[Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

[Ulrich Schneider]

Looks to me like "valid users" is not working.
I get a popup windows with username/pwd when accessing the shares.

Or is there an error in smb.conf?

Is this correct? ...
valid users = @samdom+schueler
... meaning
windows group schueler
windows domain samdom
---------------------------------------------------------------
# Global parameters
[global]
         workgroup = SAMDOM
         realm = SAMDOM.EXAMPLE.COM
         netbios name = ULI-SD30V10
         server role = active directory domain controller
         dns forwarder = 192.168.25.254

[netlogon]
         path = /usr/local/samba/var/locks/sysvol/samdom.example.com/scripts
         read only = No

[sysvol]
         path = /usr/local/samba/var/locks/sysvol
         read only = No

[schueler]
       path = /data/schueler
       comment = Schueler
       read only = no
       valid users = @samdom+schueler

[lehrer]
       path = /data/lehrer
       comment = Lehrer
       read only = no
       valid users = @samdom+lehrer

---------------------------------------------------------------
uli at uli-sd30v10:/data$ wbinfo -u
uli at uli-sd30v10:/data$ wbinfo -g
uli at uli-sd30v10:/data$ ls -la
insgesamt 16
drwxrwxrwx  4 root root 4096 Mai 19 10:10 .
drwxr-xr-x 25 root root 4096 Mai 18 15:20 ..
drwxrwxrwx  2 uli  uli  4096 Mai 19 10:10 lehrer
drwxrwxrwx  2 uli  uli  4096 Mai 19 10:10 schueler