GETGRNAM
HAVE_GETGRNAM_R
HAVE_GETGROUPLIST
HAVE_GETHOSTBYADDR
HAVE_GETHOSTBYNAME
HAVE_GETHOSTBYNAME_R
HAVE_GETHOSTENT
HAVE_GETHOSTENT_R
HAVE_GETHOSTNAME
HAVE_GETIFADDRS
HAVE_GETMNTENT
HAVE_GETNAMEINFO
HAVE_GETPAGESIZE
HAVE_GETPEEREID
HAVE_GETPGRP
HAVE_GETPWENT_R
HAVE_GETPWENT_R_DECL
HAVE_GETPWNAM
HAVE_GETPWNAM_R
HAVE_GETPWUID_R
HAVE_GETQUOTA_RSLT_GETQUOTA_RSLT_U
HAVE_GETRLIMIT
HAVE_GETSPNAM
HAVE_GETTEXT
HAVE_GETTIMEOFDAY_TZ
HAVE_GETUTXENT
HAVE_GETXATTR
HAVE_GET_CURRENT_DIR_NAME
HAVE_GFAPI
HAVE_GFAPI_VER_6
HAVE_GLIB
HAVE_GLIB_2_0
HAVE_GLOB
HAVE_GLUSTERFS
HAVE_GNUTLS
HAVE_GNUTLS_PKCS7_GET_EMBEDDED_DATA_OID
HAVE_GPFS
HAVE_GPGME
HAVE_GPGME_NEW
HAVE_GRANTPT
HAVE_GSSAPI
HAVE_GSSKRB5_EXTRACT_AUTHZ_DATA_FROM_SEC_CONTEXT
HAVE_GSSKRB5_GET_SUBKEY
HAVE_GSS_DISPLAY_STATUS
HAVE_GSS_EXPORT_CRED
HAVE_GSS_IMPORT_CRED
HAVE_GSS_INQUIRE_SEC_CONTEXT_BY_OID
HAVE_GSS_KRB5_CRED_NO_CI_FLAGS_X
HAVE_GSS_KRB5_EXPORT_LUCID_SEC_CONTEXT
HAVE_GSS_KRB5_IMPORT_CRED
HAVE_GSS_OID_EQUAL
HAVE_GSS_WRAP_IOV
HAVE_HISTORY_LIST
HAVE_HSTRERROR
HAVE_HTTPCONNECT
HAVE_HTTPCONNECT2
HAVE_HTTPCONNECTENCRYPT
HAVE_H_ERRNO
HAVE_ICONV
HAVE_ICONV_ERRNO_ILLEGAL_MULTIBYTE
HAVE_ICONV_OPEN
HAVE_ICU_I18N
HAVE_IF_NAMETOINDEX
HAVE_IMMEDIATE_STRUCTURES
HAVE_INET_ATON
HAVE_INET_NTOA
HAVE_INET_NTOP
HAVE_INET_PTON
HAVE_INITGROUPS
HAVE_INITIALIZE_KRB5_ERROR_TABLE
HAVE_INITSCR
HAVE_INNETGR
HAVE_INOTIFY
HAVE_INOTIFY_INIT
HAVE_INO_T
HAVE_INT16_T
HAVE_INT32_T
HAVE_INT64_T
HAVE_INT8_T
HAVE_INTPTR_T
HAVE_IPRINT
HAVE_IPV6
HAVE_IPV6_V6ONLY
HAVE_IRUSEROK
HAVE_ISATTY
HAVE_ITEM_COUNT
HAVE_JANSSON
HAVE_JSON_OBJECT
HAVE_KERNEL_CHANGE_NOTIFY
HAVE_KERNEL_OPLOCKS_LINUX
HAVE_KERNEL_SHARE_MODES
HAVE_KRB5
HAVE_KRB5_ADDRESSES
HAVE_KRB5_AUTH_CON_SETKEY
HAVE_KRB5_CC_COPY_CACHE
HAVE_KRB5_CC_GET_LIFETIME
HAVE_KRB5_CONFIG_GET_BOOL_DEFAULT
HAVE_KRB5_CREATE_CHECKSUM
HAVE_KRB5_CRYPTO
HAVE_KRB5_CRYPTO_DESTROY
HAVE_KRB5_CRYPTO_INIT
HAVE_KRB5_C_VERIFY_CHECKSUM
HAVE_KRB5_DATA_COPY
HAVE_KRB5_ENCTYPE_TO_STRING
HAVE_KRB5_ENCTYPE_TO_STRING_WITH_KRB5_CONTEXT_ARG
HAVE_KRB5_FREE_ERROR_CONTENTS
HAVE_KRB5_FREE_HOST_REALM
HAVE_KRB5_FWD_TGT_CREDS
HAVE_KRB5_GET_CREDS
HAVE_KRB5_GET_CREDS_OPT_ALLOC
HAVE_KRB5_GET_CREDS_OPT_SET_IMPERSONATE
HAVE_KRB5_GET_DEFAULT_IN_TKT_ETYPES
HAVE_KRB5_GET_HOST_REALM
HAVE_KRB5_GET_INIT_CREDS_KEYBLOCK
HAVE_KRB5_GET_INIT_CREDS_OPT_ALLOC
HAVE_KRB5_GET_INIT_CREDS_OPT_FREE
HAVE_KRB5_GET_INIT_CREDS_OPT_GET_ERROR
HAVE_KRB5_GET_INIT_CREDS_OPT_SET_PAC_REQUEST
HAVE_KRB5_GET_PW_SALT
HAVE_KRB5_GET_RENEWED_CREDS
HAVE_KRB5_KEYBLOCK_INIT
HAVE_KRB5_KEYBLOCK_KEYVALUE
HAVE_KRB5_KEYTAB_ENTRY_KEYBLOCK
HAVE_KRB5_KRBHST_GET_ADDRINFO
HAVE_KRB5_KRBHST_INIT
HAVE_KRB5_KT_COMPARE
HAVE_KRB5_KT_FREE_ENTRY
HAVE_KRB5_KU_OTHER_CKSUM
HAVE_KRB5_MAKE_PRINCIPAL
HAVE_KRB5_MK_REQ_EXTENDED
HAVE_KRB5_PDU_NONE_DECL
HAVE_KRB5_PRINCIPAL_COMPARE_ANY_REALM
HAVE_KRB5_PRINCIPAL_GET_COMP_STRING
HAVE_KRB5_PRINCIPAL_GET_NUM_COMP
HAVE_KRB5_PRINCIPAL_GET_REALM
HAVE_KRB5_PRINCIPAL_GET_TYPE
HAVE_KRB5_PRINCIPAL_SET_REALM
HAVE_KRB5_PRINCIPAL_SET_TYPE
HAVE_KRB5_PROMPT_TYPE
HAVE_KRB5_REALM_TYPE
HAVE_KRB5_SET_DEFAULT_IN_TKT_ETYPES
HAVE_KRB5_SET_REAL_TIME
HAVE_KRB5_STRING_TO_KEY
HAVE_KRB5_STRING_TO_KEY_SALT
HAVE_KRB5_WARNX
HAVE_KRB_STRUCT_WINSIZE
HAVE_LARGEFILE
HAVE_LBER_LOG_PRINT_FN
HAVE_LCHOWN
HAVE_LDAP
HAVE_LDAP_ADD_RESULT_ENTRY
HAVE_LDAP_INIT
HAVE_LDAP_INITIALIZE
HAVE_LDAP_INIT_FD
HAVE_LDAP_OPT_SOCKBUF
HAVE_LDAP_SASL_WRAPPING
HAVE_LDAP_SET_REBIND_PROC
HAVE_LDWRAP
HAVE_LIBACL
HAVE_LIBARCHIVE
HAVE_LIBAVAHI_COMMON
HAVE_LIBBSD
HAVE_LIBCAP
HAVE_LIBCEPHFS
HAVE_LIBCRYPT
HAVE_LIBCUPS
HAVE_LIBDBUS_1
HAVE_LIBDL
HAVE_LIBFORM
HAVE_LIBGFAPI
HAVE_LIBGLIB_2_0
HAVE_LIBGPGME
HAVE_LIBICUDATA
HAVE_LIBICUI18N
HAVE_LIBICUUC
HAVE_LIBJANSSON
HAVE_LIBKRB5
HAVE_LIBLBER
HAVE_LIBLDAP
HAVE_LIBLMDB
HAVE_LIBMENU
HAVE_LIBNCURSES
HAVE_LIBNSL
HAVE_LIBPAM
HAVE_LIBPANEL
HAVE_LIBPOPT
HAVE_LIBPTHREAD
HAVE_LIBREADLINE
HAVE_LIBREPLACE
HAVE_LIBRESOLV
HAVE_LIBSYSTEMD
HAVE_LIBTASN1
HAVE_LIBUNWIND
HAVE_LIBUTIL
HAVE_LIBZ
HAVE_LINK
HAVE_LINUX_FALLOCATE
HAVE_LINUX_INOTIFY
HAVE_LINUX_IOCTL
HAVE_LINUX_READAHEAD
HAVE_LINUX_SPLICE
HAVE_LINUX_THREAD_CREDENTIALS
HAVE_LITTLE_ENDIAN
HAVE_LLSEEK
HAVE_LMDB
HAVE_LOFF_T
HAVE_LONGJMP
HAVE_LONG_LONG
HAVE_LSEEK_HOLE_DATA
HAVE_LSTAT
HAVE_LUTIMES
HAVE_MAKEDEV
HAVE_MALLINFO
HAVE_MDB_ENV_CREATE
HAVE_MEMALIGN
HAVE_MEMCPY
HAVE_MEMMEM
HAVE_MEMMOVE
HAVE_MEMSET
HAVE_MKDIR_MODE
HAVE_MKDTEMP
HAVE_MKNOD
HAVE_MKNODAT
HAVE_MKTIME
HAVE_MLOCK
HAVE_MLOCKALL
HAVE_MMAP
HAVE_MREMAP
HAVE_MUNLOCK
HAVE_MUNLOCKALL
HAVE_NATIVE_ICONV
HAVE_NCURSES
HAVE_NETGROUP
HAVE_NEW_FIELD
HAVE_NEW_FORM
HAVE_NEW_LIBREADLINE
HAVE_NEW_PANEL
HAVE_NFS_QUOTAS
HAVE_NFTW
HAVE_OFD_LOCKS
HAVE_OPENAT
HAVE_OPENPTY
HAVE_OPEN_O_DIRECT
HAVE_PAM_GET_DATA
HAVE_PAM_RADIO_TYPE
HAVE_PAM_RHOST
HAVE_PAM_START
HAVE_PAM_TTY
HAVE_PAM_VSYSLOG
HAVE_PATHCONF
HAVE_PEERCRED
HAVE_PIPE
HAVE_POLL
HAVE_POPT
HAVE_POPTGETCONTEXT
HAVE_POSIX_ACLS
HAVE_POSIX_CAPABILITIES
HAVE_POSIX_FADVISE
HAVE_POSIX_FALLOCATE
HAVE_POSIX_MEMALIGN
HAVE_POSIX_OPENPT
HAVE_PRCTL
HAVE_PREAD
HAVE_PREAD_DECL
HAVE_PRINTF
HAVE_PROGRAM_INVOCATION_SHORT_NAME
HAVE_PTHREAD
HAVE_PTHREAD_ATTR_INIT
HAVE_PTHREAD_CREATE
HAVE_PTHREAD_MUTEXATTR_SETROBUST
HAVE_PTHREAD_MUTEX_CONSISTENT
HAVE_PTRDIFF_T
HAVE_PUTENV
HAVE_PUTUTLINE
HAVE_PUTUTXLINE
HAVE_PWRITE
HAVE_PWRITE_DECL
HAVE_PYEMBED
HAVE_PYEXT
HAVE_QUOTACTL_LINUX
HAVE_RAND
HAVE_RANDOM
HAVE_RCMD
HAVE_READAHEAD_DECL
HAVE_READLINK
HAVE_READV
HAVE_REALPATH
HAVE_RENAME
HAVE_RES_NSEARCH
HAVE_RES_SEARCH
HAVE_RL_COMPLETION_MATCHES
HAVE_ROBUST_MUTEXES
HAVE_RW_HINTS
HAVE_SA_FAMILY_T
HAVE_SA_SIGINFO_DECL
HAVE_SECURE_MKSTEMP
HAVE_SELECT
HAVE_SENDFILE
HAVE_SENDMSG
HAVE_SETBUFFER
HAVE_SETEGID
HAVE_SETENV
HAVE_SETENV_DECL
HAVE_SETEUID
HAVE_SETGID
HAVE_SETGROUPS
HAVE_SETHOSTENT
HAVE_SETITIMER
HAVE_SETLINEBUF
HAVE_SETLOCALE
HAVE_SETMNTENT
HAVE_SETPGID
HAVE_SETPROCTITLE
HAVE_SETPROCTITLE_INIT
HAVE_SETREGID
HAVE_SETRESGID
HAVE_SETRESGID_DECL
HAVE_SETRESUID
HAVE_SETRESUID_DECL
HAVE_SETREUID
HAVE_SETSID
HAVE_SETUID
HAVE_SET_MENU_ITEMS
HAVE_SHARED_MMAP
HAVE_SHOW_PANEL
HAVE_SIGACTION
HAVE_SIGBLOCK
HAVE_SIGGETMASK
HAVE_SIGLONGJMP
HAVE_SIGPROCMASK
HAVE_SIGSET
HAVE_SIGSETMASK
HAVE_SIG_ATOMIC_T_TYPE
HAVE_SIMPLE_C_PROG
HAVE_SIZE_T
HAVE_SNPRINTF
HAVE_SOCKET
HAVE_SOCKETPAIR
HAVE_SOCKLEN_T
HAVE_SPLICE_DECL
HAVE_SPOTLIGHT_BACKEND_ES
HAVE_SRAND
HAVE_SRANDOM
HAVE_SSIZE_T
HAVE_SS_FAMILY
HAVE_STATFS_F_FSID
HAVE_STATVFS
HAVE_STATVFS_F_FLAG
HAVE_STAT_HIRES_TIMESTAMPS
HAVE_STAT_ST_BLKSIZE
HAVE_STAT_ST_BLOCKS
HAVE_STAT_TV_NSEC
HAVE_STRCASECMP
HAVE_STRCASESTR
HAVE_STRCHR
HAVE_STRCPY
HAVE_STRDUP
HAVE_STRERROR
HAVE_STRERROR_R
HAVE_STRFTIME
HAVE_STRLCAT
HAVE_STRLCPY
HAVE_STRNCASECMP
HAVE_STRNCPY
HAVE_STRNDUP
HAVE_STRNLEN
HAVE_STRPBRK
HAVE_STRPTIME
HAVE_STRSEP
HAVE_STRSIGNAL
HAVE_STRTOK_R
HAVE_STRTOL
HAVE_STRTOLL
HAVE_STRTOQ
HAVE_STRTOULL
HAVE_STRTOUQ
HAVE_STRUCT_ADDRINFO
HAVE_STRUCT_IFADDRS
HAVE_STRUCT_MSGHDR_MSG_CONTROL
HAVE_STRUCT_SIGEVENT
HAVE_STRUCT_SIGEVENT_SIGEV_VALUE_SIVAL_PTR
HAVE_STRUCT_SOCKADDR
HAVE_STRUCT_SOCKADDR_IN6
HAVE_STRUCT_SOCKADDR_STORAGE
HAVE_STRUCT_STAT_ST_MTIM_TV_NSEC
HAVE_STRUCT_STAT_ST_RDEV
HAVE_STRUCT_TIMESPEC
HAVE_STRUCT_WINSIZE
HAVE_ST_RDEV
HAVE_SWAB
HAVE_SYMLINK
HAVE_SYSCALL
HAVE_SYSCONF
HAVE_SYSCTL
HAVE_SYSLOG
HAVE_TEXTDOMAIN
HAVE_TGETENT
HAVE_TIMEGM
HAVE_UCONTEXT_T
HAVE_UINT16_T
HAVE_UINT32_T
HAVE_UINT64_T
HAVE_UINT8_T
HAVE_UINTPTR_T
HAVE_UMASK
HAVE_UNAME
HAVE_UNIXSOCKET
HAVE_UNSETENV
HAVE_UNSHARE_CLONE_FS
HAVE_UPDWTMP
HAVE_UPDWTMPX
HAVE_USLEEP
HAVE_UTF8_NORMALISATION
HAVE_UTIMBUF
HAVE_UTIME
HAVE_UTIMENSAT
HAVE_UTIMES
HAVE_UX_UT_HOST
HAVE_U_CHAR
HAVE_U_INT32_T
HAVE_VASPRINTF
HAVE_VA_COPY
HAVE_VDPRINTF
HAVE_VISIBILITY_ATTR
HAVE_VOLATILE
HAVE_VSNPRINTF
HAVE_VSYSLOG
HAVE_WAIT4
HAVE_WAITPID
HAVE_WARN
HAVE_WARNX
HAVE_WINEXE_CC_WIN32
HAVE_WINEXE_CC_WIN64
HAVE_WNO_FORMAT_TRUNCATION
HAVE_WNO_STRICT_OVERFLOW
HAVE_WNO_UNUSED_FUNCTION
HAVE_WORKING_STRPTIME
HAVE_WRITEV
HAVE_WS_XPIXEL
HAVE_WS_YPIXEL
HAVE_XATTR_SUPPORT
HAVE_XATTR_XATTR
HAVE_XFS_QUOTAS
HAVE_YP_GET_DEFAULT_DOMAIN
HAVE_ZLIB
HAVE__Bool
HAVE__RES
HAVE__VA_ARGS__MACRO
HAVE___ATTRIBUTE__
HAVE___DN_EXPAND
HAVE___SYNC_FETCH_AND_ADD
HAVE___THREAD
--with Options:
WITH_ADS
WITH_AUTOMOUNT
WITH_DNS_UPDATES
WITH_PAM
WITH_PAM_MODULES
WITH_PTHREADPOOL
WITH_QUOTAS
WITH_SPOTLIGHT
WITH_SYSLOG
WITH_TEVENT_GLIB_GLUE
WITH_WINBIND
Build Options:
AD_DC_BUILD_IS_ENABLED
BROKEN_NISPLUS_INCLUDE_FILES
COMPILER_SUPPORTS_LL
CONFIG_H_IS_FROM_SAMBA
DEFAULT_DOS_CHARSET
DEFAULT_UNIX_CHARSET
ENABLE_GPGME
GETCWD_TAKES_NULL
INLINE_MACRO
KRB5_CREDS_OPT_FREE_REQUIRES_CONTEXT
KRB5_PRINC_REALM_RETURNS_REALM
LDAP_DEPRECATED
LDAP_SET_REBIND_PROC_ARGS
LIBREPLACE_NETWORK_CHECKS
LINUX
LINUX_SENDFILE_API
REALPATH_TAKES_NULL
RETSIGTYPE
SAMBA4_USES_HEIMDAL
SEEKDIR_RETURNS_VOID
SHLIBEXT
SIZEOF_BLKCNT_T_8
SIZEOF_BOOL
SIZEOF_CHAR
SIZEOF_DEV_T
SIZEOF_INO_T
SIZEOF_INT
SIZEOF_INT16_T
SIZEOF_INT32_T
SIZEOF_INT64_T
SIZEOF_INT8_T
SIZEOF_LONG
SIZEOF_LONG_LONG
SIZEOF_OFF_T
SIZEOF_SHORT
SIZEOF_SIZE_T
SIZEOF_SSIZE_T
SIZEOF_TIME_T
SIZEOF_UINT16_T
SIZEOF_UINT32_T
SIZEOF_UINT64_T
SIZEOF_UINT8_T
SIZEOF_VOID_P
SRCDIR
STAT_STATVFS
STAT_ST_BLOCKSIZE
STDC_HEADERS
STRING_STATIC_MODULES
SUMMARY_PASSES
SYSCONF_SC_NGROUPS_MAX
SYSCONF_SC_NPROCESSORS_ONLN
SYSCONF_SC_PAGESIZE
SYSTEM_UNAME_MACHINE
SYSTEM_UNAME_RELEASE
SYSTEM_UNAME_SYSNAME
SYSTEM_UNAME_VERSION
TALLOC_BUILD_VERSION_MAJOR
TALLOC_BUILD_VERSION_MINOR
TALLOC_BUILD_VERSION_RELEASE
TEVENT_NUM_SIGNALS
TIME_T_MAX
TIME_WITH_SYS_TIME
USE_TDB_MUTEX_LOCKING
USING_SYSTEM_POPT
VALUEOF_NSIG
VALUEOF_SIGRTMAX
VALUEOF_SIGRTMIN
VALUEOF__NSIG
VOID_RETSIGTYPE
WINEXE_LDFLAGS
WORKING_GETCONF_LFS_CFLAGS
XSLTPROC_MANPAGES
_GNU_SOURCE
_HAVE_SENDFILE
_POSIX_FALLOCATE_CAPABLE_LIBC
_SAMBA_BUILD_
_XOPEN_SOURCE_EXTENDED
__TIME_T_MAX
idmap_ad_init
idmap_autorid_init
idmap_hash_init
idmap_rfc2307_init
idmap_rid_init
idmap_script_init
idmap_tdb2_init
offset_t
static_decl_auth
static_decl_charset
static_decl_gpext
static_decl_idmap
static_decl_nss_info
static_decl_pdb
static_decl_perfcount
static_decl_rpc
static_decl_vfs
static_init_auth
static_init_charset
static_init_gpext
static_init_idmap
static_init_nss_info
static_init_pdb
static_init_perfcount
static_init_rpc
static_init_vfs
uint_t
vfs_acl_tdb_init
vfs_acl_xattr_init
vfs_aio_fork_init
vfs_aio_pthread_init
vfs_audit_init
vfs_btrfs_init
vfs_cap_init
vfs_catia_init
vfs_ceph_init
vfs_ceph_snapshots_init
vfs_commit_init
vfs_crossrename_init
vfs_default_quota_init
vfs_dirsort_init
vfs_expand_msdfs_init
vfs_extd_audit_init
vfs_fake_perms_init
vfs_fileid_init
vfs_fruit_init
vfs_full_audit_init
vfs_glusterfs_fuse_init
vfs_glusterfs_init
vfs_gpfs_init
vfs_linux_xfs_sgid_init
vfs_media_harmony_init
vfs_offline_init
vfs_posix_eadb_init
vfs_preopen_init
vfs_readahead_init
vfs_readonly_init
vfs_recycle_init
vfs_shadow_copy2_init
vfs_shadow_copy_init
vfs_shell_snap_init
vfs_snapper_init
vfs_streams_depot_init
vfs_streams_xattr_init
vfs_syncops_init
vfs_time_audit_init
vfs_unityed_media_init
vfs_virusfilter_init
vfs_worm_init
vfs_xattr_tdb_init
Cluster support features:
NONE
Type sizes:
sizeof(char): 1
sizeof(int): 4
sizeof(long): 8
sizeof(long long): 8
sizeof(uint8_t): 1
sizeof(uint16_t): 2
sizeof(uint32_t): 4
sizeof(short): 2
sizeof(void*): 8
sizeof(size_t): 8
sizeof(off_t): 8
sizeof(ino_t): 8
sizeof(dev_t): 8
Builtin modules:
vfs_default vfs_not_implemented vfs_posixacl auth_builtin auth_sam
auth_winbind rpc_mdssvc_module pdb_smbpasswd pdb_tdbsam auth_unix
nss_info_template idmap_tdb idmap_passdb idmap_nss pdb_samba_dsdb auth_samba4
vfs_dfs_samba4 pdb_ldapsam idmap_ldap
Config collected --- 2020-05-18-23:08 -----------
Hostname: fileserver
DNS Domain: wdc.mydomain.it
Realm: WDC.MYDOMAIN.IT
FQDN: fileserver.wdc.mydomain.it
ipaddress: 10.0.0.3
-----------
This computer is running Ubuntu 18.04.4 LTS x86_64
-----------
running command : ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group
default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP
group default qlen 1000
link/ether 00:0c:29:7a:3c:11 brd ff:ff:ff:ff:ff:ff
inet 10.0.0.3/24 brd 10.0.0.255 scope global ens160
inet6 fe80::20c:29ff:fe7a:3c11/64 scope link
-----------
Checking file: /etc/hosts
127.0.0.1 localhost
#127.0.1.1 fileserver
10.0.0.3 fileserver.wdc.mydomain.it fileserver
# The following lines are desirable for IPv6 capable hosts
::1 ip6-localhost ip6-loopback localhost
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
-----------
Checking file: /etc/resolv.conf
nameserver 10.0.0.3
search wdc.mydomain.it
-----------
Kerberos SRV _kerberos._tcp.wdc.mydomain.it record(s) verified ok, sample
output:
Server: 10.0.0.3
Address: 10.0.0.3#53
_kerberos._tcp.wdc.mydomain.it service = 0 100 88
fileserver.wdc.mydomain.it.
-----------
'kinit Administrator' checked successfully.
-----------
Samba is running as an AD DC
-----------
Checking file: /etc/krb5.conf
[libdefaults]
default_realm = WDC.MYDOMAIN.IT
dns_lookup_realm = false
dns_lookup_kdc = true
[realms]
WDC.MYDOMAIN.IT = {
default_domain = wdc.mydomain.it
}
[domain_realm]
fileserver = WDC.MYDOMAIN.IT
-----------
Checking file: /etc/nsswitch.conf
# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed,
try:
# `info libc "Name Service Switch"' for information about this
file.
passwd: compat systemd winbind
group: compat systemd winbind
shadow: compat
gshadow: files
hosts: files dns
networks: files
protocols: db files
services: db files
ethers: db files
rpc: db files
netgroup: nis
-----------
Checking file: /usr/local/samba/etc/smb.conf
# Global parameters
[global]
netbios name = FILESERVER
realm = WDC.MYDOMAIN.IT
server role = active directory domain controller
server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl,
winbindd, ntp_signd, kcc, dnsupdate
workgroup = WDC
netbios aliases = serverx3
idmap_ldb:use rfc2307 = yes
# https://wiki.samba.org/index.php/Configuring_Winbindd_on_a_Samba_AD_DC
# template shell = /bin/bash
template homedir = /home/%U
hide unreadable = yes
# I due parametri sotto abbassano il protocollo minimo di comunicazione,
messi per consentire le join dei PC con XP
# FIXME ANDREBBERO TOLTI APPENA NON CI SONO PIU' CLIENT XP
server min protocol = NT1
client min protocol = NT1
log level = 8
[sysvol]
path = /usr/local/samba/var/locks/sysvol
read only = No
browseable = No
[netlogon]
path = /usr/local/samba/var/locks/sysvol/wdc.mydomain.it/scripts
read only = No
browseable = No
[homes]
path = /home/CONDIVISI/personali
include = /usr/local/samba/etc/cestino.conf
read only = No
[BACHECA]
path = /home/CONDIVISI/BACHECA
include = /usr/local/samba/etc/cestino.conf
read only = No
-----------
This DC is being used as a fileserver
Detected bind DLZ enabled..
Checking file: /etc/bind/named.conf
// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
// structure of BIND configuration files in Debian, *BEFORE* you customize
// this configuration file.
//
// If you are just adding zones, please do that in /etc/bind/named.conf.local
include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";
-----------
Checking file: /etc/bind/named.conf.options
# 2020.04.21 yetopen
acl internals { 127.0.0.0/8; 10.0.0.0/24; };
# 2020.04.21 yetopen - fine
options {
directory "/var/cache/bind";
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
// forwarders {
// 0.0.0.0;
// };
//=======================================================================
// If BIND logs error messages about the root key being expired,
// you will need to update your keys. See https://www.isc.org/bind-keys
//=======================================================================#
dnssec-validation auto;
# auth-nxdomain no; # conform to RFC1035
# 2020.04.21 yetopen
https://wiki.samba.org/index.php/Setting_up_a_BIND_DNS_Server#Setting_up_the_named.conf_files
listen-on-v6 { none; };
forwarders { 10.0.0.1; 208.67.222.123; };
version "Go Away 0.0.7";
notify no;
empty-zones-enable no;
auth-nxdomain yes;
allow-transfer { none; };
dnssec-validation no;
dnssec-enable no;
dnssec-lookaside no;
// Added Per Debian buster Bind9.
// Due to : resolver: info: resolver priming query complete messages in
the logs.
// See:
https://gitlab.isc.org/isc-projects/bind9/commit/4a827494618e776a78b413d863bc23badd14ea42
minimal-responses yes;
// Add any subnets or hosts you want to allow to use this DNS server
allow-query { "internals"; };
allow-query-cache { "internals"; };
// Add any subnets or hosts you want to allow to use recursive queries
recursion yes;
allow-recursion { "internals"; };
// https://wiki.samba.org/index.php/Dns-backend_bind
// DNS dynamic updates via Kerberos (optional, but recommended)
// ONE of the following lines should be enabled AFTER you provision or
join a DC with bind9_dlz
// or AFTER upgrading your dns from internal to bind9_dlz
// Before Samba 4.9.0
// tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab";
// From Samba 4.9.0 ( You will need to run samba_dnsupgrade if upgrading
your Samba version. )
tkey-gssapi-keytab "/var/lib/samba/bind-dns/dns.keytab";
# 2020.04.21 yetopen - fine
};
-----------
Checking file: /etc/bind/named.conf.local
//
// Do any local configuration here
//
// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";
include "/usr/local/samba/bind-dns/named.conf";
-----------
Checking file: /etc/bind/named.conf.default-zones
// prime the server with knowledge of the root servers
zone "." {
type hint;
file "/etc/bind/db.root";
};
// be authoritative for the localhost forward and reverse zones, and for
// broadcast zones as per RFC 1912
zone "localhost" {
type master;
file "/etc/bind/db.local";
};
zone "127.in-addr.arpa" {
type master;
file "/etc/bind/db.127";
};
zone "0.in-addr.arpa" {
type master;
file "/etc/bind/db.0";
};
zone "255.in-addr.arpa" {
type master;
file "/etc/bind/db.255";
};
-----------
Samba DNS zone list check :
0.0.10.in-addr.arpa
wdc.mydomain.it
mydomain.it
_msdcs.wdc.mydomain.it
-----------
-----------
This is the DC with the PDC Emulator role and time is: 2020-05-18T23:09:04
-----------
Installed packages:
ii acl 2.2.52-3build1
amd64 Access control list utilities
ii attr 1:2.4.47-2build1
amd64 Utilities for manipulating filesystem extended attributes
ii bind9 1:9.11.3+dfsg-1ubuntu1.11
amd64 Internet Domain Name Server
ii bind9-host 1:9.11.3+dfsg-1ubuntu1.11
amd64 DNS lookup utility (deprecated)
ii bind9utils 1:9.11.3+dfsg-1ubuntu1.11
amd64 Utilities for BIND
ii krb5-config 2.6
all Configuration files for Kerberos Version 5
ii krb5-kdc 1.16-2ubuntu0.1
amd64 MIT Kerberos key server (KDC)
ii krb5-locales 1.16-2ubuntu0.1
all internationalization support for MIT Kerberos
ii krb5-multidev:amd64 1.16-2ubuntu0.1
amd64 development files for MIT Kerberos without Heimdal conflict
ii krb5-user 1.16-2ubuntu0.1
amd64 basic programs to authenticate using MIT Kerberos
ii libacl1:amd64 2.2.52-3build1
amd64 Access control list shared library
ii libacl1-dev 2.2.52-3build1
amd64 Access control list static libraries and headers
ii libattr1:amd64 1:2.4.47-2build1
amd64 Extended attribute shared library
ii libattr1-dev:amd64 1:2.4.47-2build1
amd64 Extended attribute static libraries and headers
ii libbind9-160:amd64 1:9.11.3+dfsg-1ubuntu1.11
amd64 BIND9 Shared Library used by BIND
ii libgssapi-krb5-2:amd64 1.16-2ubuntu0.1
amd64 MIT Kerberos runtime libraries - krb5 GSS-API Mechanism
ii libkrb5-26-heimdal:amd64 7.5.0+dfsg-1
amd64 Heimdal Kerberos - libraries
ii libkrb5-3:amd64 1.16-2ubuntu0.1
amd64 MIT Kerberos runtime libraries
ii libkrb5-dev:amd64 1.16-2ubuntu0.1
amd64 headers and development libraries for MIT Kerberos
ii libkrb5support0:amd64 1.16-2ubuntu0.1
amd64 MIT Kerberos runtime libraries - Support library
ii python3-attr 17.4.0-2
all Attributes without boilerplate (Python 3)
ii zimbra-common-mbox-conf-attrs 8.8.15.1558767359-1.u18
amd64 Zimbra Core Mailbox Attributes Configuration
-----------
----- Original Message -----> From: "samba" <samba at lists.samba.org>
> To: "samba" <samba at lists.samba.org>
> Sent: Monday, June 1, 2020 5:28:48 PM
> Subject: Re: [Samba] get_ea_dos_attribute: Cannot get attribute from EA on
file .: Error = No data available
> On 29/05/2020 06:03, Lorenzo Milesi via samba wrote:
>> Samba 4.12.1, single server with AD+DC on Ubuntu 18.04. Filesystem:
>> /dev/sdb1 on /home type ext4 (rw,relatime,stripe=32750,data=ordered)
>>
>> It all work as expected, but I occasionally get the error in subject
which
>> denies access to shares. Restarting Samba will restore functionality.
>> What can be the cause of this problem?
>> Thanks.
>>
>> [2020/05/27 18:24:35.795379, 8]
>>
../../source3/smbd/smb2_query_directory.c:493(smbd_smb2_query_directory_send)
>> smbd_smb2_query_directory_send: dirpath=<2017 PAE/2 secondo-terzo
trimestre 2017
>> inviati/2 Asdrubale 2/Tizio Caio> dontdescend=<>,
in_output_buffer_length >> 65528
>> [2020/05/27 18:24:35.795404, 6]
>> ../../source3/smbd/dir.c:820(smbd_dirptr_get_entry)
>> smbd_dirptr_get_entry: dirptr 0x55f3ceabc250 now at offset 0
>> [2020/05/27 18:24:35.795423, 8]
../../source3/smbd/dosmode.c:779(dos_mode)
>> dos_mode: 2017 PAE/2 secondo-terzo trimestre 2017 inviati/2
Asdrubale 2/Tizio
>> Caio/.
>> [2020/05/27 18:24:35.795439, 5]
>> ../../source3/smbd/dosmode.c:449(get_ea_dos_attribute)
>> get_ea_dos_attribute: Cannot get attribute from EA on file 2017
PAE/2
>> secondo-terzo trimestre 2017 inviati/2 Asdrubale 2/Tizio Caio/.:
Error = No
>> data available
>> [2020/05/27 18:24:35.795455, 5]
>> ../../source3/smbd/dosmode.c:72(dos_mode_debug_print)
>> dos_mode_debug_print: dos_mode returning (0x10): "d"
>>
> Can you please give us more info, how you compiled Samba, what is in
> your smb.conf, etc
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
--
Lorenzo Milesi - lorenzo.milesi at yetopen.it
YetOpen S.r.l. - https://www.yetopen.it/
Via Salerno 18 - 23900 Lecco - ITALY -
Tel +39 0341 220 205 - Fax +39 178 6070 222
Think green - Non stampare questa e-mail se non necessario / Don't print
this email unless necessary
-------- D.Lgs. 196/2003 e GDPR 679/2016 --------
Tutte le informazioni contenute in questo messaggio sono riservate ed a uso
esclusivo del destinatario.
Tutte le informazioni ivi contenute, compresi eventuali allegati, sono da
ritenere confidenziali e riservate secondo i termini
del vigente D.Lgs. 196/2003 in materia di privacy e del Regolamento europeo
679/2016 - GDPR - e quindi ne e' proibita l'utilizzazione ulteriore non
autorizzata.
Nel caso in cui questo messaggio Le fosse pervenuto per errore, La invitiamo ad
eliminarlo senza copiarlo, stamparlo, a non inoltrarlo a terzi e ad avvertirci
non appena possibile.
Grazie.
Confidentiality notice: this email message including any attachment is for the
sole use of the intended recipient and may contain confidential and privileged
information;
pursuant to Legislative Decree 196/2003 and the European General Data Protection
Regulation 679/2016 - GDPR - any unauthorized review, use, disclosure or
distribution
is prohibited. If you are not the intended recepient please delete this message
without copying, printing or forwarding it to others, and alert us as soon as
possible.
Thank you.
Reasonably Related Threads
- Intermittent permission denied when accessing share
- get_ea_dos_attribute: Cannot get attribute from EA on file .: Error = No data available
- Error changing server IP address: ERROR: Connecting to DNS RPC server
- Intermittent permission denied when accessing share
- Intermittent permission denied when accessing share