[Samba] Newer clients and security=domain

[Marc Muehlfeld]

Hello Markus,

Am 03.09.2014 09:26, schrieb Markus Carlstedt:
> Hello everybody, I have not found any answers on this issue on the
> internet and figured I'd try to send a mail to this list.
> 
> We have an issue with Windows 7 and 8.1-computers (and also very new
> Mac's) that cannot login to one of our Samba servers. The server is a
> part of a domain and has security=domain set.
> The clients are not part of the domain.
> 
> It seems like the newer clients send the servername as domain and the
> server therefore only looks in its own user database instead of the
> domains.
> The clients can login to the domain controller (also Samba) without any
> problem.
> 
> Is there a way to make Samba force all local authentications to be done
> against the domain instead its own (empty) database?
> 
> The workaround is to always add the domain when logging in to this
> server.
> 
> On Mac, when connecting:
> smb://domain:user@servername
> 
> On PC, when asked for username:
> domain\user


Can you please give use more details about your configuration (smb.conf,
Idmapping, nsswitch.conf, passdb backend, etc.)?

Makes it easier to provide help. Otherwise we have to guess a lot. ;-)


Regards,
Marc