samba - Feb 2019 - lookup_name_smbconf for <user> failed

On Fri, 22 Feb 2019 at 14:51, Rowland Penny via samba <samba at
lists.samba.org>
wrote:

Its working now with smbclient from Linux without using password. Thanks!
On Windows I have to use fqdn but it might be that the search path on
Windows is wrong. (the word "search" in resolv.conf - I don't know
what
that is called on Windows)

It was a lot changes to make. I just copied the old smb.conf to the new
server but it was obviously not a good idea.
>         include = /etc/samba/smb.conf.%h
>
> What is in '/etc/samba/smb.conf.%h' ?
>
On the old system all servers uses the same smb.conf and then all the uniq
shares are defined in smb.conf.<hostname>

The content can then be seen with this command

# grep -v "#" smb.conf.$(hostname -s)
[global]
  server string = Samba %v paa %L(%h): udvhome
[homes]
   comment = Home Directories
   browseable = no
   writable = yes
   read only = no
   create mask = 0775

If any interest my smb.conf is now:

[global]
        log level = 3
        unix charset = UTF8
        dos charset = ISO-8859-1
        workgroup = ACME.DOM
        realm = ACME.COM
        server string = Samba %v paa %L(%h)
        security = ads
        encrypt passwords = yes
        kerberos method = secrets and keytab
        dedicated keytab file = /etc/krb5.keytab
        idmap config ACME.DOM : backend = rid
        idmap config ACME.DOM : range = 2000 - 3999
        idmap config * : backend = tdb
        idmap config * : range = 4000 - 5999
        deadtime = 10
        winbind cache time = 10
        winbind nested groups = yes
        template homedir = /home/%U
        template shell = /bin/bash
        client use spnego = yes
        socket options = TCP_NODELAY SO_RCVBUF=16384 SO_SNDBUF=16384
        log file = /var/log/samba/log.%m
        max log size = 100
        local master = No
        dns proxy = No
        include = /etc/samba/smb.conf.%h


-- 

Venlig hilsen - best regards

On Fri, 22 Feb 2019 17:12:56 +0100
Hans Schou via samba <samba at lists.samba.org> wrote:
> On Fri, 22 Feb 2019 at 14:51, Rowland Penny via samba
> <samba at lists.samba.org> wrote:
> 
> Its working now with smbclient from Linux without using password.
> Thanks! On Windows I have to use fqdn but it might be that the search
> path on Windows is wrong. (the word "search" in resolv.conf - I
don't
> know what that is called on Windows)
> 
> It was a lot changes to make. I just copied the old smb.conf to the
> new server but it was obviously not a good idea.
> 
> >         include = /etc/samba/smb.conf.%h
> >
> > What is in '/etc/samba/smb.conf.%h' ?
> >
> 
> On the old system all servers uses the same smb.conf and then all the
> uniq shares are defined in smb.conf.<hostname>
> 
> The content can then be seen with this command
> 
> # grep -v "#" smb.conf.$(hostname -s)
> [global]
>   server string = Samba %v paa %L(%h): udvhome
> [homes]
>    comment = Home Directories
>    browseable = no
>    writable = yes
>    read only = no
>    create mask = 0775
> 
> If any interest my smb.conf is now:
> 
> [global]
>         log level = 3
>         unix charset = UTF8
>         dos charset = ISO-8859-1
>         workgroup = ACME.DOM
Sorry, but you cannot use a workgroup with a dot in it.

Rowland

On Fri, 22 Feb 2019 at 17:27, Rowland Penny via samba <samba at
lists.samba.org>
wrote:

> > [global]
> >         log level = 3
> >         unix charset = UTF8
> >         dos charset = ISO-8859-1
> >         workgroup = ACME.DOM
>
> Sorry, but you cannot use a workgroup with a dot in it.
>
I tried to remove ".DOM" but then I can not start smb so I added it
again.
Maybe it is defined that way on the Domain Controller?


-- 

Venlig hilsen - best regards