Hi everyone, I'm requesting your help about an issue i'm faced with since 2 weeks. I've setting up a Solaris Server (Solaris 10 Update 6) with zoning. On a zone I've enable the samba service (samba v 3.0.28).
In my smb.conf, my auth section looks like that : workgroup = Mydomain netbios name = MyComputer server string = MyComputer security = ADS use kerberos keytab = true winbind separator = - winbind use default domain = yes winbind enum users = yes winbind enum groups = yes # winbind cache time = 1800 idmap uid = 100000-200000 idmap gid = 100000-200000 template homedir = /home/%D/%U template shell = /bin/bash client use spnego = yes client NTLMv2 auth = yes password server = MyDC, MyDC2, MyDC3 realm = MyDomain.DOM passdb backend = smbpasswd # encrypt passwords = yes wins support = no wins server = MyDC wins proxy = no dns proxy = no nt acl support = no add user script = /usr/sbin/useradd %u add group script = /usr/sbin/groupadd %g add machine script = /usr/sbin/adduser -n -g machines -c Machine -d /dev/null -s /bin/false %u delete user script = /usr/sbin/userdel %u delete user from group script = /usr/sbin/deluser %u %g delete group script = /usr/sbin/groupdel %g For the shares : [share] path = /partage/%S writable = yes acl check permissions = False vfs objects = zfsacl create mask = 0700 directory mask = 0700 In addition, I have a krb5.conf for kerberos. Everything works fine for me and most of users but some of them can't access some shares. The strange thing is that they are in groups which normally allowed them to. When i exec a wbinfo -r user, I saw them in the right group (the one put on the share) !!! In the log I just see an NT_ACCESS_DENIED without more explanation. So if someone could help ... Thanks, Benjamin-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
