[Samba] samba 2.4.6 to 2.4.7 update on Fedora update 26 to 27, can't connect to shares

[Rowland Penny]

On Thu, 1 Mar 2018 14:32:58 +1100
Norman Gaywood via samba <samba at lists.samba.org> wrote:

> I've just updated my samba 2.4.6 to samba 2.4.7 via updating Fedora
> 26 to 27

I think you mean you have upgrade from 4.6.x to 4.7.x ;-)

> 
> System was working in F26. But in F27 users cannot connect to the
> service definitions:
> 
> $ smbclient //turing/ngaywood
> Enter UNE\ngaywood's password:
> Anonymous login successful
> tree connect failed: NT_STATUS_ACCESS_DENIED
> 
> The server system is configured as (testparm output):
> [global]
>         auth methods = guest sam_ignoredomain winbind:ntdomain
>         log file = /var/log/samba/log.%m
>         max log size = 500
>         realm = AD.UNE.EDU.AU
>         security = ADS
>         server string = Science and Technology turing Samba Server
> Version %v
>         wins server = 129.180.3.55
>         workgroup = UNE
>         idmap config * : backend = tdb
>         cups options = raw
> 
> On the server, wbinfo lists all the users:
> 
> # wbinfo -u | grep ngaywood
> UNE\ngaywood
> 
> Perhaps something to do with this in log.smdb?
> [2018/03/01 14:22:26.232980,
> 3] ../lib/util/access.c:365(allow_access) Allowed connection from
> 129.180.72.132 (129.180.72.132) [2018/03/01 14:22:30.456440,  3]
> ../source3/lib/util_procid.c:54(pid_to_procid)
>   pid_to_procid: messaging_dgm_get_unique failed: No such file or
> directory
> 
> But I'm not sure what that means.
> 
> Also have these messages generated by testparm:
> 
> WARNING: The "auth methods" option is deprecated
> WARNING: The "profile acls" option is deprecated

Fairly obvious, both the parameters are deprecated, so you shouldn't
use them ;-)

> 
> idmap range not specified for domain '*'
> ERROR: Invalid idmap range for domain *!
> 

You haven't set the 'idmap config' lines correctly, which may mean you
are using sssd instead. If this is the case, then you are asking in the
wrong place, you need to ask on the sssd-users mailing list.

If you aren't using sssd, can you post the smb.conf that is on disk
i.e. the output of cat.

Rowland