This forum has been archived. All content is frozen. Please use KDE Discuss instead.

Neon upgrade seems to have broken samba...

Tags: None
(comma "," separated)
grooveman
Registered Member
Posts
54
Karma
0
Hi.

I just updated this morning to the latest and greatest KDE Neon and found that I can no longer mount samba shares from our TrueNas system. No matter what I throw at it, it tells me the permission is denied. Nonsense. 1/2 an hour ago, I was able to get in just fine. It isn't a permissions issue, and it is working great for everyone else (windows and linux).

The strange thing is that samba was not a package in the upgrade. Something else must be causing this... but I cannot mount any share from the TrueNas box from the command line or from a Dolphin window. I don't get any useful feedback... just "permission denied" -- even when looking in the logs on the server or client.

So dmesg on the client tells me:
Code: Select all
[   52.794175] CIFS: VFS: \\truenas.mydomain.com Send error in SessSetup = -13
[   52.794212] CIFS: VFS: cifs_mount failed w/return code = -13

The same output is in /var/log/syslog

There are no errors on the server for my user when attempting to connect.

The packages that were upgraded:
Code: Select all
akonadi-backend-mysql
akonadi-contacts-data
akonadi-mime-data
akonadi-server
ark
baloo-kf5
breeze-icon-theme
dolphin
dolphin-plugins
ffmpegthumbs
frameworkintegration
ghostscript
ghostscript-x
gwenview
k3b
k3b-data
kaccounts-integration
kaccounts-providers
kactivities-bin
kamera
kcalc
kcolorchooser
kde-config-mailtransport
kde-spectacle
kdeconnect
kded5
kdegraphics-thumbnailers
kdenlive
kdenlive-data
kdepim-runtime
kdialog
kdoctools5
keditbookmarks
khelpcenter
kimageformat-plugins
kinit
kio
kio-extras
kio-extras-data
kio-ldap
kio-sieve
knotes
konsole
konsole-kpart
kpackagelauncherqml
kpackagetool5
kross
kruler
kteatime
ktexteditor-data
ktexteditor-katepart
kwalletmanager
kwayland-data
kwrite
libastro1
libdolphinvcs5
libgs9
libgs9-common
libk3b7
libk3b7-extracodecs
libkaccounts2
libkf5activities5
libkf5activitiesstats1
libkf5akonadi-data
libkf5akonadiagentbase5
libkf5akonadicalendar-data
libkf5akonadicalendar5
libkf5akonadicontact5
libkf5akonadicore5
libkf5akonadimime5
libkf5akonadinotes5
libkf5akonadiprivate5
libkf5akonadisearch-bin
libkf5akonadisearch-data
libkf5akonadisearch-plugins
libkf5akonadisearchcore5
libkf5akonadisearchdebug5
libkf5akonadisearchpim5
libkf5akonadisearchxapian5
libkf5akonadiwidgets5
libkf5alarmcalendar5
libkf5archive5
libkf5attica5
libkf5auth-data
libkf5auth5
libkf5authcore5
libkf5baloo5
libkf5balooengine5
libkf5baloowidgets-bin
libkf5baloowidgets5
libkf5bluezqt-data
libkf5bluezqt6
libkf5bookmarks-data
libkf5bookmarks5
libkf5calendarcore5
libkf5calendarevents5
libkf5calendarutils5
libkf5cddb5
libkf5codecs-data
libkf5codecs5
libkf5completion-data
libkf5completion5
libkf5config-bin
libkf5config-data
libkf5configcore5
libkf5configgui5
libkf5configwidgets-data
libkf5configwidgets5
libkf5contacteditor5
libkf5contacts-data
libkf5contacts5
libkf5crash5
libkf5dav-data
libkf5dav5
libkf5dbusaddons-bin
libkf5dbusaddons-data
libkf5dbusaddons5
libkf5declarative-data
libkf5declarative5
libkf5dnssd-data
libkf5dnssd5
libkf5doctools5
libkf5filemetadata-bin
libkf5filemetadata-data
libkf5filemetadata3
libkf5globalaccel-bin
libkf5globalaccel-data
libkf5globalaccel5
libkf5globalaccelprivate5
libkf5grantleetheme-plugins
libkf5grantleetheme5
libkf5guiaddons5
libkf5holidays-data
libkf5holidays5
libkf5i18n-data
libkf5i18n5
libkf5i18nlocaledata5
libkf5iconthemes-bin
libkf5iconthemes-data
libkf5iconthemes5
libkf5identitymanagement5
libkf5idletime5
libkf5imap5
libkf5itemmodels5
libkf5itemviews-data
libkf5itemviews5
libkf5jobwidgets-data
libkf5jobwidgets5
libkf5js5
libkf5jsapi5
libkf5kcmutils-data
libkf5kcmutils5
libkf5kdcraw5
libkf5kdelibs4support-data
libkf5kdelibs4support5
libkf5kdelibs4support5-bin
libkf5kexiv2-15.0.0
libkf5khtml-bin
libkf5khtml-data
libkf5khtml5
libkf5kiocore5
libkf5kiofilewidgets5
libkf5kiogui5
libkf5kiontlm5
libkf5kiowidgets5
libkf5kipi-data
libkf5kipi32.0.0
libkf5kirigami2-5
libkf5kontactinterface-data
libkf5kontactinterface5
libkf5krosscore5
libkf5krossui5
libkf5ldap5
libkf5libkdepim-data
libkf5libkdepim-plugins
libkf5libkdepim5
libkf5libkleo-data
libkf5libkleo5
libkf5mailtransport-data
libkf5mailtransport5
libkf5mailtransportakonadi5
libkf5mbox5
libkf5mime5
libkf5networkmanagerqt6
libkf5newstuff-data
libkf5newstuff5
libkf5newstuffcore5
libkf5notifications-data
libkf5notifications5
libkf5notifyconfig-data
libkf5notifyconfig5
libkf5package-data
libkf5package5
libkf5parts-data
libkf5parts5
libkf5people-data
libkf5people5
libkf5peoplebackend5
libkf5peoplewidgets5
libkf5pimcommon5
libkf5pimcommonakonadi5
libkf5pimtextedit-plugins
libkf5pimtextedit5
libkf5plasma5
libkf5plasmaquick5
libkf5prison5
libkf5pty-data
libkf5pty5
libkf5purpose-bin
libkf5purpose5
libkf5quickaddons5
libkf5sane-data
libkf5sane5
libkf5service-bin
libkf5service-data
libkf5service5
libkf5solid5
libkf5solid5-data
libkf5sonnet5-data
libkf5sonnetcore5
libkf5sonnetui5
libkf5style5
libkf5su-bin
libkf5su-data
libkf5su5
libkf5syntaxhighlighting-data
libkf5syntaxhighlighting5
libkf5texteditor-bin
libkf5texteditor5
libkf5textwidgets-data
libkf5textwidgets5
libkf5threadweaver5
libkf5unitconversion-data
libkf5unitconversion5
libkf5wallet-bin
libkf5wallet-data
libkf5wallet5
libkf5waylandclient5
libkf5waylandserver5
libkf5widgetsaddons-data
libkf5widgetsaddons5
libkf5windowsystem-data
libkf5windowsystem5
libkf5xmlgui-bin
libkf5xmlgui-data
libkf5xmlgui5
libkpimgapi-data
libkpimgapicalendar5
libkpimgapicontacts5
libkpimgapicore5
libkpimgapitasks5
libkpimsmtp5
libkpmcore11
libkwalletbackend5-5
libmarblewidget-qt5-28
libnss-mymachines
libnss-systemd
libokular5core9
libpam-systemd
libqmobipocket2
libqt5concurrent5
libqt5core5a
libqt5dbus5
libqt5gui5
libqt5network5
libqt5printsupport5
libqt5qml5
libqt5qmlmodels5
libqt5qmlworkerscript5
libqt5quick5
libqt5quickcontrols2-5
libqt5quickparticles5
libqt5quicktemplates2-5
libqt5quickwidgets5
libqt5sql5
libqt5sql5-mysql
libqt5sql5-sqlite
libqt5svg5
libqt5test5
libqt5widgets5
libqt5xml5
libsasl2-modules-kdexoauth2
libsystemd0
libsystemd0:i386
libudev1
libudev1:i386
linux-firmware
marble-plugins
marble-qt-data
okular
okular-backends
oxygen-icon-theme
partitionmanager
plasma-framework
print-manager
qml-module-org-kde-activities
qml-module-org-kde-bluezqt
qml-module-org-kde-draganddrop
qml-module-org-kde-kaccounts
qml-module-org-kde-kcm
qml-module-org-kde-kconfig
qml-module-org-kde-kcoreaddons
qml-module-org-kde-kholidays
qml-module-org-kde-kio
qml-module-org-kde-kirigami2
qml-module-org-kde-kitemmodels
qml-module-org-kde-kquickcontrols
qml-module-org-kde-kquickcontrolsaddons
qml-module-org-kde-kwindowsystem
qml-module-org-kde-newstuff
qml-module-org-kde-people
qml-module-org-kde-purpose
qml-module-org-kde-qqc2desktopstyle
qml-module-org-kde-quickcharts
qml-module-org-kde-solid
qml-module-org-kde-sonnet
qml-module-qt-labs-folderlistmodel
qml-module-qt-labs-platform
qml-module-qt-labs-qmlmodels
qml-module-qt-labs-settings
qml-module-qtqml
qml-module-qtqml-models2
qml-module-qtquick-controls2
qml-module-qtquick-layouts
qml-module-qtquick-particles2
qml-module-qtquick-templates2
qml-module-qtquick-window2
qml-module-qtquick2
qt5-gtk-platformtheme
signon-kwallet-extension
sonnet-plugins
systemd
systemd-container
systemd-sysv
systemd-timesyncd
udev


I've seen some older posts where people were having similar issues and they used the sec=ntlmv2 or sc=ntlmssp options... In fact, I threw every sec= option in the man page, but that is not helping here.

i can mount windows shares from windows servers just fine (with the same credentials).
Thank you.


OK... I was looking for a way to delete this post, but I guess too many days have passed. I have my solution, though it makes no sense to me.

I rebooted the truenas server... and it works. I would have done this sooner... but it is a production system. The weird thing is that there were no changes whatsoever on the freenas server. Only my Neon system. Freenas was still working in all other respects -- and I found it would work in dolphin provided I used the UPN nomenclature (as opposed to the old netbios UNC format). It wouldn't work on the command line (including fstab), however, no matter what I threw at it. Restarting the smb service was not enough to fix this. Rebooting the truenas server, for whatever reason, fixed this issue.

Last edited by grooveman on Thu Jan 20, 2022 7:57 pm, edited 1 time in total.
grooveman
Registered Member
Posts
54
Karma
0
This is an interesting issue... I think Linux is only obliquely involved.

What I've found is that this is also true in Debian buster now. I think what initiated this was the last patch Tuesday updates on the domain controllers. Winbindd on the truenas server stops being able to connect to the DC after a while. When I put the debug log to the maximum, you can see the rejections it is getting from the DC. The interesting thing here is that it only seems to affect the contemporary Linux systems -- and only when using the standard mount commands. It will still work with gvfs, and as noted, will work in Dolphin, provided I use the UPN... and of course, Windows clients work normally as well.

I'm thinking now that this is, at heart, a Microsoft issue -- at least it was elicited by them. We have found that restarting winbindd will fix the problem for a period of time. It only seems to manifest ever few days, so doing this 3x a week in the wee hours of the a.m. would probably be enough to keep any users from noticing.

I've also noted that if I mount the directory, and squat on it for some days, and the TN server windbindd starts squaking -- it will not affect my mount. The error seems to happen only at the time of authentication. If I unmount it and try to remount it while winbindd is unhappy, I cannot.

The fix here is probably outside the bounds of debian/ubuntu/neon and in the court of Microsoft and the TN team.


Bookmarks



Who is online

Registered users: Bing [Bot], Google [Bot], Sogou [Bot]