LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General > Linux - Certification
User Name
Password
Linux - Certification This forum is for the discussion of all topics relating to Linux certification.

Notices


Closed Thread
  Search this Thread
Old 08-23-2013, 09:24 AM   #1
kratos.william
LQ Newbie
 
Registered: Aug 2013
Posts: 22

Rep: Reputation: Disabled
RHCE subjects issues


Hi all,
I create this topic for our people who is interested in RHCE's subjects. Any issues/cases good for RHCE lab in any RHCE books will discuss.

First case:
Our topology for my lab:
Internet----pc1----pc2 - 192.168.114.0/24
|
|-----pc3 - 172.24.5.0/24 (connected to pc1 not the internet )
pc1=serverx.example.com
pc2=station1.example.com
pc1 is running as server to provide samba service, DNS server for 192.168.114.0, forwarding internet service to 2 local networks.
my case: pc2 can use samba service but pc3.
How i set samba up and troubleshoot:
I tried to build samba service for the network 192.168.114.0 to share /shared folder. I have no problem to use it in my local 192.168.114.0 network. But I also have want to use samba service in different network 172.24.5.0/24.
when i was at 172.24.5.6 computer:
[root@BT ~]# smbclient -L //serverx.example.com
Enter root's password:
protocol negotiation failed: NT_STATUS_INVALID_NETWORK_RESPONSE
[root@BT ~]# smbclient -L serverx.example.com
Enter root's password:
session request to SERVERX.EXAMPLE. failed (Not listening for calling name)
protocol negotiation failed: NT_STATUS_INVALID_NETWORK_RESPONSE
[root@BT ~]# smbclient //serverx.example.com/common -U kratos
Enter kratos's password:
session request to SERVERX.EXAMPLE. failed (Not listening for calling name)
protocol negotiation failed: NT_STATUS_INVALID_NETWORK_RESPONSE
Check the samba log on the server I saw it
[2013/08/23 04:13:32.099590, 0] lib/access.c:338(allow_access)
Denied connection from 172.24.5.6 (172.24.5.6)
I am for sure that open port for samba in fw and setup correct selinux and booleans for it.
The fact that we can connect and use samba service in 192.168.114.0 network.
/etc/samba/smb.conf
[shared]
path = /shared
read list = kratos
hosts allow = 172.24.5.0/255.255.255.0 192.168.114.0/255.255.255.0
On the 192.168.114.128 computer:
[kratos@station1 ~]$ smbclient //serverx.example.com/common -U kratos
Enter kratos's password:
Domain=[LLC] OS=[Unix] Server=[Samba 3.6.9-151.el6]
smb: \> ls
. D 0 Thu May 23 14:43:01 2013
.. DR 0 Thu Aug 15 11:25:22 2013
test 0 Thu May 23 14:43:01 2013

37380 blocks of size 4194304. 28979 blocks available
But we cannot use samba in different local network(172.24.5.0).
So my question is what is wrong that i can not use samba in different network ? What should i do to fix it ?
Thanks,

Last edited by kratos.william; 08-23-2013 at 09:34 AM.
 
Old 08-23-2013, 09:33 AM   #2
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,636

Rep: Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965
Quote:
Originally Posted by kratos.william View Post
Hi all,
I create this topic for our people who is interested in RHCE's subjects. Any issues/cases good for RHCE lab will discuss.
No, probably not. As has been mentioned to you before, you are NOT ALLOWED to discuss the contents of the RHCE test/labs, per the agreement you signed when you took it. Don't be surprised if the moderators close this thread.
Quote:
First case:
Our topology for my lab:
Internet----pc1----pc2 - 192.168.114.0/24
|
|-----pc3 - 172.24.5.0/24 (connected to pc1 not the internet )
pc1=serverx.example.com
pc2=station1.example.com
pc1 is running as server to provide samba service, DNS server for 192.168.114.0, forwarding internet service to 2 local networks.
my case: pc2 can use samba service but pc3.
How i set samba up and troubleshoot:
I tried to build samba service for the network 192.168.114.0 to share /shared folder. I have no problem to use it in my local 192.168.114.0 network. But I also have want to use samba service in different network 172.24.5.0/24.
when i was at 172.24.5.6 computer:
[root@BT ~]# smbclient -L //serverx.example.com
Enter root's password:
protocol negotiation failed: NT_STATUS_INVALID_NETWORK_RESPONSE
[root@BT ~]# smbclient -L serverx.example.com
Enter root's password:
session request to SERVERX.EXAMPLE. failed (Not listening for calling name)
protocol negotiation failed: NT_STATUS_INVALID_NETWORK_RESPONSE
[root@BT ~]# smbclient //serverx.example.com/common -U kratos
Enter kratos's password:
session request to SERVERX.EXAMPLE. failed (Not listening for calling name)
protocol negotiation failed: NT_STATUS_INVALID_NETWORK_RESPONSE
Check the samba log on the server I saw it
[2013/08/23 04:13:32.099590, 0] lib/access.c:338(allow_access)
Denied connection from 172.24.5.6 (172.24.5.6)
I am for sure that open port for samba in fw and setup correct selinux and booleans for it.
The fact that we can connect and use samba service in 192.168.114.0 network.
/etc/samba/smb.conf
[shared]
path = /shared
read list = kratos
hosts allow = 172.24.5.0/255.255.255.0 192.168.114.0/255.255.255.0
On the 192.168.114.128 computer:
[kratos@station1 ~]$ smbclient //serverx.example.com/common -U kratos
Enter kratos's password:
Domain=[LLC] OS=[Unix] Server=[Samba 3.6.9-151.el6]
smb: \> ls
. D 0 Thu May 23 14:43:01 2013
.. DR 0 Thu Aug 15 11:25:22 2013
test 0 Thu May 23 14:43:01 2013

37380 blocks of size 4194304. 28979 blocks available
But we cannot use samba in different local network(172.24.5.0).
So my question is what is wrong that i can not use samba in different network ? What should i do to fix it ?
You should go back to your networking basics. If you don't have a route from one network to the other, that will cause it to not work. If you don't allow traffic on that port to go through the firewall between those two networks...that will cause it not to work. Selinux restricting access?

Also, what diagnostics have you performed? What have you tried?
 
Old 08-23-2013, 09:43 AM   #3
kratos.william
LQ Newbie
 
Registered: Aug 2013
Posts: 22

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by TB0ne View Post
No, probably not. As has been mentioned to you before, you are NOT ALLOWED to discuss the contents of the RHCE test/labs, per the agreement you signed when you took it. Don't be surprised if the moderators close this thread.

You should go back to your networking basics. If you don't have a route from one network to the other, that will cause it to not work. If you don't allow traffic on that port to go through the firewall between those two networks...that will cause it not to work. Selinux restricting access?

Also, what diagnostics have you performed? What have you tried?
I wouldn't discuss about the RHCE test i want to discuss the lab/real case for the topic in the books for the RHCE only man.
Quote:
Originally Posted by TB0ne View Post
If you don't have a route from one network to the other,
[root@serverX station6]# ping 172.24.5.6
PING 172.24.5.6 (172.24.5.6) 56(84) bytes of data.
64 bytes from 172.24.5.6: icmp_seq=1 ttl=64 time=0.324 ms
64 bytes from 172.24.5.6: icmp_seq=2 ttl=64 time=0.353 ms
64 bytes from 172.24.5.6: icmp_seq=3 ttl=64 time=0.346 ms
64 bytes from 172.24.5.6: icmp_seq=4 ttl=64 time=0.308 ms
[root@BT ~]# ping serverx.example.com
PING serverx.example.com (192.168.114.129) 56(84) bytes of data.
64 bytes from serverx.example.com (192.168.114.129): icmp_seq=1 ttl=64 time=0.269 ms
64 bytes from serverx.example.com (192.168.114.129): icmp_seq=2 ttl=64 time=0.340 ms
64 bytes from serverx.example.com (192.168.114.129): icmp_seq=3 ttl=64 time=0.287 ms
^C
Quote:
Originally Posted by TB0ne View Post
If you don't allow traffic on that port to go through the firewall between those two networks
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:139
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:445
10 780 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:137
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:138

Quote:
Originally Posted by TB0ne View Post
Also, what diagnostics have you performed? What have you tried?
I tried turn off the fw in the server then from pc3 :
#
[root@BT ~]# smbclient //serverx.example.com/common -U kratos
Enter kratos's password:
protocol negotiation failed: NT_STATUS_INVALID_NETWORK_RESPONSE
The same issue ....So it is not fw issue.
Also looking hint from /var/log/samba and see
[2013/08/22 16:17:07.062227, 0] lib/access.c:338(allow_access)
Denied connection from 172.24.5.6 (172.24.5.6)
[2013/08/22 16:17:58.297683, 0] lib/access.c:338(allow_access)
Denied connection from 172.24.5.6 (172.24.5.6)
[2013/08/22 16:17:58.296399, 0] lib/access.c:338(allow_access)
Denied connection from 172.24.5.6 (172.24.5.6)
[2013/08/22 16:17:58.313968, 0] lib/access.c:338(allow_access)
Denied connection from 172.24.5.6 (172.24.5.6)
Quote:
Originally Posted by TB0ne View Post
Selinux restricting access?
samba_create_home_dirs --> off
samba_domain_controller --> off
samba_enable_home_dirs --> off
samba_export_all_ro --> on
samba_export_all_rw --> on
samba_portmapper --> off
samba_run_unconfined --> off
samba_share_fusefs --> off
samba_share_nfs --> off
sanlock_use_samba --> off
use_samba_home_dirs --> off
virt_use_samba --> off

and :
drwxr-xr-x. root root system_ubject_r:samba_share_t:s0 /shared/

Last edited by kratos.william; 08-23-2013 at 09:51 AM.
 
Old 08-23-2013, 10:04 AM   #4
onebuck
Moderator
 
Registered: Jan 2005
Location: Central Florida 20 minutes from Disney World
Distribution: SlackwareŽ
Posts: 13,925
Blog Entries: 44

Rep: Reputation: 3159Reputation: 3159Reputation: 3159Reputation: 3159Reputation: 3159Reputation: 3159Reputation: 3159Reputation: 3159Reputation: 3159Reputation: 3159Reputation: 3159
Moderator Response

This thread is closed. LQ Members who have taken RHCE signed a NDA therefore any requests to violate the agreement is a violation of LQ Rules
Quote:
Do not post any messages that are obscene, vulgar, sexually-orientated, hateful, threatening, or otherwise violative of any laws.
Please note the underlined portion of above rule.
 
  


Closed Thread



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
KVM permission issues during chapter 2 of Michael Jang's RHCSA/RHCE book Garagegoblin Linux - Certification 21 10-10-2012 11:46 AM
Further barriers to Help! Urgent! subjects dugan LQ Suggestions & Feedback 15 06-10-2011 06:55 AM
Multible subjects in one thread Larry Webb LQ Suggestions & Feedback 2 01-20-2009 05:05 AM
Lots of questions/various subjects 1N4148 Linux - Software 6 07-11-2008 07:24 AM
select certain subjects in syslog jonsag Linux - Newbie 2 12-19-2004 12:05 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - General > Linux - Certification

All times are GMT -5. The time now is 07:22 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration