[Samba] Strange issue with share access on domain controllers

[Sébastien Le Ray]

Nevermind seems that I had something in cache and netbios aliases made it

Le 13/07/2015 16:23, Sébastien Le Ray a écrit :
> Hi,
>
> No change
> According to netbios aliases documentation, it only modify NETBIOS
> announce, but I'm using DNS to access the host (and it is correctly
> resolved since smbclient access works, shares list works on windows)
>
> Regards
>
> Le 13/07/2015 15:53, Zerwes, Klaus a écrit :
>> set
>>
>> netbios aliases =
>>
>> in the global section of smb.conf
>>
>> Good luck
>>
>> Klaus
>>
>> Klaus Zerwes
>> Rosa Luxemburg Stiftung | IT-Auslandskoordinator
>> Franz-Mehring-Platz 1   | 10243 Berlin
>>
>> Tel. +49 30 44310-555   | Fax +49 30 44310-182
>> zerwes at rosalux.de       | www.rosalux.de
>>
>> ________________________________________
>> Von: samba [samba-bounces at lists.samba.org]" im Auftrag von
>> "Sébastien Le Ray [sebastien-samba at orniz.org]
>> Gesendet: Sonntag, 12. Juli 2015 18:41
>> An: Samba Mailing List
>> Betreff: [Samba] Strange issue with share access on domain controllers
>>
>> Hi list,
>>
>> I've a strange issue with Windows 7 (also occurs on 8.1) when accessing
>> shares on domain controllers. If I use IP address or in-domain FQDN
>> (server.domain.name), all is right. If I use another DNS entry pointing
>> to the same IP, share access fails with following message (translated
>> from french) :
>> \\somehost.somsuffix\someshare is not accessible. […]  Invalid parameter
>>
>> Issue occurs on both sysvol, netlogon and custom shares (yes evil not
>> the point)
>>
>> Log does not seem to contain anything relevant, last line before failure
>> is [CLIENT IP] (ipv4:[Client IP]:49296) connect to service [share]
>> initially as user [DOMAIN\User] (uid=[uid], gid=[main gid]) (pid 15374)
>>
>> Issue occurs on all tested machines, with different account names, on
>> (at least) two differrent DC. Access is fine from smbclient no matter if
>> I use IP, domain FQDN or alternate FQDN.
>>
>> smb.conf snipped (sysvol & netlogon are default provisioned ones)
>>
>> [global]
>>           workgroup = SOMEDOM
>>           realm = somedom.fdqdn
>>           netbios name = SOMEDC
>>           server string = AD DC SOMEDC
>>           server role = active directory domain controller
>>
>>           idmap_ldb:use rfc2307 = yes
>>
>>           interfaces = someIP/24
>>           bind interfaces only = Yes
>>
>>           template shell = /bin/false
>>           template homedir = /data/homes/%ACCOUNTNAME%
>>
>>           dns forwarder = 127.0.0.1
>>
>>
>>
>> Regards,
>>
>> Sébastien
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>
>