smbd error message: NT_STATUS_ACCESS_DENIED

Status
Not open for further replies.

Rod Sott

Cadet
Joined
Feb 25, 2015
Messages
8
Hello experts from FreeNAS!

I'm copying files from a Windows 7 folders into a FreeNAS volume, and it keeps showing this message each and every second:

smbd STATUS=daemon 'smbd' finished starting up and ready to serve connectionscreate_connection_session_info failed: NT_STATUS_ACCESS_DENIED

I've read in a Forum, that it's an error with the smb4.conf file, and they said to put the following code into the auxiliary parameters:

idmap config *:backend = tdb
idmap config *:range = 90000000-100000000


Is it safe do to this? At least the error message is gone. My doubt is if it's safe to the mounts to add this backend=tdb option, because if the range is the same as the last two fields at the CIFS window (Idmap Range Low and High), mine is with 90.000.001 / 100.000.000 and maybe I just need the first line.

My /usr/local/etc/smb4.conf is like this:

Code:
[global]                                                                                                                           
    server max protocol = SMB2                                                                                                     
    encrypt passwords = yes                                                                                                        
    dns proxy = no                                                                                                                 
    strict locking = no                                                                                                            
    oplocks = yes                                                                                                                  
    deadtime = 15                                                                                                                  
    max log size = 51200                                                                                                           
    max open files = 235127                                                                                                        
    load printers = no                                                                                                             
    printing = bsd                                                                                                                 
    printcap name = /dev/null                                                                                                      
    disable spoolss = yes                                                                                                          
    getwd cache = yes                                                                                                              
    guest account = nobody                                                                                                         
    map to guest = Bad User                                                                                                        
    obey pam restrictions = yes                                                                                                    
    directory name cache size = 0                                                                                                  
    kernel change notify = no                                                                                                      
    panic action = /usr/local/libexec/samba/samba-backtrace                                                                        
    nsupdate command = /usr/local/bin/samba-nsupdate -g                                                                            
    server string = FreeNAS Server                                                                                                 
    ea support = yes                                                                                                               
    store dos attributes = yes                                                                                                     
    time server = yes                                                                                                              
    acl allow execute always = true                                                                                                
    acl check permissions = true                                                                                                   
    dos filemode = yes                                                                                                             
    domain logons = no                                                                                                             
    local master = yes                                                                                                             
    idmap config *: backend = tdb                                                                                                  
    idmap config *: range = 90000001-100000000                                                                                     
    server role = standalone                                                                                                       
    netbios name = NAS                                                                                                             
    workgroup = WORKGROUP                                                                                                          
    security = user                                                                                                                
    pid directory = /var/run/samba                                                                                                 
    smb passwd file = /var/etc/private/smbpasswd                                                                                   
    private dir = /var/etc/private                                                                                                 
    create mask = 0666                                                                                                             
    directory mask = 0777                                                                                                          
    client ntlmv2 auth = yes                                                                                                       
    dos charset = CP437    
    unix charset = UTF-8                                                                                                           
    log level = 2                                                                                                                  
         

                                                                                                                         
[Files]                                                                                                                         
    path = /mnt/MainSET/Files                                                                                                 
    printable = no                                                                                                                 
    veto files = /.snapshot/.windows/.mac/.zfs/                                                                                    
    writeable = yes                                                                                                                
    browseable = yes                                                                                                               
    recycle:repository = .recycle/%U                                                                                               
    recycle:keeptree = yes                                                                                                         
    recycle:versions = yes                                                                                                         
    recycle:touch = yes                                                                                                            
    recycle:directory_mode = 0777                                                                                                  
    recycle:subdir_mode = 0700                                                                                                     
    vfs objects = zfsacl                                                                                                           
    hide dot files = no                                                                                                            
    guest ok = no                                                                                                                  
    nfs4:mode = special                                                                                                            
    nfs4:acedup = merge                                                                                                            
    nfs4:chown = true                                                                                                              
    zfsacl:acesort = dontcare  


                                                                                                                                   
[Backup]                                                                                                                           
    path = /mnt/MainSET/Backup                                                                                                   
    printable = no                                                                                                                 
    veto files = /.snapshot/.windows/.mac/.zfs/                                                                                    
    writeable = yes                                                                                                                
    browseable = yes                                                                                                               
    recycle:repository = .recycle/%U                                                                                               
    recycle:keeptree = yes                                                                                                         
    recycle:versions = yes                                                                                                         
    recycle:touch = yes                                                                                                            
    recycle:directory_mode = 0777                                                                                                  
    recycle:subdir_mode = 0700                                                                                                     
    vfs objects = zfsacl                                                                                                           
    hide dot files = no                                                                                                            
    guest ok = no                                                                                                                  
    nfs4:mode = special                                                                                                            
    nfs4:acedup = merge                                                                                                            
    nfs4:chown = true                                                                                                              
    zfsacl:acesort = dontcare           





Thanks in advance!
 

ZRE

Cadet
Joined
Mar 17, 2015
Messages
3
I am having the same issues with this. We have a FreeNAS setup on an old PC, and have a 2TB USB HDD as the root storage. The aux parameters have been added, which has stopped the occurrence all of the time, but has not solved the issue.

I Get this now:

Mar 17 13:00:56
smbd[2936]: STATUS=daemon 'smbd' finished starting up and ready to serve connectionscreate_connection_session_info failed: NT_STATUS_ACCESS_DENIED
Mar 17 13:01:35
kernel: (da0:umass-sim0:0:0:0): WRITE(10). CDB: 2a 00 27 35 12 28 00 00 40 00
Mar 17 13:01:35
kernel: (da0:umass-sim0:0:0:0): CAM status: CCB request completed with an error
Mar 17 13:01:35
kernel: (da0:umass-sim0:0:0:0): Retrying command
Mar 17 13:06:45
kernel: (da0:umass-sim0:0:0:0): WRITE(10). CDB: 2a 00 00 00 01 68 00 00 40 00
Mar 17 13:06:45
kernel: (da0:umass-sim0:0:0:0): CAM status: CCB request completed with an error
Mar 17 13:06:45
kernel: (da0:umass-sim0:0:0:0): Retrying command
Mar 17 13:08:39
smbd[2953]: STATUS=daemon 'smbd' finished starting up and ready to serve connectionscreate_connection_session_info failed: NT_STATUS_ACCESS_DENIED

The final line then repeats each second.

The whole thing occurs when a windows machine with authenticated user accesses either r/w the share folder. After a while, the windows machines loose the server and are unable to access the share, although the server is accessible via the web interface. We only have CIFS/SMB active.

Anyone have any suggestions for a work around?
 

Robert Trevellyan

Pony Wrangler
Joined
May 16, 2014
Messages
3,778
We have a FreeNAS setup on an old PC, and have a 2TB USB HDD as the root storage.
If you mean your pool is on a USB drive, this is not a suitable setup for FreeNAS. The basic rule is that ZFS needs direct access to the storage device(s).
 

ZRE

Cadet
Joined
Mar 17, 2015
Messages
3
That's correct, a storage pool on USB. The reason we did this was the size of the HDD available. The internal disk which runs the OS is not huge (I think it's around the 70GB mark), but could be suitable until we need more space. Is it straight forward to copy the files from the USB device to the internal HDD? Will a new partition need to be created and mounted first? Will this solve the write issue above?

Thanks for your reply!
 

SweetAndLow

Sweet'NASty
Joined
Nov 6, 2013
Messages
6,421

ZRE

Cadet
Joined
Mar 17, 2015
Messages
3
Thank you for your speedy response, I shall have a good look through now.
 

Robert Trevellyan

Pony Wrangler
Joined
May 16, 2014
Messages
3,778
Is it straight forward to copy the files from the USB device to the internal HDD? Will a new partition need to be created and mounted first? Will this solve the write issue above?
To paraphrase an old joke, "You can't get there from here." You need to start over.
 
Status
Not open for further replies.
Top