Winbind connecting to AD DC on port 139

r.khan · 04-06-2020, 02:39 PM

I am unning my CentOS 7.3 machine as a Samba server, it is integrated with Windows AD for user authentication. Everything is working fine, but we see a lot of Firewall denies on port 139. Upon investigation, I found that Winbindd is trying to connect to AD DC on port 139.

I ran

winbindd -i -d 3

and noticed that it connects to the DC on port 445 and it tries connecting to the same DC on port 139 also. We do not have any issues and everything is working fine. However, we just want to prevent Winbindd from making requests on port 139.

I have used `disable netbios = Yes` in smb.conf but it did not help.

Any suggestions will really help.

ferrari · 04-07-2020, 12:07 AM

Try adding the 'smb ports = ' directive as well.

Code:

disable netbios = yes
smb ports = 445

This will give you a better idea about which ports your samba server is using...

Code:

sudo ss -tulpn | egrep "smbd|nmbd|winbind"

ferrari · 04-07-2020, 12:14 AM

From 'man smb.conf'....

Quote:

smb ports (G)

Specifies which ports the server should listen on for SMB traffic.

Default: smb ports = 445 139