[Samba] Share access problem

Wed Aug 16 19:36:57 UTC 2017

Hi Rowland and everyone,

Thanks a lot of for your answer!
I really appreciate it!

I modified all my config with your suggests BUT it still don't work.

I can ONLY list my local users with getent passwd, getent group... Why ?
https://pastebin.com/22DAQqc6

Thanks in advance.

Sébastien
[Samba] Share access problem.
Rowland Penny rpenny at samba.org <mailto:samba%40lists.samba.org?Subject=Re%3A%20%5BSamba%5D%20Share%20access%20problem.&In-Reply-To=%3C20170811203103.23525de2%40devstation.samdom.example.com%3E>
Fri Aug 11 19:31:03 UTC 2017

 *   Previous message (by thread): [Samba] Share access problem.<https://lists.samba.org/archive/samba/2017-August/210239.html>
 *   Next message (by thread): [Samba] (no subject)<https://lists.samba.org/archive/samba/2017-August/210143.html>
 *   Messages sorted by: [ date ]<https://lists.samba.org/archive/samba/2017-August/date.html#210243> [ thread ]<https://lists.samba.org/archive/samba/2017-August/thread.html#210243> [ subject ]<https://lists.samba.org/archive/samba/2017-August/subject.html#210243> [ author ]<https://lists.samba.org/archive/samba/2017-August/author.html#210243>

________________________________

On Fri, 11 Aug 2017 14:59:36 -0400

<Sebastien.Boulianne at cpu.ca<https://lists.samba.org/mailman/listinfo/samba>> wrote:

> Hi,

>

> I checked my config this week.

> I did some changes.

>

> I can now list the share FTPFiles but I cant view the files.

> What can be wrong ?

>

> # krb5.conf

> https://pastebin.com/gDhMnM4B

>

> # nsswitch.conf

> https://pastebin.com/HEk1LwJg

>

> # smb.conf

> https://pastebin.com/f5hqStFk

>

> # log.winbindd

> https://pastebin.com/nxv13gd9

>

OK, I would change /etc/krb5.conf to just this:

[libdefaults]

    default_realm = DOMAIN.QC.CA

    dns_lookup_realm = false

    dns_lookup_kdc = true

In /etc/nsswitch.conf change:

passwd:         files winbind systemd sss

group:          files winbind systemd sss

shadow:         files systemd sss

To:

passwd:         files winbind

group:          files winbind

shadow:         files

Change:

hosts:          files docker [NOTFOUND=return] gw_name mdns4_minimal

[NOTFOUND=return] resolve [!UNAVAIL=return] dns myhostname mymachines

To:

hosts:          files dns

Change:

protocols:      db files winbind

services:       db files winbind sss

To:

protocols:      db files

services:       db files

Change:

netgroup:       nis files winbind sss

To:

netgroup:       nis

I would remove all these lines from smb.conf:

        logon drive = H:

        max xmit = 32768

        min receivefile size = 2048

        map to guest = Bad User

        obey pam restrictions = Yes

        pam password change = Yes

        passdb backend = smbpasswd

        passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully*.

        passwd program = /usr/bin/passwd %u

        password server = domainmaster2.domain.qc.ca domainmaster1.domain.qc.ca

        restrict anonymous = 1

        unix password sync = Yes

        deadtime = 15

        idmap gid = 10000-20000

        winbind cache time = 30

        winbind enum groups = Yes

        winbind enum users = Yes

        dns proxy = No

        wins server = 10.20.1.64

        aio read size = 2048

        aio write size = 2048

        use sendfile = Yes

        write cache size = 1024000

I would change this line:

        idmap config * : range = 10000-20000

To:

        idmap config * : range = 3000-7999

I would add:

    idmap config DOMAIN : backend = rid

    idmap config DOMAIN : range = 10000-999999

    template shell = /bin/bash

    template homedir = /home/%U

    vfs objects = acl_xattr

    map acl inherit = Yes

    store dos attributes = Yes

With these changes it should work, but it is your computer, so the

choice is yours, use winbind or sssd for authentication, you cannot use

both.

Rowland

________________________________

 *   Previous message (by thread): [Samba] Share access problem.<https://lists.samba.org/archive/samba/2017-August/210239.html>
 *   Next message (by thread): [Samba] (no subject)<https://lists.samba.org/archive/samba/2017-August/210143.html>
 *   Messages sorted by: [ date ]<https://lists.samba.org/archive/samba/2017-August/date.html#210243> [ thread ]<https://lists.samba.org/archive/samba/2017-August/thread.html#210243> [ subject ]<https://lists.samba.org/archive/samba/2017-August/subject.html#210243> [ author ]<https://lists.samba.org/archive/samba/2017-August/author.html#210243>

________________________________
More information about the samba mailing list<https://lists.samba.org/mailman/listinfo/samba>