Bug 1648399
| Summary: | Samba 4.9.1: smb.service fails with ERROR: failed to setup guest info | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Al Dunsmuir <al.dunsmuir> | ||||
| Component: | samba | Assignee: | Guenther Deschner <gdeschner> | ||||
| Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||
| Severity: | high | Docs Contact: | |||||
| Priority: | unspecified | ||||||
| Version: | 29 | CC: | abokovoy, al.dunsmuir, anoopcs, asn, codespunk+bugzilla.redhat, gdeschner, jarrpa, lmohanty, madam, peljasz, sbose, ssorce | ||||
| Target Milestone: | --- | ||||||
| Target Release: | --- | ||||||
| Hardware: | x86_64 | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2018-11-09 15:55:57 UTC | Type: | Bug | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
|
Description
Al Dunsmuir
2018-11-09 15:32:18 UTC
In the thread you mention I explain why this happens and how you can fix the problem. Run net -s /dev/null groupmap add sid=S-1-5-32-546 unixgroup=nobody type=builtin to map BUILTIN\Guests to group 'nobody'. This should allow getting through the required step. You should also fix your smb.conf because it doesn't have idmap configuration and it is considered incorrect by Samba. A quote from the thread: ---------------------------------- The behavior with failing when idmap configuration is incorrect was first introduced in 4.6.0: https://www.samba.org/samba/history/samba-4.6.0.html ----- ID Mapping ---------- We discovered that the majority of users have an invalid or incorrect ID mapping configuration. We implemented checks in the 'testparm' tool to validate the ID mapping configuration. You should run it and check if it prints any warnings or errors after upgrading! If it does you should fix them. See the 'IDENTITY MAPPING CONSIDERATIONS' section in the smb.conf manpage. There are some ID mapping backends which are not allowed to be used for the default backend. Winbind will no longer start if an invalid backend is configured as the default backend. ----- With 4.8.0 we demand working winbindd for 'security = domain|ads' https://www.samba.org/samba/history/samba-4.8.0.html ----- Domain member setups require winbindd ------------------------------------- Setups with "security = domain" or "security = ads" require a running 'winbindd' now. The fallback that smbd directly contacts domain controllers is gone. ----- With 4.9.0 we expanded guest handling to differentiate between anonymous and guest sessions. This required a proper handling of BUILTIN\Guests and thus is now forces to be able to have either writable backend or aliases configured properly. Question is mostly what defaults we should have for BUILTIN\Guests. Perhaps, we should always do the groupmap rule I added... ---------------------------------- Since your configuration uses 'security = user', the failure only started to appear for you with 4.9.0 because you have no mapping for BUILTIN\Guests and there is no proper idmap configuration to allow automatically allocating entries for BUILTIN groups. I have also documented this in the Release Notes for Fedora 29: https://docs.fedoraproject.org/en-US/fedora/f29/release-notes/sysadmin/File_Servers/ Please fix your configuration. *** Bug 1657553 has been marked as a duplicate of this bug. *** Hi, How about LDAB userdb? Any way to achieve the same without directly fiddling in LDAP? many thanks, L. I came across this thread from a search engine, and I'm on Debian 10.7. I'm sure this also applies to Ubuntu, but to fix this issue I had to run: net -s /dev/null groupmap add sid=S-1-5-32-546 unixgroup=nogroup type=builtin |