samba - Aug 2021 - Problem connecting Samba and Windows Active Directory

On Wed, 2021-08-25 at 12:23 +0000, Luca Bertoncello via samba
wrote:
> Hi Rowland,
> 
> Well, I did it, but I still get the same error...
> Do I have to rejoin the AD?
> 
Probably

Rowland

OK, it seems to work... at least the join...

Wbinfo -u give me now the users, but I cannot log in...
In the log file I see:

[2021/08/25 14:33:27.511190,  1]
../../source3/smbd/service.c:353(create_connection_session_info)
  create_connection_session_info: guest user (from session setup) not permitted
to access this share (queo.communication)
[2021/08/25 14:33:27.511318,  1]
../../source3/smbd/service.c:543(make_connection_snum)
  create_connection_session_info failed: NT_STATUS_ACCESS_DENIED

Any idea?

Thanks
Luca

-----Urspr?ngliche Nachricht-----
Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Rowland Penny
via samba
Gesendet: Mittwoch, 25. August 2021 14:26
An: samba at lists.samba.org
Betreff: Re: [Samba] Problem connecting Samba and Windows Active Directory

On Wed, 2021-08-25 at 12:23 +0000, Luca Bertoncello via samba
wrote:
> Hi Rowland,
> 
> Well, I did it, but I still get the same error...
> Do I have to rejoin the AD?
> 
Probably

Rowland



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Good to hear it now works but please to thing about below.. 

Hostname: nasmedia02 
ipaddress: 10.0.31.72 10.0.31.77 

Checking file: /etc/hosts

127.0.0.1	localhost
10.0.31.72	nasmedia02.ad.queo.org	nasmedia02
And 10.0.31.77 ? No name? Or is this one in the DNS? 

Checking file: /etc/resolv.conf

search ad.queo.org
nameserver 10.0.31.2
nameserver 10.0.31.3
You missing, 1 DNS server, since i see 3 AD-DC's. 

Checking file: /etc/krb5.conf
Only i you want to point to specific KDC's. you use the [realms] 
and the [domain_realms]

The default at install is sufficient. 
.. You can remove everything below : fcc-mit-ticketflags = true

Checking file: /etc/nsswitch.conf
I see sss parts, but you already fixed that. 

On the "wins" server part.. Only members can use it IF you enable NMBD
Which we should not.. 

I would recommend to cleanup the settings in smb.conf 
Less is better 

Good luck.

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Luca 
> Bertoncello via samba
> Verzonden: woensdag 25 augustus 2021 14:34
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Problem connecting Samba and Windows 
> Active Directory
> 
> OK, it seems to work... at least the join...
> 
> Wbinfo -u give me now the users, but I cannot log in...
> In the log file I see:
> 
> [2021/08/25 14:33:27.511190,  1] 
> ../../source3/smbd/service.c:353(create_connection_session_info)
>   create_connection_session_info: guest user (from session 
> setup) not permitted to access this share (queo.communication)
> [2021/08/25 14:33:27.511318,  1] 
> ../../source3/smbd/service.c:543(make_connection_snum)
>   create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
> 
> Any idea?
> 
> Thanks
> Luca
> 
> -----Urspr?ngliche Nachricht-----
> Von: samba <samba-bounces at lists.samba.org> Im Auftrag von 
> Rowland Penny via samba
> Gesendet: Mittwoch, 25. August 2021 14:26
> An: samba at lists.samba.org
> Betreff: Re: [Samba] Problem connecting Samba and Windows 
> Active Directory
> 
> On Wed, 2021-08-25 at 12:23 +0000, Luca Bertoncello via samba wrote:
> > Hi Rowland,
> > 
> > Well, I did it, but I still get the same error...
> > Do I have to rejoin the AD?
> > 
> 
> Probably
> 
> Rowland
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>