Hi, I have installed a new dc:
- debian buster
- samba 4.13.2 from apt.van-belle.nl
with the following configuration:
[global]
dns forwarder = 192.168.1.3
netbios name = MARTE
realm = DOM.LAN
server role = active directory domain controller
workgroup = DOM
interfaces = 192.168.1.2,127.0.0.1
bind interfaces only = Yes
log level = 4
max log size = 50000
guest account = nobody
map to guest = Bad User
usershare path
[sysvol]
path = /var/lib/samba/sysvol
read only = No
[netlogon]
path = /var/lib/samba/sysvol/defilippo.lan/scripts
read only = No
[video]
path = /home/video
vfs objects = acl_xattr
from command line access is ok:
smbclient //dom.lan/video -Utestuser -c 'ls'
Enter DOM\testuser's password:
. D 0 Mon Nov 23 05:32:17 2020
.. D 0 Sun Nov 22 11:44:50 2020
test1.mkv N 2976050178 Sun Nov 22 20:19:49 2020
test2.mkv N 3948612773 Sun Nov 22 12:43:40 2020
test3.mkv N 3409174562 Sun Nov 22 12:56:26 2020
475682792 blocks of size 1024. 439209584 blocks available
also using net use:
net use z: \\dom.lan\video /user:dom\testuser
Z:\>dir
Il volume nell'unit? Z ? torrent
Numero di serie del volume: FB67-5BD5
Directory di Z:\
23/11/2020 05:32 <DIR> .
22/11/2020 11:44 <DIR> ..
...
trying from explorer client (\\dom.lan\) I can see:
netlogon, sysvol and video directory but can't access, below the logs
[2020/11/23 05:37:10.569469, 4]
../../auth/auth_log.c:753(log_successful_authz_event_human_readable)
Successful AuthZ: [DCE/RPC,ncacn_np] user [DOM]\[testuser] ...
...
[2020/11/23 05:37:15.056122, 3]
../../source3/smbd/smb2_server.c:3863(smbd_smb2_request_error_ex)
smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
status[NT_STATUS_FS_DRIVER_REQUIRED] || at ../../source3/smbd/sm
b2_ioctl.c:313
What does it mean NT_STATUS_FS_DRIVER_REQUIRED ?
On 23/11/2020 05:26, banda bassotti via samba wrote:> Hi, I have installed a new dc: > > - debian buster > - samba 4.13.2 from apt.van-belle.nl > > with the following configuration: > > [global] > dns forwarder = 192.168.1.3 > netbios name = MARTE > realm = DOM.LAN > server role = active directory domain controller > workgroup = DOM > interfaces = 192.168.1.2,127.0.0.1 > bind interfaces only = Yes > > log level = 4 > max log size = 50000 > > guest account = nobody > map to guest = Bad UserThis is a DC, which is all about authentication, so why do you need guest access ?> > usershare path > > [sysvol] > path = /var/lib/samba/sysvol > read only = No > > [netlogon] > path = /var/lib/samba/sysvol/defilippo.lan/scriptsWould you like to read the line above and then go 'DOH' ?> read only = No > > [video] > path = /home/video > vfs objects = acl_xattrYou have turned of the required vfs object 'dfs_samba4', I would remove the 'vfs objects' line.> > > > What does it mean NT_STATUS_FS_DRIVER_REQUIRED ?Not entirely sure, I think that error is coming from the kernel, what filesystem are you using ? Rowland
On 23/11/2020 13:03, banda bassotti wrote:> > but basically why error only from explorer: > > > and not if I use: net use z: \\dom.lan\video -Utestuser ?I have just checked and I can connect from a Win 10 computer via Explorer and my smb.conf is very similar to yours. I wonder if this down to Apparmor ? First thing I do when installing Debian now is to 'apt purge apparmor' Rowland
Il giorno lun 23 nov 2020 alle ore 14:44 Rowland penny via samba < samba at lists.samba.org> ha scritto:> On 23/11/2020 13:03, banda bassotti wrote: > > > > but basically why error only from explorer: > > > > > > and not if I use: net use z: \\dom.lan\video -Utestuser ? > > I have just checked and I can connect from a Win 10 computer via > Explorer and my smb.conf is very similar to yours. I wonder if this down > to Apparmor ? First thing I do when installing Debian now is to 'apt > purge apparmor' >something has changed, if I access with: \\marte.dom.lan\video or \\marte\video it works, if I try to log in only with \\dom.lan\video it doesn't.