| 2018-06-23 07:42:25 |
Sebastian Byczkowski |
bug |
|
|
added bug |
| 2018-06-23 07:45:14 |
Sebastian Byczkowski |
attachment added |
|
gvfs-smb-browse change to NT1 from RedHat Bugzilla https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1778322/+attachment/5155768/+files/smbbackendbrowse-switch-to-NT1.patch |
|
| 2018-06-23 07:47:10 |
Sebastian Byczkowski |
bug task added |
|
nautilus (Ubuntu) |
|
| 2018-06-23 07:49:14 |
Sebastian Byczkowski |
attachment added |
|
gvfsbackendbrowse.c change to NT1 from RedHat Bugzilla https://bugs.launchpad.net/ubuntu/+source/nautilus/+bug/1778322/+attachment/5155769/+files/gvfsbackendbrowse-force-smb1.patch |
|
| 2018-06-23 08:19:18 |
Ubuntu Foundations Team Bug Bot |
tags |
browse browsing gvfs-smb-browse smbtree |
browse browsing gvfs-smb-browse patch smbtree |
|
| 2018-06-23 08:19:27 |
Ubuntu Foundations Team Bug Bot |
bug |
|
|
added subscriber Ubuntu Review Team |
| 2018-06-25 21:33:29 |
gf |
bug |
|
|
added subscriber gf |
| 2018-06-25 22:38:15 |
gf |
removed subscriber gf |
|
|
|
| 2018-07-06 00:12:49 |
Launchpad Janitor |
gvfs (Ubuntu): status |
New |
Confirmed |
|
| 2018-07-06 00:12:49 |
Launchpad Janitor |
nautilus (Ubuntu): status |
New |
Confirmed |
|
| 2018-11-13 16:30:24 |
Sebastien Bacher |
nautilus (Ubuntu): status |
Confirmed |
Invalid |
|
| 2018-11-13 17:05:41 |
Sebastien Bacher |
gvfs (Ubuntu): importance |
Undecided |
Low |
|
| 2018-11-13 17:05:41 |
Sebastien Bacher |
gvfs (Ubuntu): status |
Confirmed |
Fix Released |
|
| 2018-11-13 17:07:41 |
Sebastien Bacher |
description |
On Bionic Beaver 18.04.1 gvfs-smb-browse can't browse smbtree because of that Nautilus displays "Empty Folder" when clicking "Windows Network"
Nautilus should show smbtree nad host on the smb network.
When inputing this command:
killall gvfsd-smb-browse && GVFS_DEBUG=1 /usr/lib/gvfs/gvfsd-smb-browse
You can see the error:
smb-network: Queued new job 0x55b19a2c9f40 (GVfsJobCreateMonitor)
smb-network: send_reply(0x55b19a2c9f40), failed=1 (Action not supported by the processing engine)
smb-network: backend_dbus_handler org.gtk.vfs.Mount:QueryFilesystemInfo (pid=5708)
smb-network: Queued new job 0x55b19a2e7820 (GVfsJobQueryFsInfo)
smb-network: send_reply(0x55b19a2e7820), failed=0 ()
smb-network: backend_dbus_handler org.gtk.vfs.Mount:Enumerate (pid=5708)
smb-network: Queued new job 0x55b19a2c30c0 (GVfsJobEnumerate)
smb-network: send_reply(0x55b19a2c30c0), failed=0 ()
Proposed solution:
Add gvfsbackendbrowse-switch-to-NT1.patch disscused on RedHat Bugzilla
[link]https://bugzilla.redhat.com/show_bug.cgi?id=1513394
which implements "change to NT1" in gvfs-smb-browse to browse smbtree to aviod adding "max client protocol" = NT1" to smb.conf to switch all samba to unsafe NT1 which most users are doing to correct this bug. |
* Impact
On Bionic Beaver 18.04.1 gvfs-smb-browse can't browse smbtree because of that Nautilus displays "Empty Folder" when clicking "Windows Network"
* Test case
Try to browse a smb share from a bionic client
* Regression potential
Check that smb browsing/mounts still work as they should
---------------------------
Nautilus should show smbtree nad host on the smb network.
When inputing this command:
killall gvfsd-smb-browse && GVFS_DEBUG=1 /usr/lib/gvfs/gvfsd-smb-browse
You can see the error:
smb-network: Queued new job 0x55b19a2c9f40 (GVfsJobCreateMonitor)
smb-network: send_reply(0x55b19a2c9f40), failed=1 (Action not supported by the processing engine)
smb-network: backend_dbus_handler org.gtk.vfs.Mount:QueryFilesystemInfo (pid=5708)
smb-network: Queued new job 0x55b19a2e7820 (GVfsJobQueryFsInfo)
smb-network: send_reply(0x55b19a2e7820), failed=0 ()
smb-network: backend_dbus_handler org.gtk.vfs.Mount:Enumerate (pid=5708)
smb-network: Queued new job 0x55b19a2c30c0 (GVfsJobEnumerate)
smb-network: send_reply(0x55b19a2c30c0), failed=0 ()
Proposed solution:
Add gvfsbackendbrowse-switch-to-NT1.patch disscused on RedHat Bugzilla
[link]https://bugzilla.redhat.com/show_bug.cgi?id=1513394
which implements "change to NT1" in gvfs-smb-browse to browse smbtree to aviod adding "max client protocol" = NT1" to smb.conf to switch all samba to unsafe NT1 which most users are doing to correct this bug. |
|
| 2018-11-20 17:31:52 |
Brian Murray |
gvfs (Ubuntu Cosmic): status |
New |
Fix Committed |
|
| 2018-11-20 17:31:53 |
Brian Murray |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2018-11-20 17:31:57 |
Brian Murray |
bug |
|
|
added subscriber SRU Verification |
| 2018-11-20 17:32:00 |
Brian Murray |
tags |
browse browsing gvfs-smb-browse patch smbtree |
browse browsing gvfs-smb-browse patch smbtree verification-needed verification-needed-cosmic |
|
| 2018-11-20 17:57:38 |
Brian Murray |
gvfs (Ubuntu Bionic): status |
New |
Fix Committed |
|
| 2018-11-20 17:57:43 |
Brian Murray |
tags |
browse browsing gvfs-smb-browse patch smbtree verification-needed verification-needed-cosmic |
browse browsing gvfs-smb-browse patch smbtree verification-needed verification-needed-bionic verification-needed-cosmic |
|
| 2018-12-01 22:04:36 |
Sebastian Byczkowski |
attachment added |
|
Gvfs log of clicking "Windows Network" in Nautilus using pkill gvfs; GVFS_DEBUG=all GVFS_SMB_DEBUG=10 /usr/lib/gvfs/gvfsd &> ~/gvfsNT1disabledinsmbconflog.txt in terminal. https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1778322/+attachment/5218024/+files/gvfsNT1disabledinsmbconflog.txt |
|
| 2018-12-07 12:40:42 |
Sebastien Bacher |
bug task added |
|
samba (Ubuntu) |
|
| 2018-12-07 12:40:49 |
Sebastien Bacher |
samba (Ubuntu): importance |
Undecided |
High |
|
| 2018-12-07 12:40:52 |
Sebastien Bacher |
gvfs (Ubuntu): status |
Fix Released |
Triaged |
|
| 2018-12-07 12:40:55 |
Sebastien Bacher |
gvfs (Ubuntu): importance |
Low |
High |
|
| 2018-12-07 12:41:07 |
Sebastien Bacher |
samba (Ubuntu): status |
New |
Triaged |
|
| 2019-01-15 15:44:31 |
Launchpad Janitor |
gvfs (Ubuntu Cosmic): status |
Fix Committed |
Fix Released |
|
| 2019-01-15 15:46:36 |
Launchpad Janitor |
gvfs (Ubuntu Bionic): status |
Fix Committed |
Fix Released |
|
| 2019-01-15 16:20:02 |
Sebastien Bacher |
gvfs (Ubuntu Bionic): status |
Fix Released |
Triaged |
|
| 2019-01-15 16:20:05 |
Sebastien Bacher |
gvfs (Ubuntu Cosmic): status |
Fix Released |
Triaged |
|
| 2019-01-29 14:42:31 |
Sebastien Bacher |
gvfs (Ubuntu Bionic): importance |
Undecided |
High |
|
| 2019-01-29 14:42:33 |
Sebastien Bacher |
gvfs (Ubuntu Cosmic): importance |
Undecided |
High |
|
| 2019-01-29 14:42:37 |
Will Cooke |
gvfs (Ubuntu): assignee |
|
Sebastien Bacher (seb128) |
|
| 2019-01-29 14:42:40 |
Sebastien Bacher |
gvfs (Ubuntu Cosmic): assignee |
|
Sebastien Bacher (seb128) |
|
| 2019-01-29 14:42:42 |
Sebastien Bacher |
gvfs (Ubuntu Bionic): assignee |
|
Sebastien Bacher (seb128) |
|
| 2019-03-10 19:45:21 |
Andreas Hasenack |
samba (Ubuntu): assignee |
|
Andreas Hasenack (ahasenack) |
|
| 2019-03-10 19:45:25 |
Andreas Hasenack |
samba (Ubuntu): status |
Triaged |
In Progress |
|
| 2019-03-11 17:35:03 |
Andreas Hasenack |
bug |
|
|
added subscriber Andreas Hasenack |
| 2019-03-29 19:40:43 |
Andreas Hasenack |
description |
* Impact
On Bionic Beaver 18.04.1 gvfs-smb-browse can't browse smbtree because of that Nautilus displays "Empty Folder" when clicking "Windows Network"
* Test case
Try to browse a smb share from a bionic client
* Regression potential
Check that smb browsing/mounts still work as they should
---------------------------
Nautilus should show smbtree nad host on the smb network.
When inputing this command:
killall gvfsd-smb-browse && GVFS_DEBUG=1 /usr/lib/gvfs/gvfsd-smb-browse
You can see the error:
smb-network: Queued new job 0x55b19a2c9f40 (GVfsJobCreateMonitor)
smb-network: send_reply(0x55b19a2c9f40), failed=1 (Action not supported by the processing engine)
smb-network: backend_dbus_handler org.gtk.vfs.Mount:QueryFilesystemInfo (pid=5708)
smb-network: Queued new job 0x55b19a2e7820 (GVfsJobQueryFsInfo)
smb-network: send_reply(0x55b19a2e7820), failed=0 ()
smb-network: backend_dbus_handler org.gtk.vfs.Mount:Enumerate (pid=5708)
smb-network: Queued new job 0x55b19a2c30c0 (GVfsJobEnumerate)
smb-network: send_reply(0x55b19a2c30c0), failed=0 ()
Proposed solution:
Add gvfsbackendbrowse-switch-to-NT1.patch disscused on RedHat Bugzilla
[link]https://bugzilla.redhat.com/show_bug.cgi?id=1513394
which implements "change to NT1" in gvfs-smb-browse to browse smbtree to aviod adding "max client protocol" = NT1" to smb.conf to switch all samba to unsafe NT1 which most users are doing to correct this bug. |
[Impact]
The so called "browsing a windows network" made use of an SMB1 protocol version feature. Recent versions of samba, including the one released with bionic, default to a higher versions of the protocol which lacks this feature. As a result, the "other locations -> windows network" tab in Nautilus is empty even when there are windows or samba machines in the network.
Accessing such machines directly, via smb://<name-or-ip>/ type urls, continues to work.
The fix is two-fold:
- introduce a new samba API call that can be used to set the protocol version to use
- change applications to make use of this API call to set the protocol versio to SMB1/NT1 just for the network browsing
gvfs was updated to make use of this api call, if detected at build time. To complete this SRU, gvfs needs a no-change rebuild *after* samba was accepted into proposed.
[Test case]
* Launch a bionic desktop vm. You can start with a server one, and then install the "ubuntu-desktop" package. In the same command, also install the packages we need for this test:
$ sudo apt update
$ sudo apt install ubuntu-desktop samba smbclient
* set a password for the ubuntu user, so you can login at the graphical console
$ sudo passwd ubuntu
* reboot
$ sudo reboot
* login at the graphical console as the ubuntu user. Go through the first-user-setup motions as you want.
* try to browse the windows network via "other locations -> windows network". You will get an empty folder.
* update the samba and gvfs packages
* logout and login again on the gui, browse the windows network again. This time it will show the "WORKGROUP" folder, and if you click through, you will see yourself (your VM).
[Regression potential]
The samba update itself just introduces and exposes a new API call. It's up to other applications to make use of that. gvfs was patched to detect this call at build time and use it if it's detected.
Packages that are not rebuilt will not see the change, and packages that *are* rebuilt will only see the change if they make use of it.
[Other Info]
This update introduces a specific runtime dependency between gvfs and libsmbclient due to the new API call added to the latter. Any package that is rebuilt with libsmbclient and makes use of that API call will get this specific dependency. This is handled automatically by dh_mkshlibs.
To complete this SRU, gvfs will need a no-change rebuild after samba was accepted into proposed.
Nautilus should show smbtree nad host on the smb network.
When inputing this command:
killall gvfsd-smb-browse && GVFS_DEBUG=1 /usr/lib/gvfs/gvfsd-smb-browse
You can see the error:
smb-network: Queued new job 0x55b19a2c9f40 (GVfsJobCreateMonitor)
smb-network: send_reply(0x55b19a2c9f40), failed=1 (Action not supported by the processing engine)
smb-network: backend_dbus_handler org.gtk.vfs.Mount:QueryFilesystemInfo (pid=5708)
smb-network: Queued new job 0x55b19a2e7820 (GVfsJobQueryFsInfo)
smb-network: send_reply(0x55b19a2e7820), failed=0 ()
smb-network: backend_dbus_handler org.gtk.vfs.Mount:Enumerate (pid=5708)
smb-network: Queued new job 0x55b19a2c30c0 (GVfsJobEnumerate)
smb-network: send_reply(0x55b19a2c30c0), failed=0 ()
Proposed solution:
Add gvfsbackendbrowse-switch-to-NT1.patch disscused on RedHat Bugzilla
[link]https://bugzilla.redhat.com/show_bug.cgi?id=1513394
which implements "change to NT1" in gvfs-smb-browse to browse smbtree to aviod adding "max client protocol" = NT1" to smb.conf to switch all samba to unsafe NT1 which most users are doing to correct this bug. |
|
| 2019-03-29 19:43:24 |
Launchpad Janitor |
merge proposal linked |
|
https://code.launchpad.net/~ahasenack/ubuntu/+source/samba/+git/samba/+merge/365297 |
|
| 2019-03-29 19:48:57 |
Launchpad Janitor |
merge proposal linked |
|
https://code.launchpad.net/~ahasenack/ubuntu/+source/samba/+git/samba/+merge/365298 |
|
| 2019-04-01 09:25:24 |
Christian Ehrhardt |
description |
[Impact]
The so called "browsing a windows network" made use of an SMB1 protocol version feature. Recent versions of samba, including the one released with bionic, default to a higher versions of the protocol which lacks this feature. As a result, the "other locations -> windows network" tab in Nautilus is empty even when there are windows or samba machines in the network.
Accessing such machines directly, via smb://<name-or-ip>/ type urls, continues to work.
The fix is two-fold:
- introduce a new samba API call that can be used to set the protocol version to use
- change applications to make use of this API call to set the protocol versio to SMB1/NT1 just for the network browsing
gvfs was updated to make use of this api call, if detected at build time. To complete this SRU, gvfs needs a no-change rebuild *after* samba was accepted into proposed.
[Test case]
* Launch a bionic desktop vm. You can start with a server one, and then install the "ubuntu-desktop" package. In the same command, also install the packages we need for this test:
$ sudo apt update
$ sudo apt install ubuntu-desktop samba smbclient
* set a password for the ubuntu user, so you can login at the graphical console
$ sudo passwd ubuntu
* reboot
$ sudo reboot
* login at the graphical console as the ubuntu user. Go through the first-user-setup motions as you want.
* try to browse the windows network via "other locations -> windows network". You will get an empty folder.
* update the samba and gvfs packages
* logout and login again on the gui, browse the windows network again. This time it will show the "WORKGROUP" folder, and if you click through, you will see yourself (your VM).
[Regression potential]
The samba update itself just introduces and exposes a new API call. It's up to other applications to make use of that. gvfs was patched to detect this call at build time and use it if it's detected.
Packages that are not rebuilt will not see the change, and packages that *are* rebuilt will only see the change if they make use of it.
[Other Info]
This update introduces a specific runtime dependency between gvfs and libsmbclient due to the new API call added to the latter. Any package that is rebuilt with libsmbclient and makes use of that API call will get this specific dependency. This is handled automatically by dh_mkshlibs.
To complete this SRU, gvfs will need a no-change rebuild after samba was accepted into proposed.
Nautilus should show smbtree nad host on the smb network.
When inputing this command:
killall gvfsd-smb-browse && GVFS_DEBUG=1 /usr/lib/gvfs/gvfsd-smb-browse
You can see the error:
smb-network: Queued new job 0x55b19a2c9f40 (GVfsJobCreateMonitor)
smb-network: send_reply(0x55b19a2c9f40), failed=1 (Action not supported by the processing engine)
smb-network: backend_dbus_handler org.gtk.vfs.Mount:QueryFilesystemInfo (pid=5708)
smb-network: Queued new job 0x55b19a2e7820 (GVfsJobQueryFsInfo)
smb-network: send_reply(0x55b19a2e7820), failed=0 ()
smb-network: backend_dbus_handler org.gtk.vfs.Mount:Enumerate (pid=5708)
smb-network: Queued new job 0x55b19a2c30c0 (GVfsJobEnumerate)
smb-network: send_reply(0x55b19a2c30c0), failed=0 ()
Proposed solution:
Add gvfsbackendbrowse-switch-to-NT1.patch disscused on RedHat Bugzilla
[link]https://bugzilla.redhat.com/show_bug.cgi?id=1513394
which implements "change to NT1" in gvfs-smb-browse to browse smbtree to aviod adding "max client protocol" = NT1" to smb.conf to switch all samba to unsafe NT1 which most users are doing to correct this bug. |
[Impact]
The so called "browsing a windows network" made use of an SMB1 protocol version feature. Recent versions of samba, including the one released with bionic, default to a higher versions of the protocol which lacks this feature. As a result, the "other locations -> windows network" tab in Nautilus is empty even when there are windows or samba machines in the network.
Accessing such machines directly, via smb://<name-or-ip>/ type urls, continues to work.
The fix is two-fold:
- introduce a new samba API call that can be used to set the protocol version to use
- change applications to make use of this API call to set the protocol versio to SMB1/NT1 just for the network browsing
gvfs was updated to make use of this api call, if detected at build time. To complete this SRU, gvfs needs a no-change rebuild *after* samba was accepted into proposed.
[Test case]
* Launch a bionic desktop vm. You can start with a server one, and then install the "ubuntu-desktop" package. In the same command, also install the packages we need for this test:
$ sudo apt update
$ sudo apt install ubuntu-desktop samba smbclient
* set a password for the ubuntu user, so you can login at the graphical console
$ sudo passwd ubuntu
* reboot
$ sudo reboot
* login at the graphical console as the ubuntu user. Go through the first-user-setup motions as you want.
* try to browse the windows network via "other locations -> windows network". You will get an empty folder.
* update the samba and gvfs packages
* logout and login again on the gui, browse the windows network again. This time it will show the "WORKGROUP" folder, and if you click through, you will see yourself (your VM).
[Regression potential]
The samba update itself just introduces and exposes a new API call. It's up to other applications to make use of that. gvfs was patched to detect this call at build time and use it if it's detected.
Packages that are not rebuilt will not see the change, and packages that *are* rebuilt will only see the change if they make use of it.
[Other Info]
This update introduces a specific runtime dependency between gvfs and libsmbclient due to the new API call added to the latter. Any package that is rebuilt with libsmbclient and makes use of that API call will get this specific dependency. This is handled automatically by dh_mkshlibs.
To complete this SRU, gvfs will need a no-change rebuild after samba was accepted into proposed.
---
Nautilus should show smbtree and host on the smb network.
When inputing this command:
killall gvfsd-smb-browse && GVFS_DEBUG=1 /usr/lib/gvfs/gvfsd-smb-browse
You can see the error:
smb-network: Queued new job 0x55b19a2c9f40 (GVfsJobCreateMonitor)
smb-network: send_reply(0x55b19a2c9f40), failed=1 (Action not supported by the processing engine)
smb-network: backend_dbus_handler org.gtk.vfs.Mount:QueryFilesystemInfo (pid=5708)
smb-network: Queued new job 0x55b19a2e7820 (GVfsJobQueryFsInfo)
smb-network: send_reply(0x55b19a2e7820), failed=0 ()
smb-network: backend_dbus_handler org.gtk.vfs.Mount:Enumerate (pid=5708)
smb-network: Queued new job 0x55b19a2c30c0 (GVfsJobEnumerate)
smb-network: send_reply(0x55b19a2c30c0), failed=0 ()
Proposed solution:
Add gvfsbackendbrowse-switch-to-NT1.patch disscused on RedHat Bugzilla
[link]https://bugzilla.redhat.com/show_bug.cgi?id=1513394
which implements "change to NT1" in gvfs-smb-browse to browse smbtree to aviod adding "max client protocol" = NT1" to smb.conf to switch all samba to unsafe NT1 which most users are doing to correct this bug. |
|
| 2019-04-02 18:20:48 |
Brian Murray |
samba (Ubuntu): status |
In Progress |
Incomplete |
|
| 2019-04-02 18:50:46 |
Andreas Hasenack |
description |
[Impact]
The so called "browsing a windows network" made use of an SMB1 protocol version feature. Recent versions of samba, including the one released with bionic, default to a higher versions of the protocol which lacks this feature. As a result, the "other locations -> windows network" tab in Nautilus is empty even when there are windows or samba machines in the network.
Accessing such machines directly, via smb://<name-or-ip>/ type urls, continues to work.
The fix is two-fold:
- introduce a new samba API call that can be used to set the protocol version to use
- change applications to make use of this API call to set the protocol versio to SMB1/NT1 just for the network browsing
gvfs was updated to make use of this api call, if detected at build time. To complete this SRU, gvfs needs a no-change rebuild *after* samba was accepted into proposed.
[Test case]
* Launch a bionic desktop vm. You can start with a server one, and then install the "ubuntu-desktop" package. In the same command, also install the packages we need for this test:
$ sudo apt update
$ sudo apt install ubuntu-desktop samba smbclient
* set a password for the ubuntu user, so you can login at the graphical console
$ sudo passwd ubuntu
* reboot
$ sudo reboot
* login at the graphical console as the ubuntu user. Go through the first-user-setup motions as you want.
* try to browse the windows network via "other locations -> windows network". You will get an empty folder.
* update the samba and gvfs packages
* logout and login again on the gui, browse the windows network again. This time it will show the "WORKGROUP" folder, and if you click through, you will see yourself (your VM).
[Regression potential]
The samba update itself just introduces and exposes a new API call. It's up to other applications to make use of that. gvfs was patched to detect this call at build time and use it if it's detected.
Packages that are not rebuilt will not see the change, and packages that *are* rebuilt will only see the change if they make use of it.
[Other Info]
This update introduces a specific runtime dependency between gvfs and libsmbclient due to the new API call added to the latter. Any package that is rebuilt with libsmbclient and makes use of that API call will get this specific dependency. This is handled automatically by dh_mkshlibs.
To complete this SRU, gvfs will need a no-change rebuild after samba was accepted into proposed.
---
Nautilus should show smbtree and host on the smb network.
When inputing this command:
killall gvfsd-smb-browse && GVFS_DEBUG=1 /usr/lib/gvfs/gvfsd-smb-browse
You can see the error:
smb-network: Queued new job 0x55b19a2c9f40 (GVfsJobCreateMonitor)
smb-network: send_reply(0x55b19a2c9f40), failed=1 (Action not supported by the processing engine)
smb-network: backend_dbus_handler org.gtk.vfs.Mount:QueryFilesystemInfo (pid=5708)
smb-network: Queued new job 0x55b19a2e7820 (GVfsJobQueryFsInfo)
smb-network: send_reply(0x55b19a2e7820), failed=0 ()
smb-network: backend_dbus_handler org.gtk.vfs.Mount:Enumerate (pid=5708)
smb-network: Queued new job 0x55b19a2c30c0 (GVfsJobEnumerate)
smb-network: send_reply(0x55b19a2c30c0), failed=0 ()
Proposed solution:
Add gvfsbackendbrowse-switch-to-NT1.patch disscused on RedHat Bugzilla
[link]https://bugzilla.redhat.com/show_bug.cgi?id=1513394
which implements "change to NT1" in gvfs-smb-browse to browse smbtree to aviod adding "max client protocol" = NT1" to smb.conf to switch all samba to unsafe NT1 which most users are doing to correct this bug. |
[Impact]
The so called "browsing a windows network" made use of an SMB1 protocol version feature. Recent versions of samba, including the one released with bionic, default to a higher versions of the protocol which lacks this feature. As a result, the "other locations -> windows network" tab in Nautilus is empty even when there are windows or samba machines in the network.
Accessing such machines directly, via smb://<name-or-ip>/ type urls, continues to work.
The fix is two-fold:
- introduce a new samba API call that can be used to set the protocol version to use
- change applications to make use of this API call to set the protocol versio to SMB1/NT1 just for the network browsing
gvfs was updated to make use of this api call, if detected at build time. To complete this SRU, gvfs needs a no-change rebuild *after* samba was accepted into proposed.
[Test case]
* Launch a bionic desktop vm. You can start with a server one, and then install the "ubuntu-desktop" package. In the same command, also install the packages we need for this test:
$ sudo apt update
$ sudo apt install ubuntu-desktop samba smbclient
* set a password for the ubuntu user, so you can login at the graphical console
$ sudo passwd ubuntu
* set the same password for the ubuntu samba user:
sudo smbpasswd -a ubuntu
* add a simple [pub] share to samba:
$ printf "[pub]\n\tpath=/tmp\n\tguest ok = no\n" | sudo tee -a /etc/samba/smb.conf
* reboot
$ sudo reboot
* login at the graphical console as the ubuntu user. Go through the first-user-setup motions as you want.
* try to browse the windows network via "other locations -> windows network". You will get an empty folder.
* update the samba and gvfs packages
* logout and login again on the gui, browse the windows network again. This time it will show the "WORKGROUP" folder, and if you click through, you will see yourself (your VM) and the [pub] share, among others.
* click on the "pub" share, select registered user and login with the ubuntu credentials you created earlier with smbpasswd.
* in another terminal, run this command to confirm that the SMB protocol version that was used to connect to [pub] was not just NT1/SMB1, but higher:
$ sudo smbstatus
...
8779 ubuntu ubuntu 192.168.122.94 (ipv4:192.168.122.94:60818) SMB3_11 - partial(AES-128-CMAC)
Note "SMB3_11" above.
[Regression potential]
The samba update itself just introduces and exposes a new API call. It's up to other applications to make use of that. gvfs was patched to detect this call at build time and use it if it's detected.
Packages that are not rebuilt will not see the change, and packages that *are* rebuilt will only see the change if they make use of it.
[Other Info]
This update introduces a specific runtime dependency between gvfs and libsmbclient due to the new API call added to the latter. Any package that is rebuilt with libsmbclient and makes use of that API call will get this specific dependency. This is handled automatically by dh_mkshlibs.
To complete this SRU, gvfs will need a no-change rebuild after samba was accepted into proposed.
Disco's gvfs is already using the new call, as can be seen in this build log https://launchpadlibrarian.net/415424052/buildlog_ubuntu-disco-amd64.gvfs_1.40.0-1_BUILDING.txt.gz:
...
Dependency smbclient found: YES 0.5.0
Checking for function "smbc_setOptionProtocols" with dependency smbclient: YES
The smbc_setOptionProtocols() call is only used when the url is like "smb:///", or the server cannot be resolved. The downgrade overrides the setting in smb.conf, and is used just for this case: browsing the network. When connecting to a machine, the url is like "smb://<name>/", and then this function we are adding is not called.
I updated the test to actually click on the machine that shows up in the network browsing, and then check with "smbstatus" which version of the protocol was used when connecting to an actual share.
---
Nautilus should show smbtree and host on the smb network.
When inputing this command:
killall gvfsd-smb-browse && GVFS_DEBUG=1 /usr/lib/gvfs/gvfsd-smb-browse
You can see the error:
smb-network: Queued new job 0x55b19a2c9f40 (GVfsJobCreateMonitor)
smb-network: send_reply(0x55b19a2c9f40), failed=1 (Action not supported by the processing engine)
smb-network: backend_dbus_handler org.gtk.vfs.Mount:QueryFilesystemInfo (pid=5708)
smb-network: Queued new job 0x55b19a2e7820 (GVfsJobQueryFsInfo)
smb-network: send_reply(0x55b19a2e7820), failed=0 ()
smb-network: backend_dbus_handler org.gtk.vfs.Mount:Enumerate (pid=5708)
smb-network: Queued new job 0x55b19a2c30c0 (GVfsJobEnumerate)
smb-network: send_reply(0x55b19a2c30c0), failed=0 ()
Proposed solution:
Add gvfsbackendbrowse-switch-to-NT1.patch disscused on RedHat Bugzilla
[link]https://bugzilla.redhat.com/show_bug.cgi?id=1513394
which implements "change to NT1" in gvfs-smb-browse to browse smbtree to aviod adding "max client protocol" = NT1" to smb.conf to switch all samba to unsafe NT1 which most users are doing to correct this bug. |
|
| 2019-04-02 18:57:33 |
Brian Murray |
samba (Ubuntu Cosmic): status |
New |
Fix Committed |
|
| 2019-04-02 18:58:22 |
Brian Murray |
samba (Ubuntu): status |
Incomplete |
Fix Released |
|
| 2019-04-02 18:58:27 |
Brian Murray |
samba (Ubuntu Cosmic): importance |
Undecided |
High |
|
| 2019-04-02 20:10:31 |
Brian Murray |
samba (Ubuntu Bionic): status |
New |
Fix Committed |
|
| 2019-04-05 15:18:40 |
Andreas Hasenack |
attachment added |
|
bionic-windows-network-empty.png https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1778322/+attachment/5253140/+files/bionic-windows-network-empty.png |
|
| 2019-04-05 15:34:18 |
Andreas Hasenack |
attachment added |
|
bionic-windows-network-full.png https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1778322/+attachment/5253141/+files/bionic-windows-network-full.png |
|
| 2019-04-05 15:35:03 |
Andreas Hasenack |
tags |
browse browsing gvfs-smb-browse patch smbtree verification-needed verification-needed-bionic verification-needed-cosmic |
browse browsing gvfs-smb-browse patch smbtree verification-done-cosmic verification-needed verification-needed-bionic |
|
| 2019-04-05 15:58:28 |
Andreas Hasenack |
attachment added |
|
cosmic-windows-network-empty.png https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1778322/+attachment/5253145/+files/cosmic-windows-network-empty.png |
|
| 2019-04-05 16:09:21 |
Andreas Hasenack |
attachment added |
|
cosmic-windows-network-full.png https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1778322/+attachment/5253146/+files/cosmic-windows-network-full.png |
|
| 2019-04-05 16:09:54 |
Andreas Hasenack |
tags |
browse browsing gvfs-smb-browse patch smbtree verification-done-cosmic verification-needed verification-needed-bionic |
browse browsing gvfs-smb-browse patch smbtree verification-done-bionic verification-done-cosmic verification-needed |
|
| 2019-04-08 12:44:55 |
Launchpad Janitor |
samba (Ubuntu Cosmic): status |
Fix Committed |
Fix Released |
|
| 2019-04-08 12:44:55 |
Launchpad Janitor |
cve linked |
|
2019-3880 |
|
| 2019-04-08 12:45:16 |
Launchpad Janitor |
samba (Ubuntu Bionic): status |
Fix Committed |
Fix Released |
|
| 2019-04-19 16:39:57 |
BloodyIron |
bug |
|
|
added subscriber BloodyIron |
| 2019-04-29 13:31:03 |
Andreas Hasenack |
bug watch added |
|
https://bugzilla.gnome.org/show_bug.cgi?id=780958 |
|
| 2019-05-05 16:18:25 |
Mauro |
bug |
|
|
added subscriber Mauro |
| 2019-05-07 19:46:04 |
Andreas Hasenack |
bug watch added |
|
https://gitlab.gnome.org/GNOME/gvfs/issues/307 |
|
| 2019-05-08 09:16:52 |
Sebastien Bacher |
gvfs (Ubuntu Bionic): status |
Triaged |
Fix Committed |
|
| 2019-05-08 09:20:37 |
Sebastien Bacher |
gvfs (Ubuntu Cosmic): status |
Triaged |
Fix Committed |
|
| 2019-05-08 09:22:51 |
Sebastien Bacher |
gvfs (Ubuntu): status |
Triaged |
Fix Committed |
|
| 2019-05-08 09:26:19 |
Sebastien Bacher |
gvfs (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2019-05-21 19:43:37 |
Brian Murray |
tags |
browse browsing gvfs-smb-browse patch smbtree verification-done-bionic verification-done-cosmic verification-needed |
browse browsing gvfs-smb-browse patch smbtree verification-done-bionic verification-needed verification-needed-cosmic |
|
| 2019-05-21 19:46:05 |
Brian Murray |
tags |
browse browsing gvfs-smb-browse patch smbtree verification-done-bionic verification-needed verification-needed-cosmic |
browse browsing gvfs-smb-browse patch smbtree verification-needed verification-needed-bionic verification-needed-cosmic |
|
| 2019-05-25 16:57:32 |
Mathew Hodson |
bug task deleted |
nautilus (Ubuntu) |
|
|
| 2019-05-25 16:57:41 |
Mathew Hodson |
samba (Ubuntu Bionic): importance |
Undecided |
High |
|
| 2019-06-01 23:13:04 |
Mathew Hodson |
bug watch removed |
https://gitlab.gnome.org/GNOME/gvfs/issues/307 |
|
|
| 2019-06-01 23:20:14 |
Mathew Hodson |
bug task added |
|
gvfs |
|
| 2019-06-01 23:57:18 |
Mathew Hodson |
bug watch added |
|
https://bugzilla.samba.org/show_bug.cgi?id=12876 |
|
| 2019-06-01 23:57:18 |
Mathew Hodson |
bug task added |
|
samba |
|
| 2019-06-21 21:14:36 |
Andreas Hasenack |
attachment added |
|
empty-windows-network-before-test.png https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1778322/+attachment/5272225/+files/empty-windows-network-before-test.png |
|
| 2019-06-21 21:14:52 |
Andreas Hasenack |
attachment added |
|
populated-windows-network-after-test.png https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1778322/+attachment/5272226/+files/populated-windows-network-after-test.png |
|
| 2019-06-21 21:15:09 |
Andreas Hasenack |
attachment added |
|
connecting-to-pub-after-test.png https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1778322/+attachment/5272227/+files/connecting-to-pub-after-test.png |
|
| 2019-06-21 21:16:42 |
Andreas Hasenack |
tags |
browse browsing gvfs-smb-browse patch smbtree verification-needed verification-needed-bionic verification-needed-cosmic |
browse browsing gvfs-smb-browse patch smbtree verification-done-bionic verification-needed verification-needed-cosmic |
|
| 2019-06-21 21:39:20 |
Andreas Hasenack |
attachment added |
|
cosmic-empty-windows-network-before-test.png https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1778322/+attachment/5272232/+files/cosmic-empty-windows-network-before-test.png |
|
| 2019-06-21 21:39:35 |
Andreas Hasenack |
attachment added |
|
cosmic-populated-windows-network-after-test.png https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1778322/+attachment/5272233/+files/cosmic-populated-windows-network-after-test.png |
|
| 2019-06-21 21:39:52 |
Andreas Hasenack |
attachment added |
|
cosmic-connecting-to-pub-after-test.png https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1778322/+attachment/5272234/+files/cosmic-connecting-to-pub-after-test.png |
|
| 2019-06-21 21:40:13 |
Andreas Hasenack |
tags |
browse browsing gvfs-smb-browse patch smbtree verification-done-bionic verification-needed verification-needed-cosmic |
browse browsing gvfs-smb-browse patch smbtree verification-done-bionic verification-done-cosmic verification-needed |
|
| 2019-06-22 03:35:58 |
Mathew Hodson |
tags |
browse browsing gvfs-smb-browse patch smbtree verification-done-bionic verification-done-cosmic verification-needed |
gvfs-smb-browse patch smbtree verification-done-bionic verification-done-cosmic |
|
| 2019-06-24 10:00:09 |
Łukasz Zemczak |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2019-06-24 10:10:16 |
Launchpad Janitor |
gvfs (Ubuntu Cosmic): status |
Fix Committed |
Fix Released |
|
| 2019-06-24 11:29:51 |
Launchpad Janitor |
gvfs (Ubuntu Bionic): status |
Fix Committed |
Fix Released |
|
| 2019-06-24 13:38:56 |
Andreas Hasenack |
attachment added |
|
disco-windows-network-populated.png https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1778322/+attachment/5272828/+files/disco-windows-network-populated.png |
|
| 2019-06-24 13:39:11 |
Andreas Hasenack |
attachment added |
|
disco-connect-to-pub.png https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1778322/+attachment/5272829/+files/disco-connect-to-pub.png |
|
| 2019-06-25 04:26:50 |
BloodyIron |
removed subscriber BloodyIron |
|
|
|
| 2019-09-12 08:49:21 |
Michael Kofler |
bug |
|
|
added subscriber Michael Kofler |
