[Samba] Debian 9.8 and vanbelle-repos

[Stefan G. Weichinger]

Am 22.02.19 um 14:42 schrieb L.P.H. van Belle:
> Hai Stefan, 
> 
> Hmm is time in sync.  Did that server have these 3 settings in smb.conf? 
> Yes/no/which ones ? 
> 
>     kerberos method = secrets and keytab
>     dedicated keytab file = /etc/krb5.keytab

2x no


>     # renew the kerberos ticket
>     winbind refresh tickets = yes

Yes


> Especialy the refresh ticket.. 
> 
> I see this is a RID setup? Not AD. 
> Because if thats so, i run only in AD backend on the members. 
> 
> Can you check that. 

time is OK

current testparm:


# Global parameters
[global]
	interfaces = bond0
	log file = /var/log/samba/%m.log
	log level = 5 auth:5 winbind:8
	printcap name = /dev/null
	realm = ARBEITSGRUPPE.MYDOMAIN.AT
	security = ADS
	username map = /etc/samba/user.map
	winbind refresh tickets = Yes
	winbind use default domain = Yes
	workgroup = ARBEITSGRUPPE
	idmap config arbeitsgruppe : schema_mode = rfc2307
	idmap config arbeitsgruppe:unix_nss_info = yes
	idmap config arbeitsgruppe:range = 10000-9999999
	idmap config arbeitsgruppe:backend = ad
	idmap config * : range = 2000-3999
	idmap config * : backend = tdb
	map acl inherit = Yes
	store dos attributes = Yes
	vfs objects = acl_xattr

[Daten]
	comment = Daten
	create mask = 03660
	directory mask = 03770
	path = /mnt/daten
	read only = No

[Scans_Plotter]
	comment = Scans vom Plotter
	path = /mnt/daten/Allgemeines/_Scans/Plotter
	read only = No