samba - Aug 2021 - Problem connecting Samba and Windows Active Directory

OK, it seems to work... at least the join...

Wbinfo -u give me now the users, but I cannot log in...
In the log file I see:

[2021/08/25 14:33:27.511190,  1]
../../source3/smbd/service.c:353(create_connection_session_info)
  create_connection_session_info: guest user (from session setup) not permitted
to access this share (queo.communication)
[2021/08/25 14:33:27.511318,  1]
../../source3/smbd/service.c:543(make_connection_snum)
  create_connection_session_info failed: NT_STATUS_ACCESS_DENIED

Any idea?

Thanks
Luca

-----Urspr?ngliche Nachricht-----
Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Rowland Penny
via samba
Gesendet: Mittwoch, 25. August 2021 14:26
An: samba at lists.samba.org
Betreff: Re: [Samba] Problem connecting Samba and Windows Active Directory

On Wed, 2021-08-25 at 12:23 +0000, Luca Bertoncello via samba
wrote:
> Hi Rowland,
> 
> Well, I did it, but I still get the same error...
> Do I have to rejoin the AD?
> 
Probably

Rowland



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

On Wed, 2021-08-25 at 12:34 +0000, Luca Bertoncello via samba
wrote:
> OK, it seems to work... at least the join...
> 
> Wbinfo -u give me now the users, but I cannot log in...
> In the log file I see:
> 
> [2021/08/25 14:33:27.511190,  1]
> ../../source3/smbd/service.c:353(create_connection_session_info)
>   create_connection_session_info: guest user (from session setup) not
> permitted to access this share (queo.communication)
> [2021/08/25 14:33:27.511318,  1]
> ../../source3/smbd/service.c:543(make_connection_snum)
>   create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
> 
Does 'getent passwd A_KNOWN_USERNAME' produce output ?

Your smb.conf uses the 'ad' winbind backend, so do your users have a
uidNumber attribute and does 'Domain Users' have a gidNumber attribute
? 
If so, are they all in side the '200000-1000200000' range you set in
your smb.conf ?

Rowland