[Samba] Unable to authenticate domain users

[Ralph Boehme]

On 5/31/23 16:24, Doug Sampson via samba wrote:
> [2023/05/31 06:44:04.980364,  1] ../../librpc/ndr/ndr.c:634(_ndr_pull_error)
>    ndr_pull_advance: ndr_pull_error(Buffer Size Error): Pull bytes 4294967295 (../../librpc/ndr/ndr.c:208) at ../../librpc/ndr/ndr.c:208
> [2023/05/31 06:44:04.980469,  1] ../../source3/smbd/smbXsrv_tcon.c:1209(smbXsrv_tcon_global_traverse_fn)
>    Invalid record in smbXsrv_tcon_global.tdb:key '46186E48' ndr_pull_struct_blob - Buffer Size Error

this is

https://bugzilla.samba.org/show_bug.cgi?id=15353

and not the problem here.

> [2023/05/31 06:44:05.023482,  0] ../../source3/smbd/service.c:171(chdir_current_service)
>    chdir_current_service: vfs_ChDir(/zdata/home) failed: Permission denied. Current token: uid=51222, gid=50514, 10 groups: 51222 50514 51157 51134 51107 51146 1003 1004 1006 1001
this one is your problem: smbd tries to chdir() to /zdata/home but this 
fails at the system level with EACCES.

Check two things:
- does the token in the log message like what you would expect?
- check the filesystem permission of /zdata/home and all intermediate 
directories

A good simple test is always to impersonate the user with `su USER` on 
the commandline and then try to chdir as the user.

-slow

-- 
Ralph Boehme, Samba Team                 https://samba.org/
SerNet Samba Team Lead      https://sernet.de/en/team-samba
SAMBA+ Samba packages                   https://samba.plus/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba/attachments/20230531/395f0d8d/OpenPGP_signature.sig>