[Samba] [wsdd] Resolution takes several seconds

Gilles codecomplete at free.fr
Sat Oct 19 09:53:37 UTC 2024


With the same smb.conf used on another Debian 11 host (5.10.0-32) + 
Samba 4.13.13-Debian… it answers with no delay.

Could Debian 12 be different in regards with eg. security?

Here's the log with (log level = 2):
===============
[2024/10/19 11:48:55.690001,  2] 
../../source3/lib/tallocmsg.c:84(register_msg_pool_usage)
   Registered MSG_REQ_POOL_USAGE
[2024/10/19 11:48:55.731682,  2] 
../../source3/auth/auth.c:344(auth_check_ntlm_password)
   check_ntlm_password:  Authentication for user [root] -> [root] FAILED 
with error NT_STATUS_NO_SUCH_USER, authoritative=1
[2024/10/19 11:48:55.732179,  2] 
../../auth/auth_log.c:635(log_authentication_event_human_readable)
   Auth: [SMB2,(null)] user [WORKGROUP]\[root] at [Sat, 19 Oct 2024 
11:48:55.732058 CEST] with [No-Password] status [NT_STATUS_NO_SUCH_USER] 
workstation [SHEEVAPLUG] remote host [ipv4:192.168.0.15:45808] mapped to 
[WORKGROUP]\[root]. local host [ipv4:192.168.0.7:445]
   {"timestamp": "2024-10-19T11:48:55.732827+0200", "type": 
"Authentication", "Authentication": {"version": {"major": 1, "minor": 
2}, "eventId": 4625, "logonId": "0", "logonType": 3, "status": 
"NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:192.168.0.7:445", 
"remoteAddress": "ipv4:192.168.0.15:45808", "serviceDescription": 
"SMB2", "authDescription": null, "clientDomain": "WORKGROUP", 
"clientAccount": "root", "workstation": "SHEEVAPLUG", "becameAccount": 
null, "becameDomain": null, "becameSid": null, "mappedAccount": "root", 
"mappedDomain": "WORKGROUP", "netlogonComputer": null, 
"netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", 
"netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, 
"passwordType": "No-Password", "duration": 4643}}
[2024/10/19 11:48:55.734059,  2] 
../../source3/param/loadparm.c:2864(lp_do_section)
   Processing section "[write]"
[2024/10/19 11:48:55.734553,  0] 
../../lib/param/loadparm.c:815(lpcfg_map_parameter)
   Unknown parameter encountered: "security mask"
[2024/10/19 11:48:55.736154,  0] 
../../lib/param/loadparm.c:1895(lpcfg_do_service_parameter)
   Ignoring unknown parameter "security mask"
[2024/10/19 11:48:55.737488,  0] 
../../lib/param/loadparm.c:815(lpcfg_map_parameter)
   Unknown parameter encountered: "force security mode"
[2024/10/19 11:48:55.738790,  0] 
../../lib/param/loadparm.c:1895(lpcfg_do_service_parameter)
   Ignoring unknown parameter "force security mode"
[2024/10/19 11:48:55.739933,  2] 
../../source3/param/loadparm.c:2864(lp_do_section)
   Processing section "[nginx]"
[2024/10/19 11:48:55.741138,  0] 
../../lib/param/loadparm.c:815(lpcfg_map_parameter)
   Unknown parameter encountered: "security mask"
[2024/10/19 11:48:55.742495,  0] 
../../lib/param/loadparm.c:1895(lpcfg_do_service_parameter)
   Ignoring unknown parameter "security mask"
[2024/10/19 11:48:55.743875,  0] 
../../lib/param/loadparm.c:815(lpcfg_map_parameter)
   Unknown parameter encountered: "force security mode"
[2024/10/19 11:48:55.745148,  0] 
../../lib/param/loadparm.c:1895(lpcfg_do_service_parameter)
   Ignoring unknown parameter "force security mode"
[2024/10/19 11:48:55.762404,  1] 
../../source3/printing/printer_list.c:234(printer_list_get_last_refresh)
   Failed to fetch record!
[2024/10/19 11:48:55.762607,  1] 
../../source3/smbd/server_reload.c:66(delete_and_reload_printers)
   pcap cache not loaded
===============


On 19/10/2024 11:33, Gilles via samba wrote:
> Indeed, I've been running that appliance for years with no problem, 
> starting with Debian 9. It uses DHCP to get an IP from the DHCP server 
> running on my ADSL modem.
>
> If someone wants to experiment… do you also witness a ~10 second delay 
> after typing the command using the following smb.conf? Could it be due 
> to Samba using the "map to guest = Bad User" open to let any user 
> access the shares without a Samba account — it's just a home private 
> network with me as the only user so I don't bother?
>
> ===========
> smbclient -N -L localhost
> ===========
> [global]
> workgroup = WORKGROUP
> netbios name = TEST
>
> security = user
> ;added, but makes no difference
> server role = standalone server
>
> map to guest = Bad User
> ;map to guest = Bad Password
> ;www-data used by Nginx
> guest account = www-data
>
> ;max is 10; 3 is pretty good
> log level = 6
>
> disable netbios = yes
> client min protocol = SMB2_02
> server min protocol = SMB2_02
> smb ports = 445
>
> ;this avoids needless errors in the logs if you have no printer
> printcap name = /dev/null
> load printers = no
> printing = bsd
>
> [myshare]
> path = /tmp
> ;comment = No need for Unix/Samba passwords
> guest ok = yes
> writeable=yes
> browseable=yes
> force create mode = 0644
> create mask = 0664
> ===========
>
> On 19/10/2024 09:56, Rowland Penny via samba wrote:
>> On Sat, 19 Oct 2024 09:49:03 +0200
>> Peter Milesson via samba <samba at lists.samba.org> wrote:
>>
>> The dhclient fulfills no function on your server, as you have got a
>> fixed IP address. It does not provide services to other computers in
>> the network either.  IMHO, it may even confuse wsdd (just a hunch).
>> Provided that the fixed IP has been set correctly, then I doubt that
>> dhclient has anything to do with the OPs problem.
>>
>>> About winbind, there are other on the list who could answer that
>>> question with more certainty. You could always try to shut down
>>> winbind.
>> The OP is running Samba as a standalone server, you do not run winbind
>> on a standalone server.
>




More information about the samba mailing list