David BUILTJES
2003-Dec-03 12:48 UTC
[Samba] No share access from a windows client to Samba 3.0 / winbind / ADS Server 2003
The context: samba 3.0+windbind+MS ADS Server 2003 I can't see or access to my samba share through my AD 2003 domain To summarize: The Kerberos connection: ok The record of Samba server in the AD : ok The record of Samba server in the Server 2003 DNS: ok The nsdc daemon is shutdown. The facts: I can see the Samba in the Active Directory manager, but can't manage it (even the Shares : no permission to see the list of shares). I can see the computer as a member of the domain but no shares appears!! I checked winbind it seems to be ok as you can see below: getent group : ok, getent passwd : ok, wbinfo -u : ok , wbinfo -g : ok, wbinfo -U 10004: ok May be the only clue I found is : chown toto file_name chown: toto invalid user If I read the doc that looks like the nscd daemon is active but it's not the case wbinfo -U 10004 S-1-5-21-1289177223-2746517356-1178275911-1107 wbinfo -g BTECH+Domain Computers BTECH+Domain Controllers BTECH+Schema Admins BTECH+Enterprise Admins BTECH+Domain Admins BTECH+Domain Users BTECH+Domain Guests BTECH+Group Policy Creator Owners BTECH+DnsUpdateProxy wbinfo -u BTECH+Administrator BTECH+Guest BTECH+krbtgt BTECH+builtjes BTECH+IUSR_BTECH2K3 BTECH+toto BTECH+georges smb.conf : [global] netbios name = xd1ads realm = BTECH.LOCAL workgroup = BTECH domain master = no local master = no prefered master = no os level = 0 server string = File server security = ads encrypt passwords = yes #smb passwd file = /etc/samba/smbpasswd socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 #guest account = invite log file = /var/samba/log.%m password server = btech2k3.btech.local winbind uid = 10000-20000 winbind gid = 10000-20000 idmap uid = 10000-20000 winbind enum users = yes winbind enum groups = yes winbind separator = + [sharearea] path = /home/public/test read only = no browsable = yes valid users = %D create mask = 0664 directory mask = 0775 [test] comment = Test Share path = /home/public/ads read only = No guest ok = Yes _________________ This drive me crazy !!! What did I miss ? - David -