[Samba] Access to shares is denied after upgrading from 3.6.3 (openSUSE 12.1) to 4.1.17 (openSUSE 13.2)

[Nissl Reinhard]

Hi,

please have a look into the attached smb.conf. The only changes since 3.6.3 are commenting out all *security* settings and adding

            winbind expand groups = 1

The attached smbusers hasn't been changed yet.

When I try to access share \\platon\root<file:///\\platon\root> as fee\administrator I get the following:

platon:~ # smbclient -c dir -W fee -U administrator%secret //platon/root
Domain=[FEE] OS=[Unix] Server=[Samba 4.1.17-5.1-3375-SUSE-oS13.2-x86_64]
tree connect failed: NT_STATUS_ACCESS_DENIED
platon:~ #

Sure, the secret is correct. Running the same command on a backup of the virtual machine (renamed to platon-alt) before the upgrade works.

Running   smbd -F -S -d 2   shows the following in its output:

SID S-1-5-21-2807186310-4085009417-2666197100-1000 -> getpwuid(10938) failed
Failed to map kerberos pac to server info (NT_STATUS_NO_MEMORY)
Failed to generate session_info (user and group token) for session setup: NT_STATUS_ACCESS_DENIED

Using wbinfo to translate the mentioned SID reveals, that smbusers seems be honored in some way:

platon:~ # wbinfo -s S-1-5-21-2807186310-4085009417-2666197100-1000
PLATON\root 1
platon:~ #

But I'm stuck at this point, because I don't know what samba 4.x expects. At least there is no user with ID 10938 on this system.

Any help appreciated, thanks in advance.

Bye.
--
Reinhard Nißl, TB3, -198