[Samba] auth problems
rpenny at samba.org
Thu Nov 24 14:45:41 UTC 2022
On 24/11/2022 13:28, Piviul via samba wrote:
> ...I forgot to say that the samba version of the PDC is 4.10.16
What, you are running an nt4-style domain ?
Or do you mean an AD DC is running 4.10.16 ?
There is is no such thing as a PDC in AD.
>> this is testparm:
>> root at serverdati:~# du -sh /home/shares/DAE/
>> root at serverdati:~# testparm
>> Load smb config files from /etc/samba/smb.conf
>> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
>> Processing section "[homes]"
>> Loaded services file OK.
>> WARNING: You have some share names that are longer than 12 characters.
>> These may not be accessible to some older clients.
>> (Eg. Windows9x, WindowsMe, and smbclient prior to Samba 3.0.)
>> Server role: ROLE_DOMAIN_MEMBER
>> Press enter to see a dump of your service definitions
>> workgroup = DOMINIOCSA
>> realm = AD.CSARICERCHE.COM
>> server string = %h server (Samba, Debian)
>> security = ADS
>> map to guest = Bad User
>> obey pam restrictions = Yes
>> pam password change = Yes
>> log file = /var/log/samba/log.%m
>> max log size = 1000
>> usershare allow guests = Yes
>> panic action = /usr/share/samba/panic-action %d
>> template shell = /bin/bash
>> winbind enum users = Yes
>> winbind enum groups = Yes
>> winbind refresh tickets = Yes
>> idmap config DOMINIOCSA : range = 10000-99999
>> idmap config DOMINIOCSA : backend = rid
>> idmap config * : range = 3000-9999
>> idmap config * : backend = tdb
>> map acl inherit = Yes
>> store dos attributes = Yes
>> vfs objects = acl_xattr
There doesn't appear to be anything wrong, is the join still OK and is
winbind running ?
More information about the samba