samba - Jan 2018 - R: R: R: cannot list/access samba share from Windows client

Ok.
I’ve done
root at SRVLNXWINTRA01:/home/data# nano /etc/samba/smb.conf

modified 
idmap config COM_SPOLETO : backend = rid
to
idmap config COM_SPOLETO : backend = ad

root at SRVLNXWINTRA01:/home/data# systemctl restart smbd nmbd winbind
root at SRVLNXWINTRA01:/home/data# net cache flush
root at SRVLNXWINTRA01:/home/data# getent passwd com_spoleto\\andrea.rossetti
root at SRVLNXWINTRA01:/home/data# getent group "com_spoleto\\domain
admins"

nothing is changed!

More and more confused now! ☹

Inviato da Posta per Windows 10

Da: Rowland Penny via samba
Inviato: lunedì 8 gennaio 2018 20:31
A: samba at lists.samba.org
Oggetto: Re: [Samba] R: R: cannot list/access samba share from Windows client
>OK, If I run this on a Unix domain member:
>
>getent passwd samdom\rowland
>
>I get no output, but this:
>
>getent passwd samdom\\rowland
>
>gets me this:
>
>rowland:*:10000:10000:Rowland Penny:/home/rowland:/bin/bash
>
>I use the winbind 'ad' backend and 'Domain Admins' does not
have a
>gidNumber attribute, but 'Domain Users' does.
>
>getent group "samdom\\domain users"
>
>gets me this:
>
>domain users:x:10000:<list of group members>
>
>Try running 'net cache flush' and then try again.
>
>Rowland

On Mon, 8 Jan 2018 20:40:36 +0100
Andrea Rossetti <andy.ros at gmail.com> wrote:
> Ok.
> I’ve done
> root at SRVLNXWINTRA01:/home/data# nano /etc/samba/smb.conf
> 
> modified 
> idmap config COM_SPOLETO : backend = rid
> to
> idmap config COM_SPOLETO : backend = ad
Unless you now want to start adding uidNumber attributes to your users
and gidNumber attributes to your groups, change it back. The 'rid'
backend calculates the users & groups IDs from the AD objects RID.

I do not use the 'rid' backend, I just tried to show you that it should
work.

Change it back then run 'net cache flush' again.

Rowland

I’ve re-changed

root at SRVLNXWINTRA01:/home/data# nano /etc/samba/smb.conf

idmap config COM_SPOLETO : backend = ad
to
idmap config COM_SPOLETO : backend = rid

root at SRVLNXWINTRA01:/home/data# systemctl restart smbd nmbd winbind
root at SRVLNXWINTRA01:/home/data# net cache flush
root at SRVLNXWINTRA01:/home/data# systemctl restart smbd nmbd winbind
root at SRVLNXWINTRA01:/home/data# getent group "com_spoleto\\domain
admins"
root at SRVLNXWINTRA01:/home/data# getent passwd com_spoleto\\andrea.rossetti

Nothing changed!!! ☹ ☹

Inviato da Posta per Windows 10

Da: Andrea Rossetti
Inviato: lunedì 8 gennaio 2018 20:40
A: Rowland Penny; samba at lists.samba.org
Oggetto: R: [Samba] R: R: cannot list/access samba share from Windows client
>Ok.
>I’ve done
>root at SRVLNXWINTRA01:/home/data# nano /etc/samba/smb.conf
>
>modified 
>idmap config COM_SPOLETO : backend = rid
>to
>idmap config COM_SPOLETO : backend = ad
>
>root at SRVLNXWINTRA01:/home/data# systemctl restart smbd nmbd winbind
>root at SRVLNXWINTRA01:/home/data# net cache flush
>root at SRVLNXWINTRA01:/home/data# getent passwd
com_spoleto\\andrea.rossetti
>root at SRVLNXWINTRA01:/home/data# getent group "com_spoleto\\domain
admins"
>
>nothing is changed!
>
>More and more confused now! ☹
>
>Inviato da Posta per Windows 10
>
>Da: Rowland Penny via samba
>Inviato: lunedì 8 gennaio 2018 20:31
>A: samba at lists.samba.org
>Oggetto: Re: [Samba] R: R: cannot list/access samba share from Windows
client
>
>>OK, If I run this on a Unix domain member:
>>
>>getent passwd samdom\rowland
>>
>>I get no output, but this:
>>
>>getent passwd samdom\\rowland
>>
>>gets me this:
>>
>>rowland:*:10000:10000:Rowland Penny:/home/rowland:/bin/bash
>>
>>I use the winbind 'ad' backend and 'Domain Admins' does
not have a
>>gidNumber attribute, but 'Domain Users' does.
>>
>>getent group "samdom\\domain users"
>>
>>gets me this:
>>
>>domain users:x:10000:<list of group members>
>>
>>Try running 'net cache flush' and then try again.
>>
>>Rowland

On Mon, 8 Jan 2018 20:55:22 +0100
Andrea Rossetti <andy.ros at gmail.com> wrote:
> I’ve re-changed
> 
> root at SRVLNXWINTRA01:/home/data# nano /etc/samba/smb.conf
> 
> idmap config COM_SPOLETO : backend = ad
> to
> idmap config COM_SPOLETO : backend = rid
> 
> root at SRVLNXWINTRA01:/home/data# systemctl restart smbd nmbd winbind
> root at SRVLNXWINTRA01:/home/data# net cache flush
> root at SRVLNXWINTRA01:/home/data# systemctl restart smbd nmbd winbind
> root at SRVLNXWINTRA01:/home/data# getent group "com_spoleto\\domain
> admins" root at SRVLNXWINTRA01:/home/data# getent passwd
> com_spoleto\\andrea.rossetti
> 
> Nothing changed!!! ☹ ☹
> 
I changed the 'idmap config' block on my computer to this:

    idmap config *:backend = tdb
    idmap config *:range = 2000-9999
    idmap config SAMDOM : backend = rid
    idmap config SAMDOM : range = 10000-999999

Restarted smbd, nmbd and winbind, then:

root at devstation:~# net cache flush
root at devstation:~# getent passwd samdom\\rowland
rowland:*:11107:10513:Rowland Penny:/home/rowland:/bin/bash

root at devstation:~# getent group "samdom\\domain admins"
domain admins:x:10512:administrator,swanadmin,rowland

As you can see, it works ;-)

If it isn't working for you, you must have something misconfigured or
something missing, What do you have in /etc/hostname, /etc/hosts
and /etc/resolv.conf ?
What packages did you install with the Samba packages ? (note: not the
base OS packages, the packages installed when you installed Samba)

Rowland