[Samba] Machines joined to a domain can't access shares on standalone Samba server

[Robert Marcano]

On Sun, Sep 29, 2019 at 3:33 PM Rowland penny via samba <
samba at lists.samba.org> wrote:

> >...
> This is interesting, from a Unix domain member using smbclient it works:
>
> rowland at devstation:~/tests$ smbclient //192.168.0.27/rowland
> Enter rowland at SAMDOM.EXAMPLE.COM's password:
> tree connect failed: NT_STATUS_ACCESS_DENIED
> rowland at devstation:~/tests$ smbclient //192.168.0.27/rowland -U
> WORKGROUP\\rowland
> Enter WORKGROUP\rowland's password:
> Try "help" to get a list of possible commands.
> smb: \> ls
>    .                                   D        0  Mon May 22 10:11:00 2017
>    ..                                  D        0  Sun Sep 22 10:14:17 2019
>    .bash_logout                        H      220  Fri Oct  7 16:41:03 2016
>    .profile                            H      675  Fri Oct  7 16:41:03 2016
>    .bashrc                             H     3515  Fri Oct  7 16:41:03 2016
>    sprinkler.sh                        N      307  Mon May 22 13:20:48 2017
>    .bash_history                       H      102  Wed Dec 28 11:02:35 2016
>    sprinkler                           D        0  Mon May 22 13:22:29 2017
>    ftptest.txt                         N        9  Fri Oct  7 16:42:33 2016
>
>          7736784 blocks of size 1024. 1752716 blocks available
> smb: \> q
>
> As you can see, without the workgroup, it uses the domain workgroup and
> fails, but with the workgroup on the standalone server, it works.
>
> However, I cannot get it work from the GUI, I have tried numerous
> different settings, but it just fails. This would lead me to suspect a
> problem with the GUI and not Samba.
>

Thanks for checking it,  I was wondering if with the new Samba, Windows
used the wrong user, tried downgrading, for testing with:

  server max protocol = NT1

without success either.

Now that you tell me that it happens to you too from the Windows UI makes
me think is is not some kind of hardening feature on the Windows AD domain
the server is installed. I tested with Windows 7 and Windows 10 on that
domain.


> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>


-- 
Robert Marcano