[Samba] smb won't allow users from other ou share access

[Rowland Penny]

On Thu, 2022-03-03 at 23:47 +0000, Fuhriman, Nathanael [US] (SP)
(Contr) via samba wrote:
> I have samba setup to share files on a system using SSSD hooked to AD
> for user accounts. Some users are able to access the shares and other
> are not. I finally narrowed it down to users that are in a specific
> OU in AD. Those in that OU can access the shares. All others are
> denied access. For examples users in OU=employees are able to access
> but users in OU=contractors are not able to access.
> 
> I'm pretty sure the problem is with samba because the users are all
> able to login with ssh so the system in general knows about the
> user/passwords.
> 
> I've tried looking through the smb.conf man page and I'm not seeing
> anything about where it cares about which ou a user is in.
> 
> This is on RHEL7.9 with samba 4.10.16

I suggest you contact RHEL about this, sssd is doing the authentication
here and Samba does not produce sssd. Also Samba 4.10.16 is EOL as far
as Samba is concerned.

Rowland