[Samba] windows 8.1 unable to connect to samba 4.2 share on FreeBSD domain auth

[Mueller]

So we have a samba 4.1.17 Domain running and have truble to with windows 8.1 cutt off the shares in the domain from time to time.
We researched a lot without beeing successfull. The users need to relogin or restart to reach their shares again.

Greetings
Daniel



EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen 
Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de 




-----Ursprüngliche Nachricht-----
Von: Rowland Penny [mailto:rowlandpenny241155 at gmail.com] 
Gesendet: Mittwoch, 28. Oktober 2015 09:01
An: samba at lists.samba.org
Betreff: Re: [Samba] windows 8.1 unable to connect to samba 4.2 share on FreeBSD domain auth

On 27/10/15 23:05, Motty wrote:
> Hello,
> I am having issues getting users trying to connect to samba share. The 
> weird part is that some users are able to connect but some aren't. all 
> windows 7 client are able to connect without issues. any ideas?
>
> #=============== Global Settings
> [global]
> workgroup = DOMAIN
>
> realm = domain.ad
>
> netbios name = Share2
>
> server string =
>
> username map = /usr/local/etc/samba/username.map
>
> hosts allow = 192.168.5. 192.168.1. 127. 3.
>
> security = domain
>
> load printers = no
> guest account = public
> log file = /var/log/samba4/log.%m
> ax log size = 50
> #password server = austin.domain.ad
> passdb backend = tdbsam
> # socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local 
> master = no os level = 1 domain master = no preferred master = no 
> domain logons = no dns proxy = no wins server = 192.168.5.90 client 
> ntlmv2 auth = yes ntlm auth = yes lanman auth = yes smb ports = 139
>
> [public]
>   comment = Public Shared Directory
>   path = /home/public
>   public = yes
>   force user = public
>   force group = public
>   only guest = yes
>   writeable = yes
>
> Thanks,
> Motty
>

OK, bit confused here, you have this: realm = domain.ad and this: 
security = domain
They are really mutually exclusive, you would only use the first in an AD domain and the second in an NT4-style domain.
What sort of domain is your machine in??

Rowland



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba