[Samba] Windows 7 with smb2 can not connect as guest ?

Francois Lepretre · External Since: Aug 25, 2010 Posts: 4

Hello,

on our servers we have shares with no authentication required (no DC,
security = share, guest ok = yes).

Worked fine for years, but now with Samba 3.5.4, when I enable smb2,
Windows 7 clients can not connect anymore to these shares.

Looking at the logs, I can see :
[...]
[2010/08/25 10:13:08.058358, 3] auth/auth_sam.c:399(check_sam_security)
check_sam_security: Couldn't find user 'comp2_2' in passdb.
[2010/08/25 10:13:08.058371, 5] auth/auth.c:268(check_ntlm_password)
check_ntlm_password: sam authentication for user [comp2_2] FAILED
with error NT_STATUS_NO_SUCH_USER
[2010/08/25 10:13:08.058386, 2] auth/auth.c:314(check_ntlm_password)
check_ntlm_password: Authentication for user [comp2_2] -> [comp2_2]
FAILED with error NT_STATUS_NO_SUCH_USER
[...]

So it seems Samba tries to authenticate the user whereas it's a 'guest
ok' share.
In the meantime, XP clients have no problem connecting.

Here is the smb.conf :

-----------------------------------

[global]

workgroup = WIZZ
server string = Prod1bis File Server %v
log file = /var/log/samba/log.%m
max log size = 50
max protocol = smb2
log level = 10
security = share
encrypt passwords = yes
dns proxy = no
guest account = root
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
getwd cache = yes

[partage]
comment = Partage
browseable = yes
writable = yes
path = /space/partage
guest ok = yes

-----------------------------------

Any idea ?

Thanks in advance for your help,

Francois

--
To unsubscribe from this list go to the following URL and read the
instructions: " target="_blank">https://lists.samba.org/mailman/options/samba

Jeremy Allison · External Since: Dec 13, 2004 Posts: 576

On Wed, Aug 25, 2010 at 12:09:12PM +0200, Francois Lepretre wrote:
> Hello,
>
> on our servers we have shares with no authentication required (no
> DC, security = share, guest ok = yes).
>
> Worked fine for years, but now with Samba 3.5.4, when I enable smb2,
> Windows 7 clients can not connect anymore to these shares.

I'd recommend not enabling SMB2 on 3.5.x, it's not ready for
production use. SMB2 will be production ready in 3.6.0.

Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Francois Lepretre · External Since: Aug 25, 2010 Posts: 4

Le 25/08/2010 19:39, Jeremy Allison a écrit :
> On Wed, Aug 25, 2010 at 12:09:12PM +0200, Francois Lepretre wrote:
>> Hello,
>>
>> on our servers we have shares with no authentication required (no
>> DC, security = share, guest ok = yes).
>>
>> Worked fine for years, but now with Samba 3.5.4, when I enable smb2,
>> Windows 7 clients can not connect anymore to these shares.
>
> I'd recommend not enabling SMB2 on 3.5.x, it's not ready for
> production use. SMB2 will be production ready in 3.6.0.
>

OK. I have also tried 3.6-pre1 and git version. Same result : Win7
clients can not connect to a guest ok share.
Should I file a bug on this ?

The reason I am trying SMB2 is that I also have a Windows 2008 Server
(running on the same type of hardware as the Samba servers) and its
performance are a lot better when talking to Windows 7 clients.
Typically :
- reading from samba servers reaches 70 MB/s
- reading (same files on same client) from windows server gives over 100
MB/s

Apart from the use of SMB2 protocol, I can't see why Windows Server 2008
would be so faster than Samba.

Thanks,

Francois

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Jeremy Allison · External Since: Dec 13, 2004 Posts: 576

On Thu, Aug 26, 2010 at 11:05:08AM +0200, Francois Lepretre wrote:
> Le 25/08/2010 19:39, Jeremy Allison a écrit :
> >On Wed, Aug 25, 2010 at 12:09:12PM +0200, Francois Lepretre wrote:
> >>Hello,
> >>
> >>on our servers we have shares with no authentication required (no
> >>DC, security = share, guest ok = yes).
> >>
> >>Worked fine for years, but now with Samba 3.5.4, when I enable smb2,
> >>Windows 7 clients can not connect anymore to these shares.
> >
> >I'd recommend not enabling SMB2 on 3.5.x, it's not ready for
> >production use. SMB2 will be production ready in 3.6.0.
> >
>
> OK. I have also tried 3.6-pre1 and git version. Same result : Win7
> clients can not connect to a guest ok share.
> Should I file a bug on this ?

Yes please, and attach a debug level 10 log. Are you
testing v3-6-test git tree ? I fixed a bug in that area
post 3.6-pre1 related to guest access.

> The reason I am trying SMB2 is that I also have a Windows 2008
> Server (running on the same type of hardware as the Samba servers)
> and its performance are a lot better when talking to Windows 7
> clients.
> Typically :
> - reading from samba servers reaches 70 MB/s
> - reading (same files on same client) from windows server gives over
> 100 MB/s
>
> Apart from the use of SMB2 protocol, I can't see why Windows Server
> 2008 would be so faster than Samba.

SMB2 does more concurrency. I have some changes
due in this area (not Samba related but that's
another story).

Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Francois Lepretre · External Since: Aug 25, 2010 Posts: 4

Le 26/08/2010 19:40, Jeremy Allison a écrit :
>> OK. I have also tried 3.6-pre1 and git version. Same result : Win7
>> clients can not connect to a guest ok share.
>> Should I file a bug on this ?
>
> Yes please, and attach a debug level 10 log. Are you
> testing v3-6-test git tree ? I fixed a bug in that area
> post 3.6-pre1 related to guest access.

Yes, smbd version shows '3.6.0pre1-GIT-f87ecd7-test' so I think/hope I
am testing v3-6-test tree Smile

I have opened bugid 7653 and attached log files of a test case
( https://bugzilla.samba.org/show_bug.cgi?id=7653 )

Thanks a lot for your help.

Francois
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Jeremy Allison · External Since: Dec 13, 2004 Posts: 576

On Fri, Aug 27, 2010 at 03:14:53PM +0200, Francois Lepretre wrote:
> Le 26/08/2010 19:40, Jeremy Allison a écrit :
> >>OK. I have also tried 3.6-pre1 and git version. Same result : Win7
> >>clients can not connect to a guest ok share.
> >>Should I file a bug on this ?
> >
> >Yes please, and attach a debug level 10 log. Are you
> >testing v3-6-test git tree ? I fixed a bug in that area
> >post 3.6-pre1 related to guest access.
>
> Yes, smbd version shows '3.6.0pre1-GIT-f87ecd7-test' so I think/hope
> I am testing v3-6-test tree Smile

>
> I have opened bugid 7653 and attached log files of a test case
> ( https://bugzilla.samba.org/show_bug.cgi?id=7653 )
>
> Thanks a lot for your help.

Oh, you're using "security = share". How I *hate*
that setting Smile

. You do realize "security = user"
can do everything that "security = share" can do,
don't you ? I'm pretty sure SMB2 guest connections
work with "security = user" (as that's how I test them Smile

.

Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Francois Lepretre · External Since: Aug 25, 2010 Posts: 4

Le 27/08/2010 17:43, Jeremy Allison a écrit :
> Oh, you're using "security = share". How I *hate*
> that setting Smile

. You do realize "security = user"
> can do everything that "security = share" can do,
> don't you ?

No I did not Smile

Back to Google, I have just discovered the magical "map to guest = Bad
Password" setting which allows (me) to make guest connections to shares
while in "security = user" mode.

>I'm pretty sure SMB2 guest connections
> work with "security = user" (as that's how I test them Smile

.

Indeed it works. Smile

Thanks a lot !!!

I can go back to SMB2 performance testing which was the original purpose
of enabling smb2.

Francois
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba