[Samba] Synology shares not accessible...

[Ingo Asche]

Hi Vincent,

in my case access via hostname doesn't work. That seems to be a Kerberos 
problem, as access via IP works. IP access uses NTLM authentication.

With SMB-Service 4.15.9-0619 (was the Beta) it worked, with the released 
version 4.15.9-0632 not anymore.

If you change one library in the released version to the one from Beta 
(libidmap-samba4.so) then the released version works again.

They claim it's because of one SID which can't be dissolved by winbind: 
S-1-18-1. As I wrote in my last mail, this SID don't exist under 2008R2 
and earlier.

I'm afraid you have to read the hole trail to get all informations.

So do you use IP addresses or hostnames for access?

Regards
Ingo
https://github.com/WAdama

vincent at cojot.name schrieb am 07.07.2023 um 02:42:
>
> Hi Ingo,
> Sorry for the late reply but I just gave it a test tonight and 
> everything worked fine for me:
> - Domain Controllers run RHEL8.8 + samba 4.17.8
> - DSM 7.1.1 VM and DSM 7.2 physical box (DS3622xs)
> I can give rights to domain groups in the Syno UI for shares hosted on 
> the Syno and things work just fine. Of course both DSM units (VM + 
> 3617xs) are joined to my AD domain using the Synology UI.
>
> What problem were you experiencing?
>
> Vincent
>
>
> On Thu, 13 Apr 2023, Ingo Asche via samba wrote:
>
>> Hi,
>>
>> to all of you which are using Synology NAS systems.
>>
>> With SMB-Service 4.15.9-0631 no longer shares are accessible via 
>> domain group rights from a Samba 4.17.7 domain.
>>
>> It seems the same error described in the following mail trails:
>> "No longer access to shares after upgrade to 4.17.3"
>> "File server joined to a samba domain accessed by windows 10-11 
>> clients, works via ip no via dns name"
>>
>> I've already openend a ticket with Synology.
>>
>> So be careful before updating the SMB-Service, maybe test it first on 
>> a not so important system.
>>
>> Regard
>> Ingo
>>
>> -- 
>> Regards
>> Ingo
>> https://github.com/WAdama
>>
>>
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>