Project

General

Profile

Bug #15032

Upgrade to FreeNAS to disables CIFS Share

Added by Bill Justesen over 4 years ago. Updated about 4 years ago.

Status:
Closed: Behaves correctly
Priority:
No priority
Assignee:
Suraj Ravichandran
Category:
OS
Target version:
Severity:
New
Reason for Closing:
Reason for Blocked:
Needs QA:
Yes
Needs Doc:
Yes
Needs Merging:
Yes
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:

1 - Crucial BX100 120GB SATA 2.5 Inch Internal Solid State Drive - CT120BX100SSD1
2 - WD Red 6TB NAS Desktop Hard Disk Drive - Intellipower SATA 6 Gb/s 64MB Cache 3.5 Inch - WD60EFRX
1 - IBM Serveraid M1015 SAS/SATA Controller 46M0831
1 - Intel Xeon Quad-Core Processor E3-1230 v2 3.3GHz 8MB LGA 1155 CPU LGA BX80637E31230V2
1 - Crucial 16GB Kit (8GBx2) DDR3/DDR3L-1600MT/s (PC3-12800) DR x8 ECC UDIMM Server Memory CT2KIT102472BD160B/CT2CP102472BD160B
1 - SUPERMICRO MBD-X9SCL-F-O LGA 1155 Intel C202 Micro ATX Intel Xeon E3 Server Motherboard

ChangeLog Required:
No

Description

I was at version FreeNAS-9.3-STABLE-201602031011 and performed an update four days ago to FreeNAS-9.10-STABLE-201604181743. The upgrade disabled the CIFS share so that clients could no longer connect to the server. At the time I didn't know what happened so I reverted to the 9.3 build. When it still wasn't working, I ended up verifying the CIFS share was disabled. I have not upgraded again.


Related issues

Has duplicate FreeNAS - Bug #15225: update dsoens't work and can't access shared hddClosed: Behaves correctly2016-05-08

History

#1 Updated by Jordan Hubbard over 4 years ago

  • Status changed from Unscreened to Screened

BRB: Please upgrade and then attach a debug, otherwise there's nothing we can do with this ticket (we don't see CIFS being disabled on upgrades as a general rule).

#2 Updated by Sean Fagan over 4 years ago

  • Status changed from Screened to 15

#3 Updated by Sean Fagan over 4 years ago

  • Has duplicate Bug #15225: update dsoens't work and can't access shared hdd added

#4 Updated by Bill Justesen over 4 years ago

Just did an upgrade and CIFS shares seem OK today. Still got hit by the SEC_ERROR_REUSED_ISSUER_AND_SERIAL certificate error though.

@login as: root
's password:
Last login: Wed May 11 12:42:39 2016 from 192.168.1.24
FreeBSD 10.3-RELEASE (FreeNAS.amd64) #0 91d0e8e(freebsd10): Mon May 2 10:32:27 PDT 2016

FreeNAS (c) 2009-2016, The FreeNAS Development Team
All rights reserved.
FreeNAS is released under the modified BSD license.
For more information, documentation, help or support, go here:
http://freenas.org
Welcome to FreeNAS
[root@freenas] ~# freenas-debug C
-------------------------------------------------------------------------------

+ FreeNAS-9.10-STABLE-201605021851 (35c85f7) @1462994308
------------------------------------------------------------------------------+
Operating system type: FreeBSD
Operating system release: 10.3-RELEASE
Operating system revision: 199506
Kernel version: FreeBSD 10.3-RELEASE #0 91d0e8e(freebsd10): Mon May 2 10:32:27 PDT 2016
:/tank/home/nightlies/build-freenas9/_BE/objs/tank/home/nightlies/build-freenas9/_BE/trueos/sys/FreeNAS.amd64
Hostname: freenas.fillmorecity.local
Name of kernel file booted: /boot/kernel/kernel
debug finished in 0 seconds for FreeNAS-9.10-STABLE-201605021851 (35c85f7)

------------------------------------------------------------------------------
+ CIFS Status @1462994308
------------------------------------------------------------------------------+
CIFS is ENABLED
debug finished in 0 seconds for CIFS Status

------------------------------------------------------------------------------
+ /usr/local/etc/smb4.conf @1462994308
------------------------------------------------------------------------------+
[global]
server max protocol = SMB2
encrypt passwords = yes
dns proxy = no
strict locking = no
oplocks = yes
deadtime = 15
max log size = 51200
max open files = 469307
logging = syslog:1
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
getwd cache = yes
guest account = nobody
map to guest = Bad User
obey pam restrictions = yes
directory name cache size = 0
kernel change notify = no
panic action = /usr/local/libexec/samba/samba-backtrace
nsupdate command = /usr/local/bin/samba-nsupdate -g
server string = FreeNAS Server
ea support = yes
store dos attributes = yes
lm announce = yes
hostname lookups = yes
acl allow execute always = true
dos filemode = yes
multicast dns register = yes
domain logons = no
local master = no
idmap config *: backend = tdb
idmap config *: range = 90000001-100000000
server role = standalone
netbios name = FREENAS
workgroup = FILLMORECITY
security = user
pid directory = /var/run/samba
create mask = 0666
directory mask = 0777
client ntlmv2 auth = yes
dos charset = CP437
unix charset = UTF-8
log level = 1

[Backup]
path = /mnt/OfficeBackup/Backup
printable = no
veto files = /.snapshot/.windows/.mac/.zfs/
writeable = yes
browseable = yes
vfs objects = zfs_space zfsacl aio_pthread streams_xattr
hide dot files = no
guest ok = no
nfs4:mode = special
nfs4:acedup = merge
nfs4:chown = true
zfsacl:acesort = dontcare
debug finished in 0 seconds for /usr/local/etc/smb4.conf

------------------------------------------------------------------------------
+ CIFS Shares & Permissions @1462994308
------------------------------------------------------------------------------
------------------------------------------------------------------------------
Backup:/mnt/OfficeBackup/Backup @1462994308
------------------------------------------------------------------------------
drwxrwxr-x
14 NASOffice OfficeStaff 15 Apr 12 12:53 /mnt/OfficeBackup/Backup

  1. file: /mnt/OfficeBackup/Backup
  2. owner: NASOffice
  3. group: OfficeStaff
    owner@:rwxpDdaARWcCos:fd-----:allow
    group@:rwxpDdaARWcCos:fd-----:allow
    everyone@:r-x---a-R-c---:fd-----:allow

debug finished in 0 seconds for CIFS Shares & Permissions

------------------------------------------------------------------------------
+ net getlocalsid @1462994308
------------------------------------------------------------------------------+
SID for domain FREENAS is: S-1-5-21-3685128224-1316302604-4089631553
debug finished in 0 seconds for net getlocalsid

------------------------------------------------------------------------------
+ net getdomainsid @1462994308
------------------------------------------------------------------------------+
Could not fetch domain SID
SID for local machine FREENAS is: S-1-5-21-3685128224-1316302604-4089631553
debug finished in 0 seconds for net getdomainsid

------------------------------------------------------------------------------
+ net usersidlist @1462994308
------------------------------------------------------------------------------+
FREENAS\nasoffice
S-1-5-21-3685128224-1316302604-4089631553-1000
S-1-1-0
S-1-5-2
S-1-5-11
S-1-5-21-3685128224-1316302604-4089631553-1002
debug finished in 0 seconds for net usersidlist

------------------------------------------------------------------------------
+ net groupmap list @1462994308
------------------------------------------------------------------------------+
OfficeStaff (S-1-5-21-3685128224-1316302604-4089631553-1002) -> OfficeStaff
Administrators (S-1-5-32-544) -> 90000001
Users (S-1-5-32-545) -> 90000002
debug finished in 0 seconds for net groupmap list

------------------------------------------------------------------------------
+ net status sessions @1462994308
------------------------------------------------------------------------------+
PID Username Group Machine
-------------------------------------------------------------------
debug finished in 0 seconds for net status sessions

------------------------------------------------------------------------------
+ net status shares @1462994308
------------------------------------------------------------------------------+

Service pid machine Connected at
-------------------------------------------------------
debug finished in 0 seconds for net status shares

------------------------------------------------------------------------------
+ Users and Groups @1462994308
------------------------------------------------------------------------------
------------------------------------------------------------------------------
Users @1462994308
------------------------------------------------------------------------------
Error looking up domain users
------------------------------------------------------------------------------
Groups @1462994308
------------------------------------------------------------------------------+
failed to call wbcListGroups: WBC_ERR_DOMAIN_NOT_FOUND
Error looking up domain groups
debug finished in 0 seconds for Groups

[root@freenas] ~#@

#5 Updated by Sean Fagan over 4 years ago

  • Assignee changed from Sean Fagan to Suraj Ravichandran

Certificate issue now?

#6 Updated by Bill Justesen over 4 years ago

Yes. I had to follow the commands that are linked below to get in to the console:
https://forums.freenas.org/index.php?threads/9-3-9-10-upgrade-thrashed-ssl-causes-certificate-errors.42442/#post-275429

Since it's already a known bug, you can go ahead and close this CIFS one. Thank you for your help!

#7 Updated by Suraj Ravichandran over 4 years ago

  • Status changed from 15 to Closed: Behaves correctly
  • Target version set to Unspecified
  • % Done changed from 0 to 100

@Bill Justesen: Please see: https://forums.freenas.org/index.php?threads/faq-upgrading-from-9-3-to-9-10.42964/

specifically this part

Q: I upgraded and my self-signed SSL certificates that I created earlier (on FreeNAS) no longer work?
A: See comments in https://bugs.freenas.org/issues/14977 - easiest to just re-issue the certs in 9.10 due to the fact that 9.3 had some bugs in its cert generation logic (non-security compromising ones, but the tightened cert checks in 9.10 catch them nonetheless).

#8 Updated by Bill Justesen over 4 years ago

Got it resolved. Thanks!

#9 Avatar?id=14398&size=24x24 Updated by Kris Moore about 4 years ago

  • Target version changed from Unspecified to N/A

Also available in: Atom PDF