[Samba] Access denied when accessing via hostname

[ivenhov]

Hi
I'm using Samba 3.6.3 on ubuntu 12.04 as a domain member with AD on Win
Server 2012.
My hare is configured like this:
valid users = @"EVSOFFICE.LOCAL+dangroup"

When I try to connect to a share via IP from Win7 (part of the domain) it
succeeds but when use host name \\node15 I can see shares but double-click
on share shows AccessDenied.

I'm trying to connect as EVSOFFICE.LOCAL\danclone which is part of DanGroup.

When I specify valid users as EVSOFFICE.LOCAL+danclone or
@"EVSOFFICE.LOCAL+Domain Users"
I can connect successfully.
But I want to specify more than one group here, rather than generic "Domain
Users"

So it's only when I use dangroup it fails. 
It looks like it cannot match my username with a group

getent group shows
dangroup:x:100006:dan,danclone

Any help appreciated

Log shows:

[2014/07/31 08:35:48.316386,  3] smbd/process.c:1467(switch_message)
  switch message SMBtconX (pid 18019) conn 0x0
[2014/07/31 08:35:48.316411,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2014/07/31 08:35:48.316434,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2014/07/31 08:35:48.316457,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2014/07/31 08:35:48.316498,  5] smbd/uid.c:400(change_to_root_user)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2014/07/31 08:35:48.316529,  4] smbd/reply.c:794(reply_tcon_and_X)
  Client requested device type [?????] for share [NODE15-HOME]
[2014/07/31 08:35:48.316560,  5] smbd/service.c:1321(make_connection)
  making a connection to 'normal' service node15-home
[2014/07/31 08:35:48.316587,  3] lib/access.c:338(allow_access)
  Allowed connection from 10.0.20.247 (10.0.20.247)
[2014/07/31 08:35:48.316615,  3]
../libcli/security/dom_sid.c:208(dom_sid_parse_endp)
  string_to_sid: SID @EVSOFFICE.LOCAL+dangroup is not in a valid format
[2014/07/31 08:35:48.316660,  5] auth/user_util.c:148(user_in_netgroup)
  Unable to get default yp domain, let's try without specifying it
[2014/07/31 08:35:48.316686,  5] auth/user_util.c:152(user_in_netgroup)
  looking for user EVSOFFICE+danclone of domain (ANY) in netgroup
EVSOFFICE.LOCAL+dangroup
[2014/07/31 08:35:48.316755,  5] auth/user_util.c:175(user_in_netgroup)
  looking for user evsoffice+danclone of domain (ANY) in netgroup
EVSOFFICE.LOCAL+dangroup
[2014/07/31 08:35:48.316790, 10] passdb/lookup_sid.c:76(lookup_name)
  lookup_name: EVSOFFICE.LOCAL\dangroup => domain=[EVSOFFICE.LOCAL],
name=[dangroup]
[2014/07/31 08:35:48.316817, 10] passdb/lookup_sid.c:77(lookup_name)
  lookup_name: flags = 0x077
[2014/07/31 08:35:48.317957, 10] smbd/share_access.c:219(user_ok_token)
  User EVSOFFICE+danclone not in 'valid users'
[2014/07/31 08:35:48.318010,  2]
smbd/service.c:627(create_connection_session_info)
  user 'EVSOFFICE+danclone' (from session setup) not permitted to access
this share (node15-home)
[2014/07/31 08:35:48.318048,  1] smbd/service.c:770(make_connection_snum)
  create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
[2014/07/31 08:35:48.318083,  3] smbd/error.c:81(error_packet_set)
  error packet at smbd/reply.c(803) cmd=117 (SMBtconX)
NT_STATUS_ACCESS_DENIED
[2014/07/31 08:35:48.318109,  5] lib/util.c:332(show_msg)
[2014/07/31 08:35:48.318123,  5] lib/util.c:342(show_msg)

Daniel





--
View this message in context: http://samba.2283325.n4.nabble.com/Access-denied-when-accessing-via-hostname-tp4670083.html
Sent from the Samba - General mailing list archive at Nabble.com.