I have a strange problem, which I have found no answers for on the web.
I have ubuntu 12.04 LTS with Samba 3.6. 3 (ntp krb5-user smbfs smbclient winbind)
At first everything works fine, groups in AD have the proper file access and user permissions work, except for one anomaly:
There are 2 users with the same first name:
simon folly and simon wally
If I log into Windows as simon wally and try to access his share I get permission denied. When I view samba.log is states:
[2014/03/24 20:39:04.702632, 2] smbd/service.c:627(create_connection_session_info) user 'WINDOMAIN\simon folly' (from session setup) not permitted to access this share (simonw)
As you can see above the wrong username is been authenticated. It's seems it finds the first name from the list and picks that one.
So to test my theory I changed the username in the smb.conf file to "simon folly" and sure enough when logged in as simon wally I have full access to my share ??
Has this happened to anyone and how to fix it ?
Here is my share in smb.conf
note: when I change wally to folly then wally has full access.
otherwise below gets denied.
[simonw]
comment = Simon Only
path = /sharing/ceo
valid users = "WINDOMAIN\simon wally"
force group = "domain users"
writable = yes
read only = no
force create mode = 0660
create mask = 0777
directory mask = 0777
force directory mode = 0770
access based share enum = yes
hide unreadable = yes
thank you in advance for your help :)
valid users
. It should be a comma separated list of usernames, like:valid users = username1, username2, username3 ...
. Take a look at this for more information.