[SOLVED] CentOS 7.4 (1708) - Shared folder access

Thanks @dnutan!

Shares working again with ACLs on my test VMs…

1 Like

Thanks @dnutan

Just made sure:

Coffein level in system: OK
Rollback by duntan: Ready
Go !

And two production systems back running!

Thanks to all!

1 Like

Therefore… if i am not using any kind of account provider… i can safely upgrade/update?

Yes.
But if you have have nethserver-samba installed, make sure to get the latest package which fix the read-only filesystem issue.

Still not installed. Therefore… yum update right now.

Thank you @dnutan for the great workaround!

I did a bit of research and this is what I’ve found:

  • the bug is not present if AD and Samba re installed on a clean NethServer 7.4
  • the Fedora patch works

I’ve create a new sssd-libwbclient patched RPM.
Please, be sure to update everything from CentOS updates repository, than install the patch it using this commands:

yum --enablerepo=nethforge-testing update sssd-libwbclient
signal-event nethserver-samba-update

The patch works in our production environment; tested with following clients:

  • Windows 10 with AD join
  • Windows 10 without AD join
  • Nautilus on Fedora without join
  • smbclient on Fedora without join

This is the associated issue:

If everything goes well, we can release it in nethforge repository, also we will do not need anymore the vault repository.
This will bring issue-free updates for all NethServers.

Please help me test this hack! /cc @Andy_Wismer @GG_jr @mrmarkuz @compsos @des @greavette

3 Likes

Tested and working on:

  • non-joined GNU/Linux system (smbclient, GUI)
  • Windows 7 Pro: non-joined, joined

after resetting permissions.

let’s get it clear:

install fresh ns7 (without patches)
install sambaad
try to join domain
add your patch
try to join domain
??

The fix should work for new installation but also for currently broken ones.
So, install the patch on a new or old machine where shared folders authentication doesn’t work :slight_smile:

It’s working! :thumbsup:
Tested on joined/unjoined Win7/Win10 and on Raspbian with smbclient…

2 Likes

Can I safely upgrade my production system now or should I still wait?

It should be safe, we have the fix on our production server.
If nobody finds any error, I plan to release the fix tomorrow.

3 Likes

Ok, I’ll wait till tomorrow, just to be sure.
Thanks :slight_smile:

Tested on NS 7.3.1611 (DC-AD-FS) -> PASSED!

How I tested:

  • login from Win 10 Pro, non joined workstation to domain, with domain user credentials, to shared folders (user and/or guest) -> OK!
  • I made all updates, without reboot.
  • login from Win 10 Pro, non joined workstation to domain, with domain user credentials, to shared folders (user and/or guest) -> FAIL!
  • Reboot NS
  • login from Win 10 Pro, non joined workstation to domain, with domain user credentials, to shared folders (user and/or guest) -> FAIL!
  • installed “the patch”, whitout reboot
  • login from Win 10 Pro, non joined workstation to domain, with domain user credentials, to shared folders (user and/or guest) -> OK!
  • Reboot NS
  • login from Win 10 Pro, non joined workstation to domain, with domain user credentials, to shared folders (user and/or guest) -> OK!

After all tests, can we tell that we have NS 7.4?

1 Like

Almost! :smiley: I’m preparing all repositories and start building the ISO :wink:

4 Likes

Congrats first to @dnutan and @giacomo and to all which have made the tests!

Good job!
Good Team!

3 Likes

when it’s safe to upgrade, can someone please update the title of this topic? Or post another ‘pinned’ topic? Otherwise the first BIG message on this forum is NOT to upgrade, and only after reading this whole topic you realize it’s already fixed…

2 Likes

That’s a great idea,
if @giacomo is ready with his work we can change the title I think.
Something like SOLVED in front of the title.

1 Like

That’s huge man. You saved so many lives :slight_smile:

3 Likes

That works!!! I still running tests after doing the donwgrade, but the server apparently is working. Thanks. Now I am worried about next updates… And how do I solve the mess after doing manual downgrade (When the problem is solved)