Hi
Not yet like expected. I added a local system/samba user for this specific
micro-devices. The device does not send the user with a workgroup/domain
but something like \user. With an empty or blank value before the \ and i
am not able to change it because it is proprietary.
Anyway, now I can access the share by smbclient -U \\local-user. If i try
smbclient -U local-user, winbind or samba try to search / map the user with
[domain] \ [local-user], which fails because local-user is not within the
AD. Confusing but \\local-user seems to be ok for me. Thanks for asking.
Am Mo., 14. Feb. 2022 um 15:51 Uhr schrieb Perttu Aaltonen <
perttu.aaltonen at mac.com>:
> Hi Eric, did you ever get your authentication working again? I?m curious
> what you did if you did.
>
> -Perttu
>
> On 20. Jan 2022, at 8.46, Eric Lehmann via samba <samba at
lists.samba.org>
> wrote:
>
> Rowland, here it is:
>
> testparm
> Load smb config files from /etc/samba/smb.conf
> lpcfg_do_global_parameter: WARNING: The "lanman auth" option is
deprecated
> lpcfg_do_global_parameter: WARNING: The "client NTLMv2 auth"
option is
> deprecated
> Loaded services file OK.
> Weak crypto is allowed
>
> Server role: ROLE_DOMAIN_MEMBER
>
> Press enter to see a dump of your service definitions
>
> # Global parameters
> [global]
> client min protocol = NT1
> server min protocol = NT1
> client NTLMv2 auth = No
> kerberos method = secrets and keytab
> lanman auth = Yes
> ntlm auth = ntlmv1-permitted
> security = ADS
> workgroup = DOMAIN
> realm = DOMAIN.INTERN
> template homedir = /home/%U
> log file = /var/log/samba/%m.log
> template shell = /bin/bash
> winbind nss info = rfc2307
> winbind offline logon = Yes
> winbind refresh tickets = Yes
> winbind use default domain = Yes
> idmap config * : range = 10000-999999
> idmap config DOMAIN : unix_primary_group = yes
> idmap config DOMAIN : unix_nss_info = yes
> idmap config DOMAIN : schema_mode = rfc2307
> idmap config DOMAIN : backend = rid
> idmap config DOMAIN : range = 2000000-2999999
> idmap config * : backend = tdb
>
>
> [Share]
> case sensitive = Yes
> comment = Share
> create mask = 0644
> directory mask = 0775
> path = /srv/samba/Share
> read only = No
>
> Am Mi., 19. Jan. 2022 um 17:52 Uhr schrieb Rowland Penny via samba <
> samba at lists.samba.org>:
>
>
> Would you mind running the 'testparm' command again, but this time
> without the '-v' ?
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
>
>