H
H
Harbid Abu Marhamedoff2019-02-09 20:04:02
Debian
Harbid Abu Marhamedoff, 2019-02-09 20:04:02

How to make Samba create ipc$?

There was a need in a remote office to put a server on Samba. There are already two in the main office, a kind of cluster has been made of them with synchronization from one to the other. I found a server, installed Debian 8 and Samba, took the config of one of the servers as a basis, corrected the share set, created users. I try to get on the network - it does not work. Neither since 2003 the server does not start up, nor from 7/10/2008/2008r2. I tried, for starters, to redo it again. After all, it doesn’t happen that in the samba config they kill several balls, change the server name - and it doesn’t work! I conjured for a couple of days, there is no result. From tried:
* 2 other servers;
* 3 times everything rearranged;
* different configuration options - by hand, using webmin, different pieces from old configs and the Internet;
* cloned the screw image of the running server to the deployed one, reconfigured everything as for a new server...
All to no avail. Rather, the results appeared, but not the ones you need. The best that managed to be achieved is work on 2003 server. I suppose it would also work on WinXP, but this is somewhat irrelevant, and it is no longer absolutely necessary for the server to work only in this mode.
Threw. Weekend. I tried to install Samba on Debian home 10 - everything works!
I began to dig, checked sockstat, the same ports are open as on the original server, which is working. Went deeper, found out that the ipc$ ball is created on the working one, but not on this one. And the old version of smb manages remarkably well without ipc$, but smb3 - fig :( And ipc$ is not registered in the config, however, one creates servers, and the second does not. And it does not work on the second. already extremely problematic) shows that the protocol is selected first, it stops at SMB2_FF:

spoiler
...
[2019/02/09 23:52:51.379986, 3] ../source3/smbd/negprot.c:603(reply_negprot)
Requested protocol [LANMAN2.1]
[2019/02/09 23:52:51.380012, 3] ../source3/smbd/negprot.c:603(reply_negprot)
Requested protocol [NT LM 0.12]
[2019/02/09 23:52:51.380038, 3] ../source3/smbd/negprot.c:603(reply_negprot)
Requested protocol [SMB 2.002]
[2019/02/09 23:52:51.380064, 3] ../source3/smbd/negprot.c:603(reply_negprot)
Requested protocol [SMB 2.???]
[2019/02/09 23:52:51.380264, 3] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot)
Selected protocol SMB2_FF

Then the authorization options are selected:
spoiler
[2019/02/09 23:52:51.383151, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'gssapi_spnego' registered
[2019/02/09 23:52:51.383210, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'gssapi_krb5' registered
[2019/02/09 23:52:51.383239, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'gssapi_krb5_sasl' registered
[2019/02/09 23:52:51.383267, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'spnego' registered
[2019/02/09 23:52:51.383295, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'schannel' registered
[2019/02/09 23:52:51.383321, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'naclrpc_as_system' registered
[2019/02/09 23:52:51.383348, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'sasl-EXTERNAL' registered
[2019/02/09 23:52:51.383375, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'ntlmssp' registered
[2019/02/09 23:52:51.383401, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'ntlmssp_resume_ccache' registered
[2019/02/09 23:52:51.383428, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'http_basic' registered
[2019/02/09 23:52:51.383455, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'http_ntlm' registered
[2019/02/09 23:52:51.383482, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'krb5' registered
[2019/02/09 23:52:51.383509, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'fake_gssapi_krb5' registered
[2019/02/09 23:52:51.383659, 3] ../source3/smbd/negprot.c:744(reply_negprot)
Selected protocol SMB 2.???

Something goes wrong, there is a transition to version 2.10:
spoiler
[2019/02/09 23:52:51.384181, 3] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot)
Selected protocol SMB2_10
[2019/02/09 23:52:51.385681, 3] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0xe2088297
[2019/02/09 23:53:10.329146, 3] ../source3/smbd/oplock.c:1328(init_oplocks)
init_oplocks: initializing messages.
[2019/02/09 23:53:10.329280, 3] ../source3/smbd/process.c:1958(process_smb)
Transaction 0 of length 108 (0 toread)
[2019/02/09 23:53:10.329622, 3] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot)
Selected protocol SMB2_10
[2019/02/09 23:53:10.333317, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'gssapi_spnego' registered
[2019/02/09 23:53:10.333384, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'gssapi_krb5' registered
[2019/02/09 23:53:10.333413, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'gssapi_krb5_sasl' registered
[2019/02/09 23:53:10.333446, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'spnego' registered
[2019/02/09 23:53:10.333472, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'schannel' registered
[2019/02/09 23:53:10.333504, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'naclrpc_as_system' registered
[2019/02/09 23:53:10.333530, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'sasl-EXTERNAL' registered
[2019/02/09 23:53:10.333555, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'ntlmssp' registered
[2019/02/09 23:53:10.333582, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'ntlmssp_resume_ccache' registered
[2019/02/09 23:53:10.333614, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'http_basic' registered
[2019/02/09 23:53:10.333640, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'http_ntlm' registered
[2019/02/09 23:53:10.333666, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'krb5' registered
[2019/02/09 23:53:10.333692, 3] ../auth/gensec/gensec_start.c:908(gensec_register)
GENSEC backend 'fake_gssapi_krb5' registered
[2019/02/09 23:53:10.335111, 3] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0xe2088297
[2019/02/09 23:53:51.412287, 2] ../source3/smbd/process.c:2877(deadtime_fn)
Closing idle connection
[2019/02/09 23:53:51.412555, 3] ../source3/smbd/server.c:156(msg_exit_server)
got a SHUTDOWN message
[2019/02/09 23:53:51.412896, 3] ../source3/smbd/server_exit.c:246(exit_server_common)
Server exit (normal exit)
[2019/02/09 23:54:10.359044, 2] ../source3/smbd/process.c:2877(deadtime_fn)
Closing idle connection
[2019/02/09 23:54:10.359250, 3] ../source3/smbd/server.c:156(msg_exit_server)
got a SHUTDOWN message
[2019/02/09 23:54:10.359584, 3] ../source3/smbd/server_exit.c:246(exit_server_common)
Server exit (normal exit)

It tries to do something, it fails, the process thinks and after some more time the attempts stop.
This is not clear, why is it so? And what to do with it? You need to make a server!

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question