HL15 initial start (preinstalled system)

And if I refresh the “Windows Network” in Nemo I get:

[2023/12/01 19:33:51.350392,  3] ../../source3/param/loadparm.c:2897(lp_do_section)
  Processing section "[global]"
  doing parameter security = user
  doing parameter passdb backend = tdbsam
  doing parameter printing = cups
  doing parameter printcap name = cups
  doing parameter load printers = yes
  doing parameter cups options = raw
  doing parameter workgroup = SAMBA
  doing parameter log level = 4
  doing parameter netbios name = HL15
  doing parameter server min protocol = SMB2
[2023/12/01 19:33:51.350531,  4] ../../source3/param/loadparm.c:4037(lp_load_ex)
  pm_process() returned Yes
[2023/12/01 19:33:51.350559,  3] ../../source3/param/loadparm.c:1681(lp_add_ipc)
  adding IPC service
  added interface bond0 ip=192.168.76.102 bcast=192.168.77.255 netmask=255.255.254.0
  added interface virbr0 ip=192.168.122.1 bcast=192.168.122.255 netmask=255.255.255.0
[2023/12/01 19:33:51.350966,  3] ../../source3/smbd/smb2_oplock.c:1408(init_oplocks)
  init_oplocks: initializing messages.
[2023/12/01 19:33:51.351261,  3] ../../source3/smbd/smb2_negprot.c:1111(smb2_multi_protocol_reply_negprot)
  Requested protocol [NT LANMAN 1.0]
[2023/12/01 19:33:51.351289,  3] ../../source3/smbd/smb2_negprot.c:1111(smb2_multi_protocol_reply_negprot)
  Requested protocol [NT LM 0.12]
[2023/12/01 19:33:51.351368,  3] ../../source3/smbd/smb2_negprot.c:1157(smb2_multi_protocol_reply_negprot)
  smb2_multi_protocol_reply_negprot: No protocol supported !
[2023/12/01 19:33:51.351414,  4] ../../source3/smbd/sec_ctx.c:318(set_sec_ctx_internal)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/12/01 19:33:51.351485,  4] ../../source3/smbd/sec_ctx.c:318(set_sec_ctx_internal)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/12/01 19:33:51.351502,  4] ../../source3/smbd/sec_ctx.c:318(set_sec_ctx_internal)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/12/01 19:33:51.351516,  4] ../../source3/smbd/sec_ctx.c:318(set_sec_ctx_internal)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/12/01 19:33:51.351531,  4] ../../source3/smbd/sec_ctx.c:318(set_sec_ctx_internal)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/12/01 19:33:51.351734,  3] ../../source3/smbd/server_exit.c:230(exit_server_common)
  Server exit (no protocol supported
  )

HI Bill, Can you turn off SELinux on the server

can you also remove those other valid users except for the 45Drives user?

Can you also put “min protocol = SMB2” and not “server min protocol = SMB2”

1 Like

Not sure if was disabling SELinux or “min protocol = SMB2” but :tada:
image
It works! :smiley:

1 Like

Hey @Bill that is great news. I’m glad we were able to get things working for you. please let me know if you need any additional help

For everyone else following this

We grabbed a copy of the HL15 image and could make an SMB share and connect. All we did was disable the SMB management on the ZFS tab and use our filesharing tab instead.

Disabled SELinux and installed samba started the service, and added it to the firewall

After that, I was able to connect to the SMB share using the HL15 image

4 Likes

Enable mDNS

dnf install avahi
systemctl start avahi-daemon

I deferred these modules (avahi) to be used on another unit rather than adding this burden to the HL-15 such as a pfsense to manage mDNS/Avahi.

I like seeing hl15.local :man_shrugging:

Have you done any configuration of Samba (smb)?

If you did can you run net conf list and testparm -s?
If you did not then did the service start?

@Hutch-45Drives summarized what was changed here: HL15 initial start (preinstalled system) - #44 by Hutch-45Drives

I was referred to this thread as well. I was able to get things working by:

  • updated the Cockpit ZFS Manager (per the thread)
  • turn off selinux service
  • remove the include statement to what the cock ZFS manager added
  • make sure the directory you are sharing has permissions set to a minimum of chmod 770
  • clear my previous smb.conf settings
  • configured a new samba share using the workgroup HL15USERS

Once settings were saved, the share was visible and I was able to log in.

Prior to the above steps, I had turned of firewalld.
The workgroup name can be capitalized.

1 Like

Hutch

Quick question I can view and access my shares in Windows but am not able to save or move items in the share.

Based on what you posted, you may have read-only access.

To help share detail on the Log Level (within Cockpit’s Samba web ui)
Log Level:

  • 0 LOG_ERR
  • 1 LOG_WARNING
  • 2 LOG_NOTICE
  • 3 LOG_INFO
  • 4 LOG_DEBUG

When I was using level 4, I was able to see my user account authenticate and see any subsequent events that were causing me issues.

Did you also make sure that the permissions on the folder (I am assuming from the Linux OS side) have chmod 770 ( the owner of the file and the group can read, write and execute it.)

Hope this helps

1 Like

Thanks for your help, I am completely new to this. In the cockpit how do I need the information you need? Under logs?

Sure, let me guide you…

Within Cockpit’s web ui (the left side navigation panel)…

  • Click on FileSharing
  • Next to the 45Drives logo, Click Samba.
  • There will be a Global section, the 3 field is a dropdown (values 5 to 0). Pick 4 or 5.
  • Click out of the field, then click Apply (right side of the screen within that section).

The changes should be saved and Samba will restart.

To view the specific logs for Samba, you can do the following:

  • Left Navigation panel - click on Services
  • The window should update with Services having a blue underline. In the field “filter by name or description” type smb.
  • smb Samba SMB Daemon will appear. Click on smb.
  • the Samba SMB Daemon will be displayed. Within this updated window you will see the samba log under the label “Service Logs”

Then you can attempt to use the share from Windows.

if you are still having issues, there are some other things you can do to allow us to help you:

Within a terminal window you can type

testparm -s.

This command needs to be done as root. If you are the 45Drives users (that came with the prebuilt system), then you can use

sudo testparm -s

You should get a similar output to the following:

Load smb config files from /etc/samba/smb.conf
Loaded services file OK.
Weak crypto is allowed by GnuTLS (e.g. NTLM as a compatibility fallback)

Server role: ROLE_STANDALONE

Global parameters

[global]
printcap name = cups
registry shares = Yes
security = USER
server min protocol = SMB2
server string = some string
workgroup = sampleworkgorup
idmap config * : backend = tdb
cups options = raw

[SampleFolder
comment = Sample folder for this post on the forum
path = /somelocation/directoryname
read only = No
valid users = @sampleuser sampleuser

Your output will not be identical to mine.

I would check if you have a line similar to “valid users =”.

1 Like

I don’t see that listed, here is what I got:

Server role: ROLE_STANDALONE

Global parameters

[global]
printcap name = cups
registry shares = Yes
security = USER
server string = Samba Share
workgroup = SAMBA
fruit:nfs_aces = no
fruit:zero_file_id = yes
fruit:metadata = stream
fruit:encoding = native
idmap config * : backend = tdb
cups options = raw
include = /etc/cockpit/zfs/shares.conf
inherit permissions = Yes
vfs objects = catia fruit streams_xattr

[homes]
browseable = No
comment = Home Directories
inherit acls = Yes
read only = No
valid users = %S %D%w%S

[printers]
browseable = No
comment = All Printers
create mask = 0600
path = /var/tmp
printable = Yes

[print$]
comment = Printer Drivers
create mask = 0664
directory mask = 0775
force group = @printadmin
path = /var/lib/samba/drivers
write list = @printadmin root

[public]
comment = public domain
map acl inherit = Yes
path = /tank/samba/public
read only = No
vfs objects = catia fruit streams_xattr shadow_copy2 full_audit acl_xattr
fruit:nfs_aces = no
fruit:zero_file_id = yes
fruit:metadata = stream
fruit:encoding = native
shadow:format = %Y-%m-%d-%H%M%S
shadow:sort = desc
shadow:snapdir = .zfs/snapshot
full_audit:prefix = ???%I???%u???%m???%S???%T???
full_audit:failure = connect
full_audit:success = connect disconnect openat renameat linkat unlinkat
full_audit:facility = local5
full_audit:priority = notice
acl_xattr:ignore system acls = yes

[media]
comment = media collection
map acl inherit = Yes
path = /tank/samba/media
read only = No
vfs objects = full_audit catia fruit streams_xattr shadow_copy2 acl_xattr
full_audit:prefix = ???%I???%u???%m???%S???%T???
full_audit:failure = connect
full_audit:success = connect disconnect openat renameat linkat unlinkat
full_audit:facility = local5
full_audit:priority = notice
fruit:nfs_aces = no
fruit:zero_file_id = yes
fruit:metadata = stream
fruit:encoding = native
shadow:format = %Y-%m-%d-%H%M%S
shadow:sort = desc
shadow:snapdir = .zfs/snapshot
acl_xattr:ignore system acls = yes

I see you have an include line

include = /etc/cockpit/zfs/shares.conf

On this thread at this reply point #20, there is a suggestion to adjust the Cockpit ZFS Manager options to not manage the Samba shares. This was part of a similar issue I had where I could not successfully authenticate to get access to the shared folder.

I am assuming you are sharing content from the root folder /tank
The public folder and the media folder.
I am assuming this is the media folder was where you trying to initially connect.

As Samba does put other defaults within the configuration (and to inform you), you currently have the users home directory and printers (and print drivers) available. The directory would be shown as Home for those users that are configured on this server.

I made a corrections from thread point#20 but I still encountering the same issue.

If you have the samba log level set to 4. what detail is in the service log after you authenticate against the samba folder.

Log level is set to (4) , here is the info under advance settings:

security = user
passdb backend = tdbsam
printing = cups
printcap name = cups
load printers = yes
cups options = raw
fruit:encoding = native
fruit:metadata = stream
fruit:zero_file_id = yes
fruit:nfs_aces = no
vfs objects = catia fruit streams_xattr
inherit permissions = yes
include = /etc/samba/usershares.conf

I rechecked the global parameters:

security = user
passdb backend = tdbsam
printing = cups
printcap name = cups
load printers = yes
cups options = raw
fruit:encoding = native
fruit:metadata = stream
fruit:zero_file_id = yes
fruit:nfs_aces = no
vfs objects = catia fruit streams_xattr
inherit permissions = yes
include = /etc/samba/usershares.conf

Did the log state anything about the end user account as it was connecting to the folder share?