samba - Aug 2022 - upgrade from samba 4.13 to 4.16 broke CIFS Server Authentication

On 8/30/22 17:12, William Kirstaedter via samba wrote:
> I'm now asking here because neither Univention nor Netapp seem to want 
> to help since they both say that combination is not supported / 
> recommended. no reasons given.
ouch, so you're sitting between the chairs. :/

If you can share logs from the Samba DC and network traces of the SMB 
login with the list, with a bit of luck someone has the time to look 
into them. But given the complexity of the issue and that this is going 
to contain sensitive data, I'm not sure community support is going to 
cut it.

If you have the option, you could consider commercial support via:

https://www.samba.org/samba/support/globalsupport.html

Cheers!
-slow

-- 
Ralph Boehme, Samba Team                 https://samba.org/
SerNet Samba Team Lead      https://sernet.de/en/team-samba
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.samba.org/pipermail/samba/attachments/20220831/a2435b0f/OpenPGP_signature.sig>

thanks for your answers,

maybe I need to specify a bit more....

mainly I'd be interested in what the error in the smbd.log means, and 
how I could get a trace what exactly the netapp or the windows client 
sent to authenticate.

Actually, since last friday all my tests are running in a virtual 
replica of the real system using the netapp ontap simulator and a copy 
of my univention ucs appliance vm.

the user "cliff" is a test user (Clifford Unger from Death Stranding
...)
so there should not be a sensible data leak when extracting logs or 
anything. I guess..

thanks again!


William Kirstaedter (PP&B) 	Fritz-Haber-Institut der MPG
Faradayweg 4-6 	14195 Berlin
Tel: 030 8413 5405 	Mail: kirstaedter at fhi-berlin.mpg.de

Am 31.08.2022 um 10:30 schrieb Ralph Boehme:
> On 8/30/22 17:12, William Kirstaedter via samba wrote:
>> I'm now asking here because neither Univention nor Netapp seem to 
>> want to help since they both say that combination is not supported / 
>> recommended. no reasons given.
>
> ouch, so you're sitting between the chairs. :/
>
> If you can share logs from the Samba DC and network traces of the SMB 
> login with the list, with a bit of luck someone has the time to look 
> into them. But given the complexity of the issue and that this is 
> going to contain sensitive data, I'm not sure community support is 
> going to cut it.
>
> If you have the option, you could consider commercial support via:
>
> https://www.samba.org/samba/support/globalsupport.html
>
> Cheers!
> -slow
>

He needs to get the smb.conf from the Univetion server and show it in the list. 
Only when we see that, we can give an estimate whats going on. 

Just like the Synology, im assuming univention used "unsupported"
settings..
They work in lower samba version but the higher the samba version to more
problems they wil get.

Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba <samba-bounces at lists.samba.org> Namens Ralph Boehme via
> samba
> Verzonden: woensdag 31 augustus 2022 10:31
> Aan: William Kirstaedter <kirstaedter at fhi-berlin.mpg.de>;
> samba at lists.samba.org
> Onderwerp: Re: [Samba] upgrade from samba 4.13 to 4.16 broke CIFS Server
> Authentication
> 
> On 8/30/22 17:12, William Kirstaedter via samba wrote:
> > I'm now asking here because neither Univention nor Netapp seem to
want
> > to help since they both say that combination is not supported /
> > recommended. no reasons given.
> 
> ouch, so you're sitting between the chairs. :/
> 
> If you can share logs from the Samba DC and network traces of the SMB login
> with the list, with a bit of luck someone has the time to look into them.
But
> given the complexity of the issue and that this is going to contain
sensitive
> data, I'm not sure community support is going to cut it.
> 
> If you have the option, you could consider commercial support via:
> 
> https://www.samba.org/samba/support/globalsupport.html
> 
> Cheers!
> -slow
> 
> --
> Ralph Boehme, Samba Team                 https://samba.org/
> SerNet Samba Team Lead      https://sernet.de/en/team-samba