Windows 7 enterprise and samba shares does not work :-(

[Viking]

Hi,

have used my old Windows 7 (work) PC for a long time togehter with linuxmce 0810.
Now I have a new job and a now I have an new PC. For some reason it ist not able to mount the samba shares public and my user.

I have tried searching for a fix, but not found any working yet. I don't remember what I did to fix the old one :-(

http://www.enterprisenetworkingplanet.com/windows/article.php/3849061/Use-Samba-With-Windows-7-Clients.htm did not work

C:\Windows\system32>net use S: /user:dcerouter\XXXXXXX \\dcerouter\public
Enter the password for 'dcerouter\XXXXXXX' to connect to 'dcerouter':
System error 64 has occurred.

The specified network name is no longer available.

A local mount on dcerouter with the same user works

mount -t cifs -o user=XXXXXXX //dcerouter/public /tmp/testcja/

This is the log:

[2012/07/02 00:07:01,  2] smbd/sesssetup.c:setup_new_vc_session(1363)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2012/07/02 00:07:01,  2] smbd/sesssetup.c:setup_new_vc_session(1363)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2012/07/02 00:07:01,  2] auth/auth.c:check_ntlm_password(318)
  check_ntlm_password:  Authentication for user [christian] -> [pluto_christian] FAILED with error NT_STATUS_WRONG_PASSWORD
[2012/07/02 00:07:06,  2] smbd/sesssetup.c:setup_new_vc_session(1363)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2012/07/02 00:07:06,  2] smbd/sesssetup.c:setup_new_vc_session(1363)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2012/07/02 00:07:06,  2] auth/auth.c:check_ntlm_password(308)
  check_ntlm_password:  authentication for user [christian] -> [pluto_christian] -> [pluto_christian] succeeded
[2012/07/02 00:07:07,  2] smbd/sesssetup.c:setup_new_vc_session(1363)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2012/07/02 00:07:07,  2] smbd/sesssetup.c:setup_new_vc_session(1363)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2012/07/02 00:07:07,  2] auth/auth.c:check_ntlm_password(308)
  check_ntlm_password:  authentication for user [christian] -> [pluto_christian] -> [pluto_christian] succeeded
[2012/07/02 00:07:08,  2] smbd/sesssetup.c:setup_new_vc_session(1363)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2012/07/02 00:07:08,  2] smbd/sesssetup.c:setup_new_vc_session(1363)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2012/07/02 00:07:08,  2] auth/auth.c:check_ntlm_password(308)
  check_ntlm_password:  authentication for user [christian] -> [pluto_christian] -> [pluto_christian] succeeded
[2012/07/02 00:07:09,  2] smbd/sesssetup.c:setup_new_vc_session(1363)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2012/07/02 00:07:09,  2] smbd/sesssetup.c:setup_new_vc_session(1363)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2012/07/02 00:07:09,  2] auth/auth.c:check_ntlm_password(308)
  check_ntlm_password:  authentication for user [christian] -> [pluto_christian] -> [pluto_christian] succeeded
[2012/07/02 00:07:10,  2] smbd/sesssetup.c:setup_new_vc_session(1363)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2012/07/02 00:07:10,  2] smbd/sesssetup.c:setup_new_vc_session(1363)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2012/07/02 00:07:10,  2] auth/auth.c:check_ntlm_password(308)
  check_ntlm_password:  authentication for user [christian] -> [pluto_christian] -> [pluto_christian] succeeded
[2012/07/02 00:07:10,  1] smbd/service.c:make_connection_snum(1213)
  cja-pc (192.168.80.151) connect to service public initially as user pluto_christian (uid=10000, gid=10000) (pid 31249)
[2012/07/02 00:07:10,  1] smbd/service.c:close_cnum(1424)
  cja-pc (192.168.80.151) closed connection to service public

log with debug level 3 can be sent.

this is the end of that log :

[2012/07/02 00:00:20,  3] lib/util_seaccess.c:se_access_check(252)
  se_access_check: user sid is S-1-5-21-2783984861-1734834577-1939827477-21000
  se_access_check: also S-1-22-2-10000
  se_access_check: also S-1-1-0
  se_access_check: also S-1-5-2
  se_access_check: also S-1-5-11
  se_access_check: also S-1-22-2-1002
[2012/07/02 00:00:20,  3] smbd/sec_ctx.c:set_sec_ctx(324)
  setting sec ctx (10000, 10000) - sec_ctx_stack_ndx = 0
[2012/07/02 00:00:20,  1] smbd/service.c:make_connection_snum(1213)
  cja-pc (192.168.80.151) connect to service public initially as user pluto_christian (uid=10000, gid=10000) (pid 23297)
[2012/07/02 00:00:20,  3] smbd/sec_ctx.c:set_sec_ctx(324)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/07/02 00:00:20,  3] smbd/reply.c:reply_tcon_and_X(727)
  tconX service=PUBLIC
[2012/07/02 00:00:20,  3] smbd/process.c:smbd_process(2058)
 receive_message_or_smb failed: NT_STATUS_END_OF_FILE, exiting
[2012/07/02 00:00:20,  3] smbd/sec_ctx.c:set_sec_ctx(324)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/07/02 00:00:20,  3] smbd/sec_ctx.c:set_sec_ctx(324)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/07/02 00:00:20,  1] smbd/service.c:close_cnum(1424)
  cja-pc (192.168.80.151) closed connection to service public
[2012/07/02 00:00:20,  3] smbd/connection.c:yield_connection(31)
  Yielding connection to public
[2012/07/02 00:00:20,  3] smbd/sec_ctx.c:set_sec_ctx(324)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/07/02 00:00:20,  3] smbd/connection.c:yield_connection(31)
  Yielding connection to
[2012/07/02 00:00:20,  3] smbd/server.c:exit_server_common(949)
  Server exit (normal exit)

[maverick0815]

why are you making so complicated? Have you tried exploring your network neighbourhood on your windows7 pc? You should see dcerouter there and the exposed shares...really easypeasy.

[DragonK]

Tried mounting on ip adress instead of dcerouter?

[Viking]

Hi,

Yes, have tried with the IP instead.

Browsing does not show the server. See attached screenshot.

Has anybody updated the Samba server? And from where?

Regards Viking

[JaseP]

I don't know if this will help:

http://wiki.samba.org/index.php/Windows7

Check the running version of samba with;

smbd -V

To see which version you're running. Changing the running version could possibly effect things, such as MythTV,... so, be careful.

[Viking]

Hi,

also found that link. According to the page my Samab is not comapible. But the thing is that it has worked for years with my old windows 7 !?

smbd -V
Version 3.2.3

Regards
Viking

[mkbrown69]

I seem to remember having to force Windows Vista to use NTLM v2 many moons ago to make it work with Samba.  You might want to google for Vista +Samba +NTLM, and see if that does it for you.

Chances are, your old employer's infrastructure may have had some legacy systems that they had to force compatibility with, whereas your new system image doesn't have that "'baggage".

It's not likely to be a Samba issue, because I'm running Samba with Vista (laptop) and a Windows Home Server 2011 VM (based on Server 2008r2) at home, with no issues for years now.  I do remember setting a couple of parameters in my smb.conf file, so I'll look those up later when I'm home to see what I'd set.

HTH!

/Mike

[Viking]

Hi Mike,

Thanks for your post, I am looking forward to hear what you did change :-)

it is probably something with windows 7. I have done a wireshark capture of the traffic and it looks like the session is handled nicely and then the windows 7 PC sends an RST (reset) package. So there the communication dies. But the quetsion is why it does that !?
I have tried all the registry keys I have found, but they did not help.

I assume it is somethin that my new company has configured / installed that does this :-( I have an idea that it might be direct access

I came a little further with adding port 445 in samba, but not really a big leap.
http://social.technet.microsoft.com/Forums/en-US/forefrontedgeiag/thread/06eaa59f-c620-4e38-99e0-79a63c7c49cc/

Maybe a newer version of samba fixes it, but I am not sure :-(

Regards
Viking

[Viking]

Here a screenshot attached of the communication and the red line is where it dies :-(

But before that in frame 294 linuxmce tells the PC that it is happy = "status_success" - see the blue/yellow ugly arrow i have drawn ;-)

[JaseP]

If you don't make any progress, you may want to consider upgrading to 10.04... I think it's running 3.4.7.

[mkbrown69]

Ok, I'm running 3.5.6 on Debian Squeeze.  The following was added for Vista Compatibility, which should work with 7.

Code: [Select]

#vista compatibility
        client lanman auth = no
        client ntlmv2 auth = yes
        domain logons = yes
        guest account = nobody
        map untrusted to domain = yes

I also have local and preferred master set to yes, time server and wins server also set to yes.  You'll likely have to configure Win 7 for NTLMv2 as well.

HTH!

/Mike

[Viking]

If you don't make any progress, you may want to consider upgrading to 10.04... I think it's running 3.4.7.

Hmm, anyone running this sort of "stable" ?

Took some time to get 0810 working as it should.

[Viking]

Ok, I'm running 3.5.6 on Debian Squeeze.  The following was added for Vista Compatibility, which should work with 7.

Code: [Select]

#vista compatibility
        client lanman auth = no
        client ntlmv2 auth = yes
        domain logons = yes
        guest account = nobody
        map untrusted to domain = yes

I also have local and preferred master set to yes, time server and wins server also set to yes.  You'll likely have to configure Win 7 for NTLMv2 as well.

HTH!

/Mike

OK, will look into that. But looks like some of the options only are for newer versions of samba.

[Viking]

Hi,

it all did not help. I have given up after lots of hours of debugging. My windows 7 is somehow "broken" for samba. I have now installed a Davenport webdav smb gateway and am now accessing the files through that. Maybe I will reinstall windows at some point.

You can find it here:
http://sourceforge.net/projects/davenport/

There is a bug that needs to be fixed. I have attached the davenport.jar if anybody will need it :
http://sourceforge.net/tracker/index.php?func=detail&aid=2927543&group_id=78146&atid=552288