[Samba] Mount share on Synology NAS (Samba 3.6.9) as client of Samba 4.1.9 AD DC

Lars Hanke debian at lhanke.de
Tue Jul 1 03:52:22 MDT 2014

Thanks for the reply. I solved the riddle, by checking the config files 
on the NAS.

Synology adds the user permissions into smb.conf, i.e. it does not 
follow any permission settings maintained in the AD. The DSM GUI has two 
different places to set permissions, which look quite the same. One sets 
the file permissions, the other is responsible to set user permissions 
on shares, i.e. modify smb.conf.

I only did set file permissions, so the user was not allowed to access 
the share, but had proper permission on the file system.

  - lars.

Am 01.07.2014 10:09, schrieb Germ van Ek | Esyst:
> It sounds to me like it is a problem with your NAS.
> I would join the NAS to a Windows DC, for example using the Windows 2012
> trial version you can download for free at
> http://technet.microsoft.com/nl-nl/evalcenter/hh670538.aspx . Run it in
> a VM for example.
> If the behaviour is the same and you still have warranty on the NAS,
> call the vendor.
> Met vriendelijke groeten,
> Germ van Ek
> Esyst BV
> ------------------------------------------------------------------------
> *Van: *"Dr. Lars Hanke" <lars at lhanke.de>
> *Aan: *samba at lists.samba.org
> *Verzonden: *Woensdag 18 juni 2014 20:04:18
> *Onderwerp: *[Samba] Mount share on Synology NAS (Samba 3.6.9) as client
> of Samba 4.1.9 AD DC
> I set-up a basic AD DC using samba 4.1.9 successfully. I joined my NAS
> to the domain, i.e. I saw no errors and see the users and groups of my
> AD listed in the GUI of the NAS. When I try to connect to a share of the
> NAS the following happens:
> mgr at ws1:~$ smbclient -U 'AD\mgr' //nas/Test
> Enter AD\mgr's password:
> Domain=[AD] OS=[Unix] Server=[Samba 3.6.9]
> tree connect failed: NT_STATUS_ACCESS_DENIED
> A connect using the same credentials to a demo share on the AD DC itself
> works fine.
> I granted read and write permissions to AD\mgr on Test on the NAS. Don't
> know what it actually does, but the GUI displays it. ;)
> The behaviour from Win7 Home is similar. The demo share can be mounted,
> however AD\mgr seems to lack any privileges beyond that. The NAS share
> cannot be mounted due to permission problems.
> Any idea how to troubleshoot this situation?
> Thanks for your help,
>    - lars.
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

More information about the samba mailing list