Topic: SME Server 10 and samba Windows 10 / 7 not working

[jatan]

Hi

I need some assistance please.
I have a fresh SME Server 10 and have zero luck in getting Windows 10 to access the samba shares.
I am not even getting a login prompt for samba...  Can get to the server-manager, ssh etc. though...

All the PC's work Ok with the current Sme Server 9.xx (latest version) currently still in use.   (Memory serves I had to change settings on Windows to work with SME Server 9...)

I am also trying a fresh Windows 10 install without any luck.

[TerryF]

There is a wealth of discussion in the forums re why and how.

Fresh windows 10 install, you will have no problems mapping a share, to browse you need to use the contrib wsdd.

If you changed windows settings, what did you change? if it was to reconfigure smb etc there is MS documentation that covers how to set and reset.

If you have a read of the wsdd contrib details in the wiki it expands on the why

[ReetP]

Please use the search buttom here & on the wiki.

smeserver-wsdd

[jatan]

Good day
Thanks for the replies.

I have installed the mentioned add-on, but I still cannot connect to \\192.168.0.61 (ip of sme server 10) with windows 10 file explorer.

This installation is on bare metal HP Microserver Gen10...
The idea is for it to replace the old V9.x Sme server..
I have sync'd all the data, user accounts etc. from the old server to this one, which took days...

I have also quick setup a new installation (Clean) on ESXI and that seems to work like expected, even before any additional add-ons or modifications.  I can at least connect to a samba /share via my current PC's and a fresh Windows 10 install...
So it looks like the problem is only with the current install...



For what it is worth:


[root@smeserver2 ~]# testparm
Load smb config files from /etc/samba/smb.conf
Loaded services file OK.
Server role: ROLE_STANDALONE

Press enter to see a dump of your service definitions

# Global parameters
[global]
        add machine script = /sbin/e-smith/signal-event machine-account-create '%u'
        bind interfaces only = Yes
        check password script = /sbin/e-smith/samba_check_password
        client max protocol = SMB3
        client min protocol = SMB2
        deadtime = 10080
        dns proxy = No
        domain master = No
        dos charset = 850
        guest account = public
        interfaces = 127.0.0.1 192.168.0.61/255.255.255.0
        log file = /var/log/samba/log.%m
        logon drive = Z:
        max log size = 50
        name resolve order = wins lmhosts bcast
        netbios name = FILESERVER
        os level = 35
        pam password change = Yes
        passdb backend = smbpasswd:/etc/samba/smbpasswd
        passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully*
        passwd program = /usr/bin/passwd %u
        printcap name = /etc/printcap
        private dir = /etc/samba
        security = USER
        server max protocol = NT1
        server min protocol = NT1
        server string = SME Server
        smb passwd file = /etc/samba/smbpasswd
        smb ports = 139 445
        unix charset = UTF8
        unix extensions = No
        unix password sync = Yes
        workgroup = LOGICHEM
        idmap config * : backend = tdb
        case sensitive = No
        hosts allow = 127.0.0.1 192.168.0.0/255.255.255.0
        kernel oplocks = Yes
        print command = /usr/bin/lpr -b -h -r -P%p %s
        printing = lprng
        strict locking = No


[homes]
        browseable = No
        comment = Home directory
        create mask = 0660
        directory mask = 0770
        force create mode = 0660
        force directory mode = 0770
        path = /home/e-smith/files/users/%S/home
        read only = No


[printers]
        browseable = No
        comment = All Printers
        path = /var/spool/samba
        printable = Yes
        use client driver = Yes


[print$]
        comment = Printer drivers
        guest ok = Yes
        path = /home/e-smith/files/samba/printers


[Primary]
        comment = Primary i-bay
        create mask = 0640
        inherit permissions = Yes
        path = /home/e-smith/files/ibays/Primary
        read only = No


[backups]
        comment = Backup Folder
        create mask = 0660
        inherit permissions = Yes
        path = /home/e-smith/files/ibays/backups/files
        read only = No


[data]
        comment = Data Folder
        create mask = 0660
        inherit permissions = Yes
        path = /home/e-smith/files/ibays/data/files
        read only = No


[shares]
        comment = Shares Folder
        create mask = 0664
        inherit permissions = Yes
        path = /home/e-smith/files/ibays/shares/files
        read only = No

==========================================================================

I am not a *nix guy so my knowledge and patience is limited unfortunately.
Any suggestions in resolving this problem is appreciated.

[ReetP]

WSDD just replaces the network browsing functions you lost with SMB3.

So \\192.168.0.x should just work regardless.

The answer will lie in your logs.

First, in Windows, and second in your server - look at /var/log/messages and probably /var/log/samba/log.*

Without that there is nothing much else we can do.

I do note this:

I have sync'd all the data, user accounts etc. from the old server to this one, which took days...

First, why didn't you follow the recommended backup/restore, particularly if you are not *nix conversant? It is designed to help prevent these sorts of issues.

Second exactly how did you do this, and why did it take so long?

Third, please go to the server manager, look for "Report a bug" lower left, run and paste the output here please.

A read through this might help you too.

https://forums.koozali.org/index.php/topic,54724.0.html

[Jean-Philippe Pialasse]

hint: to be able to use SME 9.x (deprecated) on win 7 (deprecated) and win10 you had to force those OS to use smb1 aka nt1 (insecure) and disable smb2 and smb3. 

you have to reverse that

[ReetP]

hint: to be able to use SME 9.x (deprecated) on win 7 (deprecated) and win10 you had to force those OS to use smb1 aka nt1 (insecure) and disable smb2 and smb3. 

Ah yes - good spot!!

[TerryF]

Good day
Thanks for the replies.

I have installed the mentioned add-on, but I still cannot connect to \\192.168.0.61 (ip of sme server 10) with windows 10 file explorer.

You need to add a folder name as well..the windows 10 form describes that at its top, so \\192.168.0.61\somefolderthatisaccessable

[jatan]

You need to add a folder name as well..the windows 10 form describes that at its top, so \\192.168.0.61\somefolderthatisaccessable

\\192.168.0.61\    should be all that is needed to get to a login prompt at least.
If logged in, above will give me the list of "shared folders"

[jatan]

Hi

Explanation of the procedures I tried to follow to "upgrade" to SME Server 10.

I followed the normal " Perform backup to removable media"   (after logging in as admin)  (nearly 1.5Tb of data)
That I restored to the new server after the initial install.

I installed the "OS" on a sdd and used 2 x 4Tb sata hdd's (software raid 1) to host /home/e-smith/files

That all seems to work ok...

I then installed "lazy admin tools" (and following the guides under that pages) to sync all the different user emails again before trying to change over the new server to production...
There are literally 100's of new / filed / moved / marked as read etc. emails / day that needs to be sync'd exactly right...

If there is a better / easier / more current way of doing it for SME 10 I was not able to find it among the information on the website.

The only add-ons I have is Fetchmail, lazy admin tools, password, and email queue management


The requested "Report a bug"

Configuration report created Tue 22 Feb 2022 08:07:37 AM SAST

==================
Base configuration
==================

SME server version:      10.0
SME server mode:         serveronly
SME server previous mode: serveronly
Running Kernel:          3.10.0-1160.53.1.el7.x86_64



===========================
New RPMs not in base system
===========================
       
Loaded plugins: fastestmirror, post-transaction-actions, priorities, smeserver
Loading mirror speeds from cached hostfile
 * base: mirror.ufs.ac.za
 * smeaddons: mirror.canada.pialasse.com
 * smeos: mirror.canada.pialasse.com
 * smeupdates: mirror.canada.pialasse.com
 * updates: mirror.ufs.ac.za
Extra Packages
libicu69.x86_64                         69.1-2.el7.remi             installed   
libzstd.x86_64                          1.5.0-1.el7                 installed   
perl-Unicode-IMAPUtf7.noarch            2.01-1.of.el7               @smecontribs
php81-php.x86_64                        8.1.3-1.el7.remi            @remi-safe 
php81-php-bcmath.x86_64                 8.1.3-1.el7.remi            @remi-safe 
php81-php-cli.x86_64                    8.1.3-1.el7.remi            @remi-safe 
php81-php-common.x86_64                 8.1.3-1.el7.remi            @remi-safe 
php81-php-enchant.x86_64                8.1.3-1.el7.remi            @remi-safe 
php81-php-fpm.x86_64                    8.1.3-1.el7.remi            @remi-safe 
php81-php-gd.x86_64                     8.1.3-1.el7.remi            @remi-safe 
php81-php-imap.x86_64                   8.1.3-1.el7.remi            @remi-safe 
php81-php-intl.x86_64                   8.1.3-1.el7.remi            @remi-safe 
php81-php-ldap.x86_64                   8.1.3-1.el7.remi            @remi-safe 
php81-php-mbstring.x86_64               8.1.3-1.el7.remi            @remi-safe 
php81-php-mysqlnd.x86_64                8.1.3-1.el7.remi            @remi-safe 
php81-php-opcache.x86_64                8.1.3-1.el7.remi            @remi-safe 
php81-php-pdo.x86_64                    8.1.3-1.el7.remi            @remi-safe 
php81-php-pear.noarch                   1:1.10.13-1.el7.remi        installed   
php81-php-pecl-xmlrpc.x86_64            1.0.0~rc3-1.el7.remi        installed   
php81-php-pecl-zip.x86_64               1.20.0-1.el7.remi           installed   
php81-php-process.x86_64                8.1.3-1.el7.remi            @remi-safe 
php81-php-snmp.x86_64                   8.1.3-1.el7.remi            @remi-safe 
php81-php-soap.x86_64                   8.1.3-1.el7.remi            @remi-safe 
php81-php-sodium.x86_64                 8.1.3-1.el7.remi            @remi-safe 
php81-php-tidy.x86_64                   8.1.3-1.el7.remi            @remi-safe 
php81-php-xml.x86_64                    8.1.3-1.el7.remi            @remi-safe 
php81-runtime.x86_64                    8.1-1.el7.remi              installed   
smeserver-fetchmail.noarch              1.6-22.el7.sme              @smecontribs
smeserver-lazy_admin_tools.noarch       1.1-6.el7.sme               @smecontribs
smeserver-mailsorting.noarch            1.4-14.el7.sme              @smecontribs
smeserver-password.noarch               1.2.0-13.el7.sme            @smecontribs
smeserver-qmHandle.noarch               1.4-16.el7.sme              @smecontribs
smeserver-userpanel.noarch              1.4-3.el7.sme               @smecontribs
smeserver-wsdd.noarch                   0.2-5.el7.sme               @smecontribs
wsdd.noarch                             0.7.0-1.el7                 @smecontribs
 



===========================
Custom and modified templates
===========================




===========================
Modified events
===========================




=======================
Additional repositories
=======================

base: enabled
centosplus: disabled
extras: disabled
fasttrack: disabled
remi-safe: enabled
smeaddons: enabled
smecontribs: disabled
smedev: disabled
smeextras: enabled
smeos: enabled
smetest: disabled
smeupdates: enabled
smeupdates-testing: disabled
updates: enabled
         

DONE!

[TerryF]

\\192.168.0.61\    should be all that is needed to get to a login prompt at least.
If logged in, above will give me the list of "shared folders"

mate if you know the answers why ask the questions? see my first answer above..

[jatan]

Again, Thanks for your feedback.

It not helping though.

I am hosing this installation and starting from the beginning rather.

[ReetP]

Again, Thanks for your feedback.

It not helping though.

I am hosing this installation and starting from the beginning rather.

Really?

I guarantee that after lots of hours (days in your case) you will be back here asking EXACTLY the same question.... because another restore will not fix it.

You have been given lots of information but you have not really had a look at what you have done or read anything in the forums or wiki or thought about what you changed on v9. If you make changes you REALLY must keep notes so you can undo when necessary.

So a clue. Read what JP said

hint: to be able to use SME 9.x (deprecated) on win 7 (deprecated) and win10 you had to force those OS to use smb1 aka nt1 (insecure) and disable smb2 and smb3. 

you have to reverse that

Go and look at these. Compare say a clean install v10 vs your restore version.

        server max protocol = NT1
        server min protocol = NT1