Got an Ubuntu 11.10 server. It's a simple apache webserver, and I'm trying to create samba shares so Windows users can access it and drop files on it.
The ubuntu server is successfully joined to my Active Directory domain, and if I run:
wbinfo -u / wbinfo -g I can see all my AD users/groups.
A handful of users are able to access the shares, but almost all cannot. When they try to access the share, it keeps asking for username/pass. I can enter it a thousand times with no avail. If I look at /var/log/samba/log.smbd I get this line:
[2011/12/06 15:43:50.921264, 1] smbd/sesssetup.c:454(reply_spnego_kerberos) Username MYDOMAIN\username is invalid on this system Here is my smb.conf file:
[global]
security = ADS realm = MYDOMAIN.COM password server = ad-server.mydomain.com workgroup = MYDOMAIN winbind refresh tickets = yes idmap uid = 100000-200000 idmap gid = 100000-200000 winbind enum users = yes winbind enum groups = yes template homedir = /home/%D/%U template shell = /bin/bash client use spnego = yes client ntlmv2 auth = yes encrypt passwords = yes winbind use default domain = yes restrict anonymous = 2 [www]
create mask = 0777 directory mask = 0777 browseable = yes writeable = yes path = /www valid users = @"MYDOMAIN\techstaff" administrator [teachers]
create mask = 0777 browseable = yes directory mask = 0777 writeable = yes valid users = @"MYDOMAIN\1 Staff", @"MYDOMAIN\2 Staff", @"MYDOMAIN\3 Staff", @"MYDOMAIN\4 Staff", "MYDOMAIN\Staff" path = /www/teachers [podcast]
writeable = yes create mask = 0777 browseable = yes directory mask = 0777 writeable = yes valid users = @"MYDOMAIN\Podcasters", @"MYDOMAIN\techstaff" path = /www/podcasts [link] [1 comment]