[Samba] first share access fails

[Rowland Penny]

On Tue, 18 Dec 2018 18:28:18 +0100
Michael Ströder via samba <samba at lists.samba.org> wrote:

> HI!
> 
> I'm trying to solve a problem with Samba shares failing during first
> access, but subsequent second share access always succeeds immediately
> with SMB3 being reported by smbstatus.
> 
> I'm aware of this MS KB article:
> 
> https://support.microsoft.com/en-us/help/4471218/mapped-network-drive-may-fail-to-reconnect-in-windows-10-version-1809
> 
> But the failure above has also been reported by Win7 users.
> 
> It's a domain member server joined with an AD domain (W2K12R2).
> I did not setup the machine. So I don't even know how the join was
> exactly done. I was told it was a domain member in an old domain
> before.
> 
> The Samba server runs on CentOS 6.10, but with separate Samba packages
> samba4-4.2.10-15.el6.x86_64 etc.
> 
> NSS lookups are done via sssd-1.13, POSIX attributes are read from AD
> entries, no ID mapping. This simply works also for shell login.
> winbindd is also running and seems to be used by smbd, but not for
> NSS lookups.
> 
> During the first fail there seems to be an error with the PAC group
> info (see log excerpts appended below). When the second try succeeds
> I can see the group SIDs retrieved in the Samba logs.

From my reading, it just cannot find user 'AD42\user1' but it then goes
onto find user 'user1'

> 
> What really strikes me is this message (obfuscated user's SID):
> 
> SID S-1-5-21-123456789-1234567890-3679153413-2567406 ->
> getpwuid(4294967295) failed
> 
> I don't know why the user's SID is to be mapped to the POSIX-UID of
> nobody (4294967295). As said all getent passwd/group etc. stuff just
> works.

This could be because of many things, can you post your smb.conf (in
a post, attachments are stripped)

> 
> Any hint is highly appreciated.

You might want to ask on the sssd-users mailing, sssd has nothing to do
with Samba.

Rowland