samba - Dec 2020 - rights -- structures

>First, the workgroup cannot be the same as the realm and the realm must be
the dns domain name in uppercase. By default the workgroup name is the
lefthand portion of the realm (in your case 'CARAG'), but it can be
anything
and it >must not contain dots. If your TLD is '.local' then it really
shouldn't be and you will have to turn off Avahi
>
>You also seem to not have any 'idmap config' lines, are you using
sssd or
similar ?
>
>Rowland
Thanks for you quick Answer!

Add this to smb.conf
 [global]
        realm = CARAG.LOCAL
        workgroup = CARAG
        netbios name = SRVCAR005
        security = domain
        vfs objects = acl_xattr

        idmap config * : backend = tdb
        idmap config * : range 10000-199999
        idmap config DOMAIN : backend = autorid
        idmap config DOMAIN : range = 200000-2147483647

[USERHOME]
        path = /shares/Userhome/
        read only = no

And now the SAMBA Service will not start anymore....

root at srvcar005:/home/caragadm# systemctl status smbd
? smbd.service - Samba SMB Daemon
   Loaded: loaded (/lib/systemd/system/smbd.service; enabled; vendor preset:
enabled)
   Active: failed (Result: exit-code) since Mon 2020-12-14 09:34:01 CET;
11min ago
     Docs: man:smbd(8)
           man:samba(7)
           man:smb.conf(5)
  Process: 639 ExecStartPre=/usr/share/samba/update-apparmor-samba-profile
(code=exited, status=0/SUCCESS)
  Process: 643 ExecStart=/usr/sbin/smbd --foreground --no-process-group
$SMBDOPTIONS (code=exited, status=255/EXCEPTION)
 Main PID: 643 (code=exited, status=255/EXCEPTION)

Dec 14 09:34:00 srvcar005.carag.local systemd[1]: Starting Samba SMB
Daemon...
Dec 14 09:34:01 srvcar005.carag.local smbd[643]: [2020/12/14
09:34:01.312274,  0]
../source3/auth/auth_util.c:1382(make_new_session_info_guest)
Dec 14 09:34:01 srvcar005.carag.local smbd[643]:   create_local_token
failed: NT_STATUS_NO_MEMORY
Dec 14 09:34:01 srvcar005.carag.local smbd[643]: [2020/12/14
09:34:01.314853,  0] ../source3/smbd/server.c:2000(main)
Dec 14 09:34:01 srvcar005.carag.local smbd[643]:   ERROR: failed to setup
guest info.
Dec 14 09:34:01 srvcar005.carag.local systemd[1]: smbd.service: Main process
exited, code=exited, status=255/EXCEPTION
Dec 14 09:34:01 srvcar005.carag.local systemd[1]: smbd.service: Failed with
result 'exit-code'.
Dec 14 09:34:01 srvcar005.carag.local systemd[1]: Failed to start Samba SMB
Daemon.
root at srvcar005:/home/caragadm#




Thanks for your help
Regards
Mauri

On 14/12/2020 08:45, Maurizio Caloro wrote:
>> First, the workgroup cannot be the same as the realm and the realm must
be
> the dns domain name in uppercase. By default the workgroup name is the
> lefthand portion of the realm (in your case 'CARAG'), but it can be
anything
> and it >must not contain dots. If your TLD is '.local' then it
really
> shouldn't be and you will have to turn off Avahi
>> You also seem to not have any 'idmap config' lines, are you
using sssd or
> similar ?
>> Rowland
> Thanks for you quick Answer!
>
> Add this to smb.conf
>   [global]
>          realm = CARAG.LOCAL
>          workgroup = CARAG
>          netbios name = SRVCAR005
>          security = domain
Why have you jumped to 'domain' from 'ADS' ?

'domain' is used with an NT4-style domain and 'ADS' is used with
an 'AD'
domain, what do you have ?
>          vfs objects = acl_xattr
>
>          idmap config * : backend = tdb
>          idmap config * : range 10000-199999
Do you really need such a large range for the default domain, bearing in  
mind that it is mostly for the well known SIDS and there are less than  
two hundred of those.
>          idmap config DOMAIN : backend = autorid
Why 'autorid' ? do you have more than one domain ? and if you are using
autorid then you don't need the default ('*') domain lines, it
includes
them.

Are you starting winbind before smbd ?

Rowland