Unsolved
This post is more than 5 years old
1 Rookie
•
94 Posts
0
13727
November 18th, 2013 07:00
Data Domain Issue Accessing Shares
I am setting up shares on our DD160 for some SQL backups I'm going to be running. I 6 Windows 2008 R2 64-bit servers plus 4 Windows 7 laptops that need to access these shares. When I access the shares (using \\datadomain\share and \\datadomainip\share) from my laptop or 3 of the 6 servers I can access the shares fine. However, on three of my servers I get a network error (0x80004005) and can't access the shares. There is no restriction limiting access to certain clients or users in the share configuration. I have verified that "Client for Microsoft Networks" is enabled on the problem servers, IPv6 is disabled, the firewall is turned off on each of these clients, I've verified the registry settings for the network provider, and the servers can all ping the DD160 by DNS name and IP, nslookup works on these servers as well.
Any suggestions why these 3 servers can't access the shares when my laptop and 3 other servers have no problem?
Thanks.
dynamox
9 Legend
•
20.4K Posts
0
November 18th, 2013 08:00
try disabling "client SMB signing"
snowmizer1
1 Rookie
•
94 Posts
0
November 18th, 2013 09:00
I haven't tried that yet. How do I do this? How can I verify if it's disabled?
Thanks.
dynamox
9 Legend
•
20.4K Posts
0
November 18th, 2013 20:00
google smb client signing, you will find some technet articles ..it's registry key that you have to change.
snowmizer1
1 Rookie
•
94 Posts
0
November 26th, 2013 05:00
Thanks dynamox. I disabled this and then rebooted and now all of the servers can access the Data Domain shares.
dynamox
9 Legend
•
20.4K Posts
0
November 26th, 2013 06:00
good deal
murillo2
1 Rookie
•
24 Posts
0
December 4th, 2013 06:00
Just to add something to this thread...
SMB signing is supported from DDOS 5.2.4.1
To enable it
cifs option set "server signing" auto
For more information, please review the releases notes of DDOS 5.2.4.1
Regards
Gonzalo Murillo
dynamox
9 Legend
•
20.4K Posts
0
December 4th, 2013 07:00
support told me enabling that option on DD might have negative impact on performance.
murillo2
1 Rookie
•
24 Posts
0
December 5th, 2013 23:00
And that cannot be more true...
But imagine is a security requirement in your organization...
You can still enable it and it will work, although performance will decrease.
Cheer,
Gonzalo
dynamox
9 Legend
•
20.4K Posts
0
December 6th, 2013 03:00
btw, smb signing is supported on 5.1 as well.
murillo2
1 Rookie
•
24 Posts
0
December 9th, 2013 05:00
Officially only in 5.2.x
https://my.datadomain.com/download/kb/all/smb_signing_not_currently_supported.html
I know the options were in 5.1, but officially 5.2.x
Regards,
Gonzalo
HarshG
8 Posts
0
February 15th, 2014 22:00
And if this din't work can you share the output of command
By running in putty:
cifs option show
O/P will be some thing like this
Known Useful Options:
allowtrusteddomains enabled | disabled (default: enabled)
loglevel [0-10] (default: 1)
maxxmit [16384-65536] (default: 65536)
restrict-anonymous enabled | disabled (default: disabled)
smbd-mem-limit [52428800-1073741824] (default: 209715200)
ntfs-acls enabled | disabled (default: enabled)
idmap-type none | rid (default: rid)
organizational-unit e.g. "Computers/Servers/ddr units" (default: Computers)
dd admin group1 e.g. "domain\group2" (default: "Domain Admins")
dd admin group2 e.g. "domain\group1" (default: None)
dd user group1 e.g. "domain\group1" (default: None)
dd user group2 e.g. "domain\group2" (default: None)
After sharing of output i can help you in better way
HarshG
8 Posts
0
February 15th, 2014 22:00
This is the fix for the problem
cifs option set "server signing"
This option needs to be enabled on the DD side for SMB1 servers
tomislak_ECN
24 Posts
0
March 4th, 2014 04:00
Hi,
I have similar requirement. I have existing cifs shares. I need to add new share with "smb signing".
Is this parameter added per share or per cifs server?
Here is my cifs option show:
sysadmin@DD860ZG# cifs option show
Currently Set Options:
"idmap-type" is set to "rid"
"ntfs-acls" is set to "enabled"
Known Useful Options:
allowtrusteddomains enabled | disabled (default: enabled)
loglevel [0-10] (default: 1)
maxxmit [16384-65536] (default: 65536)
restrict-anonymous enabled | disabled (default: disabled)
smbd-mem-limit [52428800-1073741824] (default: 209715200)
ntfs-acls enabled | disabled (default: enabled)
idmap-type none | rid (default: rid)
organizational-unit e.g. "Computers/Servers/ddr units" (default: Computers)
dd admin group1 e.g. "domain\group2" (default: "Domain Admins")
dd admin group2 e.g. "domain\group1" (default: None)
dd user group1 e.g. "domain\group1" (default: None)
dd user group2 e.g. "domain\group2" (default: None)
dd backup-operator group1 e.g. "domain\group1" (default: None)
dd backup-operator group2 e.g. "domain\group2" (default: None)
dynamox
9 Legend
•
20.4K Posts
0
March 4th, 2014 05:00
it's for the entire system (there is only one CIFS server)
tomislak_ECN
24 Posts
0
March 4th, 2014 06:00
so this change will affect all cifs shares?
Command is
cifs option set "server signing"
Is there any way to see all options?
cifs option show doesn't display server signing.
Is it possible to set up similar and for nfs shares?