SMB2

[ColinTaylor]

@john9527 Yes you are correct. I tried putting those (incorrect) settings into my config and Windows wouldn't map. Increasing the log level confirms the reason:

[2017/08/08 22:32:50.390032,  2] param/loadparm.c:5911(lp_maxprotocol)
  WARNING!!: "security = share" is incompatible with the SMB2 protocol. Resetting to SMB1.
[2017/08/08 22:32:50.391319,  0] smbd/process.c:525(init_smb_request)
  init_smb_request: invalid wct number 255 (size 112)
[2017/08/08 22:32:50.399944,  2] param/loadparm.c:5911(lp_maxprotocol)
  WARNING!!: "security = share" is incompatible with the SMB2 protocol. Resetting to SMB1.
[2017/08/08 22:32:50.401014,  0] smbd/process.c:525(init_smb_request)
  init_smb_request: invalid wct number 255 (size 112)
[2017/08/08 22:32:50.432011,  2] param/loadparm.c:5911(lp_maxprotocol)
  WARNING!!: "security = share" is incompatible with the SMB2 protocol. Resetting to SMB1.
[2017/08/08 22:32:50.433195,  0] smbd/process.c:525(init_smb_request)
  init_smb_request: invalid wct number 255 (size 112)

 

[ColinTaylor]

If this is the case, why I am able to see other Windows PCs in my network? With SMB1 client disabled on "browsing" PC I can see other PCs, but not the router and NAS ....

I don't know, I've wondered the same thing myself. The router and NAS will be running Samba but Windows PC's must be doing something else. Microsoft is quite clear that the "Network Neighborhood" browsing is a feature of SMB1. It even says as much in the GUI (i.e. "...the Computer Browser protocol"):

 

[john9527]

@john9527 Yes you are correct. I tried putting those (incorrect) settings into my config and Windows wouldn't map. Increasing the log level confirms the reason:

Thanks for doing the legwork to confirm!
@RMerlin....you may want to check into this one.

 

[ColinTaylor]

If this is the case, why I am able to see other Windows PCs in my network? With SMB1 client disabled on "browsing" PC I can see other PCs, but not the router and NAS ....

OK It looks like the "Network Discovery" feature is what is populating the browser. It appears to use multiple techniques, but the one that has an immediate effect of making a PC appear or disappear from the browser is the "Function Discovery Resource Publication" service.

Publishes this computer and resources attached to this computer so they can be discovered over the network. If this service is stopped, network resources will no longer be published and they will not be discovered by other computers on the network.

http://www.thewindowsclub.com/enable-disable-network-discovery-windows

 

[clvk07]

Tried a new USB drive SAN DISK still no joy. Did factory reseat of router no joy. Tried on Windows 10 and 8 Pro no joy.... I guess there is an issue with SMB2 and AC88U

 

[ColinTaylor]

Tried a new USB drive SAN DISK still no joy. Did factory reseat of router no joy. Tried on Windows 10 and 8 Pro no joy.... I guess there is an issue with SMB2 and AC88U

You need to make the changes John suggested in post #18 until Merlin fixes it.

 

[RMerlin]

I need to unify the SAMBA36X and SAMBA_MODERN code. It's something I've been wanting to do for a while now.

 

[RMerlin]

Merging the upstream libdisk code should take care of the SMB2 downgrade in guest mode. I also patched the hardcoded admin user.

 

[clvk07]

You need to make the changes John suggested in post #18 until Merlin fixes it.

Merging the upstream libdisk code should take care of the SMB2 downgrade in guest mode. I also patched the hardcoded admin user.

I will try tonight. I am not sure if I understood the problem fully. I tried to use both GUEST and unchanged ADMIN account (with Guest option turned off) and it still not working. Windows logs shows nothing. Just message trying to connect and coming back with network error.... Re-enabling SMB1 on the windows client fixes the issue for both guest and admin......

 

[clvk07]

tried the post config script, no joy.....

 

[ColinTaylor]

tried the post config script, no joy.....

Just wait for the next release.

 

[RMerlin]

tried the post config script, no joy.....

Your issue is a different one.

 

[clvk07]

Your issue is a different one.

is there any point to keep debugging? I tried guest, admin users, 3 different USB sticks / drives etc.. Is a known issue with smb2 and AC88U?

 

[john9527]

I'm not sure that your problem isn't the one that would be fixed by the script I posted. Things to double check....
- the script is in linux line-ending format vs Win/DOS (run dos2unix on the script)
- you marked the script as executable with chmod
- you have script execution enabled in the gui
- after you boot with the script active, check /etc/smb.conf to make sure the changes in the script were made

 

[RMerlin]

I'm not sure that your problem isn't the one that would be fixed by the script I posted. Things to double check....

His problem is that security = Share is not compatible with SMB2, and forces a downgrade to SMB1. He's disabled SMB1 client support, therefore he can't access his router share. This was the issue you were referring about regarding Asus's code. It should be fixed on my end with the following commit:

53fec7e10a7f237fae7032b2bc88ef4f3bac3a53

Fixing it through a postconf would require a different one than the one regarding the admin user.

EDIT: sorry, didn't notice the script also had a pc_delete() call in it for that problematic line.

 

[clvk07]

still no joy

cant map either the windows USB or the optware USB

security=share is gone

[global]
workgroup = home
netbios name = Skynet
server string = Skynet
unix charset = UTF8
display charset = UTF8
log file = /var/log.samba
log level = 0
max log size = 5
auth methods = guest
guest account = admin
map to guest = Bad Password
guest ok = yes
encrypt passwords = yes
pam password change = no
null passwords = yes
max protocol = SMB2
passdb backend = smbpasswd
smb encrypt = disabled
smb passwd file = /etc/samba/smbpasswd
enable core files = no
deadtime = 30
load printers = no
min receivefile size = 16384
force directory mode = 0777
force create mode = 0777
max connections = 5
socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=131072 SO_SNDBUF=131072
obey pam restrictions = no
disable spoolss = yes
host msdfs = no
strict allocate = No
bind interfaces only = yes
interfaces = lo br0 192.168.1.1/255.255.255.0
use sendfile = yes
map archive = no
map hidden = no
map read only = no
map system = no
store dos attributes = yes
dos filemode = yes
oplocks = yes
level2 oplocks = yes
kernel oplocks = no
wide links = no
[optware]
comment = Generic Flash Disk's optware
veto files = /.__*.txt*/asusware*/asus_lighttpdpasswd/
path = /tmp/mnt/optware
writeable = yes
dos filetimes = yes
fake directory create times = yes
[share]
comment = SanDisk Ultra's share
veto files = /.__*.txt*/asusware*/asus_lighttpdpasswd/
path = /tmp/mnt/share
writeable = yes
dos filetimes = yes
fake directory create times = yes

 

[ColinTaylor]

Any error messages in:

/var/log.samba

or the syslog?

 

[clvk07]

Any error messages in:

/var/log.samba

or the syslog?

nothing just blank.

windows service logs under smb shows this:

The SMB client failed to connect to the share.
Error: {Access Denied}
A process has requested access to an object, but has not been granted those access rights.
Path: \SKYNET\adblocking

adblocking is a directory on the optware drive. In the asus share gui it has R/W permissions. There are also other directories with R/W access but no errors in the log. adblocking is the first directory

rwx------ 2 admin root 1024 Feb 5 2017 lost+found
-rw-rw-rw- 1 admin root 29 Feb 5 2017 jffs_scripts_backup_2017-02-05_18-09.tgz
drwxr-xr-x 11 admin root 1024 Feb 5 2017 entware-old_2017-02-05_18-55
-rw-rw-rw- 1 admin root 116586 Feb 5 2017 ab-solution-3.sh
-rw-rw-rw- 1 admin root 806 Feb 5 2017 jffs_scripts_backup_2017-02-05_18-55.tgz
drwxr-xr-x 11 admin root 1024 Feb 5 2017 entware-old_2017-02-06_20-59
-rw-rw-rw- 1 admin root 783 Feb 6 2017 jffs_scripts_backup_2017-02-06_20-59.tgz
drwxr-xr-x 11 admin root 1024 Feb 6 2017 entware-old_2017-02-07_01-18
-rw-rw-rw- 1 admin root 733 Feb 7 2017 jffs_scripts_backup_2017-02-07_01-18.tgz
drwxrwxrwx 2 admin root 1024 Feb 7 2017 entware-old_2017-02-07_01-19
-rw-rw-rw- 1 admin root 732 Feb 7 2017 jffs_scripts_backup_2017-02-07_01-19.tgz
drwxrwxrwx 2 admin root 1024 Feb 7 2017 entware-old_2017-02-07_01-24
-rw-rw-rw- 1 admin root 785 Feb 7 2017 jffs_scripts_backup_2017-02-07_01-24.tgz
drwxr-xr-x 11 admin root 1024 May 30 18:25 entware
-rwxr-xr-x 1 admin root 143596 Jul 23 07:21 ab-solution.sh
drwxr-xr-x 9 admin root 1024 Aug 6 02:01 adblocking

 

[ColinTaylor]

Try adding the following line to the script that John gave you and then reboot the router. It will increase the verbosity of the logging.

pc_replace "log level = 0" "log level = 2" $CONFIG

 

[ColinTaylor]

The SMB client failed to connect to the share.
Error: {Access Denied}
A process has requested access to an object, but has not been granted those access rights.
Path: \SKYNET\adblocking

The path is wrong. "adblocking" is not a share name. The names in your config are "optware" and "share".

So you need to use "\\SKYNET\optware" or "\\SKYNET\optware\adblocking".

Note: The path is different when you are not using guest sharing. In that case you would remove the "optware" part and specify the individually shared folders. Or to put it another way, with guest sharing there is one single share for an entire partition. Without guest sharing you share individual folders within the partition.