Project

General

Profile

Bug #43712

Drop server minimum protocol to SMB2_02

Added by Dmitry - over 1 year ago. Updated over 1 year ago.

Status:
Done
Priority:
No priority
Assignee:
Andrew Walker
Category:
Services
Target version:
TrueNAS - TrueNAS-11.1-U6.1
Seen in:
Severity:
New
Reason for Closing:
Reason for Blocked:
Needs QA:
No
Needs Doc:
No
Needs Merging:
No
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:
ChangeLog Required:
No

Description

Windows Small Business Server 2008 cannot access to SMB share (but Windows 7/10 can see).
In 11.1-U5 always ok.

2018-08-30_17-26-30.png (29.7 KB) 2018-08-30_17-26-30.png Dmitry -, 08/30/2018 07:28 AM
27377

History

#1 Updated by Dru Lavigne over 1 year ago

  • Status changed from Unscreened to Blocked
  • Reason for Blocked set to Need additional information from Author

Dmitry: does following the instructions in the Known Impacts section of https://www.ixsystems.com/blog/library/freenas-11-1-u6/ resolve it?

#2 Updated by Dmitry - over 1 year ago

Dru Lavigne wrote:

Dmitry: does following the instructions in the Known Impacts section of https://www.ixsystems.com/blog/library/freenas-11-1-u6/ resolve it?

You are right, it helps. But strange moment: I can access from Windows Server 2008 R2 to share, but cannot do it from Windows SBS 2008.

#3 Updated by Dru Lavigne over 1 year ago

  • Private changed from No to Yes

Please attach a debug (System -> Advanced -> Save debug) that was created after a failed connection attempt by Windows SBS 2008.

#4 Updated by Dmitry - over 1 year ago

  • File debug-freenas-20180830065833.tgz added

Dru Lavigne wrote:

Please attach a debug (System -> Advanced -> Save debug) that was created after a failed connection attempt by Windows SBS 2008.

#5 Updated by Dru Lavigne over 1 year ago

  • Subject changed from Cannot acces to SMB share from windows server to Cannot acces to SMB share from windows SBS 2008
  • Category changed from OS to Services
  • Assignee changed from Release Council to Andrew Walker
  • Reason for Blocked deleted (Need additional information from Author)

#6 Updated by Dmitry - over 1 year ago

  • File debug-freenas-20180830070856.tgz added
  • Category changed from Services to OS
  • Assignee changed from Andrew Walker to Release Council

Dmitry - wrote:

Dru Lavigne wrote:

Please attach a debug (System -> Advanced -> Save debug) that was created after a failed connection attempt by Windows SBS 2008.

It was. I open share from Windows SBS 2008, see access error and save debug log. Yet another log.

#7 Updated by Dmitry - over 1 year ago

May be no log entry because cannot establish connection?

#8 Updated by Dru Lavigne over 1 year ago

  • Category changed from OS to Services
  • Status changed from Blocked to Unscreened
  • Assignee changed from Release Council to Andrew Walker

#9 Updated by Dmitry - over 1 year ago

27377

Dmitry - wrote:

May be no log entry because cannot establish connection?

Screenshot from windows SBS 2008. Only russian, sorry.

#10 Updated by Andrew Walker over 1 year ago

Your configuration shows "SMB2" as the server minimum protocol.

Navigate to "System → Tunables →Add Tunable" in the webui.
Add the following Sysctl:
Variable: freenas.services.smb.config.server_min_protocol
Value: NT1
Type: Sysctl

Then restart the samba service from the webui.

#11 Updated by Andrew Walker over 1 year ago

  • Status changed from Unscreened to Blocked

#12 Updated by Andrew Walker over 1 year ago

  • Reason for Blocked set to Waiting for feedback

#13 Updated by Dmitry - over 1 year ago

Andrew Walker wrote:

Your configuration shows "SMB2" as the server minimum protocol.

Navigate to "System → Tunables →Add Tunable" in the webui.
Add the following Sysctl:
Variable: freenas.services.smb.config.server_min_protocol
Value: NT1
Type: Sysctl

Then restart the samba service from the webui.

Yes, it solve problem.

#14 Updated by Dmitry - over 1 year ago

I don't understand, why turn on NT1 need to work with windows 2008, because:

NT1: Current up to date version of the protocol. Used by Windows NT. Known as CIFS.
SMB2: Re-implementation of the SMB protocol. Used by Windows Vista and newer.

#15 Updated by Andrew Walker over 1 year ago

Dmitry - wrote:

I don't understand, why turn on NT1 need to work with windows 2008, because:

NT1: Current up to date version of the protocol. Used by Windows NT. Known as CIFS.
SMB2: Re-implementation of the SMB protocol. Used by Windows Vista and newer.

Vista / Server 2008 actually implement SMB2_02. Windows 7 / Server 2008R2 implement SMB2_10. In Samba SMB2 is an alias for SMB2_10. You can try changing the syctl from SMB2 to SMB2_02.

Since Server 2008 SP2 has an end of support date of 1/14/2020, I consider this a bug. Default minimum protocol should not be set above SMB2_02.

#16 Updated by Bug Clerk over 1 year ago

  • Status changed from Blocked to In Progress

#17 Updated by Andrew Walker over 1 year ago

#18 Updated by Dru Lavigne over 1 year ago

  • Category changed from OS to Services
  • Target version changed from Backlog to 11.2-RC1

#19 Updated by Dru Lavigne over 1 year ago

  • File deleted (debug-freenas-20180830065833.tgz)

#20 Updated by Dru Lavigne over 1 year ago

  • File deleted (debug-freenas-20180830070856.tgz)

#21 Updated by Dru Lavigne over 1 year ago

  • Private changed from Yes to No

#22 Updated by Dru Lavigne over 1 year ago

  • Reason for Blocked deleted (Waiting for feedback)

#23 Updated by Dru Lavigne over 1 year ago

  • Target version changed from 11.2-RC1 to TrueNAS-11.1-U6.1

#24 Updated by Dru Lavigne over 1 year ago

This will also be in the Changelog for FN 11.1-U7 nad FN 11.2-BETA3.

#25 Updated by Andrew Walker over 1 year ago

#26 Updated by Bug Clerk over 1 year ago

  • Status changed from In Progress to Ready for Testing
  • Target version changed from TrueNAS-11.1-U6.1 to TrueNAS 11.1-U6.2

#27 Updated by Dru Lavigne over 1 year ago

  • Subject changed from Cannot acces to SMB share from windows SBS 2008 to Drop server minimum protocol to SMB2_02
  • Target version changed from TrueNAS 11.1-U6.2 to TrueNAS-11.1-U6.1
  • Needs Doc changed from Yes to No
  • Needs Merging changed from Yes to No

#28 Updated by Bonnie Follweiler over 1 year ago

  • Status changed from Ready for Testing to Passed Testing
  • Needs QA changed from Yes to No

Test Passed in TrueNAS-11.1-U6-INTERNAL9

#29 Updated by Dru Lavigne over 1 year ago

  • Status changed from Passed Testing to Done

Also available in: Atom PDF