SMB only by IP

Status
Not open for further replies.
T

Tyson Howard

Cadet
Joined
Nov 10, 2014
Messages
6
To preface, I am not well versed in networking.

I have been using FreeNAS for a while now with no problems with CIFS. Yesterday, the server would not show up in Windows Explorer (Win 8.1) under network, but it worked fine if I went to \\FREENAS\folder
Today, even that doesn't work, but going to \\xxx.xxx.xxx.xxx\folder works fine.
I have tried rebooting the Freenas and my router with no change.
 
anodos

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,554
Tyson Howard said:
To preface, I am not well versed in networking.

I have been using FreeNAS for a while now with no problems with CIFS. Yesterday, the server would not show up in Windows Explorer (Win 8.1) under network, but it worked fine if I went to \\FREENAS\folder
Today, even that doesn't work, but going to \\xxx.xxx.xxx.xxx\folder works fine.
I have tried rebooting the Freenas and my router with no change.
Click to expand...
  • Are the computers in the same workgroup?
  • Do you have any Windows servers on the network in the same workgroup?
  • Is the FreeNAS server configured as the master browser?
  • Is your workgroup browseable? (Have you disabled netbios on your W8 machine or have firewall rules preventing communication via netbios?)
  • Run "net view" from cmd.exe on a windows computer in the workgroup, then run "nbtstat -a" for every computer in the worgroup to locate all master browsers on your network. (every computer with the entry "_MSBROWSE_" is a master browser) You should only have one of these on the network.
  • Check /var/log/samba4/log.nmbd on your FreeNAS machine for error messages and post them here.
  • Post /usr/local/etc/smb4.conf

Overall, netbios name resolution sucks and is unreliable. I typically will either use AD, hosts files, or IP addresses.
 
Mlovelace

Mlovelace

Guru
Joined
Aug 19, 2014
Messages
1,111
Is your freeNAS set to dhcp? Sounds like a dns problem, you could try clearing the dns cache on the windows machine. Open cmd prompt as administrator and type:
Code:
ipconfig /flushdns
 
survive

survive

Behold the Wumpus
Moderator
Joined
May 28, 2011
Messages
875
Hi guys,

No, I think this guy is on to something. I'm seeing the same thing with a filer running 9.3-beta in my AD domain. Reboot it & it will prompt for a password, give it one & it spits this into the log:

Code:
Nov 14 19:17:18 filer smbd[7455]:  STATUS=daemon 'smbd' finished starting up and ready to serve connectionscreate_connection_session_info failed: NT_STATUS_ACCESS_DENIED


If I try to connect via IP in Windows Explorer I get right in.

If I let it sit for some amount of time it will start responding to mapped drives & browsing directly in Explorer, but that's not how it should be. This is new behavior in 9.3....it's been a long time that FreeNAS has given me trouble on this domain.

Here's the what Samba puts in /var/log/messages when I start the CIFS service & click on a mapped drive a few times:

Code:
Nov 14 20:31:39 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /sbin/sysctl -n 'kern.maxfilesperproc'
Nov 14 20:31:39 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint,name
Nov 14 20:31:40 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 14 20:31:40 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 14 20:31:40 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 14 20:31:40 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 14 20:31:40 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 14 20:31:40 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 14 20:31:41 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 14 20:31:41 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /usr/local/bin/pdbedit -d 0 -i smbpasswd:/tmp/tmpu3kE3N -s /usr/local/etc/smb4.conf -e tdbsam:/var/etc/private/passdb.tdb
Nov 14 20:31:41 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /usr/local/bin/pdbedit -L
Nov 14 20:31:41 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /usr/local/bin/net sam rights grant root SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege
Nov 14 20:31:42 filer notifier: Importing account for root...ok
Nov 14 20:31:42 filer notifier:
Nov 14 20:31:42 filer notifier: Granted SeTakeOwnershipPrivilege to FILER\root
Nov 14 20:31:42 filer notifier: Granted SeBackupPrivilege to FILER\root
Nov 14 20:31:42 filer notifier: Granted SeRestorePrivilege to FILER\root
Nov 14 20:31:42 filer notifier:
Nov 14 20:31:42 filer notifier: winbindd not running? (check /var/run/samba/winbindd.pid).
Nov 14 20:31:42 filer notifier: smbd not running? (check /var/run/samba/smbd.pid).
Nov 14 20:31:42 filer notifier: nmbd not running? (check /var/run/samba/nmbd.pid).
Nov 14 20:31:42 filer notifier: Performing sanity check on Samba configuration: OK
Nov 14 20:31:42 filer notifier: winbindd not running? (check /var/run/samba/winbindd.pid).
Nov 14 20:31:42 filer notifier: smbd not running? (check /var/run/samba/smbd.pid).
Nov 14 20:31:42 filer notifier: nmbd not running? (check /var/run/samba/nmbd.pid).
Nov 14 20:31:42 filer notifier: Performing sanity check on Samba configuration: OK
Nov 14 20:31:42 filer notifier: Starting nmbd.
Nov 14 20:31:42 filer notifier: Starting smbd.
Nov 14 20:31:42 filer nmbd[15551]: [2014/11/14 20:31:42.686315,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 14 20:31:42 filer notifier: Starting winbindd.
Nov 14 20:31:42 filer winbindd[15559]: [2014/11/14 20:31:42.830972,  0] ../source3/winbindd/winbindd_cache.c:3196(initialize_winbindd_cache)
Nov 14 20:31:42 filer winbindd[15559]:  initialize_winbindd_cache: clearing cache and re-creating with version number 2
Nov 14 20:31:42 filer winbindd[15559]: [2014/11/14 20:31:42.901727,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 14 20:31:42 filer winbindd[15579]:  STATUS=daemon 'winbindd' finished starting up and ready to serve connectionstdb(/var/db/samba4/winbindd_idmap.tdb): tdb_transaction_commit: transaction error pending
Nov 14 20:31:43 filer smbd[15555]: [2014/11/14 20:31:43.015083,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 14 20:32:14 filer smbd[15647]:  STATUS=daemon 'smbd' finished starting up and ready to serve connectionsFailed to fetch record!
Nov 14 20:32:47 filer smbd[15654]:  STATUS=daemon 'smbd' finished starting up and ready to serve connectionsFailed to fetch record!
Nov 14 20:33:14 filer smbd[15740]:  STATUS=daemon 'smbd' finished starting up and ready to serve connectionscreate_connection_session_info failed: NT_STATUS_ACCESS_DENIED
Nov 14 20:33:21 filer smbd[15743]:  STATUS=daemon 'smbd' finished starting up and ready to serve connectionsFailed to fetch record!


-Will
 
anodos

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,554
survive said:
Hi guys,

No, I think this guy is on to something. I'm seeing the same thing with a filer running 9.3-beta in my AD domain. Reboot it & it will prompt for a password, give it one & it spits this into the log:

Code:
Nov 14 19:17:18 filer smbd[7455]:  STATUS=daemon 'smbd' finished starting up and ready to serve connectionscreate_connection_session_info failed: NT_STATUS_ACCESS_DENIED


If I try to connect via IP in Windows Explorer I get right in.

If I let it sit for some amount of time it will start responding to mapped drives & browsing directly in Explorer, but that's not how it should be. This is new behavior in 9.3....it's been a long time that FreeNAS has given me trouble on this domain.

Here's the what Samba puts in /var/log/messages when I start the CIFS service & click on a mapped drive a few times:

Code:
Nov 14 20:31:39 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /sbin/sysctl -n 'kern.maxfilesperproc'
Nov 14 20:31:39 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint,name
Nov 14 20:31:40 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 14 20:31:40 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 14 20:31:40 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 14 20:31:40 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 14 20:31:40 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 14 20:31:40 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 14 20:31:41 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 14 20:31:41 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /usr/local/bin/pdbedit -d 0 -i smbpasswd:/tmp/tmpu3kE3N -s /usr/local/etc/smb4.conf -e tdbsam:/var/etc/private/passdb.tdb
Nov 14 20:31:41 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /usr/local/bin/pdbedit -L
Nov 14 20:31:41 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /usr/local/bin/net sam rights grant root SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege
Nov 14 20:31:42 filer notifier: Importing account for root...ok
Nov 14 20:31:42 filer notifier:
Nov 14 20:31:42 filer notifier: Granted SeTakeOwnershipPrivilege to FILER\root
Nov 14 20:31:42 filer notifier: Granted SeBackupPrivilege to FILER\root
Nov 14 20:31:42 filer notifier: Granted SeRestorePrivilege to FILER\root
Nov 14 20:31:42 filer notifier:
Nov 14 20:31:42 filer notifier: winbindd not running? (check /var/run/samba/winbindd.pid).
Nov 14 20:31:42 filer notifier: smbd not running? (check /var/run/samba/smbd.pid).
Nov 14 20:31:42 filer notifier: nmbd not running? (check /var/run/samba/nmbd.pid).
Nov 14 20:31:42 filer notifier: Performing sanity check on Samba configuration: OK
Nov 14 20:31:42 filer notifier: winbindd not running? (check /var/run/samba/winbindd.pid).
Nov 14 20:31:42 filer notifier: smbd not running? (check /var/run/samba/smbd.pid).
Nov 14 20:31:42 filer notifier: nmbd not running? (check /var/run/samba/nmbd.pid).
Nov 14 20:31:42 filer notifier: Performing sanity check on Samba configuration: OK
Nov 14 20:31:42 filer notifier: Starting nmbd.
Nov 14 20:31:42 filer notifier: Starting smbd.
Nov 14 20:31:42 filer nmbd[15551]: [2014/11/14 20:31:42.686315,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 14 20:31:42 filer notifier: Starting winbindd.
Nov 14 20:31:42 filer winbindd[15559]: [2014/11/14 20:31:42.830972,  0] ../source3/winbindd/winbindd_cache.c:3196(initialize_winbindd_cache)
Nov 14 20:31:42 filer winbindd[15559]:  initialize_winbindd_cache: clearing cache and re-creating with version number 2
Nov 14 20:31:42 filer winbindd[15559]: [2014/11/14 20:31:42.901727,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 14 20:31:42 filer winbindd[15579]:  STATUS=daemon 'winbindd' finished starting up and ready to serve connectionstdb(/var/db/samba4/winbindd_idmap.tdb): tdb_transaction_commit: transaction error pending
Nov 14 20:31:43 filer smbd[15555]: [2014/11/14 20:31:43.015083,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 14 20:32:14 filer smbd[15647]:  STATUS=daemon 'smbd' finished starting up and ready to serve connectionsFailed to fetch record!
Nov 14 20:32:47 filer smbd[15654]:  STATUS=daemon 'smbd' finished starting up and ready to serve connectionsFailed to fetch record!
Nov 14 20:33:14 filer smbd[15740]:  STATUS=daemon 'smbd' finished starting up and ready to serve connectionscreate_connection_session_info failed: NT_STATUS_ACCESS_DENIED
Nov 14 20:33:21 filer smbd[15743]:  STATUS=daemon 'smbd' finished starting up and ready to serve connectionsFailed to fetch record!


-Will
Click to expand...
That winbind error looks interesting. Are you able to verify that the FreeNAS server actually successfully joined the domain? Try increasing logging verbosity and seeing if we can squeeze more info out of samba.
 
survive

survive

Behold the Wumpus
Moderator
Joined
May 28, 2011
Messages
875
Hi anodos,

I'm looking into it right now & "freenas-debug -a" is telling me that "Active Directory is DISABLED". Interesting....it was enabled before, but the system had been rebooted because I updated the system with the latest 9.3 updates before I posted this. So I enable the AD service & here is what I get when I start it:

Code:
[root@filer] ~# tail -f /var/log/messages
Nov 15 13:40:39 filer notifier: Performing sanity check on Samba configuration: OK
Nov 15 13:40:39 filer notifier: Starting nmbd.
Nov 15 13:40:39 filer notifier: Starting smbd.
Nov 15 13:40:39 filer nmbd[82583]: [2014/11/15 13:40:39.776807,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 15 13:40:39 filer notifier: Starting winbindd.
Nov 15 13:40:39 filer winbindd[82591]: [2014/11/15 13:40:39.821123,  0] ../source3/winbindd/winbindd_cache.c:3196(initialize_winbindd_cache)
Nov 15 13:40:39 filer winbindd[82591]:  initialize_winbindd_cache: clearing cache and re-creating with version number 2
Nov 15 13:40:39 filer winbindd[82591]: [2014/11/15 13:40:39.823328,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 15 13:40:39 filer winbindd[82611]:  STATUS=daemon 'winbindd' finished starting up and ready to serve connectionstdb(/var/db/samba4/winbindd_idmap.tdb): tdb_transaction_commit: transaction error pending
Nov 15 13:40:39 filer smbd[82587]: [2014/11/15 13:40:39.949463,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 15 13:48:17 filer ActiveDirectory: /usr/local/bin/python /usr/local/www/freenasUI/middleware/notifier.py stop cifs
Nov 15 13:48:18 filer notifier: Stopping winbindd.
Nov 15 13:48:18 filer winbindd[82591]:  STATUS=daemon 'winbindd' finished starting up and ready to serve connectionsGot sig[15] terminate (is_parent=1)
Nov 15 13:48:18 filer winbindd[82612]:  STATUS=daemon 'winbindd' finished starting up and ready to serve connectionsGot sig[15] terminate (is_parent=0)
Nov 15 13:48:18 filer winbindd[82999]:  STATUS=daemon 'winbindd' finished starting up and ready to serve connectionsGot sig[15] terminate (is_parent=0)
Nov 15 13:48:18 filer winbindd[82592]:  STATUS=daemon 'winbindd' finished starting up and ready to serve connectionsGot sig[15] terminate (is_parent=0)
Nov 15 13:48:18 filer winbindd[82611]: [2014/11/15 13:48:18.853866,  0] ../source3/winbindd/winbindd.c:234(winbindd_sig_term_handler)
Nov 15 13:48:18 filer winbindd[82611]:  Got sig[15] terminate (is_parent=0)
Nov 15 13:48:18 filer notifier: Waiting for PIDS: 82591.
Nov 15 13:48:18 filer notifier: Stopping smbd.
Nov 15 13:48:19 filer notifier: Waiting for PIDS: 82587, 82587.
Nov 15 13:48:19 filer notifier: Stopping nmbd.
Nov 15 13:48:19 filer nmbd[82583]:  STATUS=daemon 'nmbd' finished starting up and ready to serve connectionsGot SIGTERM: going down...
Nov 15 13:48:19 filer notifier: Waiting for PIDS: 82583.
Nov 15 13:48:20 filer ActiveDirectory: /usr/sbin/service ix-kerberos quietstart
Nov 15 13:48:21 filer ActiveDirectory: /usr/sbin/service ix-nsswitch quietstart
Nov 15 13:48:22 filer ActiveDirectory: /usr/sbin/service ix-kinit quietstart
Nov 15 13:48:27 filer ActiveDirectory: /usr/sbin/service ix-kinit status
Nov 15 13:48:31 filer ActiveDirectory: /usr/local/bin/python /usr/local/www/freenasUI/middleware/notifier.py start cifs
Nov 15 13:48:33 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /sbin/sysctl -n 'kern.maxfilesperproc'
Nov 15 13:48:35 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint,name
Nov 15 13:48:35 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 15 13:48:35 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 15 13:48:35 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 15 13:48:35 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 15 13:48:35 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 15 13:48:35 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 15 13:48:35 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 15 13:48:35 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /usr/local/bin/pdbedit -d 0 -i smbpasswd:/tmp/tmpwaPVaX -s /usr/local/etc/smb4.conf -e tdbsam:/var/etc/private/passdb.tdb
Nov 15 13:48:35 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /usr/local/bin/pdbedit -L
Nov 15 13:48:35 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /usr/local/bin/net sam rights grant root SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege
Nov 15 13:48:36 filer notifier: Importing account for root...ok
Nov 15 13:48:36 filer notifier:
Nov 15 13:48:36 filer notifier: Granted SeTakeOwnershipPrivilege to FILER\root
Nov 15 13:48:36 filer notifier: Granted SeBackupPrivilege to FILER\root
Nov 15 13:48:36 filer notifier: Granted SeRestorePrivilege to FILER\root
Nov 15 13:48:36 filer notifier:
Nov 15 13:48:36 filer notifier: Performing sanity check on Samba configuration: OK
Nov 15 13:48:36 filer notifier: Starting nmbd.
Nov 15 13:48:36 filer notifier: Starting smbd.
Nov 15 13:48:36 filer nmbd[85546]: [2014/11/15 13:48:36.184365,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 15 13:48:36 filer notifier: Starting winbindd.
Nov 15 13:48:36 filer smbd[85550]: [2014/11/15 13:48:36.218322,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 15 13:48:36 filer winbindd[85554]: [2014/11/15 13:48:36.347245,  0] ../source3/winbindd/winbindd_util.c:634(init_domain_list)
Nov 15 13:48:36 filer winbindd[85554]:  Could not fetch our SID - did we join?
Nov 15 13:48:36 filer winbindd[85554]: [2014/11/15 13:48:36.347427,  0] ../source3/winbindd/winbindd.c:1240(winbindd_register_handlers)
Nov 15 13:48:36 filer winbindd[85554]:  unable to initialize domain list
Nov 15 13:48:36 filer ActiveDirectory: /usr/sbin/service ix-activedirectory quietstart
Nov 15 13:48:42 filer ActiveDirectory: /usr/sbin/service ix-activedirectory status
Nov 15 13:48:48 filer ActiveDirectory: /usr/local/bin/python /usr/local/www/freenasUI/middleware/notifier.py stop cifs
Nov 15 13:48:49 filer notifier: winbindd not running? (check /var/run/samba/winbindd.pid).
Nov 15 13:48:49 filer notifier: Stopping smbd.
Nov 15 13:48:50 filer notifier: Waiting for PIDS: 85550, 85550.
Nov 15 13:48:50 filer notifier: Stopping nmbd.
Nov 15 13:48:50 filer nmbd[85546]:  STATUS=daemon 'nmbd' finished starting up and ready to serve connectionsGot SIGTERM: going down...
Nov 15 13:48:50 filer notifier: Waiting for PIDS: 85546.
Nov 15 13:48:50 filer ActiveDirectory: /usr/local/bin/python /usr/local/www/freenasUI/middleware/notifier.py start cifs
Nov 15 13:48:53 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /sbin/sysctl -n 'kern.maxfilesperproc'
Nov 15 13:48:54 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint,name
Nov 15 13:48:54 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 15 13:48:54 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 15 13:48:54 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 15 13:48:54 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 15 13:48:54 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 15 13:48:54 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 15 13:48:55 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Nov 15 13:48:55 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /usr/local/bin/pdbedit -d 0 -i smbpasswd:/tmp/tmpWenkTZ -s /usr/local/etc/smb4.conf -e tdbsam:/var/etc/private/passdb.tdb
Nov 15 13:48:55 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /usr/local/bin/pdbedit -L
Nov 15 13:48:55 filer generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /usr/local/bin/net sam rights grant root SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege
Nov 15 13:48:55 filer notifier: Importing account for root...ok
Nov 15 13:48:55 filer notifier:
Nov 15 13:48:55 filer notifier: Granted SeTakeOwnershipPrivilege to FILER\root
Nov 15 13:48:55 filer notifier: Granted SeBackupPrivilege to FILER\root
Nov 15 13:48:55 filer notifier: Granted SeRestorePrivilege to FILER\root
Nov 15 13:48:55 filer notifier:
Nov 15 13:48:55 filer notifier: Performing sanity check on Samba configuration: OK
Nov 15 13:48:55 filer notifier: Starting nmbd.
Nov 15 13:48:55 filer notifier: Starting smbd.
Nov 15 13:48:55 filer nmbd[86688]: [2014/11/15 13:48:55.668750,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 15 13:48:55 filer notifier: Starting winbindd.
Nov 15 13:48:55 filer smbd[86692]: [2014/11/15 13:48:55.702051,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 15 13:48:55 filer winbindd[86698]: [2014/11/15 13:48:55.781045,  0] ../lib/util/become_daemon.c:136(daemon_ready)
Nov 15 13:48:55 filer ActiveDirectory: /usr/sbin/service ix-pam quietstart
Nov 15 13:48:59 filer ActiveDirectory: /usr/sbin/service ix-cache quietstart &
Nov 15 13:50:52 filer smbd[88793]:  STATUS=daemon 'smbd' finished starting up and ready to serve connectionsgss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/filer.u-city.net@U-CITY.NET(kvno 10) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
Nov 15 13:50:53 filer smbd[88794]:  STATUS=daemon 'smbd' finished starting up and ready to serve connectionsgss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/filer.u-city.net@U-CITY.NET(kvno 10) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]


If I run "freenas-debug -a" now I can see the AD service is enabled & I can see my AD users & groups are being picked up. I can see that my file permissions are mapping correctly to to my AD users & I can get into the shares by connecting to them directly by IP but I am still prompted for a password if I use a mapped drive or hostname.

-Will
 
survive

survive

Behold the Wumpus
Moderator
Joined
May 28, 2011
Messages
875
Hi anodos,

So I increased the logging level on samba & then tried to connect to my filer. Below are the results from log.smbd first showing me connecting to the filer by clicking on the host in the "Network" part of Windows Explorer and then connecting via IP (\\10.56.56.2 ).

Code:
[root@filer] /var/log/samba4# tail -f log.smbd
[2014/11/15 13:59:06.304222,  2] ../lib/util/modules.c:191(do_smb_load_module)
  Module 'shadow_copy2' loaded
[2014/11/15 13:59:06.304666,  2] ../source3/smbd/service.c:856(make_connection_snum)
  lorax (ipv4:10.56.56.10:58865) connect to service DiskImages initially as user U-CITY\survive (uid=21108, gid=20513) (pid 90702)
[2014/11/15 14:00:05.838276,  2] ../source3/smbd/server.c:419(remove_child_pid)
  Could not find child 90804 -- ignoring
[2014/11/15 14:01:05.840185,  2] ../source3/smbd/server.c:419(remove_child_pid)
  Could not find child 91038 -- ignoring
[2014/11/15 14:02:05.842160,  2] ../source3/smbd/server.c:419(remove_child_pid)
  Could not find child 91117 -- ignoring
[2014/11/15 14:02:54.399827,  1] ../source3/librpc/crypto/gse.c:465(gse_get_server_auth_token)
  gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/filer.u-city.net@U-CITY.NET(kvno 10) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2014/11/15 14:02:54.399934,  1] ../auth/gensec/spnego.c:573(gensec_spnego_parse_negTokenInit)
  SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2014/11/15 14:02:54.399989,  2] ../auth/gensec/spnego.c:743(gensec_spnego_server_negTokenTarg)
  SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2014/11/15 14:02:55.587415,  1] ../source3/librpc/crypto/gse.c:465(gse_get_server_auth_token)
  gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/filer.u-city.net@U-CITY.NET(kvno 10) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2014/11/15 14:02:55.587535,  1] ../auth/gensec/spnego.c:573(gensec_spnego_parse_negTokenInit)
  SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2014/11/15 14:02:55.587597,  2] ../auth/gensec/spnego.c:743(gensec_spnego_server_negTokenTarg)
  SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2014/11/15 14:03:05.844198,  2] ../source3/smbd/server.c:419(remove_child_pid)
  Could not find child 91197 -- ignoring
[2014/11/15 14:03:09.529258,  1] ../source3/printing/printer_list.c:226(printer_list_get_last_refresh)
  Failed to fetch record!
[2014/11/15 14:03:09.529308,  1] ../source3/smbd/server_reload.c:69(delete_and_reload_printers)
  pcap cache not loaded
[2014/11/15 14:03:09.584760,  2] ../source3/smbd/service.c:856(make_connection_snum)
  lorax (ipv4:10.56.56.10:58865) connect to service Install_Files initially as user U-CITY\survive (uid=21108, gid=20513) (pid 90702)
[2014/11/15 14:03:09.585104,  2] ../source3/smbd/service.c:856(make_connection_snum)
  lorax (ipv4:10.56.56.10:58865) connect to service WMC initially as user U-CITY\survive (uid=21108, gid=20513) (pid 90702)
[2014/11/15 14:03:09.585500,  2] ../source3/smbd/service.c:856(make_connection_snum)
  lorax (ipv4:10.56.56.10:58865) connect to service Docs initially as user U-CITY\survive (uid=21108, gid=20513) (pid 90702)
[2014/11/15 14:03:09.585917,  2] ../source3/smbd/service.c:856(make_connection_snum)
  lorax (ipv4:10.56.56.10:58865) connect to service Music initially as user U-CITY\survive (uid=21108, gid=20513) (pid 90702)
[2014/11/15 14:03:09.605391,  2] ../source3/smbd/service.c:856(make_connection_snum)
  lorax (ipv4:10.56.56.10:58865) connect to service TV initially as user U-CITY\survive (uid=21108, gid=20513) (pid 90702)
[2014/11/15 14:03:09.612710,  2] ../source3/smbd/service.c:856(make_connection_snum)
  lorax (ipv4:10.56.56.10:58865) connect to service Storage initially as user U-CITY\survive (uid=21108, gid=20513) (pid 90702)
[2014/11/15 14:03:21.064616,  1] ../source3/smbd/service.c:1130(close_cnum)
  lorax (ipv4:10.56.56.10:58865) closed connection to service DiskImages
[2014/11/15 14:03:21.065538,  1] ../source3/smbd/service.c:1130(close_cnum)
  lorax (ipv4:10.56.56.10:58865) closed connection to service Music
[2014/11/15 14:03:21.066300,  1] ../source3/smbd/service.c:1130(close_cnum)
  lorax (ipv4:10.56.56.10:58865) closed connection to service Install_Files
[2014/11/15 14:03:21.067061,  1] ../source3/smbd/service.c:1130(close_cnum)
  lorax (ipv4:10.56.56.10:58865) closed connection to service Docs
[2014/11/15 14:03:21.067855,  1] ../source3/smbd/service.c:1130(close_cnum)
  lorax (ipv4:10.56.56.10:58865) closed connection to service WMC
[2014/11/15 14:03:21.068652,  1] ../source3/smbd/service.c:1130(close_cnum)
  lorax (ipv4:10.56.56.10:58865) closed connection to service TV
[2014/11/15 14:03:21.069406,  1] ../source3/smbd/service.c:1130(close_cnum)
  lorax (ipv4:10.56.56.10:58865) closed connection to service Storage


-Will
 
anodos

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,554
survive said:
Hi anodos,

So I increased the logging level on samba & then tried to connect to my filer. Below are the results from log.smbd first showing me connecting to the filer by clicking on the host in the "Network" part of Windows Explorer and then connecting via IP (\\10.56.56.2 ).

Code:
[root@filer] /var/log/samba4# tail -f log.smbd
[2014/11/15 13:59:06.304222,  2] ../lib/util/modules.c:191(do_smb_load_module)
  Module 'shadow_copy2' loaded
[2014/11/15 13:59:06.304666,  2] ../source3/smbd/service.c:856(make_connection_snum)
  lorax (ipv4:10.56.56.10:58865) connect to service DiskImages initially as user U-CITY\survive (uid=21108, gid=20513) (pid 90702)
[2014/11/15 14:00:05.838276,  2] ../source3/smbd/server.c:419(remove_child_pid)
  Could not find child 90804 -- ignoring
[2014/11/15 14:01:05.840185,  2] ../source3/smbd/server.c:419(remove_child_pid)
  Could not find child 91038 -- ignoring
[2014/11/15 14:02:05.842160,  2] ../source3/smbd/server.c:419(remove_child_pid)
  Could not find child 91117 -- ignoring
[2014/11/15 14:02:54.399827,  1] ../source3/librpc/crypto/gse.c:465(gse_get_server_auth_token)
  gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/filer.u-city.net@U-CITY.NET(kvno 10) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2014/11/15 14:02:54.399934,  1] ../auth/gensec/spnego.c:573(gensec_spnego_parse_negTokenInit)
  SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2014/11/15 14:02:54.399989,  2] ../auth/gensec/spnego.c:743(gensec_spnego_server_negTokenTarg)
  SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2014/11/15 14:02:55.587415,  1] ../source3/librpc/crypto/gse.c:465(gse_get_server_auth_token)
  gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/filer.u-city.net@U-CITY.NET(kvno 10) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)]
[2014/11/15 14:02:55.587535,  1] ../auth/gensec/spnego.c:573(gensec_spnego_parse_negTokenInit)
  SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
[2014/11/15 14:02:55.587597,  2] ../auth/gensec/spnego.c:743(gensec_spnego_server_negTokenTarg)
  SPNEGO login failed: NT_STATUS_LOGON_FAILURE
[2014/11/15 14:03:05.844198,  2] ../source3/smbd/server.c:419(remove_child_pid)
  Could not find child 91197 -- ignoring
[2014/11/15 14:03:09.529258,  1] ../source3/printing/printer_list.c:226(printer_list_get_last_refresh)
  Failed to fetch record!
[2014/11/15 14:03:09.529308,  1] ../source3/smbd/server_reload.c:69(delete_and_reload_printers)
  pcap cache not loaded
[2014/11/15 14:03:09.584760,  2] ../source3/smbd/service.c:856(make_connection_snum)
  lorax (ipv4:10.56.56.10:58865) connect to service Install_Files initially as user U-CITY\survive (uid=21108, gid=20513) (pid 90702)
[2014/11/15 14:03:09.585104,  2] ../source3/smbd/service.c:856(make_connection_snum)
  lorax (ipv4:10.56.56.10:58865) connect to service WMC initially as user U-CITY\survive (uid=21108, gid=20513) (pid 90702)
[2014/11/15 14:03:09.585500,  2] ../source3/smbd/service.c:856(make_connection_snum)
  lorax (ipv4:10.56.56.10:58865) connect to service Docs initially as user U-CITY\survive (uid=21108, gid=20513) (pid 90702)
[2014/11/15 14:03:09.585917,  2] ../source3/smbd/service.c:856(make_connection_snum)
  lorax (ipv4:10.56.56.10:58865) connect to service Music initially as user U-CITY\survive (uid=21108, gid=20513) (pid 90702)
[2014/11/15 14:03:09.605391,  2] ../source3/smbd/service.c:856(make_connection_snum)
  lorax (ipv4:10.56.56.10:58865) connect to service TV initially as user U-CITY\survive (uid=21108, gid=20513) (pid 90702)
[2014/11/15 14:03:09.612710,  2] ../source3/smbd/service.c:856(make_connection_snum)
  lorax (ipv4:10.56.56.10:58865) connect to service Storage initially as user U-CITY\survive (uid=21108, gid=20513) (pid 90702)
[2014/11/15 14:03:21.064616,  1] ../source3/smbd/service.c:1130(close_cnum)
  lorax (ipv4:10.56.56.10:58865) closed connection to service DiskImages
[2014/11/15 14:03:21.065538,  1] ../source3/smbd/service.c:1130(close_cnum)
  lorax (ipv4:10.56.56.10:58865) closed connection to service Music
[2014/11/15 14:03:21.066300,  1] ../source3/smbd/service.c:1130(close_cnum)
  lorax (ipv4:10.56.56.10:58865) closed connection to service Install_Files
[2014/11/15 14:03:21.067061,  1] ../source3/smbd/service.c:1130(close_cnum)
  lorax (ipv4:10.56.56.10:58865) closed connection to service Docs
[2014/11/15 14:03:21.067855,  1] ../source3/smbd/service.c:1130(close_cnum)
  lorax (ipv4:10.56.56.10:58865) closed connection to service WMC
[2014/11/15 14:03:21.068652,  1] ../source3/smbd/service.c:1130(close_cnum)
  lorax (ipv4:10.56.56.10:58865) closed connection to service TV
[2014/11/15 14:03:21.069406,  1] ../source3/smbd/service.c:1130(close_cnum)
  lorax (ipv4:10.56.56.10:58865) closed connection to service Storage


-Will
Click to expand...
The problem appears to be related to your keytab. Try either using an AD admin account or generating a new keytab.
 
survive

survive

Behold the Wumpus
Moderator
Joined
May 28, 2011
Messages
875
Hi anodos,

I am using an admin account to join the domain. Any suggestions on how to generate a new keytab file?

-Will
 
survive

survive

Behold the Wumpus
Moderator
Joined
May 28, 2011
Messages
875
Status
Not open for further replies.

Important Announcement for the TrueNAS Community.

The TrueNAS Community has now been moved. This forum will now become READ-ONLY for historical purposes. Please feel free to join us on the new TrueNAS Community Forums.

Related topics on forums.truenas.com for thread: "SMB only by IP"

Similar threads

Tom Markert
  • Locked
Lost network drive path {SOLVED}
Replies
17
Views
5K
Stux
Stux
UncleFester
  • Locked
How to connect my FreeNAS server to a Guest OS in VirtualBox
Replies
8
Views
3K
UncleFester
UncleFester
Q
  • Locked
Dataset permissions cannot be saved.
Replies
6
Views
2K
q_fleuren
Q
marcevan
  • Locked
SOLVED Suddenly cannot connect from Win7
Replies
7
Views
2K
marcevan
marcevan
gazgaz
Dahua ip cam problem with writing to the server by NFS
Replies
0
Views
2K
gazgaz
gazgaz
Top