Unable to connect to samba share with "force user = unix_user"

Quentin Gibeaux qgibeaux at iris-tech.fr
Wed Oct 15 03:46:18 MDT 2014


Hi,

I've encountered a bug on samba 4.1.12 (and below in 4.1), running with 
Active Directory.

I've a samba share configured like this :
[someshare]
comment = Some comment
browsable = yes
path = /path/to/somename
writable = yes
valid users = +somename
force user = somename
force group = somename
create mode = 0775
force create mode = 0775
directory  mode = 2775
force directory  mode = 2775

"somename" is both : unix-only user and an AD group :
# id somename
uid=121(somename) gid=955(somename) groupes=955(somename)

# getent group | grep somename
somename:*:955:onemember

But I'm unable to connect to someshare, I'm rejected with error :
tree connect failed: NT_STATUS_NO_SUCH_USER

I've tried to replace the "force user" parameter with :
one user that exists in AD
one user that hasn't a group (in AD) with the same name
-> it works

=> I think there's a bug with "force user" parameter with unix-only user 
that has a group in AD with same name.


Thanks,

Quentin Gibeaux.


More information about the samba-technical mailing list