[Samba] Using GPO to mount shares on Linux

Wed Oct 25 08:23:19 UTC 2017

Hai, 

I commented below. 

P.s. @Rowland, i dont believe this is a sssd problem but a old bug in samba.

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Daniel Carrasco via samba
> Verzonden: dinsdag 24 oktober 2017 19:30
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Using GPO to mount shares on Linux
> 
> Hello, I answer bellow.
> 
> Thanks!!
> 
> 2017-10-24 16:52 GMT+02:00 L.P.H. van Belle via samba 
> <samba at lists.samba.org
> >:
> 
> > Hai,
> >
> > I did a re-read of you thread.
> >
> > First.
> > If you use smblcient, without a samba installed, use -s
> > /path/alternative/smbclient.conf
> >
> 
> I think that Samba is not installed on this client because 
> I'm not using
> samba to join the domain. Just realmd, sssd and Kerberos. That's why
> there's no smb.conf file.
Sorry, i made a typo in my question, what i mean is, do make use of that smb.conf
Or put put your settings in the smb.conf. Even if you dont have samba installed.
Smbclient = samba and looks for smb.conf, just saying it may help.

> 
> 
> >
> > If i did read it correct.
> > Your connecting from  xUbuntu (samba version ??) to 
> (debian8) samba 4.2
> > member
> >
> > How did you join the xUbuntu?
> > https://docs.pagure.org/SSSD.sssd/users/ad_provider.html
> > Like this setup? ^^^
> >
> 
> Now I don't know the samba version of the client because I 
> cannot access to
> the computer, but looks like is the 4.5 version (xUbuntu 
> 16.04 repository).
> 
> I've used this guide:
> https://www.unixmen.com/how-to-join-an-ubuntu-desktop-into-an-
> active-directory-domain/
> 
Thanks, i've been reading it, thanks, your solution is a mix of both howtos i think.
But sssd is not my cookie.. 

> 
> 
> >
> > > This setup is working as expected (some windows bugs hide
> > > network drives, but is not samba problem).
> > Not a windows bug, but probely a ACL problem on sysvol, 
> check windows
> > event logs.
> > Works fine here since samba 4.2 DC's.
> >
> 
> This time looks like a bug in Windows Explorer, because I've already
> checked all:
> 
>    - sysvol ACL
>    - GPO
>    - Clients have access to GPO files
>    - gpresult shows like all GPO are applied and all drives mounted
>    - There's no info about the problem on event log
>    - I can access all drives from CMD
>    - When I try to mount the drive manually using connect on 
> explorer I can
>    see all mounted on drives list
>    - I cannot mount the drive until I umount the drives using cmd
>    - The problem is not always on the same drives and even 
> sometimes all
>    drives are working
>    - The option to set the drive as visible in GPO is enabled
>    - The problem only happens on 2 computers of about 15 that 
> have joined
>    the domain.
>    - ...
> 
> Anyway, this don't care because I've already asked it on 
> other thread ;)
Ok, good to see you did check a lot already. 

Now, this part..
>    - I can access all drives from CMD
>    - When I try to mount the drive manually using connect on 
> explorer I can
>    see all mounted on drives list
>    - I cannot mount the drive until I umount the drives using cmd

I do remember something about that..  I've seen that before.. 
I might be something with the pc connecting to samba and samba keeping a lock on something.
I just cant find it where i did read this. Must be on the list some time ago. 

Then i suggest, for the 4.2 for jessie since you cant upgrade, have a look at my apt.
apt.van-belle.nl and use the latest 4.5.x or the backported version from stretch. 

> 
> 
> 
> >
> > Now, i can only give a few advices.
> > 1) upgrade the debian jessie to debian stretch, and start with samba
> > 4.5.12 from debian.
> > 2) tell us the xUbuntu version and the samba (smbclient) version
> >
> 
> I can't do this... I had problems with the old server after 
> upgrade Debian to stretch, because I use xen with a Windows guest and the xen version
> provided by Stretch just have a memory leak running Windows  guests. The
> process starts to consume memory and when host server is full 
> the guest machines dies...
> 
> Maybe one day I'll try to compile a newer version.
Did you ever give thought on XenServer (https://xenserver.org)
I use Xen (Debian) Hypervisors also in the past, i switched to xenserver.
Also free to use, and has some nice features. 
I see the debian Xen is the same, why i did choose to drop debian Xen. 
The security issues and boot issues..   :-( 

And your sure you Xen Host is not balloning out. 
(possible fix for that. https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1484682/comments/3 ) 

For a xen hypervisor, i would suggest ubuntu ( arg, yes i did say that, and i even dont like ubuntu..) ;-) 
I use Ubuntu for kodi only at home, but if you use the debian/ubuntu xen-hypervisors, then go for ubuntu. 
Because it more focues on that for companies. 

> 
> 
> >
> > If i recall correct..
> > Sssd lower then 1.12 my have problems, but as Rowland also said,
> > I (we) know nothing about sssd here, except what i google.
> > If you did not read this one, please do.
> > https://jhrozek.wordpress.com/2015/08/19/performance-tuning-
> > sssd-for-large-ipa-ad-trust-deployments/
> > I dont know it it helps, but it shows some good settings 
> and its good
> > explained.
> > And if you get it working, please share the solution.  ;-)
> >
> 
> I'm not sure about the version but I think that is higher, 
> because I've
> read about problems on sssd prior to a version and I've 
> already checked it.
> 
> Thanks for the links. I'll take a look because all info is welcome.
Your welkom, happy to hear that even this helps. 

> 
> 
> >
> > Greetz,
> >
> > Louis
> >
> >
> >