Web lists-archives.com

Re: [Samba] Upgraded from CentOS 6.X to 7.X, samba not working




You should have looked before upgrading. ... 

If its an AD-DC.
The change to samba AD DC with systemd is: 
    systemctl stop smbd nmbd winbind samba
    systemctl disable smbd nmbd winbind samba
    systemctl mask smbd nmbd winbind samba

    systemctl unmask samba-ad-dc
    systemctl enable samba-ad-dc
    systemctl start samba-ad-dc

You should not start nmbd smbd winbind for the AD-DC, the needed things are started by samba-ad-dc

A member needs smbd winbind and optional nmbd.

Now this is on a debian system, but i think these above are the same on centos. 
Then, You could/should have looked at. 
https://wiki.samba.org/index.php/Updating_Samba  

But first, fix you smb.conf, thats most important here. 

These are all the changes. 

smb.conf changes
================
https://www.samba.org/samba/history/samba-4.10.0.html, please read the full changelog.
It contains much more info, the change to samba 4.10 is not a small change.
4.9.x => 4.10.0 : smb.conf changes

  Parameter Name                     Description                Default
  --------------                     -----------                -------
  prefork backoff increment   Delay added to process restart    10 (seconds) between attempts.
  prefork maximum backoff     Maximum delay for process between 120 (seconds) process restart attempts
  smbd search ask sharemode   Name changed, old name was "smbd:search ask sharemode"
  smbd async dosmode          Name changed, old name was "smbd:async dosmode"
  smbd max async dosmode      Name changed, old name was "smbd:max async dosmode"
  smbd getinfo ask sharemode  New: similar to "smbd search ask yes sharemode" but for SMB getinfo


https://www.samba.org/samba/history/samba-4.9.0.html
4.8.x => 4.9.0 : smb.conf changes
As the most popular Samba install platforms (Linux and FreeBSD) both
support extended attributes by default, the parameters "map readonly",
"store dos attributes" and "ea support" have had their defaults changed
to allow better Windows fileserver compatibility in a default install.

  Parameter Name                     Description             Default
  --------------                     -----------             -------
  map readonly                       Default changed              no
  store dos attributes               Default changed             yes
  ea support                         Default changed             yes
  full_audit:success                 Default changed            none
  full_audit:failure                 Default changed            none


https://www.samba.org/samba/history/samba-4.8.0.html
4.7.x => 4.8.0 : smb.conf changes
================
smb.conf changes
================
  Parameter Name                     Description             Default
  --------------                     -----------             -------
  apply group policies               New                     no
  auth methods                       Removed
  binddns dir                        New
  client schannel                    Default changed/        yes
                                     Deprecated
  gpo update command                 New
  ldap ssl ads                       Deprecated
  map untrusted to domain            Removed
  oplock contention limit            Removed
  prefork children                   New                     1
  mdns name                          New                     netbios
  fruit:time machine                 New                     false
  profile acls                       Removed
  use spnego                         Removed
  server schannel                    Default changed/        yes
                                     Deprecated
  unicode                            Deprecated
  winbind scan trusted domains       New                     yes
  winbind trusted domains only       Removed
! DO READ THE 4.8.x changelogs complete, on the samba site its needed!

https://www.samba.org/samba/history/samba-4.7.0.html
4.6.x => 4.7.0 : smb.conf changes
================
  Parameter Name                     Description             Default
  --------------                     -----------             -------
  allow unsafe cluster upgrade       New parameter           no
  auth event notification            New parameter           no
  auth methods                       Deprecated
  client max protocol                Effective               SMB3_11
                                     default changed
  map untrusted to domain            New value/              auto
                                     Default changed/
                                     Deprecated
  mit kdc command                    New parameter
  profile acls                       Deprecated
  rpc server dynamic port range      New parameter           49152-65535
  strict sync                        Default changed         yes
  password hash userPassword schemes New parameter
  ntlm auth                          New values              ntlmv2-only

----------------------
! DO READ THE 4.6.x changelogs complete, on the samba site its needed!


4.5.x =>  4.6.0 : smb.conf changes 
https://www.samba.org/samba/history/samba-4.6.0.html
================
  Parameter Name                Description             Default
  --------------                -----------             -------
  kerberos encryption types     New                     all
  inherit owner                 New option
  fruit:resource                Spelling correction
  lsa over netlogon             New (deprecated)        no
  rpc server port               New                     0

4.4.1 =>  4.5.0 : smb.conf changes 
https://www.samba.org/samba/history/samba-4.5.0.html
================
    Parameter Name                Description             Default
    --------------                -----------             -------
    kccsrv:samba_kcc              Changed default         yes
    ntlm auth                     Changed default         no
    only user                     Removed
    password hash gpg key ids     New
    shadow:snapprefix             New
    shadow:delimiter              New                     _GMT
    smb2 leases                   Changed default         yes
    username                      Removed

4.4.0 => 4.4.1  !! YOU MUST READ THIS ONE !! ( lots changed here ) 
https://www.samba.org/samba/history/samba-4.4.1.html
smb.conf new settings
----------------
    Parameter Name + default setting.		
    ------------- 
    allow dcerpc auth level connect = no
    client ipc signing = default
    client ipc max protocol = default
    client ipc min protocol = default
    ldap server require strong auth = yes
    raw NTLMv2 auth = no
    tls verify peer = as_strict_as_possible
    tls priority = NORMAL:-VERS-SSL3.0

4.3.0 =>  4.4.0 : smb.conf changes 
https://www.samba.org/samba/history/samba-4.4.0.html
smb.conf changes
----------------
    Parameter Name		Description	Default
    --------------		-----------	------
    aio max threads       	New		100
    ldap page size		Changed default	1000
    server multi channel support	New	No
    interfaces			Extended syntax

  
4.2.0 =>  4.3.0 : smb.conf changes 
https://www.samba.org/samba/history/samba-4.3.0.html
smb.conf changes
----------------
    Parameter Name		Description		Default
    --------------		-----------		-------
    logging			New			(empty)
    msdfs shuffle referrals	New			no
    smbd profiling level	New			off
    spotlight			New			no
    tls priority		New 			NORMAL:-VERS-SSL3.0
    use ntdb			Removed
    change notify		Changed to [global]
    kernel change notify	Changed to [global]
    client max protocol		Changed	default		SMB3_11
    server max protocol		Changed default		SMB3_11 

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces@xxxxxxxxxxxxxxx] Namens 
> Jobst Schmalenbach via samba
> Verzonden: vrijdag 24 mei 2019 14:54
> Aan: samba@xxxxxxxxxxxxxxx
> Onderwerp: [Samba] Upgraded from CentOS 6.X to 7.X, samba not working
> 
> Hi
> 
> Previous: CentOS 6.X, samba4.x86_64 4.2.10-15.el6
> Now: CentOS 7.6.1810, samba 4.8.3-4.el7
> 
> When I start smb, nmb or winbind I get no errors at all.
> This is all I get:
> 
>   May 24 22:44:04 HOST systemd[1]: Starting Samba SMB Daemon...
>   May 24 22:44:05 HOST systemd[1]: smb.service: main process 
> exited, code=exited, status=1/FAILURE
>   May 24 22:44:05 HOST systemd[1]: Failed to start Samba SMB Daemon.
>   May 24 22:44:05 HOST systemd[1]: Unit smb.service entered 
> failed state.
>   May 24 22:44:05 HOST systemd[1]: smb.service failed.
> 
> Looking at the samba logs, they are all empty.
> The journal has not much info either.
> 
> What the hell am I doing wrong?
> Are there massive changes between 4.2 and 4.8 that its not working?
> 
> Help please, I have till Monday morning to get this sorted (weekend).
> 
> jobst
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
> 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba