[Samba] Change in behaviour for the "%U" substitution in 4.10.8?

[gac]

I've now changed the ownership to root, as you suggest.

I've removed the ACLs from /shares/DOMAIN - they don't need to be there as anyone can enter this directory already so there's no need for them.

The ACLs on my individual home directory:

root at server:/shares# getfacl /shares/DOMAIN/username
getfacl: Removing leading '/' from absolute path names
# file: shares/DOMAIN/username
# owner: username
# group: domain\040users
user::rwx
user:www-data:--x
group::---
mask::r-x
other::---

Still no joy, and the logs are still showing:

canonicalize_connect_path failed for service username, path /shares/DOMAIN/domain_username

Thanks for all your advice so far but I still don't believe this is a permissions problem, Samba is trying to access a directory which simply does not exist, and never has existed...
6 Sep 2019, 11:19 by samba at lists.samba.org:

> On 06/09/2019 11:12, gac wrote:
>
>> I imagine the numeric UID is my old boss who left the company a few years ago, and by this point his account has been removed, not just disabled. The only thing contained by the DOMAIN directory is a home directory for each user, which is owned by them. So I don't _think_ this is the problem.
>>
>> The command you suggested returns:
>>
>> winbind_lookup_rids failed: WBC_ERR_DOMAIN_NOT_FOUND
>>
>> The ACLs are to allow --x access for the 'www-data' into users home directories for use with Apache+mod_userdir, and then r-x access for their www directory
>>
> Try changing the ownership of /shares/DOMAIN to root
>
> What about the getfacl commands ?
>
> Rowland
>
>
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>