Discussion:
[Bug 207072] [NEW] Nautilus in hardy does not display samba shares for machines inside an ADS network.
(too old to reply)
Renzo Bagnati
2008-03-26 11:41:31 UTC
Permalink
Public bug reported:

Binary package hint: nautilus

Using hardy beta, when I browse with nautilus other machines in an Active Directory (ADS) network, some of them do not show their shared folders.
The ADS integration of the hardy box was done using winbind, kerberos and PAM libraries, essentially as described here:
https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto
The network contains mostly windows clients, but also several linux boxes, which were joined to the ADS domain with the command: 'net ads join'.
Machines running windows XP, windows 2003 and samba show '0 objects' in nautilus, but after inserting the complete path (eg.: smb://server/share) the folders can be accessed after the password prompt.
Machines running windows 2000 show their folders regularly.

Here is a detailed description of what happens:

Case 1 ---------------------------------------------------------------------------------
Browsing from hardy-beta a machine running ubuntu-gutsy server.

In a terminal window:

***@vm-hardy:~$ smbclient -L gutsy-server
Password: (password inserted here)
Domain=[LAB] OS=[Unix] Server=[Samba 3.0.26a]
Sharename Type Comment
--------- ---- -------
IPC$ IPC IPC Service (gutsy-server (Samba 3.0.26a, Ubuntu))
share Disk gutsy-server_share
Domain=[LAB] OS=[Unix] Server=[Samba 3.0.26a]

In Nautilus:

Open Network --> Double-click on the 'LAB' icon (Domain) --> All machines are displayed;
Double-click on the 'gutsy-server' icon --> after a while, Nautilus returns '0 objects', without asking for a password;
Insert the full address (smb://gutsy-server/share) --> a password is requested and the share content is displayed.

Case 2 ---------------------------------------------------------------------------------
Browsing from hardy-beta a machine running Windows XP

In a terminal window:

***@vm-hardy:~$ smbclient -L XP-ACQ
Password: (password inserted here)
Domain=[LAB] OS=[Windows 5.1] Server=[Windows 2000 LAN Manager]
Sharename Type Comment
--------- ---- -------
IPC$ IPC Remote IPC
Data Disk
Domain=[LAB] OS=[Windows 5.1] Server=[Windows 2000 LAN Manager]

In Nautilus:

Same behaviour as in case 1.
smb://XP-ACQ --> '0 objects';
smb://XP-ACQ/Data --> content displayed after password.

Case 3 ---------------------------------------------------------------------------------
Browsing from hardy-beta a machine running Windows 2000

In a terminal window:

***@vm-hardy:~$ smbclient -L TF-2000
Password: (password inserted here)
Domain=[LAB] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]
Sharename Type Comment
--------- ---- -------
IPC$ IPC Remote IPC
Data Disk
Domain=[LAB] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]

In Nautilus:

Open Network --> Double-click on the 'LAB' icon (Domain) --> All machines are displayed;
Double-click on the 'TF-2000' icon --> All the shared folders are displayed, without asking for a password;
Double-click on the 'Data' folder icon --> a password is requested and the content is displayed.
(This is the correct and the expected behaviour).


Using ubuntu-gutsy boxes, with exactly the same samba configuration (smb.conf), to browse the same machines I never observed Nautilus return '0 objects' as in case 1 and 2.
Such a behaviour in hardy will make a normal user think that browsing an ADS network does not work at all.

** Affects: nautilus (Ubuntu)
Importance: Undecided
Status: New
--
Nautilus in hardy does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in ubuntu.
Renzo Bagnati
2008-03-26 11:41:31 UTC
Permalink
** Attachment added: "smb.conf"
http://launchpadlibrarian.net/12893752/smb.conf
--
Nautilus in hardy does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in ubuntu.
|\\/|onster
2008-03-26 13:38:56 UTC
Permalink
I have the Exact same Problem.
--
Nautilus in hardy does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in ubuntu.
Sebastien Bacher
2008-03-26 14:12:08 UTC
Permalink
Thanks for your bug report. This bug has been reported to the developers
of the software. You can track it and make comments here:
http://bugzilla.gnome.org/show_bug.cgi?id=524485

** Summary changed:

- Nautilus in hardy does not display samba shares for machines inside an ADS network.
+ does not display samba shares for machines inside an ADS network.

** Summary changed:

- does not display samba shares for machines inside an ADS network.
+ nautilus does not display samba shares for machines inside an ADS network.

** Changed in: gvfs (Ubuntu)
Sourcepackagename: nautilus => gvfs
Importance: Undecided => Medium
Assignee: (unassigned) => Ubuntu Desktop Bugs (desktop-bugs)
Status: New => Triaged

** Also affects: gvfs via
http://bugzilla.gnome.org/show_bug.cgi?id=524485
Importance: Unknown
Status: Unknown
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Sebastien Bacher
2008-03-26 14:41:05 UTC
Permalink
did you get asked for a password when browsing those shares in the
previous version of nautilus?
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Renzo Bagnati
2008-03-27 09:40:47 UTC
Permalink
Yes, when using nautilus in gutsy a password is requested for browsing the machines in cases 1 and 2, but not in case 3.
I checked it also with a gutsy live CD, because the presence of gnome-keyring does make it difficult to say if browsing a share requires or not a password.
So the problem in hardy is that nautilus does not ask for it. In case 3 it shows the shares because they are browseable without password.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Bug Watch Updater
2008-03-27 12:10:37 UTC
Permalink
** Changed in: gvfs
Status: Unknown => New
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Mike Seeley
2008-03-27 15:22:42 UTC
Permalink
Did the same steps as Renzo and I was able to recreate and confirm his
findings.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Paul Aurich
2008-04-04 03:40:57 UTC
Permalink
I believe this bug is due to the fact that gvfs does not do any authentication for browsing a computer's shares (the smb-browse backend) whereas it does do authentication for connecting to a share (the smb backend).
I've produced a fairly hacky patch that grafts authentication into the smb-browse backend. It works for me.

** Attachment added: "Add authentication support to smb-browse backend"
http://launchpadlibrarian.net/13103721/gvfs.patch
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Renzo Bagnati
2008-04-04 08:41:09 UTC
Permalink
I have recompiled gvfs sources with Paul's patch and indeed it works inside my ADS network.
Tested with nautilus in all the cases I have reported and found no problems. A password prompt is displayed when needed, and all the machines can be browsed.
Now I really hope that this bug can be solved before the final release of hardy, otherways it will make it difficult to use hardy inside many networks that require browsing authentication. I think also that this bug should have a high priority.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
wvengen
2008-04-04 17:51:40 UTC
Permalink
I've just applied the patch, and I can now browse using nautilus; great!
Reinstalling the old packages breaks it again.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Nikolaus Filus
2008-04-09 15:04:12 UTC
Permalink
I think this bug is also responsible for not beeing able to see or browse a home share as a home share is only visible
if listing of shares is authenticated. This bug is reported upstream as
http://bugzilla.gnome.org/show_bug.cgi?id=520551
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Sebastien Bacher
2008-04-12 13:58:53 UTC
Permalink
the issue is not a nautilus one

** Changed in: nautilus (Ubuntu)
Importance: Undecided => Low
Assignee: (unassigned) => Ubuntu Desktop Bugs (desktop-bugs)
Status: New => Invalid
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Renzo Bagnati
2008-04-14 13:22:24 UTC
Permalink
Acquiring a kerberos ticket from an AD server, using pam_winbind at login (or using kinit in a shell), allows a user to browse samba shares with its cached credentials.
This is described here:
https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto#head-a1da1a136c89873cbd7c7a1e1fbd75d621d18c9a

Maybe gvfs expects to find this or other authentications, but in any case this behaviour is different from what happened with gnomevfs in previous releases. Users should be aware of this.
I still think that a gvfs patch is needed to ask for a password when it is required, indipendently of kerberos tickets.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Sebastien Bacher
2008-04-21 10:38:09 UTC
Permalink
the kerberos issue seems to be a different one, the issue described
there is that smb browsing doesn't ask for credentials and those are
sometime required
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Sebastien Bacher
2008-04-21 13:27:07 UTC
Permalink
** Changed in: gvfs (Ubuntu)
Importance: Medium => High
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Renzo Bagnati
2008-04-21 15:05:10 UTC
Permalink
Sebastien: I found no issues with kerberos, I was only pointing out that
acquiring a ticket at login allows subsequent browsing of password
protected shares, because of the credentials already acquired. Infact
this is also true after using the package likewise-open to join the AD
domain, probably because it does the same type of authentication.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Steve Langasek
2008-04-25 20:45:42 UTC
Permalink
** Changed in: gvfs (Ubuntu)
Target: None => ubuntu-8.04.1
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
BeerSeller
2008-04-28 06:55:55 UTC
Permalink
To darkrain42:
Thank you very much for the patch
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
lic
2008-04-28 07:07:56 UTC
Permalink
To darkrain42: your patch just super, thanks to great !!!!
To BeerSeller: Thanks showed that the right path and helped him pass
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Pablo Estigarribia
2008-04-28 11:08:02 UTC
Permalink
I have the same problem, I can't see anything inside a windows machine with smb://machine
It doesn't display anything inside. I have the latest packages for Hardy
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Amar
2008-04-29 08:55:05 UTC
Permalink
I think Darkrains patch will solve my problem. However, I'm new to linux
and ubuntu, I would be grateful if someone can advise me on how to apply
this patch.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Alan Nordman
2008-05-01 20:44:41 UTC
Permalink
Can anyone explain how to apply this patch? Thanks!
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Renzo Bagnati
2008-05-01 21:48:23 UTC
Permalink
To apply the patch you have to recompile gvfs from source. Instructions on how to do it can be found here:
http://www.debian.org/doc/manuals/apt-howto/ch-sourcehandling.html

After dowloading the sources you have to apply the gvfs.patch using the
'patch' command ('man patch', for instructions). However, some manual
editing of the patch file may be needed, because it was made for an
older gvfs version. But it should work also with the latest version.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
David Horn
2008-05-02 15:11:13 UTC
Permalink
I just built with the latest gvfs trunk, and applied the patch (no
changes required to patch) Works great. Thank you.

For those that want to try your hand at building this yourself, I kept
track of what I did to build:

1)Read gnome.org developer instructions. You need Subversion installed to start.
2)Get gvfs trunk from subversion using: "svn co http://svn.gnome.org/svn/gvfs/trunk gvfs"
3)download patch -- direct link: http://launchpadlibrarian.net/13103721/gvfs.patch
4)backup original daemon/gvfsbackendsmbbrowse.c and /usr/lib/gvfs/gvfsd-smb-browse (source and binary)
5)download and apply above patch to the daemon/gvfsbackendsmbbrowse.c source file (i.e. "man patch" if unsure)
6)run ./autogen.sh --prefix=/usr/local in gvfs source (as per gnome.org dev instructions)
7)watch autogen/configure output closely as you will have errors unless you have built gvfs or gnome before
8)get all build dependancies (quite a few, be patient and repeat autogen {steps 6-8} as needed)
9)make sure that configure is building samba (configure output should say "Samba support: yes" at end. If this is not set to yes, you need the package "libsmbclient-dev" (e.g. sudo apt-get install libsmbclient-dev)
10)after successful compile, copy the newly built "gvfsd-smb-browse" file from the daemon/.libs/ directory to the expected location (/usr/lib/gvfs) If copy fails, you will need to be root, delete original file, then copy newly built one
11)Reboot
12) Enjoy the fix!
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Alan Nordman
2008-05-03 08:29:38 UTC
Permalink
And now you have no trouble accessing password-protected shares?
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
MicioMax
2008-05-06 08:35:41 UTC
Permalink
I can confirm it. With the patch applied I can browse my share as it
happened in Gutsy, a password is requested when needed. Without the
patch, password protected folders are simply not shown, even if I can
connect to them entering the full path manually.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
thanos
2008-05-06 13:02:51 UTC
Permalink
Hi

When can we know for sure if a fix for this will go to the hardy
mainstream? Otherwise, can the person that built the patched gvfs
backend post the binary somewhere?

Thanks a lot
Thanos
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
thanos
2008-05-07 08:14:01 UTC
Permalink
Being horribly impatient, I've compiled it myself following instructions
from comment
{https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/207072/comments/21}.
Seems that it now works and my problems are solved.

If there is popular request I can provide the binary, even here, it is
only 42KB gzipped.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Steve Langasek
2008-05-08 05:41:45 UTC
Permalink
** Changed in: nautilus (Ubuntu Hardy)
Status: New => Invalid

** Changed in: gvfs (Ubuntu Hardy)
Importance: Undecided => High
Assignee: (unassigned) => Ubuntu Desktop Bugs (desktop-bugs)
Status: New => Triaged
Target: None => ubuntu-8.04.1

** Changed in: gvfs (Ubuntu)
Target: ubuntu-8.04.1 => None
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Alan Hoffman
2008-05-09 18:04:19 UTC
Permalink
Yes please!!!!!
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
JDM
2008-05-09 18:10:48 UTC
Permalink
Oh yeah!
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
thanos
2008-05-12 08:54:10 UTC
Permalink
Hi

Attached is the 42K gzip'ed executable compiled for i386 32bit Hardy ONLY. It is virus free and when gunzipped has the MD5SUM of 77081f6e6dcc42448c5de355132ad582
Should be copied as per instructions in #21 (steps 10,11), and works for me up to now (no updates pending).

*** HIGH RISK DISCLAIMER ***
use at your own risk, no guarantees either expressed or implied. May fit particular purpose. Do not wish to be contacted and will reject any communications with regards to this executable. Do not use if MD5 does not match.
*** HIGH RISK DISCLAIMER ***

** Attachment added: "gzip of smb-browse GVFS helper"
http://launchpadlibrarian.net/14466364/gvfsd-smb-browse.gz
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
thanos
2008-05-12 08:55:00 UTC
Permalink
Added screenshot verifying MD5SUM and showing size of executable.

** Attachment added: "MD5SUM verification, size of executable"
Loading Image...
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
cRoW2k
2008-05-16 08:18:03 UTC
Permalink
Work for me, thanks :)
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Ondřej Cífka
2008-05-20 14:20:03 UTC
Permalink
I can confirm the bug but the patch doesn't work for me (I try to go to smb://192.168.0.2/shared, it prompts me for the username and password and then it says 'Couldn't display "smb://192.168.0.2/shared/". Error: Failed to mount Windows share
Please select another viewer and try again.').
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
thanos
2008-05-20 14:58:58 UTC
Permalink
With ref to comment #31, it seems that either

a) the instructions from #21 are not followed - please retry
b) the machine is not updated or is updated with newer version of gvfs....

Some things to check:

1. Make sure that the executable is replaced and no "Update Manager" has done any updates.
2. Verify MD5 of the executable I've provided vs. the executable in the final location

File size in bytes: 108656
File name: gvfsd-smb-browse

$ file gvfsd-smb-browse
gvfsd-smb-browse: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), for GNU/Linux 2.6.8, dynamically linked (uses shared libs), stripped


File MD5: 77081f6e6dcc42448c5de355132ad582

3. Reboot machine
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
thanos
2008-05-20 14:56:38 UTC
Permalink
Some things to check:

1. Make sure that the executable is replaced and no "Update Manager" has
done any updates.
2. Verify MD5 of the executable I've provided vs. the executable in the
final location

File size in bytes: 108656
File name: gvfsd-smb-browse

$ file gvfsd-smb-browse
gvfsd-smb-browse: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV),
for GNU/Linux 2.6.8, dynamically linked (uses shared libs), stripped


File MD5: 77081f6e6dcc42448c5de355132ad582

3. Reboot machine

If all this is done, then it seems you have an updated/predated gvfs....
Post by Ondřej Cífka
I can confirm the bug but the patch doesn't work for me (I try to go to
smb://192.168.0.2/shared, it prompts me for the username and password and
then it says 'Couldn't display "smb://192.168.0.2/shared/". Error: Failed
to mount Windows share
Please select another viewer and try again.').
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a direct subscriber
of the bug.
--

Thanos

** Attachment added: "unnamed"
http://launchpadlibrarian.net/14623464/unnamed
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
--
desktop-bugs mailing list
desktop-***@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/deskto
Ondřej Cífka
2008-05-20 17:33:53 UTC
Permalink
I have already retried. The two files are the same (I also compared them
via cmp). My gvfs version is 0.2.3-0ubuntu5. And yes, the update manager
has done an update to nautilus (installed version: 1:2.22.2-0ubuntu6).
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
obscure_detour
2008-05-20 23:25:18 UTC
Permalink
Just to let you know I've experienced this bug on two Hardy machines in
my home. I've also got XP, Vista machines that can see and access all
smb shares.

My smb.conf is very similar to the guide outlined here:
http://www.ubuntugeek.com/howto-setup-samba-server-with-tdbsam-
backend.html

Nautilus fails at browsing any shares. Although, I can mount a non
authenticated share via terminal.

In reply to thanos,

Thanks for posting the patch. I verified md5 sum and I've renamed the
old executable to gvfsd-smb-browse.bak and copied your patched one into
/usr/lib/gvfs and rebooted. I've got a different problem now. Now when
I try to browse the network I get this error: Failed to execute child
process "/usr/lib/gvfs/gvfsd-smb-browse" (Permission denied).

Apparently I screwed up the permissions along the way. Not sure how. I
did everything as root, renamed old file and copied new one to the path.
I do notice when I do a list in terminal it's the only file in
/usr/lib/gvfs that isn't highlighted green.

Any feedback would be appreciated.

obscure detour
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
darkrain42
2008-05-20 23:55:42 UTC
Permalink
obscure_detour:
The file you installed is not marked as executable. As root, do:
# chown root:root /usr/lib/gvfs/gvfsd-smb-browse
# chmod 755 /usr/lib/gvfs/gvfsd-smb-browse

and that will give the file the appropriate permissions and ownership.

Ondřej Cífka:
Your problem with mounting smb://192.168.0.2/shared/ may be unrelated to the patch, as the patch should only affect the listing of shares (so smb://192.168.0.2), not actually connecting to a share.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
--
desktop-bugs mailing list
desktop-***@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinf
thanos
2008-05-21 07:48:30 UTC
Permalink
Apologies for the omission, it was too obvious for me that the file
should become chown'ed by root:root and executable...

-rwxr-xr-x 1 root root 108656 2008-05-08 12:06 /usr/lib/gvfs/gvfsd-smb-
browse
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Ondřej Cífka
2008-05-21 15:38:13 UTC
Permalink
#36: So that's the problem... For me, the listing of shares is correct,
but their contents are not displayed. Is that another bug? I can connect
to the share from Windows and Gutsy with no problems.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
obscure_detour
2008-05-21 18:14:27 UTC
Permalink
Thank you darkrain42 and thanos. I apologize as I'm not as experienced
as the rest :) I'll try it and comment my results.

Cheers,

obscure detour
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
obscure_detour
2008-05-21 23:47:28 UTC
Permalink
Well it fixed it for the most part. Thank you thanos for uploading the
patched file. I am able to access all my shares using nautilus.
However, I still have to type in the share path.

Simply browse to "Network" and then to "Windows Network" it just thinks
and errors out with; "Cannot open smb:///" or if you actually do get it
to browse into "Windows Network" and click on the domain, it errors out
with; "There is not a known application for this file type". Nautilus
also errors out if I type in "smb://".

If I simply type "smb://host/sharename" host being either the hostname
or the ip address and sharename it works perfectly. Just like Gusty :)
Nautilus asks me for auth, and off we go.

Thanks again.

obscure detour
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
thanos
2008-05-22 06:36:42 UTC
Permalink
Hi

Seems to me that you're referring to another bug. What I've observed is that
the "Network" is working but not "predictably". For example, if you login
and go to nautilus -> network, it is empty. If you leave things as they are
for 5-10 minutes, then try again, there are some things appearing. I dont
browse the network, I usually map the drives directly with smbfs. However, I
did notice this behavior so maybe you should watch out for it - leave it as
it is for 5-10 minutes, then open Nautilus -> Network again....

Maybe it is dependent on the number of machines on the network? For us it is
more than 200...
Post by obscure_detour
Well it fixed it for the most part. Thank you thanos for uploading the
patched file. I am able to access all my shares using nautilus.
However, I still have to type in the share path.
Simply browse to "Network" and then to "Windows Network" it just thinks
and errors out with; "Cannot open smb:///" or if you actually do get it
to browse into "Windows Network" and click on the domain, it errors out
with; "There is not a known application for this file type". Nautilus
also errors out if I type in "smb://".
If I simply type "smb://host/sharename" host being either the hostname
or the ip address and sharename it works perfectly. Just like Gusty :)
Nautilus asks me for auth, and off we go.
Thanks again.
obscure detour
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a direct subscriber
of the bug.
--

Thanos


** Attachment added: "unnamed"
http://launchpadlibrarian.net/14651644/unnamed
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
John Kuang
2008-05-25 06:11:05 UTC
Permalink
I swapped in the smb-browse binary from comment 28. Seems to work, but
the only thing is it doesn't do is to save the passwords into the
keyring. Another big problem I discovered was that if you bookmark any
windows server (eg. smb://server ) that requires password in nautilus,
you will SLOW DOWN your save/save as/open dialogs in programs such as
gimp, openoffice, and practically any gtk programs. It will take around
5 seconds for the dialog to appear. When I removed those bookmarks, the
save/save as/open file dialogs became zippy again. Having the actual
share bookmarked (eg. smb://server/share) doesnt slow things down.
Anyone else experiencing this?
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Nikolaus Filus
2008-05-26 11:29:19 UTC
Permalink
Could someone from the delopers or maintainer group look into this bug report and act according to it's importance?!
This Bug is already open for 2 months and there is a working patch for almost as long as the bug is open. Or do we have
to wait until 8.04.1?

Please read this as a more direct "Ping!"...
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Sebastien Bacher
2008-05-26 12:34:44 UTC
Permalink
the patch attached to the bug has been discussed with upstream during
the ubuntu submit some days ago and has some issues, the bug is still on
the list of issues to work for 8.04.1 though so it should be fixed
before that but the desktop team is short in manpower and that's why
it's taking a while
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
thanos
2008-05-26 14:23:29 UTC
Permalink
Hi Sebastien

Thanks a lot for the update. Please consider that it is a very fundamental
bug for all of us that use Ubuntu in a corporate Windows network - and get
daily trouble from the "wiseguys" for something "as trivial as" ... To me
bugs as this one are considered showstoppers - would be a serious reason to
switch back to the "other" OS - something I've fought off for the last 1 1/2
year.

Thanks again for listening
Post by Sebastien Bacher
the patch attached to the bug has been discussed with upstream during
the ubuntu submit some days ago and has some issues, the bug is still on
the list of issues to work for 8.04.1 though so it should be fixed
before that but the desktop team is short in manpower and that's why
it's taking a while
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a direct subscriber
of the bug.
--

Thanos


** Attachment added: "unnamed"
http://launchpadlibrarian.net/14717384/unnamed
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
darkrain42
2008-05-26 15:12:26 UTC
Permalink
Post by Sebastien Bacher
the patch attached to the bug has been discussed with upstream during
the ubuntu submit some days ago and has some issues, the bug is
still on
the list of issues to work for 8.04.1 though so it should be fixed
before that but the desktop team is short in manpower and that's why
it's taking a while
Sebastien, do you have notes on the issues somewhere? I checked the
upstream bug report and Gnome's GVFS ml. I would be quite happy to
rework the patch and, if it would be advantageous, I can work with
upstream to make it more acceptable.

Thanks for your time,
~Paul
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
A. Walton
2008-05-26 15:38:02 UTC
Permalink
The GVFS developers tend to hang out in #nautilus on gimpnet (IRC). I
believe the issue was discussed there earlier this week, but I don't
have a precise log of it. If you're really interested in working on
this, please either mail our list (include the upstream bug number as a
reference) or come into IRC and say hi. Be aware that it might take a
while to get a reply, be patient, we work in very different timezones.
For gvfs-smb, the person to talk to would be Tomas Bzatek (tbzatek on
IRC), he's been doing most of the maintenance on that code. Thanks.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
cRoW2k
2008-05-28 07:23:51 UTC
Permalink
with latest update (27/05) bug still present. But usign
nautilus->Go->position and typing smb://pc/share works.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
thanos
2008-05-28 09:15:09 UTC
Permalink
Hi

I've re-tested after all updates (incl. kernel update) and the patch still
works. Suggest that you check the folder /usr/lib/gvfs/ for the patched
executable.
Post by cRoW2k
with latest update (27/05) bug still present. But usign
nautilus->Go->position and typing smb://pc/share works.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a direct subscriber
of the bug.
--

Thanos


** Attachment added: "unnamed"
http://launchpadlibrarian.net/14761274/unnamed
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
steve
2008-05-28 19:17:13 UTC
Permalink
Dear John Kuang,
thanks for the solution!
if you bookmark any windows server (eg. smb://server ) that requires
password in nautilus, you will SLOW DOWN your save/save as/open dialogs
in programs such as gimp, openoffice, and practically any gtk programs.

The content of my .gtk-bookmarks was this:
/media

This causes that any gtk application can not save. Not slowly, in no way.
The error was only at one user, so it seems to be a config problem, but i could not find any solution, until now... :)
If i clear the content of the file, everything works: openoffice, gimp can save (which is sometimes useful :))

Thanks again,
Steve
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
wolfwitch
2008-05-28 19:42:53 UTC
Permalink
I had a hard time collecting all the dependencies and getting autogen to
work, but after about an hour of Googling and tinkering I was finally
able to get it the patched version of gvfsd-smb-browse compiled and
installed. I'm sure just getting the binary posted here would have
worked fine, but I generally prefer compiling things to binaries as an
old Linux server administrator.

The only problems I've noticed are there is no option to save the
username/password to the Gnome keyring, as has already been noted. I
also noticed a definite slowdown in accessing the shares, although I'm
assuming that is because of the extra overhead of determining if they
need authentication. Also- when I double-click on a server, I get the
username/domain/password dialog, but when I enter them- nothing appears
to happen. I need to double-click on the server again to actually open
it. This is probably related to the bogus "Unable to mount." issue that
is in another bug.

Just my observations. Thank you so much for coming up with this patch
Paul! It makes Ubuntu a lot more usable for me again.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
nikkopt
2008-05-29 01:48:51 UTC
Permalink
Manual patching fails for me.. (i fail as well). Is there a chance to
make an executable for hardy 64bit?
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
wolfwitch
2008-05-29 02:16:24 UTC
Permalink
I guess I should have mentioned the other reason I didn't use the binary
posted earlier- I'm running 64-bit Ubuntu.

I need to compile it on another machine, so I will try to better
document the packages and steps I used to get the compile to work. I'll
post that here when I can. Unfortunately there are a lot of variables in
system configuration, so it is hard to give complete step-by-step
instructions that will work for everyone.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Renzo Bagnati
2008-05-29 17:34:47 UTC
Permalink
I have compiled gvfs 64-bit from source, as I have described in comment 20. If you follow the instructions given here:
http://www.debian.org/doc/manuals/apt-howto/ch-sourcehandling.html
it is not that hard. Essentially you do this (you must have the deb-src lines active in /etc/apt/sources.list):

$ sudo apt-get update
$ apt-get source gvfs

... apply the patch properly, then

$ sudo apt-get build-dep gvfs

(this takes care of installing all the build dependencies).
Finally, from inside the gvfs source directory):

$ sudo dpkg-buildpackage -uc -b

(this generates all the new .deb packages)

The most difficult part is installing the patch, the other commands take
care of everything else.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
wolfwitch
2008-05-29 18:15:49 UTC
Permalink
@Renzo-

Couldn't have said it better myself. Somewhere along the line- I missed
the "build-dep" command. I was able to compile it, but it took close to
an hour to track down all the dependencies by hand. Thanks for posting
this.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
wolfwitch
2008-05-29 19:00:25 UTC
Permalink
I followed Renzo's instructions and the two problems I reported earlier
have gone away. There were obviously some dependencies I missed the
first time. It accesses my keyring now once I have saved my login, and
opens the server when I double-click on it.

To clarify his steps for anyone new:
To apply the patch- cd to the "deamon" directory under the gvfs directory created by "apt-get source gvfs". Copy the gvfs.patch file to this folder, and then enter:
$ patch <gvfs.patch
(You can also just specify the path to the patch, it's just a bit easier to put it in the source directory.)

The "dpkg-buildpackage" command will create several new .deb files in your home folder (or wherever you started this process from): gvfs_0.2.4-0ubuntu1_amd64.deb
gvfs-backends_0.2.4-0ubuntu1_amd64.deb
gvfs-bin_0.2.4-0ubuntu1_amd64.deb
gvfs-fuse_0.2.4-0ubuntu1_amd64.deb

Since these package versions are probably already installed, you will need to "reinstall" them, either through gdebi or using apt. For example:
$ sudo apt-get install -y --reinstall gvfs gvfs-backends gvfs-bin gvfs-fuse
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Renzo Bagnati
2008-05-29 20:13:31 UTC
Permalink
Just a final note to the last post of wolfwitch:
The apt-get install command does not work for local packages, to install the new debs you have to use this:

$ sudo dpkg -i gvfs_0.2.4-0ubuntu1_amd64.deb gvfs-
backends_0.2.4-0ubuntu1_amd64.deb gvfs-fuse_0.2.4-0ubuntu1_amd64.deb
libgvfscommon0_0.2.4-0ubuntu1_amd64.deb
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
nikkopt
2008-05-30 03:00:30 UTC
Permalink
Yep, it works now that's patched (using gvfs 0.2.3). The only thing different i've noticed is a slightly slow access time, as wolfwitch stated (about 3~4 seconds).
Many thanks to the patch maker, poster, and all users that helped. Hope to see this officially fixed soon.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
nlinux
2008-06-04 12:39:27 UTC
Permalink
Patch works great here, thanks guys. Somebody needs to get on the ball
and get this pushed into the updates, this was killing me on my work
network.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
wolfwitch
2008-06-09 13:45:41 UTC
Permalink
Unfortunately a gvfs update hit the repositories in the last couple of
days. This "fixed" my patched version, and the version in the
repositories is still broken. I can't believe this is taking this long
to fix.

I'm not blacklisting gvfs from updates because I keep hoping it will get
fixed, but for now- I need to go through the patch process again.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Sebastien Bacher
2008-06-09 14:28:45 UTC
Permalink
upstream spotted issues in the current changes but nobody is actively
working on gvfs smb or knowing the code well enough to fix that easily
at the moment apparently
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Steve Langasek
2008-06-09 16:58:15 UTC
Permalink
Post by Sebastien Bacher
upstream spotted issues in the current changes but nobody is actively
working on gvfs smb or knowing the code well enough to fix that easily
at the moment apparently
Well, this issue has been discussed on the Samba upstream mailing list, so I
think someone is working on it. I don't know the current status though, the
mailing list thread died out a few days ago.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
wvengen
2008-06-09 18:14:06 UTC
Permalink
Hi, that's me working on
http://bugzilla.gnome.org/show_bug.cgi?id=529277 but it touches this
too. I don't really have much time and failed to find a fix that doesn't
require moderate to major code shuffling :( There is an interesting
message on the gvfs mailing list http://mail.gnome.org/archives/gvfs-
list/2008-May/msg00005.html if you're interested.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
thanos
2008-06-10 07:46:38 UTC
Permalink
Hi

Just to add I've used the latest instructions on this thread (apt-get source
etc, comment from Renzo Bagnati above) to download the latest gvfs source
code, and guess what; *the original patch still works*....

I suggest that anyone still experiencing the problem and his patched
executable got overwritten, goes the same way....

--

Thanos


** Attachment added: "unnamed"
http://launchpadlibrarian.net/15169108/unnamed
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
redfox
2008-06-14 08:08:32 UTC
Permalink
I have a question that does not directly concern this bug but is
somewhat related. On my system, there is some inconsistency in the way
the icons of the machines containing the shares are displayed in
Nautilus. Most of the time, they are displayed correctly, i.e. inside
the workgroup. However, sometimes they also appear alongside the
Windows Network icon, i.e. just after clicking on "Network".

Can anybody explain this inconsistency? Could it possibly point to
another bug in Ubuntu 8.04?
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Steve Langasek
2008-06-15 04:37:23 UTC
Permalink
darkrain42, I've had an opportunity to review your patch, and it looks
altogether correct to me (with one quibble over the error message
presented on authentication failure). Although upstream has expressed
concern about code duplication in the implementation, the two backends
already share more than half their code, and this patch brings them
closer to parity. Eliminating this code duplication is not something we
should strive for in an SRU; though for my part, I wonder why this was
ever done as two separate backends in the first place given the obvious
overlap.

However, even with this patch applied, I don't see correct behavior for
the share list when trying to connect to a samba server joined to an AD
realm.

TEST CASE:

1. install the samba, smbclient, and winbind packages.
2. configure your system to act as a member of an AD realm, and enable the [homes] autoshares; e.g., in smb.conf:
[global]
workgroup = CANONICAL
realm = CANONICAL.LOCAL
security = ADS
idmap backend = tdb
idmap uid = 10000-20000
idmap gid = 10000-20000
template shell = /bin/bash
[homes]
comment = Home Directories
valid users = %S
create mask = 0700
directory mask = 0700
browseable = No
3. join your machine to the AD realm with 'net ads join' (https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto#head-bbf631898fac0418a653cae2f0d4a1344ca8dfc2)
4. sudo /etc/init.d/samba restart && sudo /etc/init.d/winbind restart
5. grab a Kerberos tgt for the account in the AD realm with the same name as your login user by running 'kinit'. (You do not have to configure your local machine for AD logins for this to work, but the username must match between the AD realm and your local system.)
6. test with smbclient that the home share for the user is visible; i.e., "smbclient -L localhost -k" should return in the list of shares a share with the same name as the user. (using "smbclient -L localhost -N", i.e., anonymous connections, the share will not be visible.)
7. test whether nautilus sees this same share by running 'nautilus smb://localhost/'.

EXPECTED RESULTS: gvfsd-smb-browse will transparently use the existing
Kerberos credentials when retrieving the browse list for the server, and
a folder will appear in nautilus with the same name as the user.

ACTUAL RESULTS: gvfsd-smb-browse fails to use the Kerberos credentials,
and the user's home share does not appear in the list.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Renzo Bagnati
2008-06-15 10:19:18 UTC
Permalink
Steve, as described in comment 12, I'm using kerberos authentication
inside an ADS network and I have no problems with nautilus and gvfs.
However my setup is different from yours. The smb.conf is like this:

[global]
workgroup = LAB
realm = MYDOMAIN.COM
netbios name = %h-DEB
server string = %h-DEB (Samba %v, Ubuntu)
security = ADS
password server = dhcpias1.mydomain.com
restrict anonymous = 2
client NTLMv2 auth = Yes
client lanman auth = No
client plaintext auth = No
log file = /var/log/samba/log.%m
os level = 0
preferred master = No
local master = No
domain master = No
idmap domains = LAB
idmap config LAB: default = yes
idmap config LAB: backend = rid
idmap config LAB: range = 100000-1000000
template shell = /bin/bash
winbind separator = _
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
winbind refresh tickets = Yes
winbind offline logon = Yes
invalid users = root
[Share]
comment = %h-DEB_Share
path = /home/LAB/adsusername/Share
valid users = LAB_adsusername, "@LAB_domain users", @users
force user = LAB_adsusername
read only = No

The PAM configuration has been changed by using this line in /etc/pam.d
/common-auth:

auth sufficient pam_winbind.so krb5_auth krb5_ccache_type=FILE
cached_login

This means that the login user is a domain user (not a local user) and that it automatically acquires a kerberos ticket.
With this setup I'm able to browse with nautilus all network shares (including the one of the local workstation) even without the gvfs patch from darkrain42. So it seems that in my case gvfs is correctly using kerberos credentials and I wonder if your problem may be related to something else than the gvfs patch.
If necessary, I can post the complete configuration of my workstation, but at the moment I will not be able to do other test inside the ADS network until next week.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Steve Langasek
2008-06-15 19:35:14 UTC
Permalink
Renzo,

You're right; if I use the unmodified gvfs-backends package from hardy-
updates, then I don't see this problem with AD authentication - it's
only introduced when I apply Paul's patch.

I do have an updated version of that patch which restores correct
behavior in AD environments.

The only question that remains is, what should the correct behavior be
in the absence of kerberos credentials (prompting for username/password,
vs. automatically connecting anonymously), given that we don't really
want to be architecting a completely new UI in an SRU? You have argued
that a username/password prompt should be presented. I'm inclined to
agree.

BTW, the reason on the server side that the shares are not displayed at
all when connecting to your samba server is that you're using the
'restrict anonymous = 2' option. I don't know why that's part of the
Ubuntu AD howto; it's not required for AD integration, its only effect
is to prevent one from retrieving a list of shares anonymously. As a
workaround, you could remove this option on your samba servers, and the
corresponding (and non-default) registry setting on your Windows
servers, if you're comfortable with share lists being retrievable
without authentication.

In any case this would still be a problem for user home autoshares, so
I've attached the patch to gvfs 0.2.4 which implements this fallback
sequence (kerberos -> u/p -> anonymous).

Sebastien, since I'm not seeing the issues in the current patch, it
would be helpful to have a concrete reference to the problems that
upstream finds with it so that we can get those resolved.

** Attachment added: "patch to prefer kerberos, then fall back to password"
http://launchpadlibrarian.net/15336233/91_samba_authenticated_browsing.patch
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Renzo Bagnati
2008-06-15 21:51:56 UTC
Permalink
Thank you, Steve, for the patch and for your other suggestions. I think that the patch is implementing the right fallback sequence. I will be able to test it when back at work.
I will also surely remove the 'restrict anonymous = 2' option from samba configuration, although it is not causing problems after a kerberos authentication. In any case I don't have problems in allowing anonymous browsing.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Bug Watch Updater
2008-06-16 05:31:22 UTC
Permalink
** Changed in: gvfs
Status: New => Confirmed
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
hirameki
2008-06-18 22:45:37 UTC
Permalink
I had same problem. But it seemed be solved by installing all packaged
have string "gvfs" on aptitude(Package Manager).
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
John Kuang
2008-06-19 00:05:33 UTC
Permalink
hirameki, the only gvfs package in package manager that i didnt have was
libgvfscommon-dev. So I installed that too and it still doesn't work.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Sebastien Bacher
2008-06-19 19:19:08 UTC
Permalink
uploaded to intrepid

gvfs (0.99.1-0ubuntu2) intrepid; urgency=low
.
* debian/patches/80_samba_browsing_authentification.patch:
- gnome bugzilla change to allow shares when authentification is required,
the code try anonymous connections before asking for a password though
so it doesn't solve the case where anonymous and login are authorized
but give access to different ressources, see comments on
http://bugzilla.gnome.org/show_bug.cgi?id=524485 for references
(lp: #524485)
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Sebastien Bacher
2008-06-19 19:20:03 UTC
Permalink
upstream comment:

"- code duplication is an issue but as temporary solution I'm fine with this.
There are more design changes underway and users can't wait anymore. Later I
plan to rip out some code and clean the code for both backends.
- the patch as is is bad due to recent kerberos change - yes, libsmbclient
expects *some* username, otherwise it refuses to do kerberos tries. However
removing anonymous auth attempt is preventing me to get list of workgroups and
machines at all.
- sharing active login credentials with the smbbrowse and the smb backend can
be partially handled by gnome-keyring, in case when user saves password to
keyring. This needs more work still.

I'm attaching updated patch, doing authentication tries in three stages:
1. kerberos (current username, no password)
2. anonymous
3. ask for password and loop until success or cancelled

However I'm little afraid here due to number of tries we do before asking user
for credentials. This can cause account or machine being locked out or banned
for some time. Partial solution might be to look at krb5 api and somehow detect
active ticket for the particular machine we're trying to connect to.

Browsing samba network is slow due to number of attempts we do (each attempt
can take 5-10 seconds or more).

Please test this updated patch, I will backport some changes made here to smb
backend then."
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
DrC
2008-06-19 20:23:29 UTC
Permalink
Apologies if I am a) stupid, b) ill- or un-informed c) an extremely un-
typical user:

It sounds OK to me provided the availability of an anonymous login
doesn't stop me logging in with credentials if that is what I want to
do.

In school, we have some very unsophisticated users who just need it to
work. If they are pupils, an anonymous login is possibly all they
require to get to the resources that have been put 'on a plate' for them
by a member of staff.

We also have some very unsophisticated members of staff who just need it
to work, but who need write access to the same share. So their
credentials must be used. And, sadly, it does have to be the same
share. We tried giving staff a back door - but then when they telling
students where they had put the resources, they only knew the back door
way to them......

We have a sophisticated network, with separate authentication domains
for different academic departments. This has the advantage of
resilience, with the ability for a department to run in the vacations
when other parts of the campus may be without power if major work is
being done. There is no one 'server room' the whole campus is dependent
on. But in normal circumstances staff and pupils may need access to
their shares on domains other than the one their client is joined to.

At present, if the credentials used by a client to log in to the 'home'
domain match those required for the foreign domain (user name and
password) the connection just works. If the credentials do not match,
a dialogue asks for new credentials to be used for the foreign domain.
Whilst a pupil does not need any privileges to read-only the public
material on a foreign domain, a member of staff will if the intention is
to update, edit or add to the material.

So far, we can get away without anonymous login, because pupils can log
in with the foreign credentials if we make it necessary. But the
problem is visitors - either substitute teachers or visiting pupils from
consortium schools, or visitors to out-of-hours events (when there are
no technicians on site) who bring their own laptops.

So ideally, we need anonymous access for users who do not have any
credentials, and who may be working on a client computer that is not a
member of one of our domains.

The current Desktop-Places dialogue "Connect to Server..." is a bit
clunky, but would be OK if the mounts could be made persistent. If the
mount has to be redone each time the client reboots, my unsophisticated
staff will need a facility similar to that in Windows, which will
remount a share in the same way it did last time, if they are to enjoy
the delights of Ubuntu.

Sorry if all this is stating the obvious, but I would rather look silly
now, than find out I should have said so earlier!

Thanks

Chris
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Steve Langasek
2008-06-19 20:55:37 UTC
Permalink
Chris,

In fact, none of these patches affects authentication to the share
itself; so far here we're only dealing with the authentication used when
browsing share lists on servers. So I don't think this should be a
problem for you?

In any case, the patch that's being considered in the end detects the
case of an empty share list when connecting anonymously and prompts for
authentication; so that seems to solve the case where anonymous users
can't query the share list, without imposing any UI problems for those
who do want to continue to connect anonymously.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Sebastien Bacher
2008-06-19 20:55:41 UTC
Permalink
** Attachment added: "debdiff for the stable update"
http://launchpadlibrarian.net/15445062/gvfs.patch
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Steve Langasek
2008-06-20 00:35:31 UTC
Permalink
Accepted into -proposed, please test and give feedback here. Please see
https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to
enable and use -proposed. Thank you in advance!

** Changed in: gvfs (Ubuntu Hardy)
Status: Triaged => Fix Committed
Target: ubuntu-8.04.1 => None

** Tags added: verification-needed
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Steve Langasek
2008-06-20 00:54:39 UTC
Permalink
** Changed in: gvfs (Ubuntu Hardy)
Target: None => ubuntu-8.04.1
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Jakob Unterwurzacher
2008-06-20 10:55:13 UTC
Permalink
This causes a SEVERE regression for me.
Every Gnome "open" dialog hangs for about two minutes now before displaying anything. This also affects the Gnome main menu and the "Applications Places System" menu. Trying to open it for the first time freezes *all* panels, including the window list.

It looks like this is because i have SMB shares bookmarked that are
unreachable right now.

Attached is tcpdump output taken when File->Open in gedit.
Notes:
192.168.42.5 is me
10.87.74.1 is a bookmarked SMB server that is unreachable (VPN not connected)
192.168.13.4 is a bookmarked SMB server that is unreachable (different physical network i'm not connected to)

** Attachment added: "tcpdump-gedit-open.log"
http://launchpadlibrarian.net/15474932/tcpdump-gedit-open.log
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Sebastien Bacher
2008-06-20 12:30:16 UTC
Permalink
what do you call gnome main menu? are you sure that's due to the update?
what gvfs process are running? the change is limited to the gvfs smb
browser method and should not impact on other components
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Jakob Unterwurzacher
2008-06-20 13:23:48 UTC
Permalink
Main Menu: Right-click on a panel -> "Add to panel" -> "Main Menu"
(a single-icon windows-style start menu with "Applications Places System" inside)

Yes, i'm sure.
I upgraded to hardy-proposed and experienced this. That's a bunch of updates, so i
downgraded to hardy + hardy-updates + hardy-security again (problem gone),
updated only gvfs and gvfs-backends to hardy-propsed (problem there),
downgraded them again, problem gone.

gvfs version before downgrade is
0.2.4-0ubuntu2

The "Applications Places System" menu displays bookmarks under "Places",
IMO that's why it's affected.

Have you tried reproducing it? Add smb://10.58.13.6/ (or any unreachable
net) to your nautilus bookmarks.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Laubstein
2008-06-20 14:01:43 UTC
Permalink
Wow!
I applied the proposed patch last week and all are working fine... but, if I reproduce Jakob case (bookmark a unreachable machine) all Gnome freezes (startup, open dialogs, etc).

This problem is like windows machines with shortcuts to unreachable
machine or mapped drivers.

When I back to 0.2.4-0ubuntu1 this problem disappears, but I back to
share display problem. =(
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Jakob Unterwurzacher
2008-06-20 14:53:09 UTC
Permalink
Reported upstream: http://bugzilla.gnome.org/show_bug.cgi?id=524485#c15
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Steve Langasek
2008-06-20 20:29:34 UTC
Permalink
Jakob,

Yes, from your description alone I can clearly see where the bug is.
The patch to gvfs causes an automatic retry if kerberos authentication
or anonymous connections fail - without looking at why the connection
failed. That means that in the event of a network timeout, the user has
to wait through three separate network timeouts! So we need to be
checking the value of errno here, to make sure it's set to EPERM and not
to some other value before retrying.

Attached is a revised patch that fixes this particular problem. I've
tested it with a simple nautilus smb://non-existent-server/ command, but
I'm not a nautilus power user - could you describe to me exactly how you
set up your shortcuts, so that I can test with that scenario as well?

I am also seeing an issue where I'm being prompted for a password when
connecting to servers that do allow anonymous share lists, so evidently
there's another bug here that still needs to be tracked down. Marking
this as 'verification failed'.

** Attachment added: "updated patch to check for EPERM before retrying"
http://launchpadlibrarian.net/15486834/80_samba_browsing_authentification.patch
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Steve Langasek
2008-06-20 20:37:31 UTC
Permalink
** Tags added: verification-failed

** Tags removed: verification-needed

** Changed in: gvfs (Ubuntu Hardy)
Status: Fix Committed => In Progress
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Steve Langasek
2008-06-20 22:51:48 UTC
Permalink
Yet another updated patch; the counter in the auth callback assumed that
the callback would only be called once for each smbc_opendir() attempt,
which means that each authentication method (kerberos, anonymous,
password) was being tried twice for no reason.

In traces, I still see a problem that the first time do_mount is called,
it loops through without ever prompting the user for a username and
password, so it still takes us twice as long to get to a password prompt
as it should (i.e., 4 connections to the server instead of 2). I'm not
sure if this is a problem with the patch or a pre-existing problem with
gvfs-smb-browse; will investigate further.

WRT my earlier comment about being prompted for a password when
connecting to servers that do allow anonymous share lists - I'm not now
able to reproduce this problem, so I guess we should consider that part
"resolved".

** Attachment added: "debdiff for update to fix spurious retries"
http://launchpadlibrarian.net/15489025/gvfs-fix-extraneous-retries.patch

** Attachment removed: "debdiff for update to fix spurious retries"

http://launchpadlibrarian.net/15489025/gvfs-fix-extraneous-
retries.patch
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Steve Langasek
2008-06-20 22:54:34 UTC
Permalink
** Attachment added: "debdiff to fix extraneous retries"
http://launchpadlibrarian.net/15489060/gvfs-fix-extraneous-retries.patch
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Jakob Unterwurzacher
2008-06-21 00:09:07 UTC
Permalink
Notes: The panels don't even recover after 2 minutes when triggering the bug like that.
When you Ctrl-Alt-Backspace and login again, the panels are gone, yes GONE, icons on the desktop but no panels. Had to rm -Rf ~/.* to recover.
So... *** ONLY TRY IT ON A EMPTY USER ACCOUNT ***
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Jakob Unterwurzacher
2008-06-20 23:57:04 UTC
Permalink
How to add the nautilus bookmark of death (WARNING: Do this a new user account, you will probably lose gnome settings and stuff when doing Ctrl-Alt-Backspace to recover):
1) Open any random folder with nautilus
2) menu "Bookmarks"->"Add bookmark"
3) "Bookmarks"->"Edit Bookmarks"
4) Put smb://10.58.13.6/ in "Place"
5) Select the bookmark "smb" (it's renamed automatically) from the Bookmarks menu
6) All gnome panels freeze although nautilus look okay
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Steve Langasek
2008-06-21 01:30:31 UTC
Permalink
ok. I can reproduce the lockup problem; it appears that something
related to the bookmarks is triggering constant attempts to remount the
bookmarked resource when the mount fails, and unlike in earlier versions
of gvfs, the patched version will return a failure when the mount fails
- before it would just fail silently.

What's not clear to me is why the same problem doesn't occur if you
create a bookmark pointing to an smb /share/ as opposed to an smb
/server/. Evidently there is some key difference between the smb and
smbbrowse backends that has been overlooked.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Steve Langasek
2008-06-21 03:38:55 UTC
Permalink
The problem of having to make four SMB connections to get to a password
prompt, instead of two, is a matter of deep dbus magic, from what I can
tell; the first run through, a dbus ID is missing that's needed in order
to spawn the dialog, so the connection fails until the second time when
this dbus ID is provided.

No luck figuring out why bookmarking of shares and servers behaves so
differently.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Jakob Unterwurzacher
2008-06-21 11:41:53 UTC
Permalink
Thanks for your commitment, Steve.
IMO another key point is that the panels SHOULD NOT FREEZE when some gvfs operation takes longer than usual. (usual: so short, the user won't even notice it, that's < 50msec).

Even when you bookmark an unreachable share (say,
smb://10.11.12.13/asfd/) and select it from the "Places" menu, EVERY
PANEL hangs until you get some timeout dialog box. I can't use the
window list because i clicked a slow smb server? ZOMG.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Steve Langasek
2008-06-23 20:09:28 UTC
Permalink
So the (a?) key difference between smbbrowse and smb seems to be that
smbbrowse declares its sub-entries as "mountable". Other unavailable
bookmarks don't cause stalls, and neither does smbbrowse if I comment
out the mountable support. On the other hand, if I comment out the
mountable support, the shares are no longer browseable, so that's not
much of a solution!

I think that the correct fix here may be to not actually perform the
full login check at the "mount" stage and returning a simple success,
deferring the password handling until the cache update stage. Since an
smbbrowse record is flat, the two should be nearly equivalent in the
general case, possibly differing only here in the panel's bookmark
handling.

However, I'm not sure I have time to implement such a revised patch in
time for the 8.04.1 point release. I fear we may have to roll back the
gvfs fixes in the short term and try again after .1 is out.
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Sebastien Bacher
2008-06-23 21:41:59 UTC
Permalink
I'm not sure why the shared need to be mounted to query the display name
but that seems to be buggy, delaying the password handling when it's
really required would make sense though.

the gnome-panel code should also use the async gio api to avoid such
issues, the changes should not be too complicated but that's not likely
going to be changed before 8.04.1 now, and libgnomeui seems to have
similar issues too

the blocking call is smbc_opendir apparently, if the code can't be
easily changed maybe one option would be to revert to the patch variant
which tries authentification before anonymous for 8.04.1, that would
create an usuability regression for users who browse network which don't
require authentification though since they would get lot of password
prompts not required
--
nautilus does not display samba shares for machines inside an ADS network.
https://bugs.launchpad.net/bugs/207072
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is the registrant for gvfs.
Continue reading on narkive:
Loading...