[Samba] Can authenticate but cannot mount shares

Rowland Penny rpenny at samba.org
Tue Oct 8 09:21:47 UTC 2024


On Tue, 8 Oct 2024 04:03:57 -0400
samba3to4 via samba <samba at lists.samba.org> wrote:

> On Tue, 8 Oct 2024 00:20:44 -0400
> samba3to4 via samba <samba at lists.samba.org> wrote:
> 
> > Hello Experts,
> > 
> > I am trying to migrate a Samba 3.6 server to Samba 4.19.
> > 
> > [...]
> > 
> > The log file shows that the user can authenticate:
> > 
> > [2024/10/07 23:27:24.974539,  2] ../../source3/auth/auth.c:
> > 338(auth_check_ntlm_password) check_ntlm_password:  authentication
> > for user [user] -> [user] -> [user] succeeded [...]
> > 
> > However, the Windows computer pops up this error:
> > 
> > "\\[new server IP address]
> > A device attached to the system is not functioning"
> > 
> > ...and no shares are mounted.
> > [...]
> > 
> > smb4.conf:
> > 
> > [global]
> >         workgroup = MyDomain2024
> >         netbios aliases = samba4
> >         server string = MyDomain Samba
> >         interfaces = 10.10.10.0/24
> >         passdb backend = tdbsam:/usr/local/etc/smb4/passdb.tdb
> >         log level = 2
> >         log file = /var/log/samba4/log.%m
> >         name resolve order = wins host lmhosts bcast
> >         admin users = root
> >         hosts allow = 10.10.10.0/24, 10.10.11.0/24, 192.168.1.0/24,
> > 10.10.100.0/24, 127.0.0.0/8 server min protocol = LANMAN1
> >         server max protocol = SMB3
> >         vfs objects = full_audit
> >         full_audit:prefix = %u|%I|%m|%S
> >         full_audit:success = mkdir rename unlink rmdir pwrite
> >         full_audit:failure = none
> >         full_audit:facility = local7
> >         full_audit:priority = NOTICE
> 
> Replying to my own post:
> 
> After commenting out the 7 lines related to "full_audit" in smb4.conf,
> the user can mount shares from this server.
> 
> I got the hint by adjusting to log level = 3 and looking at the log
> file /var/log/samba4/log.client which has entries like:
> 
> [2024/10/08 02:59:23.945591,  0]
> ../../source3/modules/vfs_full_audit.c:749(smb_full_audit_connect)
> smb_full_audit_connect: Invalid success operations list. Failing
> connect [2024/10/08 02:59:23.945609,  1]
> ../../source3/smbd/smb2_service.c:630(make_connection_snum)
> make_connection_snum: SMB_VFS_CONNECT for service 'IPC$' at '/tmp'
> failed: No such file or directory [2024/10/08 02:59:23.945646,  3]
> ../../source3/smbd/smb2_server.c:4044(smbd_smb2_request_error_ex)
> smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
> status[NT_STATUS_UNSUCCESSFUL] || at
> ../../source3/smbd/smb2_tcon.c:151 [2024/10/08 02:59:23.951771,  3]
> ../../source3/smbd/server_exit.c:230(exit_server_common) Server exit
> (NT_STATUS_CONNECTION_RESET)
> 

I suggest you read 'man vfs_full_audit'

Specifically this part:

       If an unknown operation name is used (for example an operation name is
       miss-spelled), the module will fail to load and clients will be refused
       connections to a share using this module.

Rowland





More information about the samba mailing list