Hi,
I updated some packages today and rebooted the server, I can not access Flexshare Shared directories anymore.
/var/log/messages
I updated some packages today and rebooted the server, I can not access Flexshare Shared directories anymore.
/var/log/messages
Jul 6 23:42:56 gateway smbd[28561]: [2018/07/06 23:42:56.144183, 0] ../source3/auth/user_util.c:358(map_username)
Jul 6 23:42:56 gateway smbd[28561]: can't open username map /etc/samba/smbusers. Error No such file or directory
Jul 6 23:42:56 gateway smbd[28561]: [2018/07/06 23:42:56.151721, 0] ../source3/auth/user_util.c:358(map_username)
Jul 6 23:42:56 gateway smbd[28561]: can't open username map /etc/samba/smbusers. Error No such file or directory
Jul 6 23:42:56 gateway smbd[28561]: [2018/07/06 23:42:56.158500, 0] ../source3/auth/user_util.c:358(map_username)
Jul 6 23:42:56 gateway smbd[28561]: can't open username map /etc/samba/smbusers. Error No such file or directory
Jul 6 23:42:56 gateway smbd[28561]: [2018/07/06 23:42:56.165455, 0] ../source3/auth/user_util.c:358(map_username)
Jul 6 23:42:56 gateway smbd[28561]: can't open username map /etc/samba/smbusers. Error No such file or directory
Jul 6 23:43:16 gateway smbd[28561]: [2018/07/06 23:43:16.185458, 0] ../source3/auth/user_util.c:358(map_username)
Jul 6 23:43:16 gateway smbd[28561]: can't open username map /etc/samba/smbusers. Error No such file or directory
In Flexshare
Share this post:
Accepted Answer
Instead of downgrading, can someone who is experiencing this issue try the following:
Please test modifying the line in /etc/samba/smb.conf to be the following:
allow trusted domains = yes
This is for those that are using ClearOS as a NAS with no domain logons.
I'm curious to know if this fixes the Samba issue reported with the update.
Please test modifying the line in /etc/samba/smb.conf to be the following:
allow trusted domains = yes
This is for those that are using ClearOS as a NAS with no domain logons.
I'm curious to know if this fixes the Samba issue reported with the update.
Responses (45)
-
Accepted Answer
-
Accepted Answer
Nick Howitt wrote:
Can you please try starting ldap from the command line interactively:
Please report what happens.slapd -h "ldap://127.0.0.1/" -u ldap -f "/etc/openldap/slapd.conf" -d 256
Have you by any chance lost an interface?
Or did you have any where you had to load the drivers yourself?ifconfig
slapd -h "ldap://127.0.0.1/" -u ldap -f "/etc/openldap/slapd.conf" -d 256
5b6db4f0 @(#) $OpenLDAP: slapd 2.4.44 (Jul 4 2018 20:05:05) $
mockbuild@build64-1.clearsdn.local:/builddir/build/BUILD/openldap-2.4.44/openldap-2.4.44/servers/slapd
5b6db4f0 /etc/openldap/slapd.conf: line 63: invalid path: No such file or directory
5b6db4f0 slapd stopped.
5b6db4f0 connections_destroy: nothing to destroy.
And the answers to your questions are both NO.
Is not a big deal since I have a snapshot from a working configuration, but it's taking me back of install clearOs in other environments
Thanks for you help again. -
Accepted Answer
-
Accepted Answer
Nick Howitt wrote:
I've deleted your duplicate post. As you've now had two posts approved by the mods they should now automatically appear.
It sounds like you have more than one problem.
For DNS, please do a:
Then look in /var/log/messages for errors.systemctl restart dnsmasq.service
For Samba, please can you do a:
Then try starting any not running (not sure about winbind - it depends on your set up) and have a look in the logs (various including in /var/log/samba/)systemctl status smb.service
systemctl status nmb.service
systemctl status winbind.service
Please can you also check slapd is running with a:
systemctl status slapd.service
Hi Nick... Really appreciate with your quick answer.
Let's go step by step.
I am checking those logs on /varl/logs/messages
YUM REPO
Loaded plugins: clearcenter-marketplace, fastestmirror
ClearCenter Marketplace: fetching repositories...
Loading mirror speeds from cached hostfile
* clearos: www.mirrorservice.org
* clearos-centos: download3.clearsdn.com
* clearos-centos-sclo-rh: download3.clearsdn.com
* clearos-centos-updates: download3.clearsdn.com
* clearos-contribs: www.mirrorservice.org
* clearos-epel: download3.clearsdn.com
* clearos-fast-updates: download3.clearsdn.com
* clearos-infra: www.mirrorservice.org
* clearos-updates: www.mirrorservice.org
* private-clearcenter-dyndns: download1.clearsdn.com:80
repo id repo name status
clearos/7 ClearOS 7 - x86_64 - OS 748
clearos-centos/x86_64 CentOS-7 - x86_64 - Base 9,813+98
clearos-centos-sclo-rh/x86_64 CentOS-7 - x86_64 - CentOS Software Collections 7,599
clearos-centos-updates/x86_64 CentOS-7 - x86_64 - Updates 737+70
clearos-contribs/7 ClearOS 7 - x86_64 - Contribs 127
clearos-epel/7/x86_64 EPEL 7 - x86_64 12,607+1
clearos-fast-updates/x86_64 ClearOS 7 - x86_64 - Fast Updates 14
clearos-infra/7 ClearOS 7 - x86_64 - Infrastructure 16
clearos-updates/7 ClearOS 7 - x86_64 - Updates 443
private-clearcenter-dyndns ClearCenter Dynamic DNS 2
repolist: 32,106
systemctl restart dnsmasq.service
Aug 10 15:57:21 apscc dnsmasq[4062]: exiting on receipt of SIGTERM
Aug 10 15:57:21 apscc systemd: Stopping DNS caching server....
Aug 10 15:57:21 apscc systemd: Started DNS caching server..
Aug 10 15:57:21 apscc systemd: Starting DNS caching server....
Aug 10 15:57:21 apscc dnsmasq[4123]: started, version 2.76 DNS disabled
Aug 10 15:57:21 apscc dnsmasq[4123]: compile time options: IPv6 GNU-getopt DBus no-i18n IDN DHCP DHCPv6 no-Lua TFTP no-conntrack ipset auth no-DNSSEC loop-detect inotify
Aug 10 15:57:21 apscc dnsmasq-dhcp[4123]: DHCP, IP range 192.168.1.100 -- 192.168.1.150, lease time 1d
Aug 10 15:57:21 apscc dnsmasq-dhcp[4123]: read /etc/ethers - 0 addresses
Aug 10 15:57:36 apscc kernel: hrtimer: interrupt took 2950016 ns
Still cannot resolve.
systemctl status smb.service
● smb.service - Samba SMB Daemon
Loaded: loaded (/usr/lib/systemd/system/smb.service; disabled; vendor preset: disabled)
Active: inactive (dead)
systemctl status nmb.service
● nmb.service - Samba NMB Daemon
Loaded: loaded (/usr/lib/systemd/system/nmb.service; disabled; vendor preset: disabled)
Active: inactive (dead)
Dont have winbind
Unfortunately, smb.log is empty. Samba.log has only information related to the ClearOs before the update and that message is repeated again and again.
[2018/08/05 03:13:53.520595, 0] ../source4/dsdb/dns/dns_update.c:290(dnsupdate_nameupdate_done)
../source4/dsdb/dns/dns_update.c:290: Failed DNS update - with error code 110
[2018/08/05 03:23:53.629345, 0] ../source4/dsdb/dns/dns_update.c:290(dnsupdate_nameupdate_done)
../source4/dsdb/dns/dns_update.c:290: Failed DNS update - with error code 110
[2018/08/05 03:33:53.719739, 0] ../source4/dsdb/dns/dns_update.c:290(dnsupdate_nameupdate_done)
../source4/dsdb/dns/dns_update.c:290: Failed DNS update - with error code 110
[2018/08/05 03:43:53.783479, 0] ../source4/dsdb/dns/dns_update.c:290(dnsupdate_nameupdate_done)
../source4/dsdb/dns/dns_update.c:290: Failed DNS update - with error code 110
LPAD command
[root@apscc ~]# systemctl status slapd.service
● slapd.service - OpenLDAP Server Daemon
Loaded: loaded (/usr/lib/systemd/system/slapd.service; disabled; vendor prese t: disabled)
Active: inactive (dead)
Docs: man:slapd
man:slapd-config
man:slapd-hdb
man:slapd-mdb
file:///usr/share/doc/openldap-servers/guide.html
Thanks a lot again for your help. Have a great day. -
Accepted Answer
Jey Mike Gallego wrote:
The samba service name is smb.conf. In which logs are you seeing the message?
Hello all!
Well, first of all, sorry for the spam. But I have been digging a little bit more into the issue. First of all... message from logs when I try to start Samba from Web
webconfig: Redirecting to /bin/systemctl start samba.service
Failed to start samba.service: Unit not found.
Look there is not samba.service within "/usr/lib/systemd/system", however, I can find smb.service instead.
Can you check guys in yout configuration?
What is you output of:yum repolist
-
Accepted Answer
I've deleted your duplicate post. As you've now had two posts approved by the mods they should now automatically appear.
It sounds like you have more than one problem.
For DNS, please do a:
Then look in /var/log/messages for errors.systemctl restart dnsmasq.service
For Samba, please can you do a:
Then try starting any not running (not sure about winbind - it depends on your set up) and have a look in the logs (various including in /var/log/samba/)systemctl status smb.service
systemctl status nmb.service
systemctl status winbind.service
Please can you also check slapd is running with a:
systemctl status slapd.service
-
Accepted Answer
Hello all!
Well, first of all, sorry for the spam. But I have been digging a little bit more into the issue. First of all... message from logs when I try to start Samba from Web
webconfig: Redirecting to /bin/systemctl start samba.service
Failed to start samba.service: Unit not found.
Look there is not samba.service within "/usr/lib/systemd/system", however, I can find smb.service instead.
Can you check guys in yout configuration? -
Accepted Answer
Nick Howitt wrote:
The root cause seems to be that Samba changed how the parameter was working. It now should be set to "yes" or deleted completely. It may have originally been caused by a misunderstanding on how the parameter should have been set in the first place, but it does not matter now. Updates should now be automatically setting the parameter to "yes" if it exists.
Sadly that didnt work for me. "allow trusted domains = yes" is set and my samba does not start and I also lost the DNS server. Thankfully I have a snapshot but I dont want to give up.
Thanks agagain! -
Accepted Answer
The root cause seems to be that Samba changed how the parameter was working. It now should be set to "yes" or deleted completely. It may have originally been caused by a misunderstanding on how the parameter should have been set in the first place, but it does not matter now. Updates should now be automatically setting the parameter to "yes" if it exists. -
Accepted Answer
-
Accepted Answer
Dave Loper wrote:
The default value, if omitted, is "yes" so it is worth flipping if it is set (newer installations). It may not be worth setting on older installations (like my 6.x -> 7.x backup and restore) as it isn't in the config file at all. Belt and braces says set it anyway.
It looks like this setting as yes or no does not affect computers joined to the domain but only those in NAS mode. I'm going to suggest that this parameter be flipped to Yes on all configs during the upgrade process. -
Accepted Answer
-
Accepted Answer
-
Accepted Answer
Dave Loper wrote:
Instead of downgrading, can someone who is experiencing this issue try the following:
Please test modifying the line in /etc/samba/smb.conf to be the following:
allow trusted domains = yes
This is for those that are using ClearOS as a NAS with no domain logons.
I'm curious to know if this fixes the Samba issue reported with the update.
I upgraded the Samba packages again, changed that option and it worked.
Thank You Dave for this solution,
Thank You Nick for prompt temporary solution. -
Accepted Answer
-
Accepted Answer
I've tested Dave's solution and it works for me - Win10 (1803). I've rejected my post in this thread as being the Accepted Answer and Accepted Dave's. I've also posted to the main thread.
FWIW the repo management is not working well. There was no way to downgrade. It looks like there is also a new installation where the user is unable to install from the marketplace, because his system has not upgraded yet and the lack of old packages is causing dependency problems.
@Tony,
I could not hope to cover all bases with the downgrade. Even to get to where I got with the packages I had to do a dummy upgrade of a Business box to work out all the packages it needed then I download each one with yumdownloader. It is quite possible I picked up more packages than I needed but were needed for that particular set up (e.g. python-dns?). I then tried the downgrade in a VM. That worked so then on my test Community box and I was able to map the drive. It could have been a case of dependency hell! -
Accepted Answer
I'm curious to know if anyone is experiencing this issue if joined to the domain on an upgrade. My suspicion is no. My hypothesis is that this only affects those that use the flexshares in non-domain join modes.
It took me a bit to get the lab set up to replicate the problem and when I got it all done the error messages weren't specific enough so I cranked the log level to 8 and read through both a working 7.4 log trace for the same activity vs. a 7.5 and this is the nugget that I found:
[2018/07/07 19:50:24.871036, 3] ../source3/auth/auth.c:189(auth_check_ntlm_password)
check_ntlm_password: Checking password for unmapped user [dloper-PC]\[dloper]@[DLOPER-PC] with the new password interface
[2018/07/07 19:50:24.871046, 3] ../source3/auth/auth.c:192(auth_check_ntlm_password)
check_ntlm_password: mapped user is: [dloper-PC]\[dloper]@[DLOPER-PC]
[2018/07/07 19:50:24.871054, 5] ../lib/util/util.c:515(dump_data)
[0000] 63 27 DE 1D 18 53 9F 83 c'...S..
[2018/07/07 19:50:24.871070, 8] ../source3/lib/util.c:1252(is_myname)
is_myname("dloper-PC") returns 0
[2018/07/07 19:50:24.871078, 1] ../source3/auth/auth.c:128(check_domain_match)
check_domain_match: Attempt to connect as user dloper from domain dloper-PC denied.
[2018/07/07 19:50:24.871086, 2] ../source3/auth/auth.c:332(auth_check_ntlm_password)
check_ntlm_password: Authentication for user [dloper] -> [dloper] FAILED with error NT_STATUS_LOGON_FAILURE, authoritative=1
[2018/07/07 19:50:24.871124, 2] ../auth/auth_log.c:760(log_authentication_event_human_readable)
At first, I thought that there was an LDAP problem because of the unmatched users bit but then I reasoned that this would NOT be the case since Linux and Macs are working fine so it cannot be that. I also thought that perhaps that the match was an issue but I can see elsewhere in the logs that the match is happening to LDAP. The key was just below where the domain was rejected. The domain, 'dloper-PC', is the machine name of my test computer which I purposefully did NOT join to the domain. So this means that it was rejecting based on the lack of a computer account which is supposed to work based on the NAS model. I then googled a bit to see if that error was known to the samba community. I couldn't find any articles related so I decided to troll through the smb.conf file and the line just stood out to me for some reason.
allow trusted domains = yes
BTW, you only need to change this in the file, you don't need to reboot or restart samba for this to go into effect. -
Accepted Answer
-
Accepted Answer
WARNING! While the solution of downgrading Samba works on a fairly vanilla ClearOS system - there are cases where it will not. The ClearOS systems here have a large number of additional rpms installed including some dependant on the dbus-libs. They were upgraded together with the upgrade to dbus and therefore cause the downgrade to fail the yum check as they are now dependant on the newly up-graded dbus. Would be possible to work out the additional rpms to be downgraded and find them - but this feels like it's opening Pandora's box.
The solution here was to create a Samba "proxy" using a ClearOS 6.9 box... it is a client to all the shares on the upgraded7.5 box, these are then in turn shared to provide access for the Windows boxes. Extra traffic but with very few Windows machines and the fact they are not used that often quite workable .
Just checked with a Windows 7 machine - it is NOT able to access the upgraded ClearOS 7.5 shares, just like the Windows XP and 8.1 boxes are unable to do so. -
Accepted Answer
Dave Loper wrote:
I only went down that route just in case. I was clutching at straws this morning. I have the file which must have copied over from my 6.x to 7.x upgrade, but the others were missing it (hence the message)
The lack of the smbuser file is a red herring. Always has been. We don't use it and samba complains now and again about it missing. -
Accepted Answer
-
Accepted Answer
@Nick
I noticed this problem today when I tried to sync some files from my Android (v4.1) tablet to the COS server. SMB isn't connecting within some apps (Total Commander & Folder Sync) but VLC does connect for some reason. Our Macs running OSX 10.11 through 10.12 can connect OK. We don't have any windows boxes (expect in VMs) so can't comment on those.
Not sure if this helps in some way to narrow down the issue and repeatability.
Thanks for posting the solution. I'll downgrade the files as everything worked fine prior to this mornings update.
**edit** I've just noticed that the smbuser file is not available either. Will look into this.
Also thought I should add the error log from the Android trying to connect
[2018/07/07 12:53:17.805316, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service printers is flagged unavailable.
[2018/07/07 12:53:17.805409, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service print$ is flagged unavailable.
[2018/07/07 12:53:17.805485, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service netlogon is flagged unavailable.
[2018/07/07 12:53:17.805553, 1] ../lib/param/loadparm.c:1856(lpcfg_do_service_parameter)
WARNING: The "profile acls" option is deprecated
[2018/07/07 12:53:17.805644, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service profiles is flagged unavailable.
[2018/07/07 12:53:17.805730, 0] ../source3/auth/user_util.c:358(map_username)
can't open username map /etc/samba/smbusers. Error No such file or directory
[2018/07/07 12:53:17.805851, 1] ../source3/auth/auth.c:128(check_domain_match)
check_domain_match: Attempt to connect as user philip from domain ? denied.
[2018/07/07 12:53:17.812217, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service printers is flagged unavailable.
[2018/07/07 12:53:17.812294, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service print$ is flagged unavailable.
[2018/07/07 12:53:17.812366, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service netlogon is flagged unavailable.
[2018/07/07 12:53:17.812430, 1] ../lib/param/loadparm.c:1856(lpcfg_do_service_parameter)
WARNING: The "profile acls" option is deprecated
[2018/07/07 12:53:17.812515, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service profiles is flagged unavailable.
[2018/07/07 12:53:17.872295, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service printers is flagged unavailable.
[2018/07/07 12:53:17.872379, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service print$ is flagged unavailable.
[2018/07/07 12:53:17.872454, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service netlogon is flagged unavailable.
[2018/07/07 12:53:17.872522, 1] ../lib/param/loadparm.c:1856(lpcfg_do_service_parameter)
WARNING: The "profile acls" option is deprecated
[2018/07/07 12:53:17.872611, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service profiles is flagged unavailable.
[2018/07/07 12:53:17.872660, 0] ../source3/auth/user_util.c:358(map_username)
can't open username map /etc/samba/smbusers. Error No such file or directory
[2018/07/07 12:53:17.872729, 1] ../source3/auth/auth.c:128(check_domain_match)
check_domain_match: Attempt to connect as user guest from domain ? denied.
[2018/07/07 12:53:17.881015, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service printers is flagged unavailable.
[2018/07/07 12:53:17.881120, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service print$ is flagged unavailable.
[2018/07/07 12:53:17.881193, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service netlogon is flagged unavailable.
[2018/07/07 12:53:17.881257, 1] ../lib/param/loadparm.c:1856(lpcfg_do_service_parameter)
WARNING: The "profile acls" option is deprecated
[2018/07/07 12:53:17.881343, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service profiles is flagged unavailable.
[2018/07/07 12:53:20.609846, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service printers is flagged unavailable.
[2018/07/07 12:53:20.609937, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service print$ is flagged unavailable.
[2018/07/07 12:53:20.610013, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service netlogon is flagged unavailable.
[2018/07/07 12:53:20.610094, 1] ../lib/param/loadparm.c:1856(lpcfg_do_service_parameter)
WARNING: The "profile acls" option is deprecated
[2018/07/07 12:53:20.610191, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service profiles is flagged unavailable.
[2018/07/07 12:53:20.610243, 0] ../source3/auth/user_util.c:358(map_username)
can't open username map /etc/samba/smbusers. Error No such file or directory
[2018/07/07 12:53:20.610313, 1] ../source3/auth/auth.c:128(check_domain_match)
check_domain_match: Attempt to connect as user philip from domain ? denied.
[2018/07/07 12:53:20.621440, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service printers is flagged unavailable.
[2018/07/07 12:53:20.621522, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service print$ is flagged unavailable.
[2018/07/07 12:53:20.621597, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service netlogon is flagged unavailable.
[2018/07/07 12:53:20.621665, 1] ../lib/param/loadparm.c:1856(lpcfg_do_service_parameter)
WARNING: The "profile acls" option is deprecated
[2018/07/07 12:53:20.621754, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service profiles is flagged unavailable.
[2018/07/07 12:53:20.641480, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service printers is flagged unavailable.
[2018/07/07 12:53:20.641562, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service print$ is flagged unavailable.
[2018/07/07 12:53:20.641638, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service netlogon is flagged unavailable.
[2018/07/07 12:53:20.641705, 1] ../lib/param/loadparm.c:1856(lpcfg_do_service_parameter)
WARNING: The "profile acls" option is deprecated
[2018/07/07 12:53:20.641795, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service profiles is flagged unavailable.
[2018/07/07 12:53:20.641843, 0] ../source3/auth/user_util.c:358(map_username)
can't open username map /etc/samba/smbusers. Error No such file or directory
[2018/07/07 12:53:20.641905, 1] ../source3/auth/auth.c:128(check_domain_match)
check_domain_match: Attempt to connect as user guest from domain ? denied.
[2018/07/07 12:53:20.650456, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service printers is flagged unavailable.
[2018/07/07 12:53:20.650539, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service print$ is flagged unavailable.
[2018/07/07 12:53:20.650614, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service netlogon is flagged unavailable.
[2018/07/07 12:53:20.650682, 1] ../lib/param/loadparm.c:1856(lpcfg_do_service_parameter)
WARNING: The "profile acls" option is deprecated
[2018/07/07 12:53:20.650771, 1] ../lib/param/loadparm.c:1022(lpcfg_service_ok)
NOTE: Service profiles is flagged unavailable. -
Accepted Answer
-
Accepted Answer
Dave Loper wrote:
I've tried with a second system (an older ClearOS Business downgraded to ClearOS Community) the updates seem to work fine. To be clear, I've tested using my Mac and am now working on standing up a new windows 7 system (my old vm is borked for some reason) to see if it has issues.
I am seeing issues with my Windows 10 box but that could be from the 1803 issue.
Win10 should be OK if you do not enable "Windows 10 Domain Logins". SMB3 will then be used. If you have not enabled this then you have probably reproduced the issue. The only reason I mentioned Business is because that was the only place I could get the old packages from. -
Accepted Answer
I've tried with a second system (an older ClearOS Business downgraded to ClearOS Community) the updates seem to work fine. To be clear, I've tested using my Mac and am now working on standing up a new windows 7 system (my old vm is borked for some reason) to see if it has issues.
I am seeing issues with my Windows 10 box but that could be from the 1803 issue. -
Accepted Answer
Nick Howitt wrote:
From my testing samba is broken and you have to roll it back but the files aren't there. Luckily I have a Business licence which has not upgraded so I've pinched all the packages from there (apologies devs) and I've uploaded them to my server here. I only have 3mbps upload so don't all hit me at once, but you need to download all the 20 packages from there. Someone else can write out the whole wget string!
Then from where you have downloaded them to do a:
And samba should be working again.yum downgrade dbus-1.6.12-17.el7.x86_64.rpm dbus-libs-1.6.12-17.el7.x86_64.rpm dbus-x11-1.6.12-17.el7.x86_64.rpm libldb-1.1.29-1.el7.x86_64.rpm libsmbclient-4.6.2-12.v7.1.x86_64.rpm libwbclient-4.6.2-12.v7.1.x86_64.rpm pyldb-1.1.29-1.el7.x86_64.rpm samba-4.6.2-12.v7.1.x86_64.rpm samba-client-4.6.2-12.v7.1.x86_64.rpm samba-client-libs-4.6.2-12.v7.1.x86_64.rpm samba-common-4.6.2-12.v7.1.noarch.rpm samba-common-libs-4.6.2-12.v7.1.x86_64.rpm samba-common-tools-4.6.2-12.v7.1.x86_64.rpm samba-dc-4.6.2-12.v7.1.x86_64.rpm samba-dc-libs-4.6.2-12.v7.1.x86_64.rpm samba-libs-4.6.2-12.v7.1.x86_64.rpm samba-python-4.6.2-12.v7.1.x86_64.rpm samba-winbind-4.6.2-12.v7.1.x86_64.rpm samba-winbind-clients-4.6.2-12.v7.1.x86_64.rpm samba-winbind-modules-4.6.2-12.v7.1.x86_64.rpm
For completeness also do:yum remove python-dns
The next thing is to block the packages from updating again until notified that they are safe. As a quick and dirty hack edit /etc/yum.conf and add a line:
This will probably stop all updates because of dependency issues. The proper way would be to list the 20 packages in the exclude line, comma separated (I think). This would allow other packages to update in the nightly run.exclude=samba*
Please can somebody test and report back.
Thank you.
Samba/Flexshare is working again.
I mirrored the samba packages here (Gigabit Connection)
gzip of all files
wget command to get them all :
wget -r -e robots=off --wait 1 --no-parent http://blue-pyramid.com/smb
-
Accepted Answer
-
Accepted Answer
From my testing samba is broken and you have to roll it back but the files aren't there. Luckily I have a Business licence which has not upgraded so I've pinched all the packages from there (apologies devs) and I've uploaded them to my server here. I only have 3mbps upload so don't all hit me at once, but you need to download all the 20 packages from there. Someone else can write out the whole wget string!
Then from where you have downloaded them to do a:
And samba should be working again.yum downgrade dbus-1.6.12-17.el7.x86_64.rpm dbus-libs-1.6.12-17.el7.x86_64.rpm dbus-x11-1.6.12-17.el7.x86_64.rpm libldb-1.1.29-1.el7.x86_64.rpm libsmbclient-4.6.2-12.v7.1.x86_64.rpm libwbclient-4.6.2-12.v7.1.x86_64.rpm pyldb-1.1.29-1.el7.x86_64.rpm samba-4.6.2-12.v7.1.x86_64.rpm samba-client-4.6.2-12.v7.1.x86_64.rpm samba-client-libs-4.6.2-12.v7.1.x86_64.rpm samba-common-4.6.2-12.v7.1.noarch.rpm samba-common-libs-4.6.2-12.v7.1.x86_64.rpm samba-common-tools-4.6.2-12.v7.1.x86_64.rpm samba-dc-4.6.2-12.v7.1.x86_64.rpm samba-dc-libs-4.6.2-12.v7.1.x86_64.rpm samba-libs-4.6.2-12.v7.1.x86_64.rpm samba-python-4.6.2-12.v7.1.x86_64.rpm samba-winbind-4.6.2-12.v7.1.x86_64.rpm samba-winbind-clients-4.6.2-12.v7.1.x86_64.rpm samba-winbind-modules-4.6.2-12.v7.1.x86_64.rpm
For completeness also do:yum remove python-dns
The next thing is to block the packages from updating again until notified that they are safe. As a quick and dirty hack edit /etc/yum.conf and add a line:
This will probably stop all updates because of dependency issues. The proper way would be to list the 20 packages in the exclude line, comma separated (I think). This would allow other packages to update in the nightly run.exclude=samba*
Please can somebody test and report back. -
Accepted Answer
-
Accepted Answer
Nick Howitt wrote:
My concern is the devs had issues compiling Samba and it took a while before they could. I wonder if there were incorrect compile options used. I was trying to downgrade but could not and the installation disk does not contain the samba packages.
The samba package is the same as was in the original beta, but I did not look at its filesharing. If anyone else did then samba may not be the cause. More recent updates which come to mind are the openldap ones and these can be downgraded with:
If that fixes it then we'd need to temporarily block the upgrade overnight.yum downgrade openldap openldap-servers openldap-clients
I downgraded openldap packages, restored 2 days ago config files from backup but the issue is still there.
EDIT: Now docker does not start on boot! -
Accepted Answer
My concern is the devs had issues compiling Samba and it took a while before they could. I wonder if there were incorrect compile options used. I was trying to downgrade but could not and the installation disk does not contain the samba packages.
The samba package is the same as was in the original beta, but I did not look at its filesharing. If anyone else did then samba may not be the cause. More recent updates which come to mind are the openldap ones and these can be downgraded with:
If that fixes it then we'd need to temporarily block the upgrade overnight.yum downgrade openldap openldap-servers openldap-clients
-
Accepted Answer
-
Accepted Answer
-
Accepted Answer
-
Accepted Answer
Nick Howitt wrote:
can you try setting up an /etc/samba/smbusers file and put in it:
This is my file from business. My permissions are root:root, 0644 so probably won't need changing.# Unix_name = SMB_name1 SMB_name2 ...
root = administrator admin
nobody = guest pcguest smbguest
Mine was missing too, tried the above, still can't access shares, Downloaded some backup archives from gui and checked inside them, there was no smbusers file in any of them and flexshare was working fine without that file, so it seems that something else causing it.
Then I changed smb log level but there's nothing helpful in the log file. -
Accepted Answer
Just checked in during an Ad break - mine not missing here on Community...
[root@karien samba]# ls -lad smbusers
-rw-r--r-- 1 root root 97 Jan 26 18:46 smbusers
[root@karien samba]# cat smbusers
# Unix_name = SMB_name1 SMB_name2 ...
root = administrator admin
nobody = guest pcguest smbguest
[root@karien samba]#
-
Accepted Answer
Dave has responded in the US but he needs to sleep. I may try looking at is on a spare machine (my main box is Business so does not get the updates for a couple of weeks).
I notice my /etc/samba/smbusers is missing on my Community box. As a quick hack, can you try setting up an /etc/samba/smbusers file and put in it:
This is my file from business. My permissions are root:root, 0644 so probably won't need changing.# Unix_name = SMB_name1 SMB_name2 ...
root = administrator admin
nobody = guest pcguest smbguest
-
Accepted Answer
Nick Howitt wrote:
@Ato, have you tried a reboot?
Yes, Many times.
- I tried to undo the yum update, using yum history, failed.
- I restored config backup of few days ago, Didn't help.
- I commented out the usermap file path in smb.conf, didn't help
2 friends of mine have faced the same after the recent update. -
Accepted Answer
Please login to post a reply
You will need to be logged in to be able to post a reply. Login using the form on the right or register an account if you are new here.
Register Here »