[Samba] make other domain controller shares available to windows clients.

Mike 1100100 at gmail.com
Sat Jul 11 17:18:04 UTC 2020


CentOS 8 Samba Version 4.12.5 compiled from source configured as DC
and joined to domain SAMDOM.EXAMPLE.COM.

smb.conf --
# Global parameters
[global]
        netbios name = B10
        realm = SAMDOM.EXAMPLE.COM
        server role = active directory domain controller
        workgroup = SAMDOM
        interfaces = lo,enp15s0
        bind interfaces only = Yes
        dns forwarder = 8.8.8.8
        idmap_ldb:use rfc2307 =
yes
        dns proxy = yes

[sysvol]
        path = /usr/local/samba/var/locks/sysvol
        read only = No

[netlogon]
        path = /usr/local/samba/var/locks/sysvol/samdom.example.com/scripts
        read only = No

############# Share Definitions ############################

[hello]
        path = /mnt/hello
        read only = no
*********************************************************

Windows clients can browse and access file share on AD DC host "A10"
but when they cannot access host "B10" file share "hello" by entering
\\b10\hello in windows explorer.

I did the following on B10 in an attempt to set acl's the same way I
do on the primary AD DC host A10 --
setfacl -R -m g:users:rwx /mnt/hello

getfacl /mnt/hello reports --
getfacl: Removing leading '/' from absolute path names
# file: mnt/hello
# owner: root
# group: root
user::rwx
group::r-x
group:users:rwx
mask::rwx
other::r-x

Still no go -- windows clients cannot access \\b10\hello



More information about the samba mailing list