[Samba] Windows clients connecting to SMB share differently over IP than DNS

[Rowland penny]

On 08/04/2021 17:27, Gavin Greenwalt wrote:
> I have received confirmation that this is a bug with Synology's 
> implementation and they've narrowed it down to apparently they are for 
> some reason querying Domain Computers and Domain Controllers for 
> permissions not just the user.  The temporary workaround is to add 
> Domain Computers and Domain Controllers explicitly to the share's 
> permissions list.


That's possibly because a computer is a user with an extra objectclass:

objectClass: computer

If they are searching via ldap, then they need a filter like this:

(&(objectCategory=person)(objectClass=user))

Rowland