On Mon, Nov 30, 2009 at 11:34 AM, Drew Balfour <[email protected]> wrote:
> How do you have the share setup on basestar? What do "sharemgr show -vp" and
> "zfs get all <dataset>" show? Are you running in domain mode or workgroup
> mode?
The server is running in workgroup mode.
One thing that troubles me is this:
# smbutil status localhost
Workgroup: FREAKS
Server: BASESTAR
# smbutil status basestar
smbutil: unable to get status from basestar: nberr = host not found
Shouldn't smbutil return the same info? Looking at snoop, there is no
response to the query request. smbd is listening to port 137 on all
interfaces, verified with pfiles.
The share was created with the zfs sharesmb property.
# sharemgr show -vp
default nfs=()
zfs
zfs/tank/export/samba/public nfs=() smb=()
public=/export/samba/public smb=(guestok="true")
# zfs get all tank/export/samba/public
NAME PROPERTY VALUE
SOURCE
tank/export/samba/public type filesystem -
tank/export/samba/public creation Mon Nov 9 15:11 2009 -
tank/export/samba/public used 808G -
tank/export/samba/public available 1.92T -
tank/export/samba/public referenced 808G -
tank/export/samba/public compressratio 1.00x -
tank/export/samba/public mounted yes -
tank/export/samba/public quota none
default
tank/export/samba/public reservation none
default
tank/export/samba/public recordsize 128K
default
tank/export/samba/public mountpoint /export/samba/public
inherited from tank/export
tank/export/samba/public sharenfs on
inherited from tank/export/samba
tank/export/samba/public checksum on
default
tank/export/samba/public compression off
default
tank/export/samba/public atime off
inherited from tank
tank/export/samba/public devices on
default
tank/export/samba/public exec on
default
tank/export/samba/public setuid on
default
tank/export/samba/public readonly off
default
tank/export/samba/public zoned off
default
tank/export/samba/public snapdir hidden
default
tank/export/samba/public aclmode groupmask
default
tank/export/samba/public aclinherit restricted
default
tank/export/samba/public canmount on
default
tank/export/samba/public shareiscsi off
default
tank/export/samba/public xattr on
default
tank/export/samba/public copies 1
default
tank/export/samba/public version 4 -
tank/export/samba/public utf8only on -
tank/export/samba/public normalization formD -
tank/export/samba/public casesensitivity mixed -
tank/export/samba/public vscan off
default
tank/export/samba/public nbmand on
inherited from tank/export/samba
tank/export/samba/public sharesmb guestok=true,name=public local
tank/export/samba/public refquota none
default
tank/export/samba/public refreservation none
default
tank/export/samba/public primarycache all
default
tank/export/samba/public secondarycache all
default
tank/export/samba/public usedbysnapshots 193M -
tank/export/samba/public usedbydataset 808G -
tank/export/samba/public usedbychildren 0 -
tank/export/samba/public usedbyrefreservation 0 -
tank/export/samba/public logbias latency
default
tank/export/samba/public com.sun:auto-snapshot true
inherited from tank
> "idmap dump -vn" might be handy too.
# idmap dump -vn
wingroup:Domain us...@basestar == gid:2147483652
Method: Ephemeral
wingroup:gue...@builtin == gid:2147483653
Method: Ephemeral
winuser:gu...@basestar == uid:2147483649
Method: Ephemeral
wingroup:Authenticated Users == gid:2147483651
Method: Ephemeral
wingroup:Network == gid:2147483650
Method: Ephemeral
# svcprop smb/server|grep smbd
smbd/ads_site astring ""
smbd/autohome_map astring /etc
smbd/ddns_enable boolean false
smbd/domain_member boolean false
smbd/ipv6_enable boolean false
smbd/keep_alive integer 5400
smbd/kpasswd_domain astring ""
smbd/kpasswd_seqnum integer 0
smbd/kpasswd_server astring ""
smbd/lmauth_level integer 4
smbd/max_connections integer -1
smbd/max_workers integer 1024
smbd/netbios_scope astring ""
smbd/netlogon_seqnum integer 0
smbd/oplock_enable boolean true
smbd/pdc astring ""
smbd/restrict_anonymous boolean false
smbd/signing_check boolean false
smbd/signing_enabled boolean false
smbd/signing_required boolean false
smbd/stability astring Evolving
smbd/sync_enable boolean false
smbd/value_authorization astring solaris.smf.value.smb
smbd/wins_server_1 astring ""
smbd/wins_server_2 astring ""
smbd/security astring workgroup
smbd/domain_name astring FREAKS
smbd/fqdn astring ""
smbd/domain_sid astring ""
smbd/forest astring ""
smbd/domain_guid astring ""
smbd/system_comment astring BaseStar
smbd/wins_exclude astring ""
> A snoop of the transaction between the linux client and the OpenSolaris box
> would be good.
>
> # tcpdump -i <interface> -w /tmp/snoop.out basestar and <client>
Let me know if you want to see the entire capture, it's only 19
packets. Looking back at the capture, this seems to be the relevant
bit.
14 0.00025 caliban.freaks.com -> basestar IPNET src zone
Unknown dst zone 0
14 0.00025 caliban.freaks.com -> basestar IP D=192.168.69.198
S=192.168.69.202 LEN=124, ID=63851, TOS=0x0, TTL=64
14 0.00025 caliban.freaks.com -> basestar TCP D=445 S=1432 Push
Ack=3539098986 Seq=2728112127 Len=72 Win=2920 Options=<nop,nop,tstamp
63526789 112902184>
14 0.00025 caliban.freaks.com -> basestar NBT Type=SESSION
MESSAGE Length=68
14 0.00025 caliban.freaks.com -> basestar SMB C Code=0x75
Name=SMBtconX Share=\\BASESTAR\PUBLIC Error=0
________________________________
15 0.00010 basestar -> caliban.freaks.com IPNET src zone 0 dst
zone Unknown
15 0.00010 basestar -> caliban.freaks.com IP D=192.168.69.202
S=192.168.69.198 LEN=91, ID=28353, TOS=0x0, TTL=64
15 0.00010 basestar -> caliban.freaks.com TCP D=1432 S=445 Push
Ack=2728112199 Seq=3539098986 Len=39 Win=49232 Options=<nop,nop,tstamp
112902184 63526789>
15 0.00010 basestar -> caliban.freaks.com NBT Type=SESSION
MESSAGE Length=35
15 0.00010 basestar -> caliban.freaks.com SMB R Code=0x75
Name=SMBtconX Type=^Y Error=4
Providing a dummy password seems to work:
# mount -t smbfs -o username=gu...@domain,passwd=foo //basestar/public /mnt/smb
smbclient has similar weirdness.
Fails:
$ smbclient -U gu...@domain -N //basestar/public
Works
$ smbclient -U gu...@domain%foo //basestar/public
-B
--
Brandon High : [email protected]
Always try to do things in chronological order; it's less confusing that way.
_______________________________________________
cifs-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/cifs-discuss
