My Oracle Support Banner

New version of Samba no longer allows netgroups or hostnames for hosts allow (Doc ID 1309119.1)

Last updated on APRIL 24, 2020

Applies to:

Solaris Operating System - Version 10 10/09 U8 to 10 1/13 U11 [Release 10.0]
Information in this document applies to any platform.

Solaris Samba Patches:
146364-01 (x86)
119757-20 (sparc)
119758-20 (x86)


After updating to Solaris Samba patch 146363-01 or 119757-20 , the "hosts allow" feature does not work when listing hostnames or NIS netgroups.

Example in smb.conf

hosts allow = @trusted-hosts sb1000

The client log file in /var/samba/log will show the following messages:

[2011/03/30 15:29:26.234256, 3] lib/access.c:362()
only_ipaddrs_in_list: list has non-ip address (@trusted-hosts)
[2011/03/30 15:31:19.886391, 5] lib/access.c:138()
looking for sb1000 of domain (ANY) in netgroup trusted-hosts gave No
[2011/03/30 16:22:44.733870, 3] smbd/error.c:80()
error packet at smbd/reply.c(776) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED


The default value for "hostname lookups" has been changed to "no" between samba version 3.0.x to 3.5.x and later.

From the updated smb.conf man page:

hostname lookups (G)

Specifies whether samba should use (expensive) hostname
lookups or use the ip addresses instead. An example
place where hostname lookups are currently used is when
checking the hosts deny and hosts allow.

Default: hostname lookups = no


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.