Hi All,
the Synology support is claiming this bug is the reason for the access
problems via hostname (Kerberos):
https://bugzilla.samba.org/show_bug.cgi?id=14213
These log entries in log.wb-ADNAME are given as evidence:
../../source3/winbindd/winbindd_msrpc.c:307: [2023/06/14
22:13:42.913399, winbind 3, pid=10150] msrpc_sid_to_name
msrpc_sid_to_name: S-1-18-1 f?r Dom?ne ADNAME
../../source3/winbindd/winbindd_msrpc.c:319: [2023/06/14
22:13:42.914370, winbind 2, pid=10150] msrpc_sid_to_name
msrpc_sid_to_name: Die Suche nach sids ist fehlgeschlagen:
NT_STATUS_INVALID_SID
../../source3/winbindd/winbindd_msrpc.c:307: [2023/06/14
22:13:42.914415, winbind 3, pid=10150] msrpc_sid_to_name
msrpc_sid_to_name: S-1-18-1 f?r Dom?ne ADNAME
../../source3/winbindd/winbindd_msrpc.c:319: [2023/06/14
22:13:42.915040, winbind 2, pid=10150] msrpc_sid_to_name
msrpc_sid_to_name: Die Suche nach sids ist fehlgeschlagen:
NT_STATUS_INVALID_SID
("Die Suche nach sids ist fehlgeschlagen" translates "The search
for
sids failed")
They ask me to patch - I think - my DCs.
This only happens on the two Synos which have their interpretation of
Samba 4.15 installed. My member server (4.17.8) works without this
problem. I ask myself, is that a problem in my domain or has this to be
done on the machines which have the problem.
I even created a member server with 4.15 for testing and it works also
without such problems. Also an old Synology DS413 with Samba 4.4.18
(don't laugh) works perfectly, too.
So I would think this patch has to be installed on the machines with the
error.
Maybe someone can shed some light on this bug, so I can react the right
way to this.
Regards
Ingo
https://github.com/WAdama
Ingo Asche via samba schrieb am 24.05.2023 um 09:47:> Hi Travis,
>
> are you still there? ;-)
>
> How are your Synos do? Do have in the mean time installed the actual
> SMBService?
>
> If you have and have with the actual SMBService the same problem as
> before the Beta version there is a workaround:
> In "/usr/local/packages/@appstore/SMBService/usr/lib/samba" you
have
> to change the "libidmap-samba4.so" to the one from the beta
version,
> clear the SMB cache and then it should work again.
>
> Regards
> Ingo
> https://github.com/WAdama
>
> Ingo Asche via samba schrieb am 13.04.2023 um 21:37:
>> Hi Travis,
>>
>> I know, but this is now the released version (4.15.9-0919 beta >
>> 4.15.9-0631), see the history page for SMB-Service:
>>
https://www.synology.com/en-us/releaseNote/SMBService?model=DS918%2B#7_x_series
>>
>>
>> With the beta version it still works. But we can't stay on the beta
>> forever I think.
>>
>> Regards
>> Ingo
>> https://github.com/WAdama
>>
>> Travis Wenks via samba schrieb am 13.04.2023 um 21:29:
>>> The only way I have found to fix that is to enable the beta updates
in
>>> plugins and install the beta version of samba on the Synology.
>>>
>>> Thank you,
>>>
>>>
>>>
>>> Travis Wenks
>>>
>>> Rose City Solutions
>>> Owner
>>> [image: Rose City Skyline Logo]
>>>
>>> * Phone *503.821.7000 <3464881845>
>>>
>>> * Website *rosecitysolutions.com
<https://rosecitysolutions.com>
>>>
>>> * Email * travis at rosecitysolutions.com
>>>
>>>
>>> On Thu, Apr 13, 2023 at 3:42?AM Ingo Asche via samba
>>> <samba at lists.samba.org>
>>> wrote:
>>>
>>>> Hi,
>>>>
>>>> to all of you which are using Synology NAS systems.
>>>>
>>>> With SMB-Service 4.15.9-0631 no longer shares are accessible
via
>>>> domain
>>>> group rights from a Samba 4.17.7 domain.
>>>>
>>>> It seems the same error described in the following mail trails:
>>>> "No longer access to shares after upgrade to 4.17.3"
>>>> "File server joined to a samba domain accessed by windows
10-11
>>>> clients,
>>>> works via ip no via dns name"
>>>>
>>>> I've already openend a ticket with Synology.
>>>>
>>>> So be careful before updating the SMB-Service, maybe test it
first
>>>> on a
>>>> not so important system.
>>>>
>>>> Regard
>>>> Ingo
>>>>
>>>> --
>>>> Regards
>>>> Ingo
>>>> https://github.com/WAdama
>>>>
>>>>
>>>> --
>>>> To unsubscribe from this list go to the following URL and read
the
>>>> instructions:? https://lists.samba.org/mailman/options/samba
>>>>
>>
>>
>
>