[Samba] Can't access to \\ip and some cname after migration from samba 3 to samba 4.4.5

[Gaiseric Vandal]

Are the clients using static IP addresses (or DHCP reservations with DNS 
names?)     Maybe server is trying to do a reverse DNS lookup on clients.


Can you do a tcpdump or similar -   watch a connection from a client 
machine using server name, then watch from the same client using 
IP.        What ports are open on the server?   In the past, packet 
captures would show windows PC's connecting on port 445 (CIFS/SMB over 
tcp/ip) then reconnect on port 139 (netbios over tcp/ip) .    (This was 
with a classic domain so 445 should not have been used but disabling it 
would cause problems.)     Maybe clients are still trying to connect to 
port 139 which would not longer be relevant port.


Are you running windows 7 ?


With classic domains, you had to change make some registry changes


https://wiki.samba.org/index.php/Required_Settings_for_Samba_NT4_Domains

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Parameters]

"DomainCompatibilityMode"=dword:00000001
"DNSNameResolutionRequired"=dword:00000000





Does removing those changes make a difference ?





On 10/30/16 15:08, Trenta sis via samba wrote:


> Hi,
>
> I'll try to give information asked in preious messages:
> - We have only one samba Domain controller and one dns (bind in same samba
> server)
> - Our domain doesn't have any .local
> - avahi is not running and we use debian lenny
> - This is a samba 4 AD domain, migrated form samba 3 nt domain using
> classic upgrade as it is described in samba wiki
> - problem is reported in lan network, is not a remote user
> - Detected that for some users work in same machien taht on other is not
> working, searched differences, but wihout success...
>
> Not sure about message smb2, I think that is not the problem is a windows
> 2003 server and smb2 is not used in windows 2003... I think...
>
> Any suggestions about what bould be the problem?
>
> Thanks
>
>
> 2016-10-27 22:40 GMT+02:00 Trenta sis <trenta.sis at gmail.com>:
>
>> hi,
>>
>> error message when we try to connect with \\IP with dc available "no
>> network provider accepted the given network path"
>>
>> 2016-10-27 22:34 GMT+02:00 Trenta sis <trenta.sis at gmail.com>:
>>
>>> hi rowland,
>>>
>>> after migration one of past migration tasks were generare reverse zone
>>> and add alla and ptr manually.
>>> I have made some additional tests and seemsthat if we shutdown samba
>>> domain controller or  disconnect network then we can access with \\ip with
>>> two domain members server, and then if we reconnect network in samba ad
>>> server we reproduces error with \\ip
>>>
>>>
>>> any solution?
>>>
>>> thanks
>>>
>>> 2016-10-26 17:53 GMT+02:00 Trenta sis <trenta.sis at gmail.com>:
>>>
>>>> Hi,
>>>>
>>>> Recently we have migrated from samba 3 nt domain to samba 4 AD (4.4.5)
>>>> and we have detected that some applications are not working correctly, this
>>>> applications need to access to \\ip resource, with name works, but we have
>>>> some applications that needs to work only by ip
>>>> Also detected this problem with some cname in dns are not responding we
>>>> use bind9 + dlz, and we if we access from \\name works... what could be the
>>>> problem... I have tried to update windows (windows 2003) to latest updates,
>>>> reinstall some updates that can generate the problems but without success..
>>>> and I don't know how to solve this issue
>>>>
>>>>
>>>> For problems with cname and some name seems that if in LOGON machines
>>>> (allowed) we define only some machine then some cname fails, tried to add
>>>> samba server, \\cname... without success, only if we disable logon machines
>>>> (allow all) then this works...
>>>>
>>>> About \\ip any workaround is found... any solution?
>>>>
>>>> Before migration all was working correctly, and we doesn't have added
>>>> any gpo or any other special change, only migrat from samba nt to samba 4
>>>> ad 4.4.5...
>>>>
>>>> Anybody can help with both errors?
>>>>
>>>> Thanks
>>>>
>>>>
>>>>