[Samba] Objet: Problem with Samba 4.16

[Rowland Penny]

On Sat, 2022-07-09 at 09:03 +0200, nabucho via samba wrote:
> Hello all... 
> 
> We used Samba 4 since a long time and since we upgrade to the Samba
> 4.16.1 we have some problem with some Windows clients.... but the
> problem is randomly on one client or another one.... sometime twice a
> day sometime no problem during 2 weeks... sometime just on one PC
> with
> windows and sometime 3 or 4 PC with the same problem. 
> 
> In fact the user completely lost the desktop or the documents during
> 1
> hour more or less... to get them back we have found that if we cut
> the
> network (unplug it) the files are come back and the profile too. 
> 
> There is a GPO which redirect the Documents, Desktop and all the
> profil
> part. 
> 
> Do you have some idea ? 
> 
> Thanks for your repplies ! 
> 
> Regards 
> 
> Nabucho 
> 
> This is the smb.conf : 
> 
> # Global parameters
> [global]
> workgroup = xxx
> realm = xxx

I do hope that the workgroup 'xxx' and the realm 'xxx' are different

> netbios name = SLPAD01
> server role = active directory domain controller
> private dir = /data/samba/private
> log file = /data/log/samba.%m

Why is everything in /data ?
Did you compile Samba yourself ?

> log level = 2 winbind:5
> max log size = 5000
> lock directory = /data/samba
> state directory = /data/samba/state
> cache directory = /data/samba/cache
> allow dns updates
> dns forwarder = 8.8.8.8
> idmap_ldb:use rfc2307 = yes
> tls enabled = yes
> tls keyfile = /lib/antos/clients/2021-12-09.xxx.fr.key
> #tls certfile = /lib/antos/clients/xxx.crt
> tls certfile = /lib/antos/clients/2021-12-09.xxx.fr.pem
> tls cafile = /lib/antos/clients/GandiStandardSSLCA2.pem
> min protocol = SMB2
> ldap server require strong auth = no
> # access based share enum = yes
> # socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> bind interfaces only = yes
> interfaces = lo eth0 eth1 
> 
> [netlogon]
> path = /data/samba/state/sysvol/xxx.fr/scripts
> read only = No 
> 
> [sysvol]
> path = /data/samba/state/sysvol
> read only = No
> acl_xattr:ignore system acls = yes 
> 
> [users]
> path = /data/users
> browseable = no
> read only = No
> hide unreadable = yes

Are you aware that using a Samba AD DC as a fileserver is not
recommended ?

What OS is this ?

Rowland