samba - Nov 2021 - VPN and negative auth cache?!

Situation: Win7 portable system joined to a Samba AD domain, with CSC (AKA
'Offline Files and Folders').

Sometimes when the system conect to the VPN, network drives are inaccessible
(red X) and if i try to connect, authentication request popups.
In logs i see:

	[2021/11/26 11:00:07.973447,  0] ../../lib/util/access.c:365(allow_access)
	  Denied connection from 10.5.12.6 (10.5.12.6)

as if an ACL apply. But there's no ACL in that share (other share in the
same server have).

If i try to connect to a different alias/cname of the server, works.


Could be that if i try to connect to \\servername\share1 that have the ACL,
subsequent calls to \\servername\share2 get 'negative cache' denied?


Seems really strange...


PS. and note that this seems to happen randomly; if the user disconnect and
    reconect, all shares go OK...

-- 
  Io ammiro gli americani per come fanno le trattative: prima di tutto
  pensano a se stessi, poi a se stessi, e solo alla fine a se stessi.
						(Ignacio Lula da Silva)

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Marco Gaiarin via samba
> Verzonden: vrijdag 26 november 2021 11:22
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] VPN and negative auth cache?!
> 
> 
> Situation: Win7 portable system joined to a Samba AD domain, 
> with CSC (AKA 'Offline Files and Folders').
I had recently also some problems with offline files.. 
Since im in transition to move to different servers and locations
I turned it off. 
> 
> Sometimes when the system conect to the VPN, network drives 
> are inaccessible
> (red X) and if i try to connect, authentication request popups.
> In logs i see:
> 
> 	[2021/11/26 11:00:07.973447,  0] 
> ../../lib/util/access.c:365(allow_access)
> 	  Denied connection from 10.5.12.6 (10.5.12.6)
> 
> as if an ACL apply. But there's no ACL in that share (other 
> share in the same server have).
Denied connection from 10.5.12.6 (10.5.12.6)  << no hostnames to resolve
to?

Try to login in with username at REALM.TLD 
And use FQDN's, see if that helps. 
> 
> If i try to connect to a different alias/cname of the server, works.
> 
> 
> Could be that if i try to connect to \\servername\share1 that 
> have the ACL,
> subsequent calls to \\servername\share2 get 'negative cache'
denied?
> 
> 
> Seems really strange...
> 
> 
> PS. and note that this seems to happen randomly; if the user 
> disconnect and
>     reconect, all shares go OK...
> 
> -- 
>   Io ammiro gli americani per come fanno le trattative: prima di tutto
>   pensano a se stessi, poi a se stessi, e solo alla fine a se stessi.
> 						(Ignacio Lula da Silva)
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>