OmniOS and SMBv1?

Discussion in 'Solaris, Nexenta, OpenIndiana, and napp-it' started by securityfirst, Feb 14, 2018.

  1. securityfirst

    securityfirst New Member

    Joined:
    Feb 14, 2018
    Messages:
    1
    Likes Received:
    0
    Hi

    We are currently evaluating a storage appliance built on OmniOS v11 r151020 and can't join it to our Active Directory Domain with Windows Server 2016 Domain Controllers with SMBv1 disabled.

    We have done a lot of troubleshooting and always end up with the following errors:
    smbd[3792]: [ID 504517 daemon.error] smbd: failed getting domain info for OURDOMAIN.LOCAL (NETWORK_ACCESS_DENIED)
    smbd[3792]: [ID 871254 daemon.error] smbd: failed joining OURDOMAIN.LOCAL (NETWORK_ACCESS_DENIED)
    smbd[3792]: [ID 931549 daemon.error] ndr_rpc_bind: smbrdr_ctx_new(Srv=OUR-DC.LOCAL Dom=OURDOMAIN.LOCAL User=administrator), NETWORK_ACCESS_DENIED (0xc00000ca)
    smbd[3792]: [ID 504517 daemon.error] smbd: failed getting domain info for OURDOMAIN.LOCAL (NETWORK_ACCESS_DENIED)
    smbd[3792]: [ID 871254 daemon.error] smbd: failed joining OURDOMAIN.LOCAL (NETWORK_ACCESS_DENIED)


    We have tried changing various parameters like the following:
    sharectl set -p lmauth_level=4 smb
    sharectl set -p max_protocol=3.0 smb
    sharectl set -p pdc=x.x.x.x smb
    sharectl set -p ddns_enable=false smb
    sharectl set -p ads_site="Default-First-Site-Name" smb


    But I have a bad feeling that OmniOS/Solaris only supports SMBv1 for this and was hoping to get a conformation on that from this forum?
    Or maybe some settings we haven't thought of yet. (Our experience with OmniOS/Solaris is minimal after all.)
     
    #1
  2. gea

    gea Well-Known Member

    Joined:
    Dec 31, 2010
    Messages:
    2,045
    Likes Received:
    654
    This is not a question of the OS but the SMB server.

    I would expect that the Solarish ZFS/kernelbased SMB v 2.1 server on OmniOS requires SMB v1 to establish communication. This may be different on Solaris (11.4 comes with a new kernelbased SMB3 server) or Nexentastor (based on Illumos like OmniOS but with SMB3 now) or the usual SAMBA that you can use on any X.
     
    #2
    Last edited: Feb 14, 2018
  3. gea

    gea Well-Known Member

    Joined:
    Dec 31, 2010
    Messages:
    2,045
    Likes Received:
    654
    #3
  4. nle

    nle Member

    Joined:
    Oct 24, 2012
    Messages:
    153
    Likes Received:
    6
    Any news on the SMB support? The progress is on 90 % on the link @gea provided, but then it seemed to stop?

    We're seeing some quirks regarding locked files (ie. photoshop/PSD files often get locked when editing, and not allowing you to save and overwrite, so you need to save to a new file – manually delete the old and rename). I'm hoping that is an issue that disappears with a newer implementation of SMB.
     
    #4
  5. gea

    gea Well-Known Member

    Joined:
    Dec 31, 2010
    Messages:
    2,045
    Likes Received:
    654
    This is only about the SMB 2 client in Illumos. You only need the newer client to join a Windows Domain where SMB1 is disabled.

    Your problem seems more related to either nbmand (ZFS property) or oplock settings (SMB property, see Services > SMB > Properties)
     
    #5
    nle likes this.
  6. gea

    gea Well-Known Member

    Joined:
    Dec 31, 2010
    Messages:
    2,045
    Likes Received:
    654
    #6
Similar Threads: OmniOS SMBv1
Forum Title Date
Solaris, Nexenta, OpenIndiana, and napp-it AIO OmniOS 1500 vs 9000mtu open-vm-tools Friday at 2:36 PM
Solaris, Nexenta, OpenIndiana, and napp-it OmniOSce r151028r, SMB1, SMB2 - Linux Client Mount Friday at 4:39 AM
Solaris, Nexenta, OpenIndiana, and napp-it napp-it omnios active directory connection refresh Feb 13, 2019
Solaris, Nexenta, OpenIndiana, and napp-it Fresh OmniOS 151028 installation hangs on Intel S1200btl Jan 22, 2019
Solaris, Nexenta, OpenIndiana, and napp-it Esxi 6.7 / OmniOS 151028 Dec 18, 2018

Share This Page