[gentoo-user] samba log hell

[gentoo-user] samba log hell

[reader]

I'm having a time getting samba working after having it working for
mnths.  I did do a major update world.  At the end when adjusting
files under /etc/  I rejected the new smb.conf keeping my old config
which is still in place.

It seems something has suddenly chagned whereby I cannot access any
linux shares from windows.

Attempting to get some details of the failure from the logs seem
fruitless since the log output is literally huge and nothing stands
out with big letters `error'.

I'm just not prepared to understand 670 lines of output for one
connection attempt.

And that is with `log level' cranked down to 3.

The following area seems to be important but even this small chunk
defies understanding far as I can see:

The `Sid' lines seem to be telling something but who knows what.  Then
finally it shows a ACCESS_DENIED.

reader and Harry are the only two authorized users
What provoked this piece of log is an attempt from machine `harvey' to
login to samba share on machine `reader'.  The incoming user is also
`reader'.

[...]
[2006/08/11 13:38:11, 3] lib/util_sid.c:string_to_sid(223)
  string_to_sid: Sid reader does not start with 'S-'.
[2006/08/11 13:38:11, 3] lib/util_sid.c:string_to_sid(223)
  string_to_sid: Sid Harry does not start with 'S-'.
[2006/08/11 13:38:11, 3] smbd/sec_ctx.c:push_sec_ctx(208)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2006/08/11 13:38:11, 3] smbd/uid.c:push_conn_ctx(345)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2006/08/11 13:38:11, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2006/08/11 13:38:11, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/08/11 13:38:11, 3] smbd/sec_ctx.c:push_sec_ctx(208)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2006/08/11 13:38:11, 3] smbd/uid.c:push_conn_ctx(345)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2006/08/11 13:38:11, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2006/08/11 13:38:11, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/08/11 13:38:11, 2] smbd/service.c:make_connection_snum(571)
  user 'reader' (from session setup) not permitted to access this share (smReader)
[2006/08/11 13:38:11, 3] smbd/error.c:error_packet(146)
  error packet at smbd/reply.c(676) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED
[2006/08/11 13:38:11, 3] smbd/process.c:process_smb(1110)
  Transaction 4 of length 43
[2006/08/11 13:38:11, 3] smbd/process.c:switch_message(914)
  switch message SMBulogoffX (pid 4834) conn 0x0
[2006/08/11 13:38:11, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/08/11 13:38:11, 3] smbd/reply.c:reply_ulogoffX(1618)
  ulogoffX vuid=101
[2006/08/11 13:38:11, 3] smbd/process.c:timeout_processing(1359)
  timeout_processing: End of file from client (client has disconnected).
[2006/08/11 13:38:11, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/08/11 13:38:11, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to 
[2006/08/11 13:38:11, 3] smbd/server.c:exit_server_common(675)
  Server exit (normal exit)
[2006/08/11 13:38:11, 3] auth/auth.c:check_ntlm_password(221)
  check_ntlm_password:  Checking password for unmapped user [Harvey]\[reader]@[HARVEY] with the new password interface

[...]

Then about 60 more lines and I see:

[2006/08/11 14:05:19, 3] auth/auth.c:check_ntlm_password(270)
  check_ntlm_password: sam authentication for user [reader] succeeded

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] samba log hell

[Richard Fish]

On 8/11/06, reader@newsguy.com <reader@newsguy.com> wrote:
> I'm having a time getting samba working after having it working for
> mnths.  I did do a major update world.  At the end when adjusting
> files under /etc/  I rejected the new smb.conf keeping my old config
> which is still in place.

That was probably a mistake...my experience with the samba ebuild is
that it doesn't want to install it's own private copy of the
configuration, but a modified version of the existing config.  So it
is usually an indicator that something important has changed in the
configuration.

> [2006/08/11 13:38:11, 2] smbd/service.c:make_connection_snum(571)
>   user 'reader' (from session setup) not permitted to access this share (smReader)
> [2006/08/11 13:38:11, 3] smbd/error.c:error_packet(146)
>   error packet at smbd/reply.c(676) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED

My interpretation of this is that the authentication part went fine,
but this user is not allowed to access the share.  I think we'll need
to see your smb.conf file to make sense of this.  It would also help
to know what version of samba you are running, and what use flags you
merged it with.

-Richard
-- 
gentoo-user@gentoo.org mailing list