[Samba] auth problems
piviul at riminilug.it
Thu Nov 24 13:28:15 UTC 2022
...I forgot to say that the samba version of the PDC is 4.10.16
Have a nice day!
On 11/24/22 14:11, Piviul wrote:
> On 11/24/22 13:07, Rowland Penny via samba wrote:
>> On 24/11/2022 11:28, Piviul via samba wrote:
>>> Hi all, I have a problem, I have upgraded my samba DC to samba
>>> 4.10.16 and now an old samba (4.1.17 on an old debian wheezy) member
>>> can't authenticate users any more. There is a way to have the old
>>> samba member authenticate the users without upgrading it? I need to
>>> have this server working as soon as possible
>>> Thank you very much
>> Whilst Samba 4.10.x and 4.1.x are both EOL as far as Samba is
>> concerned and Wheezy is EOL as far as Debian is concerned, it should
>> still work.
>> Can we start by seeing the smb.conf from the wheezy machine ?
> this is testparm:
> root at serverdati:~# du -sh /home/shares/DAE/
> root at serverdati:~# testparm
> Load smb config files from /etc/samba/smb.conf
> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
> Processing section "[homes]"
> Loaded services file OK.
> WARNING: You have some share names that are longer than 12 characters.
> These may not be accessible to some older clients.
> (Eg. Windows9x, WindowsMe, and smbclient prior to Samba 3.0.)
> Server role: ROLE_DOMAIN_MEMBER
> Press enter to see a dump of your service definitions
> workgroup = DOMINIOCSA
> realm = AD.CSARICERCHE.COM
> server string = %h server (Samba, Debian)
> security = ADS
> map to guest = Bad User
> obey pam restrictions = Yes
> pam password change = Yes
> log file = /var/log/samba/log.%m
> max log size = 1000
> usershare allow guests = Yes
> panic action = /usr/share/samba/panic-action %d
> template shell = /bin/bash
> winbind enum users = Yes
> winbind enum groups = Yes
> winbind refresh tickets = Yes
> idmap config DOMINIOCSA : range = 10000-99999
> idmap config DOMINIOCSA : backend = rid
> idmap config * : range = 3000-9999
> idmap config * : backend = tdb
> map acl inherit = Yes
> store dos attributes = Yes
> vfs objects = acl_xattr
More information about the samba