samba - Oct 2015 - windows 8.1 unable to connect to samba 4.2 share on FreeBSD domain auth

So we have a samba 4.1.17 Domain running and have truble to with windows 8.1
cutt off the shares in the domain from time to time.
We researched a lot without beeing successfull. The users need to relogin or
restart to reach their shares again.

Greetings
Daniel



EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen 
Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de 




-----Ursprüngliche Nachricht-----
Von: Rowland Penny [mailto:rowlandpenny241155 at gmail.com] 
Gesendet: Mittwoch, 28. Oktober 2015 09:01
An: samba at lists.samba.org
Betreff: Re: [Samba] windows 8.1 unable to connect to samba 4.2 share on FreeBSD
domain auth

On 27/10/15 23:05, Motty wrote:
> Hello,
> I am having issues getting users trying to connect to samba share. The 
> weird part is that some users are able to connect but some aren't. all 
> windows 7 client are able to connect without issues. any ideas?
>
> #=============== Global Settings
> [global]
> workgroup = DOMAIN
>
> realm = domain.ad
>
> netbios name = Share2
>
> server string >
> username map = /usr/local/etc/samba/username.map
>
> hosts allow = 192.168.5. 192.168.1. 127. 3.
>
> security = domain
>
> load printers = no
> guest account = public
> log file = /var/log/samba4/log.%m
> ax log size = 50
> #password server = austin.domain.ad
> passdb backend = tdbsam
> # socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local 
> master = no os level = 1 domain master = no preferred master = no 
> domain logons = no dns proxy = no wins server = 192.168.5.90 client 
> ntlmv2 auth = yes ntlm auth = yes lanman auth = yes smb ports = 139
>
> [public]
>   comment = Public Shared Directory
>   path = /home/public
>   public = yes
>   force user = public
>   force group = public
>   only guest = yes
>   writeable = yes
>
> Thanks,
> Motty
>
OK, bit confused here, you have this: realm = domain.ad and this: 
security = domain
They are really mutually exclusive, you would only use the first in an AD domain
and the second in an NT4-style domain.
What sort of domain is your machine in??

Rowland



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

my domain controller, AD is windows 2000. That is my environment.

Thanks,
Motty

On 10/28/2015 01:31 AM, Mueller wrote:
> So we have a samba 4.1.17 Domain running and have truble to with windows
8.1 cutt off the shares in the domain from time to time.
> We researched a lot without beeing successfull. The users need to relogin
or restart to reach their shares again.
>
> Greetings
> Daniel
>
>
>
> EDV Daniel Müller
>
> Leitung EDV
> Tropenklinik Paul-Lechler-Krankenhaus
> Paul-Lechler-Str. 24
> 72076 Tübingen
> Tel.: 07071/206-463, Fax: 07071/206-499
> eMail: mueller at tropenklinik.de
> Internet: www.tropenklinik.de
>
>
>
>
> -----Ursprüngliche Nachricht-----
> Von: Rowland Penny [mailto:rowlandpenny241155 at gmail.com]
> Gesendet: Mittwoch, 28. Oktober 2015 09:01
> An: samba at lists.samba.org
> Betreff: Re: [Samba] windows 8.1 unable to connect to samba 4.2 share on
FreeBSD domain auth
>
> On 27/10/15 23:05, Motty wrote:
>> Hello,
>> I am having issues getting users trying to connect to samba share. The
>> weird part is that some users are able to connect but some aren't.
all
>> windows 7 client are able to connect without issues. any ideas?
>>
>> #=============== Global Settings
>> [global]
>> workgroup = DOMAIN
>>
>> realm = domain.ad
>>
>> netbios name = Share2
>>
>> server string >>
>> username map = /usr/local/etc/samba/username.map
>>
>> hosts allow = 192.168.5. 192.168.1. 127. 3.
>>
>> security = domain
>>
>> load printers = no
>> guest account = public
>> log file = /var/log/samba4/log.%m
>> ax log size = 50
>> #password server = austin.domain.ad
>> passdb backend = tdbsam
>> # socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local
>> master = no os level = 1 domain master = no preferred master = no
>> domain logons = no dns proxy = no wins server = 192.168.5.90 client
>> ntlmv2 auth = yes ntlm auth = yes lanman auth = yes smb ports = 139
>>
>> [public]
>>    comment = Public Shared Directory
>>    path = /home/public
>>    public = yes
>>    force user = public
>>    force group = public
>>    only guest = yes
>>    writeable = yes
>>
>> Thanks,
>> Motty
>>
> OK, bit confused here, you have this: realm = domain.ad and this:
> security = domain
> They are really mutually exclusive, you would only use the first in an AD
domain and the second in an NT4-style domain.
> What sort of domain is your machine in??
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
>

On 28/10/15 13:29, Motty wrote:
> my domain controller, AD is windows 2000. That is my environment.
>
> Thanks,
> Motty
>
> On 10/28/2015 01:31 AM, Mueller wrote:
>> So we have a samba 4.1.17 Domain running and have truble to with 
>> windows 8.1 cutt off the shares in the domain from time to time.
>> We researched a lot without beeing successfull. The users need to 
>> relogin or restart to reach their shares again.
>>
>> Greetings
>> Daniel
>>
>>
>>
>> EDV Daniel Müller
>>
>> Leitung EDV
>> Tropenklinik Paul-Lechler-Krankenhaus
>> Paul-Lechler-Str. 24
>> 72076 Tübingen
>> Tel.: 07071/206-463, Fax: 07071/206-499
>> eMail: mueller at tropenklinik.de
>> Internet: www.tropenklinik.de
>>
>>
>>
>>
>> -----Ursprüngliche Nachricht-----
>> Von: Rowland Penny [mailto:rowlandpenny241155 at gmail.com]
>> Gesendet: Mittwoch, 28. Oktober 2015 09:01
>> An: samba at lists.samba.org
>> Betreff: Re: [Samba] windows 8.1 unable to connect to samba 4.2 share 
>> on FreeBSD domain auth
>>
>> On 27/10/15 23:05, Motty wrote:
>>> Hello,
>>> I am having issues getting users trying to connect to samba share.
The
>>> weird part is that some users are able to connect but some
aren't. all
>>> windows 7 client are able to connect without issues. any ideas?
>>>
>>> #=============== Global Settings
>>> [global]
>>> workgroup = DOMAIN
>>>
>>> realm = domain.ad
>>>
>>> netbios name = Share2
>>>
>>> server string >>>
>>> username map = /usr/local/etc/samba/username.map
>>>
>>> hosts allow = 192.168.5. 192.168.1. 127. 3.
>>>
>>> security = domain
>>>
>>> load printers = no
>>> guest account = public
>>> log file = /var/log/samba4/log.%m
>>> ax log size = 50
>>> #password server = austin.domain.ad
>>> passdb backend = tdbsam
>>> # socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local
>>> master = no os level = 1 domain master = no preferred master = no
>>> domain logons = no dns proxy = no wins server = 192.168.5.90 client
>>> ntlmv2 auth = yes ntlm auth = yes lanman auth = yes smb ports = 139
>>>
>>> [public]
>>>    comment = Public Shared Directory
>>>    path = /home/public
>>>    public = yes
>>>    force user = public
>>>    force group = public
>>>    only guest = yes
>>>    writeable = yes
>>>
>>> Thanks,
>>> Motty
>>>
>> OK, bit confused here, you have this: realm = domain.ad and this:
>> security = domain
>> They are really mutually exclusive, you would only use the first in 
>> an AD domain and the second in an NT4-style domain.
>> What sort of domain is your machine in??
>>
>> Rowland
>>
>>
>>
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>>
>
If you are connecting to a windows 2000 AD server, then your smb.conf is 
wrong, you should be using 'security = ads'

As a starting point, have a look here: 
https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member

Rowland