[Samba] Shares not accessible when using FQDN

[Gaetan SLONGO]

Hi, 


I'm facing to an issue where I cannot find solution. 


Here is the test case : 




    * Samba 4.7, multi-server setup (multiple DC) 
    * Windows 7 and Windows 10 client (not domain member) 
    * Shares can be listed but no access to them in some case 



>From my workstation if I access to \\myserver.domain\myshare I get an error like "//UNC// is not accessible . you might nit have permissions ... bla bla ... The parameter is incorrect" 


On my samba server we can see the log below (at the end of that mail). 


However, it works when I do not append domain name to the UNC : \\myserver\myshare ... 
Even more strange, it works on some workstations but not all.. 
Client clients are OK. 


Do you have any idea ?!? 





==> /var/log/samba/log.smbd <== 
[2017/08/29 10:59:55.925684, 4] ../source3/smbd/uid.c:384(change_to_user) 
Skipping user change - already user 
[2017/08/29 10:59:55.925776, 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) 
smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_INVALID_PARAMETER] || at ../source3/smbd/smb2_ioctl.c:309 
[2017/08/29 10:59:55.926835, 4] ../source3/smbd/uid.c:384(change_to_user) 
Skipping user change - already user 
[2017/08/29 10:59:55.926892, 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) 
smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_INVALID_PARAMETER] || at ../source3/smbd/smb2_ioctl.c:309 
[2017/08/29 10:59:56.088688, 4] ../source3/smbd/uid.c:384(change_to_user) 
Skipping user change - already user 
[2017/08/29 10:59:56.088746, 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) 
smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_INVALID_PARAMETER] || at ../source3/smbd/smb2_ioctl.c:309 
[2017/08/29 10:59:56.098659, 4] ../source3/smbd/uid.c:384(change_to_user) 
Skipping user change - already user 
[2017/08/29 10:59:56.098717, 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) 
smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_INVALID_PARAMETER] || at ../source3/smbd/smb2_ioctl.c:309 
[2017/08/29 10:59:56.104899, 4] ../source3/smbd/uid.c:384(change_to_user) 
Skipping user change - already user 
[2017/08/29 10:59:56.104957, 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) 
smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_INVALID_PARAMETER] || at ../source3/smbd/smb2_ioctl.c:309 
[2017/08/29 10:59:56.105755, 4] ../source3/smbd/uid.c:384(change_to_user) 
Skipping user change - already user 
[2017/08/29 10:59:56.105811, 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) 
smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_INVALID_PARAMETER] || at ../source3/smbd/smb2_ioctl.c:309 
[2017/08/29 10:59:56.106671, 4] ../source3/smbd/uid.c:384(change_to_user) 
Skipping user change - already user 
[2017/08/29 10:59:56.106727, 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) 
smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_INVALID_PARAMETER] || at ../source3/smbd/smb2_ioctl.c:309 
[2017/08/29 10:59:56.108001, 4] ../source3/smbd/uid.c:384(change_to_user) 
Skipping user change - already user 
[2017/08/29 10:59:56.108058, 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) 
smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_INVALID_PARAMETER] || at ../source3/smbd/smb2_ioctl.c:309 
[2017/08/29 10:59:56.109246, 4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) 
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 
[2017/08/29 10:59:56.109401, 3] ../lib/util/access.c:361(allow_access) 
Allowed connection from 10.17.253.156 (10.17.253.156) 
[2017/08/29 10:59:56.109525, 3] ../source3/smbd/service.c:576(make_connection_snum) 
Connect path is '/opt/fft/actran_product' for service [software] 
[2017/08/29 10:59:56.109566, 3] ../source3/smbd/vfs.c:113(vfs_init_default) 
Initialising default vfs hooks 
[2017/08/29 10:59:56.109581, 3] ../source3/smbd/vfs.c:139(vfs_init_custom) 
Initialising custom vfs hooks from [/[Default VFS]/] 
[2017/08/29 10:59:56.109652, 3] ../source3/smbd/vfs.c:139(vfs_init_custom) 
Initialising custom vfs hooks from [acl_xattr] 
[2017/08/29 10:59:56.109668, 3] ../source3/smbd/vfs.c:139(vfs_init_custom) 
Initialising custom vfs hooks from [dfs_samba4] 
[2017/08/29 10:59:56.109691, 2] ../source3/modules/vfs_acl_xattr.c:235(connect_acl_xattr) 
connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service software 
[2017/08/29 10:59:56.112545, 4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) 
setting sec ctx (531, 100) - sec_ctx_stack_ndx = 0 
[2017/08/29 10:59:56.112595, 4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) 
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 
[2017/08/29 10:59:56.112642, 2] ../source3/smbd/service.c:822(make_connection_snum) 
10.17.253.156 (ipv4:10.17.253.156:49202) connect to service software initially as user FFT\qa (uid=531, gid=100) (pid 23058) 
[2017/08/29 10:59:56.114037, 4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) 
setting sec ctx (531, 100) - sec_ctx_stack_ndx = 0 
[2017/08/29 10:59:56.114105, 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) 
smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_INVALID_PARAMETER] || at ../source3/smbd/smb2_ioctl.c:309 
[2017/08/29 10:59:56.114916, 4] ../source3/smbd/uid.c:384(change_to_user) 
Skipping user change - already user 
[2017/08/29 10:59:56.114973, 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) 
smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_INVALID_PARAMETER] || at ../source3/smbd/smb2_ioctl.c:309 
[2017/08/29 10:59:56.756703, 4] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) 
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 




Thank you