I've set up an Ubuntu 14.04 server, using Samba to share files to our Windows clients. Everything appears to be working correctly, but while checking my auth logs, I see the line 'session closed for user nobody' repeated many many times, though no sessions opened for that user. All of the session opened messages have the correct user name included.
I understand the role of the nobody user, but am unsure why Samba keeps generating this message. On one line the 'session closed' message is repeated 58 times with no other auth log messages interrupting.
Is it likely that Samba is incorrectly configured?
I'm happy to post any logs/confs/outputs necessary, if that helps.
EDIT:
I've previously disabled Samba password sync using pam-auth-update
to stop the 'No Talloc Stackframe' message, like so, could that be generating all of these session closed messages?