Something still wrong with permissions

[billsey]

So I now have Active Directory logins up and working with 9.3, but often when a user tries to access a file they get error messages saying the file is open in another process. I've checked file permissions in AD and the users have full access. Is there a potential problem with translations between FreeBSD file permissions and AD file permissions? Is there something I can configure in FreeNAS to get it working?

And on further testing, the user can't overwrite the file with a local copy through File Explorer either.

 

[billsey]

Curiouser and curiouser... My Administrator account can delete and overwrite files, yet members of the Domain Admins who aren't named 'Administrator' can't.

 

[billsey]

So... SSHing to the FreeNAS box and doing a ls -l on offending file structure shows me 070 permissions:
d---rwx---+
and
----rwx---+

(what does the + mean at the end?)

 

[cyberjock]

+ means the file has an ACL.

 

[billsey]

OK, looking at this again today, since my customer is down again... It looks like it's back in the state where it doesn't connect with AD. I can see the data when I'm logged into the share as root, but any attempt to log in as any of the AD users results in a fail.

Jun 10 12:14:34 nas01 smbd[3656]: STATUS=daemon 'smbd' finished starting up and ready to serve connectionscreate_connection_session_info failed: NT_STATUS_ACCESS_DENIED

When logged in as root I see root, wheel and two Unix Groups (20512 and 20513) with permissions. I'm guessing the last two are what is supposed to be mapped to AD users or groups. Until I can get it talking with the AD servers though there's not going to be access for any of my users. :(

 

[billsey]

I'm back in the office... Although everyone can see the files they are supposed to and not see the files they are not supposed to, only my account can write to the drive. It doesn't make sense at all since there are no special permissions in Active directory for my account. Other accounts with the same permissions and in the same groups can not write to the drive.

 

[billsey]

OK, went through and reset ownership and group to AD admin and admins. Somewhere in the joys of doing the 9.3 update they were set to root and wheel (I seem to remember trying 'sane' settings at one point. Whoever thinks 'sane' involves giving permissions to 'Everyone' isn't, IMHO). This required that I reset all my custom permissions for individual folders in AD, so had to change them back again as well. I've noticed that everything (and I do mean everything) has the Read Only attribute set, so I'm currently updating everything through AD to turn Read Only back off... In another hour or so it should be done and I'll retry writes with a domain user account in the morning.

 

[billsey]

And the Read Only bit seems to be sticky... :(

 

[billsey]

So, it seems to be connected to the read only attribute. I have verified that users can read and create/copy files, but not write/modify. So they can put a new file on the share, but can't open a file except in read only mode. Each newly created file has its read only bit set, so the next time they want to modify it they'll have to write it to a different filename. :(

Does anyone have any idea how to get things working again? I'm pretty much completely out of ideas.

 

[anodos]

Post your debug file. 'System' -> 'Advanced' -> 'Save Debug'

 

[billsey]

Here it is.

 

[anodos]

A few quick points:

• Set server max protocol to SMB2
• You are sharing your entire pool /mnt/User_Data. You should create a dataset, for instance /mnt/User_Data/Data, and share it instead.

I'll take a deeper look when I have an opportunity. Post getfacl output for a file that users have created, and which cannot be edited / saved over.

 

[billsey]

[root@nas01] /mnt/User_Data# getfacl NSPIRES_Flt1_opening_001.jpg
# file: NSPIRES_Flt1_opening_001.jpg
# owner: administrator
# group: domain admins
group:administrator:rwxpDdaARWcCo-:------:allow
group@:rwxpDdaARWcCo-:------:allow
group:domain users:rwxpDdaARWcCo-:------:allow

Setting SMB2 broke access completely.

 

[billsey]

And setting it back to SMB3 didn't fix it... Looks like it can't tell who each SID is, so AD access issues. I'm doing a reboot to see if that clears things back up.

 

[anodos]

[root@nas01] /mnt/User_Data# getfacl NSPIRES_Flt1_opening_001.jpg
# file: NSPIRES_Flt1_opening_001.jpg
# owner: administrator
# group: domain admins
group:administrator:rwxpDdaARWcCo-:------:allow
group@:rwxpDdaARWcCo-:------:allow
group:domain users:rwxpDdaARWcCo-:------:allow

Setting SMB2 broke access completely.

Setting max protocol to SMB2 shouldn't break anything.

 

[billsey]

I'll try again, everything seems to have come back to the 'new normal' after a reboot. I might have to reboot after the SMB2 change for it to work.

 

[billsey]

Jun 17 15:20:13 nas01 winbindd[4656]: STATUS=daemon 'winbindd' finished starting up and ready to serve connectionstdb(/var/db/samba4/winbindd_idmap.tdb): tdb_transaction_commit: transaction error pending
Jun 17 15:20:14 nas01 syslog-ng[5050]: syslog-ng starting up; version='3.5.6'
Jun 17 15:20:14 nas01 kernel: pid 2032 (syslog-ng), uid 0: exited on signal 6 (core dumped)
Jun 17 15:20:23 nas01 smbd[5046]: [2015/06/17 15:20:23.771899, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:20:23 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:20:23 nas01 smbd[5046]: [2015/06/17 15:20:23.772081, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:20:23 nas01 smbd[5046]: [0000] 8A 7C 3F E8 5B 57 26 4F 99 F7 84 12 35 55 B8 41 .|?.[W&O ....5U.A
Jun 17 15:20:23 nas01 smbd[5046]: [2015/06/17 15:20:23.772154, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:20:23 nas01 smbd[5046]: [0000] 09 0E 82 EB 9D 38 65 53 C9 34 ED 21 CB 09 F4 64 .....8eS .4.!...d
Jun 17 15:20:23 nas01 smbd[5046]: [2015/06/17 15:20:23.773979, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:20:23 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:20:23 nas01 smbd[5046]: [2015/06/17 15:20:23.774066, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:20:23 nas01 smbd[5046]: [0000] 5A BA 82 73 A6 1C A4 E8 E2 B9 0E 72 65 6F 83 9D Z..s.... ...reo..
Jun 17 15:20:23 nas01 smbd[5046]: [2015/06/17 15:20:23.774138, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:20:23 nas01 smbd[5046]: [0000] C5 E4 33 19 4E C2 37 A6 FB 09 AD 36 1D AA D2 87 ..3.N.7. ...6....
Jun 17 15:20:23 nas01 smbd[5046]: [2015/06/17 15:20:23.786341, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:20:23 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:20:23 nas01 smbd[5046]: [2015/06/17 15:20:23.786427, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:20:23 nas01 smbd[5046]: [0000] 82 FB F2 47 3D F3 E5 C8 22 6D 75 BC B0 C5 BA C4 ...G=... "mu.....
Jun 17 15:20:23 nas01 smbd[5046]: [2015/06/17 15:20:23.786507, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:20:23 nas01 smbd[5046]: [0000] 2A 80 F3 4E CB 01 3C 6F 6C 2B B0 F3 4B A4 C5 AB *..N...
Jun 17 15:20:23 nas01 smbd[5046]: [2015/06/17 15:20:23.946012, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:20:23 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:20:23 nas01 smbd[5046]: [2015/06/17 15:20:23.946099, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:20:23 nas01 smbd[5046]: [0000] 86 73 61 CF AE DD 78 44 38 37 D4 90 36 A8 95 CD .sa...xD 87..6...
Jun 17 15:20:23 nas01 smbd[5046]: [2015/06/17 15:20:23.946177, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:20:23 nas01 smbd[5046]: [0000] 85 FF F2 4B 47 B2 BB C1 F1 C7 D4 8D 66 4D DD 20 ...KG... ....fM.
Jun 17 15:20:23 nas01 smbd[5046]: [2015/06/17 15:20:23.947272, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:20:23 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:20:23 nas01 smbd[5046]: [2015/06/17 15:20:23.947343, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:20:23 nas01 smbd[5046]: [0000] 3D 49 1D 14 B0 47 C0 45 F6 1A 4E 12 E2 F7 7E 70 =I...G.E ..N...~p
Jun 17 15:20:23 nas01 smbd[5046]: [2015/06/17 15:20:23.947419, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:20:23 nas01 smbd[5046]: [0000] D7 BB 63 01 25 D6 13 A7 2D 39 E4 D6 58 B0 1D 42 ..c.%... -9..X..B
Jun 17 15:20:23 nas01 smbd[5046]: [2015/06/17 15:20:23.950443, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:20:23 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:20:23 nas01 smbd[5046]: [2015/06/17 15:20:23.950521, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:20:23 nas01 smbd[5046]: [0000] 92 60 0F 3F 82 A4 44 91 4B 2F E6 5B F9 CB 69 DB .`.?..D. K/.[..i.
Jun 17 15:20:23 nas01 smbd[5046]: [2015/06/17 15:20:23.950594, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:20:23 nas01 smbd[5046]: [0000] 27 55 46 B0 14 34 EF 14 E7 12 5F 5B 6F 47 C9 5F 'UF..4.. .._[oG._
Jun 17 15:20:41 nas01 smbd[5046]: [2015/06/17 15:20:41.214955, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:20:41 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:20:41 nas01 smbd[5046]: [2015/06/17 15:20:41.215074, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:20:41 nas01 smbd[5046]: [0000] 19 54 12 F2 9F 28 73 18 25 15 B0 29 3D 32 B0 FB .T...(s. %..)=2..
Jun 17 15:20:41 nas01 smbd[5046]: [2015/06/17 15:20:41.215147, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:20:41 nas01 smbd[5046]: [0000] A5 B9 3B 18 9E 45 75 08 DC 20 30 03 E7 5B D8 16 ..;..Eu. . 0..[..
Jun 17 15:20:41 nas01 smbd[5046]: [2015/06/17 15:20:41.369031, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:20:41 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:20:41 nas01 smbd[5046]: [2015/06/17 15:20:41.369123, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:20:41 nas01 smbd[5046]: [0000] 78 AE CE 1B 18 F4 25 6D EA 83 D2 4E 1E 11 78 7B x.....%m ...N..x{
Jun 17 15:20:41 nas01 smbd[5046]: [2015/06/17 15:20:41.369198, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:20:41 nas01 smbd[5046]: [0000] 61 AB BC 8F AB 8A 37 2C 3C 8F 71 E4 4A 13 6B C4 a.....7, <.q.J.k.
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.180591, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:21:50 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.180723, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 90 9C FF 14 DB AE D8 49 94 57 0F F4 3D 52 05 BC .......I .W..=R..
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.180801, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 22 F2 47 62 68 19 91 5B 1E 8C 60 AD EB 9E 3F 2D ".Gbh..[ ..`...?-
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.181828, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:21:50 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.181912, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 5D 54 C9 8A A5 0E C4 27 B3 63 EB B4 7E C6 C0 88 ]T.....' .c..~...
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.181985, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] B8 E2 47 EF 33 73 76 38 47 2B 8D BF 8F 9A 47 39 ..G.3sv8 G+....G9
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.183506, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:21:50 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.183589, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 12 E1 B6 08 62 C7 17 8C 7C 63 AC 7B 15 56 D8 C4 ....b... |c.{.V..
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.183662, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 84 63 C2 FA 80 EF A8 BC 63 D6 D5 8F 6E 5F A7 51 .c...... c...n_.Q
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.184550, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:21:50 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.184617, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 2D CD 30 59 15 60 EC E9 AB AA A2 6B A2 BD 75 7A -.0Y.`.. ...k..uz
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.184688, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 68 CF 5C F4 86 A7 8D 0C 0A 56 48 5D 40 46 A5 7C h.\..... .VH]@F.|
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.185918, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:21:50 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.185996, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 65 11 71 38 5F 00 39 9A 63 1F 38 33 E0 CA 3A 52 e.q8_.9. c.83..:R
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.186067, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 2D 46 A1 8E 5F AE 50 AC 5B D3 46 DA 30 20 62 54 -F.._.P. [.F.0 bT
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.189069, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:21:50 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.189151, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 80 F3 82 4B 26 4C 07 27 54 DC 9E 1E A4 A3 2D 79 ...K&L.' T.....-y
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.189221, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] EC CD 0A B7 93 0B C5 00 26 A9 26 3B 1D 15 A7 83 ........ &.&;....
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.190053, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:21:50 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.190131, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 06 32 A4 B3 CD 33 42 5C 0B 25 64 1B B6 96 37 2A .2...3B\ .%d...7*
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.190203, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] A2 EE 87 B4 68 74 FF 41 FF F9 69 C7 6C 26 AA B8 ....ht.A ..i.l&..
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.191257, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:21:50 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.191336, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] C3 98 16 89 9F EB 5C 6B 6B 0F B3 42 62 1B 8D 9F ......\k k..Bb...
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.191408, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] F4 2C 85 08 95 D4 F4 8F 00 A8 C6 87 C8 C1 C3 CE .,...... ........
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.207895, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:21:50 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.207975, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 2E A2 0A 28 4F FB 26 C2 AA AE 02 D8 47 5C 73 09 ...(O.&. ....G\s.
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.208046, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 39 D0 C0 85 19 C9 1D 3B 34 ED 9F 7E 0C B2 F6 AA 9......; 4..~....
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.209176, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:21:50 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.209293, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] A6 DB CC 96 3C 24 F4 05 FF FC 84 F1 7D D6 2B 98 ....<$.. ....}.+.
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.209369, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] A5 4D 52 A1 1C B9 6A 08 BE F3 6D 2C 7C 81 A3 B5 .MR...j. ..m,|...
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.302319, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:21:50 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.302426, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] DE B4 5A 10 48 10 FC D9 5F AD 06 39 A8 5E 3A 60 ..Z.H... _..9.^:`
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.302501, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] E3 95 2C A8 BE 53 F4 BF 4E BE 23 76 0F CC 65 BB ..,..S.. N.#v..e.
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.303479, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:21:50 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.303567, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 90 ED C7 C1 2C DF DE 93 3C 54 77 73 ED D9 F5 E2 ....,... p. ...UT...
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.318080, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 70 EC A9 E2 DA 32 1F 77 32 1A 69 22 67 F0 18 9F p....2.w 2.i"g...
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.320314, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:21:50 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.320374, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 5D E7 65 59 D0 73 B7 72 8D D8 75 5C 9F 5A 0C E0 ].eY.s.r ..u\.Z..
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.320447, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] BC 1A ED 94 67 D0 7A CA 8C C0 FD CF DA 0C 59 1B ....g.z. ......Y.
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.321441, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:21:50 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.321501, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] EF 7D 61 75 57 6C FF F1 FF 0F F2 B0 8D EC A3 A6 .}auWl.. ........
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.321570, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 79 F1 46 FA 77 0C E9 82 FE 32 D6 C4 55 4C 5F FA y.F.w... .2..UL_.
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.323562, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:21:50 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.323627, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 37 BD 35 C2 92 8B 6C EE 7A 20 32 C2 BF A5 AB AD 7.5...l. z 2.....
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.323697, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 06 0B 62 6A 91 D9 9C B9 C0 83 8A 69 15 99 0A BA ..bj.... ...i....
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.324487, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:21:50 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.324546, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 94 C8 A3 0C 77 BC 3B 30 C7 CA 96 10 1F A0 8A A4 ....w.;0 ........
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.324628, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 27 10 E9 15 7B D2 E6 02 83 8F 45 D0 A7 85 EB 5F '...{... ..E...._
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.326654, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:21:50 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.326725, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] 21 29 61 A2 48 12 F4 30 1A AC 1C D0 15 75 14 EF !)a.H..0 .....u..
Jun 17 15:21:50 nas01 smbd[5046]: [2015/06/17 15:21:50.326796, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:21:50 nas01 smbd[5046]: [0000] A8 E4 7F 56 0D 05 4A 9D 4F BE 6C B9 0D 0F 34 5C ...V..J. O.l...4\
Jun 17 15:22:00 nas01 smbd[5046]: [2015/06/17 15:22:00.089871, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:22:00 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:22:00 nas01 smbd[5046]: [2015/06/17 15:22:00.090005, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:22:00 nas01 smbd[5046]: [0000] C0 12 48 7E A0 F4 43 08 69 B6 A4 1A 49 BD 04 C8 ..H~..C. i...I...
Jun 17 15:22:00 nas01 smbd[5046]: [2015/06/17 15:22:00.090078, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:22:00 nas01 smbd[5046]: [0000] 63 51 F0 55 F4 A5 DA DA 36 C0 5A 57 59 7E 6A 30 cQ.U.... 6.ZWY~j0
Jun 17 15:22:00 nas01 smbd[5046]: [2015/06/17 15:22:00.090996, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:22:00 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:22:00 nas01 smbd[5046]: [2015/06/17 15:22:00.091085, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:22:00 nas01 smbd[5046]: [0000] 41 60 3E D1 6F F8 97 AA 05 B9 FC 76 9A 64 FD 2C A`>.o... ...v.d.,
Jun 17 15:22:00 nas01 smbd[5046]: [2015/06/17 15:22:00.091154, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:22:00 nas01 smbd[5046]: [0000] A6 C4 7F 4C A6 70 43 3F 46 EE 05 28 D1 1C D4 69 ...L.pC? F..(...i
Jun 17 15:22:00 nas01 smbd[5046]: [2015/06/17 15:22:00.532621, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:22:00 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:22:00 nas01 smbd[5046]: [2015/06/17 15:22:00.532730, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:22:00 nas01 smbd[5046]: [0000] FB 07 59 F4 9D 5B 54 95 7B F7 FA 4F 2C F2 8B DF ..Y..[T. {..O,...
Jun 17 15:22:00 nas01 smbd[5046]: [2015/06/17 15:22:00.532801, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:22:00 nas01 smbd[5046]: [0000] E6 A8 20 0C A6 64 40 1A 47 F7 0F BB 2B 55 0F F7 .. ..d@. G...+U..
Jun 17 15:22:00 nas01 smbd[5046]: [2015/06/17 15:22:00.533738, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:22:00 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:22:00 nas01 smbd[5046]: [2015/06/17 15:22:00.533828, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:22:00 nas01 smbd[5046]: [0000] 9E 33 49 88 AD 3D 3A 99 9D 22 55 4D 22 5C 0F EE .3I..=:. ."UM"\..
Jun 17 15:22:00 nas01 smbd[5046]: [2015/06/17 15:22:00.533898, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:22:00 nas01 smbd[5046]: [0000] 1D C4 FF EA DF B5 38 18 30 5B 65 3E FA FC 27 25 ......8. 0[e>..'%
Jun 17 15:22:00 nas01 smbd[5046]: [2015/06/17 15:22:00.535814, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:22:00 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:22:00 nas01 smbd[5046]: [2015/06/17 15:22:00.535898, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:22:00 nas01 smbd[5046]: [0000] 5A 0B A8 E1 0D 8F 37 40 C6 76 1C 41 DE BF DD 44 Z.....7@ .v.A...D
Jun 17 15:22:00 nas01 smbd[5046]: [2015/06/17 15:22:00.535971, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:22:00 nas01 smbd[5046]: [0000] 22 B4 44 BA E1 2A F0 6B 4A 0A 84 7B 9D 38 E2 11 ".D..*.k J..{.8..
Jun 17 15:22:13 nas01 smbd[5046]: [2015/06/17 15:22:13.454837, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:22:13 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:22:13 nas01 smbd[5046]: [2015/06/17 15:22:13.454978, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:22:13 nas01 smbd[5046]: [0000] 11 64 B8 FD 28 62 41 14 5C E0 A6 AA 3C FC E8 63 .d..(bA. \...<..c
Jun 17 15:22:13 nas01 smbd[5046]: [2015/06/17 15:22:13.455052, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:22:13 nas01 smbd[5046]: [0000] 1D 1A 4C AE BA 64 21 1E 7C 04 6B 47 C4 3B C3 35 ..L..d!. |.kG.;.5
Jun 17 15:22:13 nas01 smbd[5046]: [2015/06/17 15:22:13.456145, 0] ../libcli/smb/smb2_signing.c:170(smb2_signing_check_pdu)
Jun 17 15:22:13 nas01 smbd[5046]: Bad SMB2 signature for message
Jun 17 15:22:13 nas01 smbd[5046]: [2015/06/17 15:22:13.456235, 0] ../lib/util/util.c:556(dump_data)
Jun 17 15:22:13 nas01 smbd[5046]: [0000] 64 2A DC A4 3C 47 C4 EE 47 E6 5B 5C A5 DA 34 95 d*..

Back to SMB3 for me I think...

 

[SweetAndLow]

I wonder if those messages are because you have a client on your network that is using smb3 and when you switch it the server only talks smb2 but the client had already negotiated smb3 so it keeps talking smb3. When you switch to smb2 for max protocols maybe re mount your shares on your clients?

 

[anodos]

The debug file contains lots of info that I'll probably poke through in 15 minute increments and so my posts will be disjointed. As SweetAndLow suggested, you will probably at a minimum need to log off and log back in to renegotiate the connection at the lower protocol level.

I noticed that you have bce0 and bce1 set with different IP Addresses on the same subnet. Samba is bound to both interfaces. This might be causing some of the samba errors in your logs. You should configure LACP (if your switch supports it) or set it up to fail-over (if your switch doesn't support LACP).

 

[billsey]

LACP with the Netgear GS724T switches I'm using is problematic, so I've just disabled the second port. When everything is working again I'll look into getting the LACP side of things working. I've switched back to SMB2 again and will work toward getting my clients to reconnect today.