[Samba] - Unable to access the share due to user mapping not happening

[Rowland Penny]

On Wed, 2021-07-21 at 08:31 +0530, suresh b via samba wrote:
> Hi All,
> 
> There were no issues with accessing the share when the server was
> running
> with Solaris 11.3.1, after upgrading to 11.3.34 and 11.4 version
> users are
> unable to connect the share using the same credentials.
> 
> When server connecting the Samba version is
> root at prusamba:~# smbd -V
> Version 4.7.6
> 
> The current version which was failing to access the share is:-
> root at prusamba:~# smbd -V
> Version 4.11.11
> 
> Error Message:-
> 
> =========================
> [2021/03/30 15:46:34.831879,  0]
> ../lib/util/become_daemon.c:124(daemon_ready)
>  STATUS=daemon 'smbd' finished starting up and ready to serve
> connections
> [2021/03/30 15:46:34.870289,  1]
> ../source3/printing/printer_list.c:234(printer_list_get_last_refresh)
>  Failed to fetch record!
> [2021/03/30 15:58:17.191148,  1]
> ../source3/profile/profile_dummy.c:30(set_profile_level)
>  INFO: Profiling support unavailable in this build.
> [2021/03/30 15:58:17.371979,  0]
> ../lib/util/become_daemon.c:124(daemon_ready)
>  STATUS=daemon 'smbd' finished starting up and ready to serve
> connections
> [2021/03/30 15:58:17.384692,  1]
> ../source3/printing/printer_list.c:234(printer_list_get_last_refresh)
>  Failed to fetch record!
> 
> 2021/03/30 15:52:04.990755,  1]
> ../lib/param/loadparm.c:1823(lpcfg_do_global_parameter)
>  WARNING: The "enable privileges" option is deprecated
> [2021/03/30 15:52:04.993495,  1]
> ../auth/ntlmssp/ntlmssp_server.c:966(ntlmssp_server_postauth)
>  ntlmssp_server_postauth: invalid NTLMSSP_MIC for user=[icarlomagno]
> domain=[NET01] workstation=[PC_SQL2000_W10]
> [2021/03/30 15:52:04.993588,  1] ../lib/util/util.c:515(dump_data)
>  [0000] 9D C9 BE B1 A7 3F 1A 1F   BF B6 39 2A 5D CC F8 34   .ɾ▒▒?..
> ▒▒9*]▒▒4
> [2021/03/30 15:52:04.993701,  1] ../lib/util/util.c:515(dump_data)
>  [0000] 8A EC 03 E4 C8 29 63 3C   DD 7C 55 A3 06 1A 98 5F   .▒.▒▒)c<
> ▒|U▒..._
> =====================
> 
> # Global parameters
> [global]
>        deadtime = 15
>        lanman auth = Yes
>        load printers = No
>        log file = /var/samba/log/log.%m
>        password server = 100.50.101.80 100.50.101.81
>        server string = Samba en el Solaris
>        username map = /etc/samba/smbusers
>        workgroup = ENCLOWD
>        idmap config * : range =
>        idmap config * : backend = tdb
>        case sensitive = No
>        create mask = 0664
>        directory mask = 0775
>        valid users = subba chcko
> 
> [share]
>         path = /share
>         valid users = chcko
>         read only = No
> ===================
> 

How do you think you are running Samba ? because your smb.conf as
posted is for a standalone server. You also posted this: 'WARNING: The
"enable privileges" option is deprecated' but 'enable privileges' isn't
in the smb.conf you posted.

Are your windows computers in an AD domain ? if so, you will probably
be better joining the Samba machine to the domain.

Rowland