[Samba] [wsdd] Resolution takes several seconds
Gilles
codecomplete at free.fr
Sat Oct 19 09:53:37 UTC 2024
With the same smb.conf used on another Debian 11 host (5.10.0-32) +
Samba 4.13.13-Debian… it answers with no delay.
Could Debian 12 be different in regards with eg. security?
Here's the log with (log level = 2):
===============
[2024/10/19 11:48:55.690001, 2]
../../source3/lib/tallocmsg.c:84(register_msg_pool_usage)
Registered MSG_REQ_POOL_USAGE
[2024/10/19 11:48:55.731682, 2]
../../source3/auth/auth.c:344(auth_check_ntlm_password)
check_ntlm_password: Authentication for user [root] -> [root] FAILED
with error NT_STATUS_NO_SUCH_USER, authoritative=1
[2024/10/19 11:48:55.732179, 2]
../../auth/auth_log.c:635(log_authentication_event_human_readable)
Auth: [SMB2,(null)] user [WORKGROUP]\[root] at [Sat, 19 Oct 2024
11:48:55.732058 CEST] with [No-Password] status [NT_STATUS_NO_SUCH_USER]
workstation [SHEEVAPLUG] remote host [ipv4:192.168.0.15:45808] mapped to
[WORKGROUP]\[root]. local host [ipv4:192.168.0.7:445]
{"timestamp": "2024-10-19T11:48:55.732827+0200", "type":
"Authentication", "Authentication": {"version": {"major": 1, "minor":
2}, "eventId": 4625, "logonId": "0", "logonType": 3, "status":
"NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:192.168.0.7:445",
"remoteAddress": "ipv4:192.168.0.15:45808", "serviceDescription":
"SMB2", "authDescription": null, "clientDomain": "WORKGROUP",
"clientAccount": "root", "workstation": "SHEEVAPLUG", "becameAccount":
null, "becameDomain": null, "becameSid": null, "mappedAccount": "root",
"mappedDomain": "WORKGROUP", "netlogonComputer": null,
"netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null,
"passwordType": "No-Password", "duration": 4643}}
[2024/10/19 11:48:55.734059, 2]
../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[write]"
[2024/10/19 11:48:55.734553, 0]
../../lib/param/loadparm.c:815(lpcfg_map_parameter)
Unknown parameter encountered: "security mask"
[2024/10/19 11:48:55.736154, 0]
../../lib/param/loadparm.c:1895(lpcfg_do_service_parameter)
Ignoring unknown parameter "security mask"
[2024/10/19 11:48:55.737488, 0]
../../lib/param/loadparm.c:815(lpcfg_map_parameter)
Unknown parameter encountered: "force security mode"
[2024/10/19 11:48:55.738790, 0]
../../lib/param/loadparm.c:1895(lpcfg_do_service_parameter)
Ignoring unknown parameter "force security mode"
[2024/10/19 11:48:55.739933, 2]
../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[nginx]"
[2024/10/19 11:48:55.741138, 0]
../../lib/param/loadparm.c:815(lpcfg_map_parameter)
Unknown parameter encountered: "security mask"
[2024/10/19 11:48:55.742495, 0]
../../lib/param/loadparm.c:1895(lpcfg_do_service_parameter)
Ignoring unknown parameter "security mask"
[2024/10/19 11:48:55.743875, 0]
../../lib/param/loadparm.c:815(lpcfg_map_parameter)
Unknown parameter encountered: "force security mode"
[2024/10/19 11:48:55.745148, 0]
../../lib/param/loadparm.c:1895(lpcfg_do_service_parameter)
Ignoring unknown parameter "force security mode"
[2024/10/19 11:48:55.762404, 1]
../../source3/printing/printer_list.c:234(printer_list_get_last_refresh)
Failed to fetch record!
[2024/10/19 11:48:55.762607, 1]
../../source3/smbd/server_reload.c:66(delete_and_reload_printers)
pcap cache not loaded
===============
On 19/10/2024 11:33, Gilles via samba wrote:
> Indeed, I've been running that appliance for years with no problem,
> starting with Debian 9. It uses DHCP to get an IP from the DHCP server
> running on my ADSL modem.
>
> If someone wants to experiment… do you also witness a ~10 second delay
> after typing the command using the following smb.conf? Could it be due
> to Samba using the "map to guest = Bad User" open to let any user
> access the shares without a Samba account — it's just a home private
> network with me as the only user so I don't bother?
>
> ===========
> smbclient -N -L localhost
> ===========
> [global]
> workgroup = WORKGROUP
> netbios name = TEST
>
> security = user
> ;added, but makes no difference
> server role = standalone server
>
> map to guest = Bad User
> ;map to guest = Bad Password
> ;www-data used by Nginx
> guest account = www-data
>
> ;max is 10; 3 is pretty good
> log level = 6
>
> disable netbios = yes
> client min protocol = SMB2_02
> server min protocol = SMB2_02
> smb ports = 445
>
> ;this avoids needless errors in the logs if you have no printer
> printcap name = /dev/null
> load printers = no
> printing = bsd
>
> [myshare]
> path = /tmp
> ;comment = No need for Unix/Samba passwords
> guest ok = yes
> writeable=yes
> browseable=yes
> force create mode = 0644
> create mask = 0664
> ===========
>
> On 19/10/2024 09:56, Rowland Penny via samba wrote:
>> On Sat, 19 Oct 2024 09:49:03 +0200
>> Peter Milesson via samba <samba at lists.samba.org> wrote:
>>
>> The dhclient fulfills no function on your server, as you have got a
>> fixed IP address. It does not provide services to other computers in
>> the network either. IMHO, it may even confuse wsdd (just a hunch).
>> Provided that the fixed IP has been set correctly, then I doubt that
>> dhclient has anything to do with the OPs problem.
>>
>>> About winbind, there are other on the list who could answer that
>>> question with more certainty. You could always try to shut down
>>> winbind.
>> The OP is running Samba as a standalone server, you do not run winbind
>> on a standalone server.
>
More information about the samba
mailing list