[Samba] Can authenticate but cannot mount shares
Rowland Penny
rpenny at samba.org
Tue Oct 8 09:21:47 UTC 2024
On Tue, 8 Oct 2024 04:03:57 -0400
samba3to4 via samba <samba at lists.samba.org> wrote:
> On Tue, 8 Oct 2024 00:20:44 -0400
> samba3to4 via samba <samba at lists.samba.org> wrote:
>
> > Hello Experts,
> >
> > I am trying to migrate a Samba 3.6 server to Samba 4.19.
> >
> > [...]
> >
> > The log file shows that the user can authenticate:
> >
> > [2024/10/07 23:27:24.974539, 2] ../../source3/auth/auth.c:
> > 338(auth_check_ntlm_password) check_ntlm_password: authentication
> > for user [user] -> [user] -> [user] succeeded [...]
> >
> > However, the Windows computer pops up this error:
> >
> > "\\[new server IP address]
> > A device attached to the system is not functioning"
> >
> > ...and no shares are mounted.
> > [...]
> >
> > smb4.conf:
> >
> > [global]
> > workgroup = MyDomain2024
> > netbios aliases = samba4
> > server string = MyDomain Samba
> > interfaces = 10.10.10.0/24
> > passdb backend = tdbsam:/usr/local/etc/smb4/passdb.tdb
> > log level = 2
> > log file = /var/log/samba4/log.%m
> > name resolve order = wins host lmhosts bcast
> > admin users = root
> > hosts allow = 10.10.10.0/24, 10.10.11.0/24, 192.168.1.0/24,
> > 10.10.100.0/24, 127.0.0.0/8 server min protocol = LANMAN1
> > server max protocol = SMB3
> > vfs objects = full_audit
> > full_audit:prefix = %u|%I|%m|%S
> > full_audit:success = mkdir rename unlink rmdir pwrite
> > full_audit:failure = none
> > full_audit:facility = local7
> > full_audit:priority = NOTICE
>
> Replying to my own post:
>
> After commenting out the 7 lines related to "full_audit" in smb4.conf,
> the user can mount shares from this server.
>
> I got the hint by adjusting to log level = 3 and looking at the log
> file /var/log/samba4/log.client which has entries like:
>
> [2024/10/08 02:59:23.945591, 0]
> ../../source3/modules/vfs_full_audit.c:749(smb_full_audit_connect)
> smb_full_audit_connect: Invalid success operations list. Failing
> connect [2024/10/08 02:59:23.945609, 1]
> ../../source3/smbd/smb2_service.c:630(make_connection_snum)
> make_connection_snum: SMB_VFS_CONNECT for service 'IPC$' at '/tmp'
> failed: No such file or directory [2024/10/08 02:59:23.945646, 3]
> ../../source3/smbd/smb2_server.c:4044(smbd_smb2_request_error_ex)
> smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
> status[NT_STATUS_UNSUCCESSFUL] || at
> ../../source3/smbd/smb2_tcon.c:151 [2024/10/08 02:59:23.951771, 3]
> ../../source3/smbd/server_exit.c:230(exit_server_common) Server exit
> (NT_STATUS_CONNECTION_RESET)
>
I suggest you read 'man vfs_full_audit'
Specifically this part:
If an unknown operation name is used (for example an operation name is
miss-spelled), the module will fail to load and clients will be refused
connections to a share using this module.
Rowland
More information about the samba
mailing list