similar to: Kerberos ticket renew causes a brief network interruption

On Fri, 25 Oct 2024 08:35:08 +0000 Hans van Leeuwen via samba <samba at lists.samba.org> wrote: > Hi Samba engineer, > > We use an Ubuntu 20.04.6 systems as Samba server. > The Samba version is 4.15.13-Ubuntu. > The SMC-Client is a Windows Server 2022 Standard 21H2. > > The hostname of the Ubuntu Samba server is "samba-srv" > On the Windows system, Samba

Hi Roland Penny, Indeed the "idmap.config" parameter line is not added to the smb.conf file. But the command below shows that the default values are used. testparm -vs | grep idmap.config idmap config * : range = 100000-200000 idmap config * : backend = tdb I did not set sssd, so if sssd is used it happened automatically. Can idmap.config and sssd affect the Kerberos

Hi Ralph Boehme, A new system is installed with Ubuntu 24.04.1 and Samba 4.19.5 My hotfolderscan.exe tool runs now on a Windows 2022 system and use the Ubuntu 24 system as Samba share. The hotfolderscan tool has to run 10 hour before the Kerberos ticket renewal. Both on the Ubuntu 24 and the Windows 2022 system, Wireshare is catching the network packages. Tomorrow I hope to see the result. I

Hi Ralph Boehme, >> A new system is installed with Ubuntu 24.04.1 and Samba 4.19.5 My >> hotfolderscan.exe tool runs now on a Windows 2022 system and use the >>Ubuntu 24 system as Samba share. The hotfolderscan tool has to run >> 10 hour before the Kerberos ticket renewal. Both on the Ubuntu 24 >> and the Windows 2022 system, Wireshare is catching the network

On 10/28/24 3:29 PM, Hans van Leeuwen wrote: > A new system is installed with Ubuntu 24.04.1 and Samba 4.19.5 My > hotfolderscan.exe tool runs now on a Windows 2022 system and use the > Ubuntu 24 system as Samba share. The hotfolderscan tool has to run > 10 hour before the Kerberos ticket renewal. Both on the Ubuntu 24 > and the Windows 2022 system, Wireshare is catching the

Hi Ralph Boehme, My hotfolderscan tool start om Monday 2:11 PM en the Kerberos ticket renewal occurs on 11:19 PM. The hotfolderscantool wrote in the logfile: 2024-10-28 23:19:00 Error 2 No such file or directory 2024-10-28 23:19:03 Share available again That was after 9:08 hours and that is 32888 seconds. That time do you also see in the Wireshark output in the attachment. The

On 10/25/24 10:35 AM, Hans van Leeuwen via samba wrote: > Is seems that Samba doesn't handle the Kerberos ticket renewal on the right way. can you get us two network traces: - last minute before and after session expiry against Samba - last minute before and after session expiry against Windows -slow -- SerNet Samba Team Lead https://sernet.de/ Samba Team Member https://samba.org/

On 10/29/24 11:17 AM, Hans van Leeuwen wrote: > My hotfolderscan tool start om Monday 2:11 PM en the Kerberos ticket renewal occurs on 11:19 PM. > The hotfolderscantool wrote in the logfile: > 2024-10-28 23:19:00 Error 2 No such file or directory > 2024-10-28 23:19:03 Share available again > > That was after 9:08 hours and that is 32888 seconds. > That time do you also

Hi Ralph Boehme, >> My hotfolderscan tool start om Monday 2:11 PM en the Kerberos ticket renewal occurs on 11:19 PM. >> The hotfolderscantool wrote in the logfile: >> 2024-10-28 23:19:00 Error 2 No such file or directory >>> 2024-10-28 23:19:03 Share available again >> >> That was after 9:08 hours and that is 32888 seconds. >> That time do you

On 10/29/24 3:08 PM, Hans van Leeuwen wrote: > Kerberos is used to encrypt the SMB packages. encryption is done with one of the supported encryption ciphers like AES-CCM or AES-GCM. Encryption keys are derived from key material established when a connection is authenticated via NTLM or Kerberos, but generally the authentication protocol used (NTLM or Kerberos) is independent from

Hi Ralph Boehme, With "server smb encrypt = no" I can't reproduce the problem. So I don't know how I can deliver you a pcap file with unencrypted network packets. Best regards, Hans van Leeuwen -----Original Message----- From: Ralph Boehme <slow at samba.org> Sent: Tuesday, October 29, 2024 3:47 PM To: Hans van Leeuwen <HansvanLeeuwen at mailstreet.nl> Cc: samba

Hi, I have an issue on a Samba 4.5 running as AD DC compiled from source installed on a CentOS 7.3 server upgraded from 4.3 which had the same problem ,file transfers of a single file between Samba and windows machines don't go over 13 MB/s while a transfer over ssh( scp or sftp) and rsync goes over 80 and 100 MB/s respectively, network hardware switches and machines ethernet cards are all

On Sun, 6 May 2018 20:05:20 +1000 Robin G <robinghere3 at gmail.com> wrote: > Hi Rowland, > here is the smb.conf. All shares have the full_audit > > [global] > workgroup = RESOLVS > netbios name = DC1 > security = USER > obey pam restrictions = yes > local master = yes > domain master = yes > preferred

Hi Rowland, Thanks for taking the time to look at this. I will post the log 10 output a bit later. Btw, what logs with log level 10 are you interested in? Here’s my samba config with sensitive info replaced with placeholders: [global] access based share enum = yes browseable = yes comment = <COMMENT> create mask = 0660 directory mask =

On 06. aug. 2018 16:37, Oleg Cherkasov via samba wrote: > On 06. aug. 2018 15:15, Oleg Cherkasov via samba wrote: >> >> This morning three of our FreeBSD-11.1-p11 servers with Samba 4.7.7 >> installations started to ignore ACL settings and reject user access to >> shares.  All three servers are members of DC running on Windows Server >> 2008R2.  Everything has

On Sat, 5 May 2018 11:11:21 -0300 "Ethy H. Brito via samba" <samba at lists.samba.org> wrote: > On Sat, 5 May 2018 23:40:47 +1000 > Robin G via samba <samba at lists.samba.org> wrote: > > ... > > > > full_audit:prefix = %u|%I|%S > > full_audit:failure = none > > full_audit:success = mkdir rmdir read pread write pwrite

I don't know why I can't register bugzilla so I post here. I have two ubuntu 16.04 machine A, B, and A install samba version 4.10.6, and B install version 4.3.11. I use samba-vfs in machine A. I mount share of A in B ex: sudo mount -t cifs -o username='ppp',password='admin' //IP/public /home/ppp/test And I found I can create file like $ touch test/yo But I can read/write

On 5/23/24 22:58, Andrew Bartlett wrote: > Can you post your smb.conf. Actually no, as I don't have *one* smb.conf. I'll add three of them (the last three were I had this problem) at the end of this email. As you can see they are not exactly identical. > Have you used any of our fallback VFS modules instead of xattrs? I'd say not, but see the smb.confs. > (This would

I've tried to setup VFS full audit facility in some share, like: vfs objects = [...] full_audit full_audit:prefix = %S|%d|%I|%M|%u full_audit:success = mkdir rmdir read pread write pwrite rename unlink full_audit:failure = none full_audit:facility = auth full_audit:priority = info but samba refuse 'full_audit:facility = auth' as a good

Hi, I'm using full_audit vfs module and I'm seeing a lot of duplicated messages in log file. Why does it happens ? How can I configure de smb.conf not to log duplicated information ? Duplicated log: Jan 4 13:27:50 server smbd_audit: [2015/01/04 13:27:50|semirames|samba-admin|192.168.0.3|setores]|pread|ok|Atendimento/James.txt Jan 4 13:27:50 server smbd_audit: [2015/01/04