[Samba] After some time "denied due to share security descriptor"

[L.P.H. van Belle]

Are the pc's getting a time problem, and with that i mean, more than 5 min difference, compaired to the DC's ? 
First thing to check. 


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Alessandro Briosi
> Verzonden: dinsdag 15 september 2015 9:34
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] After some time "denied due to share security
> descriptor"
> 
> Hi all,
> I'm using samba 4.1.20 (from sernet) with 2 AD servers and 1 as file
> server.
> 
> It happens that after some time (days), some users report that they
> cannot access the shares on the file server any-more, and I find the
> following entries in the log file:
> 
> STATUS=daemon 'smbd' finished starting up and ready to serve
> connectionsuser DOMAIN\pc-name$ connection to sharename denied due to
> share security descriptor.
> STATUS=daemon 'smbd' finished starting up and ready to serve
> connectionsuser DOMAIN\pc-name$ connection to sharename denied due to
> share security descriptor.
> 
> Killing the specific smbd process serving the client restores the access
> (obviously creating a new process).
> 
> PCs don't get rebooted often (basically they are always on).
> 
> It takes days to happen again then. Is this related to some kerberos
> security?
> 
> Is this known? Anybody experiencing it?
> 
> Thank you.
> Alessandro
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba