[Pkg-samba-maint] Bug#1001053: can't connect

[Thibault Roulet]

Hi all,

I'm not sure if I have the same issue but from impossible for my users 
to connect the shared folders with samba>4.13.5 from windows desktop.
Password popup is coming back. Everything works fine with samba 4.13.5

I though the last update would fix the issue but nop.


This server is a member of the domain.

Server conf:

[global]

   workgroup = MYDOMAIN
   server string = myserver.corp.com
   realm = MYDOMAIN.corp.com
   security = ADS
   min protocol = SMB2
   client signing = mandatory
   server signing = mandatory
   netbios name = SBFS5

   password server = AD1.MYDOMAIN.corp.com
   wins server = 000.000.15.44

   dedicated keytab file = /etc/krb5.keytab
   kerberos method = secrets and keytab

   hosts allow = 000.000. 000.000. 127. 10.95.

   dns proxy = no
   local master = no
   domain master = no
   log level = 3
   log file = /var/log/samba/log.%I
   max log size = 3000
   template shell = /bin/bash
   winbind use default domain = no

   deadtime = 30

   # winbind settings
   idmap config * : range = 3000 - 8500
   idmap config *: backend = tdb

   idmap config MYDOMAIN: range = 9000 - 9000000
   idmap config MYDOMAIN: backend = ad
   idmap config MYDOMAIN: schema_mode = rfc2307

   panic action = /usr/share/samba/panic-action %d
   passdb backend = tdbsam

   username map = /etc/samba/smbusers
   username map script = /bin/echo
   unix password sync = yes

   domain logons = yes

   load printers = no
   disable spoolss = yes

   usershare allow guests = yes

And by the way, I enabled this dummy "username map script", else, the 
password popup keeps showing too!

In the logs

   check_account: Failed to find local account with UID 3000 for SID 
S-1-5-21-77949841-363743269-439555115-142182 (dom_user[MYDOMAIN\myusername])
[2022/02/16 10:58:52.246885,  2] 
../../source3/auth/auth.c:344(auth_check_ntlm_password)
   check_ntlm_password:  Authentication for user [myusername] -> 
[myusername] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
   Auth: [SMB2,(null)] user [MYDOMAIN]\[myusername] at [Wed, 16 Feb 2022 
10:58:52.246922 CET] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] 
workstation [DESKTOP-KQKF394] remote host [ipv4:xxx.xxx.159.189:50840] 
mapped to [MYDOMAIN]\[myusername]. local host [ipv4:xxx.xxx.241.3:445]
   gensec_spnego_server_negTokenTarg_step: SPNEGO(ntlmssp) login failed: 
NT_STATUS_NO_SUCH_USER

Thanks in advance for your help.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-samba-maint/attachments/20220216/6882d000/attachment.htm>