Samba instance (4.7.5) is not allowing users to browse any shares when running as a systemctl daemon, but it is working fine when running as a foreground service.
Contents of systemctl service unit:
# cat /usr/lib/systemd/system/smb.service
[Unit]
Description=Samba SMB Daemon
After=syslog.target network.target nmb.service winbind.service
[Service]
Environment=KRB5CCNAME=FILE:/run/samba/krb5cc_samba
Type=notify
NotifyAccess=all
PIDFile=/run/smbd.pid
LimitNOFILE=16384
EnvironmentFile=-/etc/sysconfig/samba
ExecStart=/usr/sbin/smbd -F --no-process-group $SMBDOPTIONS
ExecReload=/usr/bin/kill -HUP $MAINPID
LimitCORE=infinity
[Install]
WantedBy=multi-user.target
Logs when running via systemctl:
[2018/02/26 16:57:37.676020, 3, pid=2994] ../lib/util/access.c:365(allow_access)
Allowed connection from 192.168.247.72 (192.168.247.72)
[2018/02/26 16:57:37.676283, 3, pid=2994] ../source3/param/loadparm.c:3862(lp_load_ex)
lp_load_ex: refreshing parameters
[2018/02/26 16:57:37.676497, 3, pid=2994] ../source3/param/loadparm.c:549(init_globals)
Initialising global parameters
[2018/02/26 16:57:37.676661, 3, pid=2994] ../source3/param/loadparm.c:2776(lp_do_section)
Processing section "[global]"
[2018/02/26 16:57:37.676960, 2, pid=2994] ../source3/param/loadparm.c:2793(lp_do_section)
Processing section "[test]"
[2018/02/26 16:57:37.677137, 3, pid=2994] ../source3/param/loadparm.c:1611(lp_add_ipc)
adding IPC service
[2018/02/26 16:57:37.677433, 2, pid=2994] ../source3/lib/interface.c:345(add_interface)
added interface ens192 ip=192.168.247.71 bcast=192.168.247.255 netmask=255.255.255.0
[2018/02/26 16:57:37.677553, 3, pid=2994] ../source3/smbd/oplock.c:1340(init_oplocks)
init_oplocks: initializing messages.
[2018/02/26 16:57:37.677770, 3, pid=2994] ../source3/smbd/process.c:1959(process_smb)
Transaction 0 of length 216 (0 toread)
[2018/02/26 16:57:37.677874, 3, pid=2994] ../source3/smbd/process.c:1539(switch_message)
switch message SMBnegprot (pid 2994) conn 0x0
[2018/02/26 16:57:37.678639, 3, pid=2994] ../source3/smbd/negprot.c:612(reply_negprot)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2018/02/26 16:57:37.678766, 3, pid=2994] ../source3/smbd/negprot.c:612(reply_negprot)
Requested protocol [MICROSOFT NETWORKS 1.03]
[2018/02/26 16:57:37.678864, 3, pid=2994] ../source3/smbd/negprot.c:612(reply_negprot)
Requested protocol [MICROSOFT NETWORKS 3.0]
[2018/02/26 16:57:37.678968, 3, pid=2994] ../source3/smbd/negprot.c:612(reply_negprot)
Requested protocol [LANMAN1.0]
[2018/02/26 16:57:37.679071, 3, pid=2994] ../source3/smbd/negprot.c:612(reply_negprot)
Requested protocol [LM1.2X002]
[2018/02/26 16:57:37.679183, 3, pid=2994] ../source3/smbd/negprot.c:612(reply_negprot)
Requested protocol [DOS LANMAN2.1]
[2018/02/26 16:57:37.679280, 3, pid=2994] ../source3/smbd/negprot.c:612(reply_negprot)
Requested protocol [LANMAN2.1]
[2018/02/26 16:57:37.679379, 3, pid=2994] ../source3/smbd/negprot.c:612(reply_negprot)
Requested protocol [Samba]
[2018/02/26 16:57:37.679472, 3, pid=2994] ../source3/smbd/negprot.c:612(reply_negprot)
Requested protocol [NT LANMAN 1.0]
[2018/02/26 16:57:37.679583, 3, pid=2994] ../source3/smbd/negprot.c:612(reply_negprot)
Requested protocol [NT LM 0.12]
[2018/02/26 16:57:37.679693, 3, pid=2994] ../source3/smbd/negprot.c:612(reply_negprot)
Requested protocol [SMB 2.002]
[2018/02/26 16:57:37.679809, 3, pid=2994] ../source3/smbd/negprot.c:612(reply_negprot)
Requested protocol [SMB 2.???]
[2018/02/26 16:57:37.679986, 3, pid=2994] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot)
Selected protocol SMB2_FF
[2018/02/26 16:57:37.680477, 3, pid=2994] ../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'gssapi_spnego' registered
[2018/02/26 16:57:37.680579, 3, pid=2994] ../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'gssapi_krb5' registered
[2018/02/26 16:57:37.680684, 3, pid=2994] ../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'gssapi_krb5_sasl' registered
[2018/02/26 16:57:37.680797, 3, pid=2994] ../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'spnego' registered
[2018/02/26 16:57:37.680882, 3, pid=2994] ../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'schannel' registered
[2018/02/26 16:57:37.680984, 3, pid=2994] ../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'naclrpc_as_system' registered
[2018/02/26 16:57:37.681089, 3, pid=2994] ../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'sasl-EXTERNAL' registered
[2018/02/26 16:57:37.681191, 3, pid=2994] ../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'ntlmssp' registered
[2018/02/26 16:57:37.681291, 3, pid=2994] ../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'ntlmssp_resume_ccache' registered
[2018/02/26 16:57:37.681384, 3, pid=2994] ../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'http_basic' registered
[2018/02/26 16:57:37.681489, 3, pid=2994] ../auth/gensec/gensec_start.c:977(gensec_register)
GENSEC backend 'http_ntlm' registered
[2018/02/26 16:57:37.682280, 3, pid=2994] ../source3/smbd/negprot.c:753(reply_negprot)
Selected protocol SMB 2.???
[2018/02/26 16:57:37.682741, 3, pid=2994] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot)
Selected protocol SMB3_11
[2018/02/26 16:57:37.686193, 3, pid=2994] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0x62088215
[2018/02/26 16:57:37.686799, 3, pid=2994] ../auth/ntlmssp/ntlmssp_server.c:454(ntlmssp_server_preauth)
Got user=[test] domain=[SAMBA] workstation=[THINKPAD-X270] len1=24 len2=330
[2018/02/26 16:57:37.686917, 3, pid=2994] ../source3/param/loadparm.c:3862(lp_load_ex)
lp_load_ex: refreshing parameters
[2018/02/26 16:57:37.687046, 3, pid=2994] ../source3/param/loadparm.c:549(init_globals)
Initialising global parameters
[2018/02/26 16:57:37.687198, 3, pid=2994] ../source3/param/loadparm.c:2776(lp_do_section)
Processing section "[global]"
[2018/02/26 16:57:37.687465, 2, pid=2994] ../source3/param/loadparm.c:2793(lp_do_section)
Processing section "[test]"
[2018/02/26 16:57:37.687611, 3, pid=2994] ../source3/param/loadparm.c:1611(lp_add_ipc)
adding IPC service
[2018/02/26 16:57:37.687742, 3, pid=2994] ../source3/auth/auth.c:189(auth_check_ntlm_password)
check_ntlm_password: Checking password for unmapped user [SAMBA]\[test]@[THINKPAD-X270] with the new password interface
[2018/02/26 16:57:37.687838, 3, pid=2994] ../source3/auth/auth.c:192(auth_check_ntlm_password)
check_ntlm_password: mapped user is: [SAMBA]\[test]@[THINKPAD-X270]
[2018/02/26 16:57:37.687998, 2, pid=2994] ../source3/lib/smbldap.c:841(smbldap_open_connection)
smbldap_open_connection: connection opened
[2018/02/26 16:57:37.696554, 3, pid=2994] ../source3/lib/smbldap.c:1063(smbldap_connect_system)
ldap_connect_system: successful connection to the LDAP server
[2018/02/26 16:57:37.699013, 2, pid=2994] ipa_sam.c:3216(init_sam_from_ldap)
init_sam_from_ldap: Entry found for user: test
[2018/02/26 16:57:37.700693, 3, pid=2994] ../source3/auth/auth.c:256(auth_check_ntlm_password)
auth_check_ntlm_password: sam authentication for user [test] succeeded
[2018/02/26 16:57:37.700736, 3, pid=2994] ../auth/auth_log.c:760(log_authentication_event_human_readable)
Auth: [SMB2,(null)] user [SAMBA]\[test] at [Mon, 26 Feb 2018 16:57:37.700721 GMT] with [NTLMv2] status [NT_STATUS_OK] workstation [THINKPAD-X270] remote host [ipv4:192.168.247.72:39014] became [domain.internal]\[test] [S-1-5-21-2460180081-1733199439-1879006710-1003]. local host [ipv4:192.168.247.71:445]
[2018/02/26 16:57:37.700769, 3, pid=2994] ../auth/auth_log.c:591(log_no_json)
log_no_json: JSON auth logs not available unless compiled with jansson
[2018/02/26 16:57:37.700780, 2, pid=2994] ../source3/auth/auth.c:314(auth_check_ntlm_password)
check_ntlm_password: authentication for user [test] -> [test] -> [test] succeeded
[2018/02/26 16:57:37.700798, 3, pid=2994] ../auth/ntlmssp/ntlmssp_sign.c:509(ntlmssp_sign_reset)
NTLMSSP Sign/Seal - Initialising with flags:
[2018/02/26 16:57:37.700807, 3, pid=2994] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0x62088215
[2018/02/26 16:57:37.700829, 3, pid=2994] ../auth/ntlmssp/ntlmssp_sign.c:509(ntlmssp_sign_reset)
NTLMSSP Sign/Seal - Initialising with flags:
[2018/02/26 16:57:37.700837, 3, pid=2994] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0x62088215
[2018/02/26 16:57:37.702460, 3, pid=2994] ../source3/smbd/password.c:130(register_homes_share)
Using static (or previously created) service for user 'test'; path = '/media/nas/test_dir'
[2018/02/26 16:57:37.703937, 3, pid=2994] ../lib/util/access.c:365(allow_access)
Allowed connection from 192.168.247.72 (192.168.247.72)
[2018/02/26 16:57:37.703995, 3, pid=2994] ../source3/smbd/service.c:595(make_connection_snum)
Connect path is '/tmp' for service [IPC$]
[2018/02/26 16:57:37.704019, 3, pid=2994] ../source3/smbd/vfs.c:113(vfs_init_default)
Initialising default vfs hooks
[2018/02/26 16:57:37.704039, 3, pid=2994] ../source3/smbd/vfs.c:139(vfs_init_custom)
Initialising custom vfs hooks from [/[Default VFS]/]
[2018/02/26 16:57:37.704093, 3, pid=2994] ../source3/smbd/service.c:841(make_connection_snum)
thinkpad-x270 (ipv4:192.168.247.72:39014) connect to service IPC$ initially as user test (uid=1368400003, gid=1368400003) (pid 2994)
[2018/02/26 16:57:37.704548, 3, pid=2994] ../source3/smbd/msdfs.c:1008(get_referred_path)
get_referred_path: |test| in dfs path \samba.domain.internal\test is not a dfs root.
[2018/02/26 16:57:37.704565, 3, pid=2994] ../source3/smbd/smb2_server.c:3139(smbd_smb2_request_error_ex)
smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_NOT_FOUND] || at ../source3/smbd/smb2_ioctl.c:309
[2018/02/26 16:57:37.704836, 3, pid=2994] ../source3/smbd/service.c:1120(close_cnum)
thinkpad-x270 (ipv4:192.168.247.72:39014) closed connection to service IPC$
[2018/02/26 16:57:37.705095, 3, pid=2994] ../lib/util/access.c:365(allow_access)
Allowed connection from 192.168.247.72 (192.168.247.72)
[2018/02/26 16:57:37.705117, 3, pid=2994] ../libcli/security/dom_sid.c:210(dom_sid_parse_endp)
string_to_sid: SID @ipausers is not in a valid format
[2018/02/26 16:57:37.705526, 3, pid=2994] ../source3/smbd/service.c:595(make_connection_snum)
Connect path is '/media/nas/test_dir' for service [test]
[2018/02/26 16:57:37.705633, 3, pid=2994] ../libcli/security/dom_sid.c:210(dom_sid_parse_endp)
string_to_sid: SID @ipausers is not in a valid format
[2018/02/26 16:57:37.705869, 3, pid=2994] ../source3/smbd/vfs.c:113(vfs_init_default)
Initialising default vfs hooks
[2018/02/26 16:57:37.705962, 3, pid=2994] ../source3/smbd/vfs.c:139(vfs_init_custom)
Initialising custom vfs hooks from [/[Default VFS]/]
[2018/02/26 16:57:37.706100, 3, pid=2994] ../libcli/security/dom_sid.c:210(dom_sid_parse_endp)
string_to_sid: SID @ipausers is not in a valid format
[2018/02/26 16:57:37.706386, 0, pid=2994] ../source3/smbd/service.c:774(make_connection_snum)
canonicalize_connect_path failed for service test, path /media/nas/test_dir
[2018/02/26 16:57:37.706955, 3, pid=2994] ../source3/smbd/smb2_server.c:3139(smbd_smb2_request_error_ex)
smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_BAD_NETWORK_NAME] || at ../source3/smbd/smb2_tcon.c:135
[2018/02/26 16:57:37.707412, 3, pid=2994] ../source3/smbd/smb2_server.c:3139(smbd_smb2_request_error_ex)
smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_NETWORK_NAME_DELETED] || at ../source3/smbd/smb2_server.c:2491
[2018/02/26 16:57:37.707871, 3, pid=2994] ../source3/smbd/server_exit.c:244(exit_server_common)
Server exit (NT_STATUS_END_OF_FILE)
[2018/02/26 16:57:37.712408, 3, pid=2948] ../source3/lib/util_procid.c:54(pid_to_procid)
pid_to_procid: messaging_dgm_get_unique failed: No such file or directory
Command to run in foreground:
smbd -F
I'm a bit lost on this one because they're both using the same configuration files. /etc/sysconfig/samba is also full of empty variables.
A few things to note:
- Samba is connected to a LDAP directory server
- Samba is running on Fedora 27
- Systemctl and foreground command are using same directory permissions
and same system user
Can anyone give me any clues on where to go from here? I don't fancy running the foreground command in screen as a workaround!
Best Answer
Had the same problem and got it working. Checkout https://www.hiroom2.com/2017/12/03/fedora-27-samba-en
I needed the "sudo chcon -R -t samba_share_t /path_to_your_share" on my shares plus "valid user = youruser" in smb.conf then it worked.
"sudo setsebool -P samba_enable_home_dirs on" didnt work for me but also used chcon ... and then it worked.