[Bug 1556740] [NEW] Unable to connect to share unless "Guess access" is checked

Mon Mar 14 04:22:38 UTC 2016

Public bug reported:

What is expected to happen:

On the Ubuntu 16.04 samba server with hostname HOSTNAME log in as first
user created when installing USERNAME with password PASSWORD > create a
new folder via nautilus (no gksudo) called test > secondary click test >
Properties > tab Local Network Share > check "Share this folder" > Share
name: test > other checkboxes unchecked > click button "Create Share"

On another Ubuntu 16.04 client click Places > Network > Windows Network > WORKGROUP > HOSTNAME > test > in the new connection window it notes at top:
Password required for share test on HOSTNAME

to the right of "Connect As" click radio button "Registered User" > put
in Username field USERNAME > put in field Domain WORKGROUP > put in
field Password PASSWORD > click radio button Forget password immediately
> Connect

and it does so.

What happens instead is the connection window comes back up, but this
time the "Connect As" radio button is now on Anonymous (Default) and
everything else is grayed out. Hitting the X to close the window
intermittently shows:

Unable to access location
Failed to mount Windows share: Invalid argument

The only way to allow the share to be connected is if one clicks on the
server the checkbox "Guest access (for people without a user account)".

This prevents easily implementing secure and authenticated data
transfers between server and client.

Attempting to smbclient notes:
smbclient -I IPADDRESS -W WORKGROUP -U USERNAME -D test -P PASSWORD -d 4
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[global]"
doing parameter workgroup = WORKGROUP
doing parameter server string = %h server (Samba, Ubuntu)
doing parameter dns proxy = no
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 1000
doing parameter syslog = 0
WARNING: The "syslog" option is deprecated
doing parameter panic action = /usr/share/samba/panic-action %d
doing parameter server role = standalone server
doing parameter passdb backend = tdbsam
doing parameter obey pam restrictions = yes
doing parameter unix password sync = yes
doing parameter passwd program = /usr/bin/passwd %u
doing parameter passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
doing parameter pam password change = yes
doing parameter map to guest = bad user
doing parameter usershare allow guests = yes
pm_process() returned Yes
tdb(/var/lib/samba/private/secrets.tdb): tdb_open_ex: could not open file /var/lib/samba/private/secrets.tdb: Permission denied
Could not open tdb: Permission denied
Failed to open /var/lib/samba/private/secrets.tdb
ERROR: Unable to open secrets database

It is confirmed the file /var/lib/samba/private/secrets.tdb exists on
both server and client, and the permissions for this file have not been
adjusted in anyway. It's the default setup after installing the samba
package.

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: samba 2:4.3.6+dfsg-1ubuntu1
ProcVersionSignature: Ubuntu 4.4.0-12.28-generic 4.4.4
Uname: Linux 4.4.0-12-generic x86_64
ApportVersion: 2.20-0ubuntu3
Architecture: amd64
CurrentDesktop: GNOME-Flashback:Unity
Date: Sun Mar 13 23:03:51 2016
InstallationDate: Installed on 2015-12-18 (86 days ago)
InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
RelatedPackageVersions:
 nautilus 1:3.18.4.is.3.14.3-0ubuntu2
 gvfs     1.27.90-1ubuntu1
SambaClientRegression: Yes
SourcePackage: samba
UpgradeStatus: Upgraded to xenial on 2016-01-20 (53 days ago)

** Affects: samba (Ubuntu)
     Importance: Medium
         Status: Triaged

** Tags: amd64 apport-bug regression-release xenial

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1556740

Title:
  Unable to connect to share unless "Guess access" is checked

Status in samba package in Ubuntu:
  Triaged

Bug description:
  What is expected to happen:

  On the Ubuntu 16.04 samba server with hostname HOSTNAME log in as
  first user created when installing USERNAME with password PASSWORD >
  create a new folder via nautilus (no gksudo) called test > secondary
  click test > Properties > tab Local Network Share > check "Share this
  folder" > Share name: test > other checkboxes unchecked > click button
  "Create Share"

  On another Ubuntu 16.04 client click Places > Network > Windows Network > WORKGROUP > HOSTNAME > test > in the new connection window it notes at top:
  Password required for share test on HOSTNAME

  to the right of "Connect As" click radio button "Registered User" >
  put in Username field USERNAME > put in field Domain WORKGROUP > put
  in field Password PASSWORD > click radio button Forget password
  immediately > Connect

  and it does so.

  What happens instead is the connection window comes back up, but this
  time the "Connect As" radio button is now on Anonymous (Default) and
  everything else is grayed out. Hitting the X to close the window
  intermittently shows:

  Unable to access location
  Failed to mount Windows share: Invalid argument

  The only way to allow the share to be connected is if one clicks on
  the server the checkbox "Guest access (for people without a user
  account)".

  This prevents easily implementing secure and authenticated data
  transfers between server and client.

  Attempting to smbclient notes:
  smbclient -I IPADDRESS -W WORKGROUP -U USERNAME -D test -P PASSWORD -d 4
  lp_load_ex: refreshing parameters
  Initialising global parameters
  rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
  Processing section "[global]"
  doing parameter workgroup = WORKGROUP
  doing parameter server string = %h server (Samba, Ubuntu)
  doing parameter dns proxy = no
  doing parameter log file = /var/log/samba/log.%m
  doing parameter max log size = 1000
  doing parameter syslog = 0
  WARNING: The "syslog" option is deprecated
  doing parameter panic action = /usr/share/samba/panic-action %d
  doing parameter server role = standalone server
  doing parameter passdb backend = tdbsam
  doing parameter obey pam restrictions = yes
  doing parameter unix password sync = yes
  doing parameter passwd program = /usr/bin/passwd %u
  doing parameter passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
  doing parameter pam password change = yes
  doing parameter map to guest = bad user
  doing parameter usershare allow guests = yes
  pm_process() returned Yes
  tdb(/var/lib/samba/private/secrets.tdb): tdb_open_ex: could not open file /var/lib/samba/private/secrets.tdb: Permission denied
  Could not open tdb: Permission denied
  Failed to open /var/lib/samba/private/secrets.tdb
  ERROR: Unable to open secrets database

  It is confirmed the file /var/lib/samba/private/secrets.tdb exists on
  both server and client, and the permissions for this file have not
  been adjusted in anyway. It's the default setup after installing the
  samba package.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.04
  Package: samba 2:4.3.6+dfsg-1ubuntu1
  ProcVersionSignature: Ubuntu 4.4.0-12.28-generic 4.4.4
  Uname: Linux 4.4.0-12-generic x86_64
  ApportVersion: 2.20-0ubuntu3
  Architecture: amd64
  CurrentDesktop: GNOME-Flashback:Unity
  Date: Sun Mar 13 23:03:51 2016
  InstallationDate: Installed on 2015-12-18 (86 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  RelatedPackageVersions:
   nautilus 1:3.18.4.is.3.14.3-0ubuntu2
   gvfs     1.27.90-1ubuntu1
  SambaClientRegression: Yes
  SourcePackage: samba
  UpgradeStatus: Upgraded to xenial on 2016-01-20 (53 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1556740/+subscriptions