samba - Nov 2020 - NT_STATUS_FS_DRIVER_REQUIRED

Hi, I have installed a new dc:

- debian buster
- samba 4.13.2 from apt.van-belle.nl

with the following configuration:

[global]
  dns forwarder = 192.168.1.3
  netbios name = MARTE
  realm = DOM.LAN
  server role = active directory domain controller
  workgroup = DOM
  interfaces = 192.168.1.2,127.0.0.1
  bind interfaces only = Yes

  log level = 4
  max log size = 50000

  guest account = nobody
  map to guest = Bad User

  usershare path 
[sysvol]
  path = /var/lib/samba/sysvol
  read only = No

[netlogon]
  path = /var/lib/samba/sysvol/defilippo.lan/scripts
  read only = No

[video]
  path = /home/video
  vfs objects = acl_xattr

from command line access is ok:

smbclient //dom.lan/video -Utestuser -c 'ls'
Enter DOM\testuser's password:
  .                                   D        0  Mon Nov 23 05:32:17 2020
  ..                                  D        0  Sun Nov 22 11:44:50 2020
  test1.mkv      N 2976050178  Sun Nov 22 20:19:49 2020
  test2.mkv      N 3948612773  Sun Nov 22 12:43:40 2020
  test3.mkv      N 3409174562  Sun Nov 22 12:56:26 2020

                475682792 blocks of size 1024. 439209584 blocks available

also using net use:

net use z: \\dom.lan\video /user:dom\testuser

Z:\>dir
 Il volume nell'unit? Z ? torrent
 Numero di serie del volume: FB67-5BD5

 Directory di Z:\

23/11/2020  05:32    <DIR>          .
22/11/2020  11:44    <DIR>          ..
...

trying from explorer client  (\\dom.lan\) I can see:

netlogon, sysvol and video directory but can't access, below the logs

[2020/11/23 05:37:10.569469,  4]
../../auth/auth_log.c:753(log_successful_authz_event_human_readable)
  Successful AuthZ: [DCE/RPC,ncacn_np] user [DOM]\[testuser] ...
...
[2020/11/23 05:37:15.056122,  3]
../../source3/smbd/smb2_server.c:3863(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
status[NT_STATUS_FS_DRIVER_REQUIRED] || at ../../source3/smbd/sm
b2_ioctl.c:313

What does it mean  NT_STATUS_FS_DRIVER_REQUIRED ?

On 23/11/2020 05:26, banda bassotti via samba wrote:
> Hi, I have installed a new dc:
>
> - debian buster
> - samba 4.13.2 from apt.van-belle.nl
>
> with the following configuration:
>
> [global]
>    dns forwarder = 192.168.1.3
>    netbios name = MARTE
>    realm = DOM.LAN
>    server role = active directory domain controller
>    workgroup = DOM
>    interfaces = 192.168.1.2,127.0.0.1
>    bind interfaces only = Yes
>
>    log level = 4
>    max log size = 50000
>
>    guest account = nobody
>    map to guest = Bad User
This is a DC, which is all about authentication, so why do you need 
guest access ?
>
>    usershare path >
> [sysvol]
>    path = /var/lib/samba/sysvol
>    read only = No
>
> [netlogon]
>    path = /var/lib/samba/sysvol/defilippo.lan/scripts
Would you like to read the line above and then go 'DOH'
?
>    read only = No
>
> [video]
>    path = /home/video
>    vfs objects = acl_xattr
You have turned of the required vfs object 'dfs_samba4', I would remove 
the 'vfs objects' line.
>
>
>
> What does it mean  NT_STATUS_FS_DRIVER_REQUIRED ?
Not entirely sure, I think that error is coming from the kernel, what 
filesystem are you using ?

Rowland

On 23/11/2020 13:03, banda bassotti wrote:
>
> but basically why error only from explorer:
>
>
> and not if I use: net use z: \\dom.lan\video -Utestuser ?
I have just checked and I can connect from a Win 10 computer via 
Explorer and my smb.conf is very similar to yours. I wonder if this down 
to Apparmor ? First thing I do when installing Debian now is to 'apt 
purge apparmor'

Rowland

Il giorno lun 23 nov 2020 alle ore 14:44 Rowland penny via samba <
samba at lists.samba.org> ha scritto:
> On 23/11/2020 13:03, banda bassotti wrote:
> >
> > but basically why error only from explorer:
> >
> >
> > and not if I use: net use z: \\dom.lan\video -Utestuser ?
>
> I have just checked and I can connect from a Win 10 computer via
> Explorer and my smb.conf is very similar to yours. I wonder if this down
> to Apparmor ? First thing I do when installing Debian now is to 'apt
> purge apparmor'
>
something has changed, if I access with: \\marte.dom.lan\video or
\\marte\video it works, if I try to log in only with \\dom.lan\video it
doesn't.