[Samba] windows 8.1 unable to connect to samba 4.2 share on FreeBSD domain auth

[Rowland Penny]

On 28/10/15 13:29, Motty wrote:
> my domain controller, AD is windows 2000. That is my environment.
>
> Thanks,
> Motty
>
> On 10/28/2015 01:31 AM, Mueller wrote:
>> So we have a samba 4.1.17 Domain running and have truble to with 
>> windows 8.1 cutt off the shares in the domain from time to time.
>> We researched a lot without beeing successfull. The users need to 
>> relogin or restart to reach their shares again.
>>
>> Greetings
>> Daniel
>>
>>
>>
>> EDV Daniel Müller
>>
>> Leitung EDV
>> Tropenklinik Paul-Lechler-Krankenhaus
>> Paul-Lechler-Str. 24
>> 72076 Tübingen
>> Tel.: 07071/206-463, Fax: 07071/206-499
>> eMail: mueller at tropenklinik.de
>> Internet: www.tropenklinik.de
>>
>>
>>
>>
>> -----Ursprüngliche Nachricht-----
>> Von: Rowland Penny [mailto:rowlandpenny241155 at gmail.com]
>> Gesendet: Mittwoch, 28. Oktober 2015 09:01
>> An: samba at lists.samba.org
>> Betreff: Re: [Samba] windows 8.1 unable to connect to samba 4.2 share 
>> on FreeBSD domain auth
>>
>> On 27/10/15 23:05, Motty wrote:
>>> Hello,
>>> I am having issues getting users trying to connect to samba share. The
>>> weird part is that some users are able to connect but some aren't. all
>>> windows 7 client are able to connect without issues. any ideas?
>>>
>>> #=============== Global Settings
>>> [global]
>>> workgroup = DOMAIN
>>>
>>> realm = domain.ad
>>>
>>> netbios name = Share2
>>>
>>> server string =
>>>
>>> username map = /usr/local/etc/samba/username.map
>>>
>>> hosts allow = 192.168.5. 192.168.1. 127. 3.
>>>
>>> security = domain
>>>
>>> load printers = no
>>> guest account = public
>>> log file = /var/log/samba4/log.%m
>>> ax log size = 50
>>> #password server = austin.domain.ad
>>> passdb backend = tdbsam
>>> # socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local
>>> master = no os level = 1 domain master = no preferred master = no
>>> domain logons = no dns proxy = no wins server = 192.168.5.90 client
>>> ntlmv2 auth = yes ntlm auth = yes lanman auth = yes smb ports = 139
>>>
>>> [public]
>>>    comment = Public Shared Directory
>>>    path = /home/public
>>>    public = yes
>>>    force user = public
>>>    force group = public
>>>    only guest = yes
>>>    writeable = yes
>>>
>>> Thanks,
>>> Motty
>>>
>> OK, bit confused here, you have this: realm = domain.ad and this:
>> security = domain
>> They are really mutually exclusive, you would only use the first in 
>> an AD domain and the second in an NT4-style domain.
>> What sort of domain is your machine in??
>>
>> Rowland
>>
>>
>>
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>>
>

If you are connecting to a windows 2000 AD server, then your smb.conf is 
wrong, you should be using 'security = ads'

As a starting point, have a look here: 
https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member

Rowland