[Samba] [EXTERNAL] Veto Op Locks does not seem to working properly after updates

[Mark Bannister]

I should mention I am still getting these errors from winbind

Jun 13 12:17:55 APPServer1 winbindd[2590]: [2023/06/13 12:17:55.791855,  
0] ../../source3/param/loadparm.c:4143(lp_load_ex)
Jun 13 12:17:55 APPServer1 winbindd[2590]:   lp_load_ex: Max protocol 
NT1 is less than min protocol SMB2_02.
Jun 13 12:17:55 APPServer1 winbindd[2589]: [2023/06/13 12:17:55.793195,  
0] ../../source3/param/loadparm.c:4143(lp_load_ex)
Jun 13 12:17:55 APPServer1 winbindd[2589]:   lp_load_ex: Max protocol 
NT1 is less than min protocol SMB2_02.
Jun 13 12:17:55 APPServer1 winbindd[2590]: [2023/06/13 12:17:55.794047,  
0] ../../source3/param/loadparm.c:4143(lp_load_ex)
Jun 13 12:17:55 APPServer1 winbindd[2590]:   lp_load_ex: Max protocol 
NT1 is less than min protocol SMB2_02.

even though I have both of these set:

client max protocol = NT1
         client min protocol = NT1

   server max protocol = NT1
         server min protocol = NT1


On 6/14/2023 1:13 PM, Mark Bannister via samba wrote:
> Continuation of this thread: 
> https://www.spinics.net/lists/samba/msg179456.html
>
> I was able to get Samba working (properly I think) except my database 
> cannot properly lock and unlock files.
>
> Paradox database (corel, Borland BDE) depending on SMB1 protocols.  
> The database uses lock files to track database table and record 
> usage.  Database locks are no longer being properly released after 
> updating to Samba 4.18.3 from an old version (not sure which version 
> 4.x of some sort).
>
>
> # Global parameters
> [global]
>         add machine script = sudo /usr/sbin/useradd -g machines -c "%u 
> machine account" -d /var/lib/samba -s /bin/false %u
>         add user script = /usr/sbin/adduser --quiet 
> --disabled-password --gecos "" %u
>         client max protocol = NT1
>         client min protocol = NT1
>         dns proxy = No
>         domain logons = Yes
>         domain master = Yes
>         load printers = No
>         log file = /var/log/samba/log.%m
>         logon drive = H:
>         logon home =
>         logon path =
>         logon script = logon.bat
>         map to guest = Bad User
>         max log size = 1000
>         name resolve order = wins lmhosts host bcast
>         ntlm auth = ntlmv1-permitted
>         obey pam restrictions = Yes
>         pam password change = Yes
>         panic action = /usr/share/samba/panic-action %d
>         passwd chat = *Enter\snew\s*\spassword:* %n\n 
> *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
>         passwd program = /usr/bin/passwd %u
>         preferred master = Yes
>         server max protocol = NT1
>         server min protocol = NT1
>         server role = classic primary domain controller
>         server string = APP Samba %v %h
>         template homedir = /home/%U
>         template shell = /bin/bash
>         unix password sync = Yes
>         username map = /usr/local/samba/etc/username.map
>         wins support = Yes
>         workgroup = LINGROUP
>         idmap config lingroup : range = 10000-999999
>         idmap config lingroup : backend = rid
>         idmap config * : range = 3000-7999
>         idmap config * : backend = tdb
>         admin users = sysadmin
>         hosts allow = 127.0.0.1 192.168.1. 192.168.0.0/26
>         hosts deny = 0.0.0.0/0
>         use client driver = Yes
>         veto oplock files = 
> /*.TV/*.FAM/*.dat/*.DAT/*.db/*.DB/*.X??/*.x??/*.Y??/*.y??/*.MB/*.mb/*.VAL/*.val/*.PX/*.px/*.mdb/*.MDB/*.lck/*.LCK/*.net/*.NET/
>
>
> -- 
> Mark B

--
Mark Bannister
COO
*American Precision Products* * 520 Green Cove Road * Huntsville, AL 
35803-3011
800.889.7674x107 * 256.882-2121x0107 fax: 256.882-2414
Cell: 256.509.2052
Mark at Injection-Moldings.com
*AS9100D | ISO9001:2015 | ITAR | WOSB*
Custom Molding and Assembly
https://www.injection-moldings.com <https://Injection-Moldings.com>