Web lists-archives.com

Re: [Samba] Samba 3.6 to 4.x: User Profile Service Failed the Login




On 8/13/2017 2:06 AM, Rowland Penny via samba wrote:
Can you start by posting your smb4.conf, without this we are guessing
what type of server you have.

Rowland

Sure thing. As I stated earlier, except for the two added options (client use spnego and acl allow execute always) it's identical to my Samba 3 config. Also, I've trimmed down things to just an example user as the actual config is over 1K lines.

# Samba 4 config
[global]
     workgroup = BLKG
     server string = PDC
     encrypt passwords = Yes
     null passwords = true
     log level = 2
     max log size = 5000
     socket options = TCP_NODELAY SO_RCVBUF=64240 SO_SNDBUF=64240
     use sendfile = yes
     load printers = no
     wins support = yes
     security = user
     domain master = yes
     local master = yes
     preferred master = yes
     domain logons = yes
     username map = /usr/local/etc/smbusers
     passdb backend = smbpasswd
     hide dot files = yes
     dns proxy = no
     client use spnego = no
     os level = 65
     printing = BSD
     interfaces = 192.168.192.5 127.0.0.0/8
     hosts allow = 192.168.0.0/16
     time server = yes
     logon script = LOGON.bat
     unix password sync = true
     pam password change = no
     passwd chat = *New*Password* %n\n *Retype*Password* %n\n *Changed*
     passwd program = /usr/bin/passwd %u
     acl allow execute always = true
# Try Aio
     aio read size = 16384
     aio write size = 16384
     aio write behind = true
# Weird bug
     client signing = false
# Cut old smbd
     deadtime = 15

[netlogon]
     comment=Netlogon Share
     path=/home/netlogon
     read only  =yes
     write list =@wheel

# A typical user looks like this:
[testuser]
     comment = Test User
     path = /home/testuser
     create mask = 770
     force directory mode = 0770
     force group = testuser
     valid users = testuser,@test
     vfs object = shadow_copy2
     shadow:sort = desc
     shadow:snapdir = .zfs/snapshot
     shadow:format = %Y%m%d%H%M
     shadow:localtime = yes
     writeable = Yes
     csc policy = disable


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba