[Samba] User mapping/login issue

[L.P.H. van Belle]

Hai, 

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Stephen Davies via samba
> Verzonden: donderdag 25 april 2019 8:34
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] User mapping/login issue
> 
> > 
> It would appear that there may be more than one issue with my smb.conf.
> The scenario is a Centos 7 Linux server with a bunch of LAN connected windows 
> 10 clients and several remote windows 10 clients which connect via VPN.
> The server firewall accepts everything from the VPN.
> The server and local clients are all in workgroup BENPARTS while the remote 
> clients are either stand-alone or in different workgroups/domains.
> Local SMB access works as expected but remote access does not due to password 
> failures (as described in earlier log excerpts).
> What should the domain-related entries in smb.conf be to support this scenario?
>
> Cheers and thanks,
> Stephen
> 

I can only think of these last 3 things. 
First try enable smb1 again in windows 10 again. I noticed ms changed things again. 
Thinking here that the "older samba" your using, with a latest windows is the problem. 
Enable smb1 again, think that will fix a lot. 

And your sure you vpn line is ok and you dont have packetloss? 
Think in test with mtr or smokeping, something like that. 

Are the MTU sizes are handled by the firewall? 
This is to prevent IP packet fragmentation, so IPTables is set to reduce the size of packets by adjusting the packets' maximum segment size.
Something like this: iptables -A PREROUTING -i ethX -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss --mss 1361:1536 -j TCPMSS --set-mss 1360

Greetz, 

Louis