[Samba] Browsing shares of a server

[Jeremy Allison]

On Thu, Oct 03, 2019 at 08:59:35PM +0100, Rowland penny via samba wrote:
> On 03/10/2019 20:30, Christopher Cox via samba wrote:
> > > 
> > 
> > Took a while to get a bugzilla account.  Submitted
> > https://bugzilla.samba.org/show_bug.cgi?id=14151
> > 
> I am not the expert here, but:
> 
> A) you are using Samba as a standalone server 'security = user'
> 
> B) you also seem to want to use another server for passwords 'password
> server = ldap.skopos.me'
> 
> C) Samba tries to use kerberos :
> 
>      Enter SKOPOS\ccox's password: cli_session_creds_prepare_krb5: Doing
> kinit for ccox at SKOPOS to access doc_svr2
>      kerberos_kinit_password: as ccox at SKOPOS using [MEMORY:cliconnect] as
> ccache and config [(null)]
> 
>      And fails:
> 
>      Kinit for ccox at SKOPOS to access doc_svr2 failed: Cannot find KDC for
> requested realm
> 
>      But then seems to authenticate via kerberos:
> 
>      Kinit for ccox at SKOPOS to access doc_svr2 failed: Cannot find KDC for
> requested realm
> 
> Do you want to use kerberos ?
> 
> If so, change 'security = user' to 'security = ads' and it might work.
> 
> Can you also tell us just how you are trying to connect to the Samba server,
> are you using smbclient, a GUI or what ?

This isn't talking to a Samba server, it's smbclient
talking to a MacOS/X server.

wireshark trace on that bug is corrupt, but as it's
a 4.9.x build I'm guessing this is a path in the client
libraries that messes up and allows an SMB1 frame to
be sent on an SMB2 connection.

I vaguely remember such bugs getting fixed by Metze
in the past. But I'll take a look at the specific
version and see.

Jeremy.