Troubles accessing samba LAN shares on an ubuntu server

taproots · November 1, 2024 at 11:00 AM New

Hello everyone!

I need some help on configuring kodi to access a samba share on a ubuntu machine. So far it always fails with an "Software caused connection abort" error message.

The server shows that kodi is connected:

Code

Samba version 4.19.5-Ubuntu
PID     Username     Group        Machine                                   Protocol Version  Encryption           Signing
----------------------------------------------------------------------------------------------------------------------------------------
10564   kodi         kodi         moviebox (ipv4:192.168.0.56:60142)        SMB3_11           -                    partial(AES-128-GMAC)

But "NT_STATUS_CONNECTION_DISCONNECTED" seems to be the reason the whole thing fails:

Code

[2024/11/01 11:52:28.900990,  3] source3/smbd/smb2_negprot.c:345(smbd_smb2_request_process_negprot)
 Selected protocol SMB3_11
[2024/11/01 11:52:28.902693,  3] auth/gensec/gensec_start.c:1083(gensec_register)
 GENSEC backend 'gssapi_spnego' registered
[2024/11/01 11:52:28.902714,  3] auth/gensec/gensec_start.c:1083(gensec_register)
 GENSEC backend 'gssapi_krb5' registered
[2024/11/01 11:52:28.902723,  3] auth/gensec/gensec_start.c:1083(gensec_register)
 GENSEC backend 'gssapi_krb5_sasl' registered
[2024/11/01 11:52:28.902730,  3] auth/gensec/gensec_start.c:1083(gensec_register)
 GENSEC backend 'spnego' registered
[2024/11/01 11:52:28.902739,  3] auth/gensec/gensec_start.c:1083(gensec_register)
 GENSEC backend 'schannel' registered
[2024/11/01 11:52:28.902746,  3] auth/gensec/gensec_start.c:1083(gensec_register)
 GENSEC backend 'ncalrpc_as_system' registered
[2024/11/01 11:52:28.902754,  3] auth/gensec/gensec_start.c:1083(gensec_register)
 GENSEC backend 'sasl-EXTERNAL' registered
[2024/11/01 11:52:28.902762,  3] auth/gensec/gensec_start.c:1083(gensec_register)
 GENSEC backend 'ntlmssp' registered
[2024/11/01 11:52:28.902770,  3] auth/gensec/gensec_start.c:1083(gensec_register)
 GENSEC backend 'ntlmssp_resume_ccache' registered
[2024/11/01 11:52:28.902777,  3] auth/gensec/gensec_start.c:1083(gensec_register)
 GENSEC backend 'http_basic' registered
[2024/11/01 11:52:28.902785,  3] auth/gensec/gensec_start.c:1083(gensec_register)
 GENSEC backend 'http_ntlm' registered
[2024/11/01 11:52:28.902793,  3] auth/gensec/gensec_start.c:1083(gensec_register)
 GENSEC backend 'http_negotiate' registered
[2024/11/01 11:52:28.902802,  3] auth/gensec/gensec_start.c:1083(gensec_register)
 GENSEC backend 'krb5' registered
[2024/11/01 11:52:28.902818,  3] auth/gensec/gensec_start.c:1083(gensec_register)
 GENSEC backend 'fake_gssapi_krb5' registered
[2024/11/01 11:52:28.904671,  3] auth/ntlmssp/ntlmssp_util.c:72(debug_ntlmssp_flags)
 Got NTLMSSP neg_flags=0x62088215
[2024/11/01 11:52:28.906034,  3] auth/ntlmssp/ntlmssp_server.c:509(ntlmssp_server_preauth)
 Got user=[kodi] domain=[WORKGROUP] workstation=[MOVIEBOX] len1=24 len2=244
[2024/11/01 11:52:28.906103,  3] source3/auth/auth.c:202(auth_check_ntlm_password)
 auth_check_ntlm_password: check_ntlm_password:  Checking password for unmapped user [WORKGROUP]\[kodi]@[MOVIEBOX] with the new password interface
[2024/11/01 11:52:28.906112,  3] source3/auth/auth.c:208(auth_check_ntlm_password)
 auth_check_ntlm_password: check_ntlm_password:  mapped user is: [WORKGROUP]\[kodi]@[MOVIEBOX]
[2024/11/01 11:52:28.906316,  3] source3/passdb/lookup_sid.c:1720(get_primary_group_sid)
 Forcing Primary Group to 'Domain Users' for kodi
[2024/11/01 11:52:28.906510,  3] source3/passdb/lookup_sid.c:1720(get_primary_group_sid)
 Forcing Primary Group to 'Domain Users' for kodi
[2024/11/01 11:52:28.907058,  3] source3/auth/auth.c:274(auth_check_ntlm_password)
 auth_check_ntlm_password: sam_ignoredomain authentication for user [kodi] succeeded
[2024/11/01 11:52:28.909729,  3] auth/auth_log.c:858(log_authentication_event_human_readable)
 Auth: [SMB2,(null)] user [WORKGROUP]\[kodi] at [Fr, 01 Nov 2024 11:52:28.909709 CET] with [NTLMv2] status [NT_STATUS_OK] workstation [MOVIEBOX] remote host [ipv4:192.168.0.56:60142] became [MEDIABOX]\[kodi] [S-1-5-21-2725314807-4177566423-3078561238-3012]. local host [ipv4:192.168.0.100:139]
 {"timestamp": "2024-11-01T11:52:28.909788+0100", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 3}, "eventId": 4624, "logonId": "0", "logonType": 3, "status": "NT_STATUS_OK", "localAddress": "ipv4:192.168.0.100:139", "remoteAddress": "ipv4:192.168.0.56:60142", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "WORKGROUP", "clientAccount": "kodi", "workstation": "MOVIEBOX", "becameAccount": "kodi", "becameDomain": "MEDIABOX", "becameSid": "S-1-5-21-2725314807-4177566423-3078561238-3012", "mappedAccount": "kodi", "mappedDomain": "WORKGROUP", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "clientPolicyAccessCheck": null, "serverPolicyAccessCheck": null, "duration": 5196}}
[2024/11/01 11:52:28.909810,  2] source3/auth/auth.c:332(auth_check_ntlm_password)
 check_ntlm_password:  authentication for user [kodi] -> [kodi] -> [kodi] succeeded
[2024/11/01 11:52:28.909819,  3] source3/param/loadparm.c:3997(lp_load_ex)
 lp_load_ex: refreshing parameters
[2024/11/01 11:52:28.909856,  3] source3/param/loadparm.c:559(init_globals)
 Initialising global parameters
[2024/11/01 11:52:28.909906,  3] source3/param/loadparm.c:2899(lp_do_section)
 Processing section "[global]"
[2024/11/01 11:52:28.910018,  2] source3/param/loadparm.c:2916(lp_do_section)
 Processing section "[printers]"
[2024/11/01 11:52:28.910053,  2] source3/param/loadparm.c:2916(lp_do_section)
 Processing section "[print$]"
[2024/11/01 11:52:28.910075,  2] source3/param/loadparm.c:2916(lp_do_section)
 Processing section "[public]"
[2024/11/01 11:52:28.910138,  2] source3/param/loadparm.c:2916(lp_do_section)
 Processing section "[lena]"
[2024/11/01 11:52:28.910201,  2] source3/param/loadparm.c:2916(lp_do_section)
 Processing section "[moritz]"
[2024/11/01 11:52:28.910264,  2] source3/param/loadparm.c:2916(lp_do_section)
 Processing section "[temp]"
[2024/11/01 11:52:28.910317,  2] source3/param/loadparm.c:2916(lp_do_section)
 Processing section "[scanner]"
[2024/11/01 11:52:28.910365,  3] source3/param/loadparm.c:1683(lp_add_ipc)
 adding IPC service
[2024/11/01 11:52:28.910953,  3] source3/auth/token_util.c:688(finalize_local_nt_token)
 Failed to fetch domain sid for WORKGROUP
[2024/11/01 11:52:28.911232,  3] auth/ntlmssp/ntlmssp_sign.c:623(ntlmssp_sign_reset)
 NTLMSSP Sign/Seal - Initialising with flags:
[2024/11/01 11:52:28.911253,  3] auth/ntlmssp/ntlmssp_util.c:72(debug_ntlmssp_flags)
 Got NTLMSSP neg_flags=0x62088215
[2024/11/01 11:52:28.911275,  3] auth/ntlmssp/ntlmssp_sign.c:623(ntlmssp_sign_reset)
 NTLMSSP Sign/Seal - Initialising with flags:
[2024/11/01 11:52:28.911282,  3] auth/ntlmssp/ntlmssp_util.c:72(debug_ntlmssp_flags)
 Got NTLMSSP neg_flags=0x62088215
[2024/11/01 11:52:28.911674,  3] source3/auth/token_util.c:688(finalize_local_nt_token)
 Failed to fetch domain sid for WORKGROUP
[2024/11/01 11:52:28.911942,  3] source3/smbd/password.c:84(register_homes_share)
 Adding homes service for user 'kodi' using home directory: '/home/kodi'
[2024/11/01 11:52:28.917611,  3] lib/util/access.c:372(allow_access)
 Allowed connection from moviebox (192.168.0.56)
[2024/11/01 11:52:28.917668,  3] source3/smbd/smb2_service.c:584(make_connection_snum)
 make_connection_snum: Connect path is '/tmp' for service [IPC$]
[2024/11/01 11:52:28.917693,  3] source3/smbd/vfs.c:115(vfs_init_default)
 Initialising default vfs hooks
[2024/11/01 11:52:28.917703,  3] source3/smbd/vfs.c:141(vfs_init_custom)
 Initialising custom vfs hooks from [/[Default VFS]/]
[2024/11/01 11:52:29.020034,  3] source3/smbd/smb2_server.c:4031(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_CONNECTION_DISCONNECTED] || at source3/smbd/smb2_ioctl.c:353

Display More

Any idears what i am doing wrong?

Server:

Distributor ID: Ubuntu
Description: Ubuntu 24.04.1 LTS
Release: 24.04
Codename: noble

Kodi:

LibreELEC (official): 12.0.1 (RPi4.aarch64)

**Da Flex** · November 2, 2024 at 11:22 PM New

https://wiki.libreelec.tv/how-to/add-content-via-samba-shares

**chewitt** · November 3, 2024 at 9:21 AM New

Da Flex please explain how our wiki article on adding content via the local LE samba server going to help diagnose an issue with the Kodi SMB client?

**Da Flex** · November 3, 2024 at 5:06 PM New

chewitt Sorry, I mixed up client and server.

taproots This seems to be the cause:

Quote

Code

[2024/11/01 11:52:28.900990,  3] source3/smbd/smb2_negprot.c:345(smbd_smb2_request_process_negprot)
 Selected protocol SMB3_11

On your Ubuntu Samba server, add/edit this at /etc/samba/smb.conf:

Code

client min protocol = SMB2
client max protocol = SMB3

Then restart the Samba server: sudo service smbd restart