Bug 11499 - Windows 98 cannot access Samba Share or Samba Server
Windows 98 cannot access Samba Share or Samba Server
Status: NEW
Product: Samba 4.1 and newer
Classification: Unclassified
Component: File services
All All
: P5 normal
: ---
Assigned To: Samba QA Contact
Samba QA Contact
Depends on:
  Show dependency treegraph
Reported: 2015-09-06 23:55 UTC by Carsten Menke
Modified: 2016-03-07 16:38 UTC (History)
2 users (show)

See Also:

Log Level 10 and tcpdump of affected computer (141.84 KB, application/force-download)
2015-09-19 18:16 UTC, Carsten Menke
no flags Details
Log Level 10 and tcpdump of working Samba Version 4.1.6 (42.20 KB, application/x-zip-compressed)
2015-09-22 19:43 UTC, Carsten Menke
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Carsten Menke 2015-09-06 23:55:39 UTC
With Samba 4.1.6 everything was working fine, now I tried to upgrade to Samba 4.2.3 on the weekend. We have several old machines around which are bound to the version of Windows they were delivered with.

After upgrading to 4.2.3 I found out that I could not access the samba Server from any of our 3 Windows 98 clients. Windows 95, DOS, Windows 2000, Windows XP and Mac OS X connect fine, it is just this three Windows 98 computers which do not see the Samba server using \\"IP-Address or Hostname". According to winver this is just plain 98 not the SE edition. Note as this is a production system I can just test out things in fixed intervals e.g. at the weekends when there is nobody working

Here is what is in my smb.conf

        workgroup = HEYWINKEL.WIN
        realm = kh.heywinkel.local
        netbios name = HAUPTSERVER
        server role = active directory domain controller
        dns forwarder =
        idmap_ldb:use rfc2307 = yes
        logon script = logon.bat
        logon drive = U:
        # logon path = \\%N\%U\Profile
        domain logons = Yes
        preferred master = Yes
        domain master = Yes
        local master = Yes
        # wins proxy = Yes
        # dns proxy = No
        time server = Yes
        create mask = 0660
        directory mask = 0770
        hide unreadable = Yes

     # Generic Options
        unix charset = UTF-8
        dos charset = 850
        log file = /var/log/samba/%m.log
        log level = 0
        max log size = 1000                                                                

     # Needed for MS DOS and Win 9.x Clients
        lanman auth = yes
Comment 1 Volker Lendecke 2015-09-07 04:52:00 UTC
Please add a network trace and a debug level 10 smbd log of the failed attempt.


Comment 2 Carsten Menke 2015-09-14 10:32:13 UTC
I think I can provide the requested information the next weekend.
Can you please tell me what network trace you want? Commandline would be helpful.
Comment 3 Carsten Menke 2015-09-19 18:16:47 UTC
Created attachment 11452 [details]
Log Level 10 and tcpdump of affected computer
Comment 4 Carsten Menke 2015-09-19 18:17:28 UTC
I used Samba 4.2.4
Comment 5 Volker Lendecke 2015-09-19 19:28:31 UTC
(In reply to Carsten Menke from comment #4)

Hmm. For some reason win98 just stops after our response. Do you still have the working Samba version around? If we get a working trace then we can compare bit by bit what goes wrong now.
Comment 6 Carsten Menke 2015-09-21 14:05:53 UTC
Yes of course I have the working copy around which is 4.1.6 otherwise they would not be able to work :-)

I'll try to do a network trace and log level 10 tomorrow with the working copy of Samba.
Comment 7 Carsten Menke 2015-09-22 19:43:24 UTC
Created attachment 11455 [details]
Log Level 10 and tcpdump of working Samba Version 4.1.6

Comment 8 Christian Ambach 2015-10-14 20:49:53 UTC
One immediate difference I found is that 4.2.3 offers signing by default, 4.1.6 does not. Maybe it does not like the signature and disconnects.

Carsten, can you disable SMB signing to see if this helps?
Comment 9 Christian Ambach 2015-10-14 20:50:38 UTC
server signing = disabled would be the setting to add
Comment 10 Carsten Menke 2015-10-22 12:40:32 UTC
I will do that, however I have the next time slice not before next weekend.

By the way, meaning that this option is the reason, would it then not be helpfull to disable signing per client protocoll level at runtime (detect what version the client is running and then dynamically disable signingI)?
Comment 11 Carsten Menke 2015-10-22 17:04:56 UTC
I couldn't resist trying this out, and yes indeed 

server signing = disabled

is the key. When disabling this, ALL Windows 98 machines work as expected. So this is a workaround
Comment 12 Carsten Menke 2015-10-23 03:30:51 UTC
As I read on technet, even Win 98 should be able to sign SMB packets and what even more wonders me is, that Windows 95 does work out of the box and Windows 98 doesn't. So even if Windows 98 would not support SMB signing (as I don't know if they implemented it in the SE Edition in an Update or the like), it should still work with the default values as Windows 95 does also.
Comment 13 Christian Ambach 2016-03-07 16:38:04 UTC
There seems to be some trouble with Win98 and SMB Signing and there were some updates available from Microsoft, e.g. KB323466.
Can you try to install the dsclient updates on your WIN98 box to see if it helps?