[Samba] auth problems

[Piviul]

On 11/24/22 15:45, Rowland Penny via samba wrote:
>
>
> On 24/11/2022 13:28, Piviul via samba wrote:
>> ...I forgot to say that the samba version of the PDC is 4.10.16
>
> What, you are running an nt4-style domain ?
> Or do you mean an AD DC is running 4.10.16 ?

yes, I mean AD DC is running 4.10.16


>>> this is testparm:
>>>
>>> root at serverdati:~# du -sh /home/shares/DAE/
>>> ^G^C
>>> root at serverdati:~# testparm
>>> Load smb config files from /etc/samba/smb.conf
>>> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit 
>>> (16384)
>>> Processing section "[homes]"
>>> [...]
>>> Loaded services file OK.
>>> WARNING: You have some share names that are longer than 12 characters.
>>> These may not be accessible to some older clients.
>>> (Eg. Windows9x, WindowsMe, and smbclient prior to Samba 3.0.)
>>> Server role: ROLE_DOMAIN_MEMBER
>>> Press enter to see a dump of your service definitions
>>>
>>> [global]
>>>     workgroup = DOMINIOCSA
>>>     realm = AD.CSARICERCHE.COM
>>>     server string = %h server (Samba, Debian)
>>>     security = ADS
>>>     map to guest = Bad User
>>>     obey pam restrictions = Yes
>>>     pam password change = Yes
>>>     log file = /var/log/samba/log.%m
>>>     max log size = 1000
>>>     usershare allow guests = Yes
>>>     panic action = /usr/share/samba/panic-action %d
>>>     template shell = /bin/bash
>>>     winbind enum users = Yes
>>>     winbind enum groups = Yes
>>>     winbind refresh tickets = Yes
>>>     idmap config DOMINIOCSA : range = 10000-99999
>>>     idmap config DOMINIOCSA : backend = rid
>>>     idmap config * : range = 3000-9999
>>>     idmap config * : backend = tdb
>>>     map acl inherit = Yes
>>>     store dos attributes = Yes
>>>     vfs objects = acl_xattr
>>>
>>> [...]
>>>
>>
>>
>
> There doesn't appear to be anything wrong, is the join still OK and is 
> winbind running ?
# net ads testjoin
kinit succeeded but ads_sasl_spnego_krb5_bind failed: Strong(er) 
authentication required
Join is OK


Piviul