[Samba] VPN and negative auth cache?!

[L.P.H. van Belle]

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Marco Gaiarin via samba
> Verzonden: vrijdag 26 november 2021 11:22
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] VPN and negative auth cache?!
> 
> 
> Situation: Win7 portable system joined to a Samba AD domain, 
> with CSC (AKA 'Offline Files and Folders').

I had recently also some problems with offline files.. 
Since im in transition to move to different servers and locations
I turned it off. 

> 
> Sometimes when the system conect to the VPN, network drives 
> are inaccessible
> (red X) and if i try to connect, authentication request popups.
> In logs i see:
> 
> 	[2021/11/26 11:00:07.973447,  0] 
> ../../lib/util/access.c:365(allow_access)
> 	  Denied connection from 10.5.12.6 (10.5.12.6)
> 
> as if an ACL apply. But there's no ACL in that share (other 
> share in the same server have).

Denied connection from 10.5.12.6 (10.5.12.6)  << no hostnames to resolve to? 

Try to login in with username at REALM.TLD 
And use FQDN's, see if that helps. 

> 
> If i try to connect to a different alias/cname of the server, works.
> 
> 
> Could be that if i try to connect to \\servername\share1 that 
> have the ACL,
> subsequent calls to \\servername\share2 get 'negative cache' denied?
> 
> 
> Seems really strange...
> 
> 
> PS. and note that this seems to happen randomly; if the user 
> disconnect and
>     reconect, all shares go OK...
> 
> -- 
>   Io ammiro gli americani per come fanno le trattative: prima di tutto
>   pensano a se stessi, poi a se stessi, e solo alla fine a se stessi.
> 						(Ignacio Lula da Silva)
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>