Linux file share setup issues Using Ubuntu 18 LTS, want to use Linux SMB shares at branch offices with AD authentication and file permissions. Client Windows computer is Windows 10 Pro.
Followed information found online.
I am trying to use SSSD for AD join/authentication;Why SSSD over Winbind, "Likewise Open"?
I open Windows Explorer and enter \\servername into the address bar it prompts for credentials. If I enter my AD username and password it says access denied. If I give it a username that exists on the Linux host in the form of .\username then it will allow me to see the share but double-click on the share to see content and it prompts me again for permission and returns the message "\\servername\sharename is not accessible. You might not have permissions to use this network resource".
The local account 'testsmb' is a member of nogroup. File permissions for /srv/samba/share (777): drwxrwxrwx 2 nobody nogroup 4096 Aug 6 17:28 share
# SMB.CONF [global] # Change this to the workgroup/NT-domain name your Samba server will part of workgroup = DOM ... client signing = yes client use spnego = yes kerberos method = secrets and keytab security = ads realm = DOMAIN.LOCAL ... [share] comment = Ubuntu File Server Share path = /srv/samba/share browsable = yes guest ok = yes read only = no create mask = 0755 # testsmb is local account on Linux valid users = "@DOM\Domain Users",testsmb # /etc/sssd/conf.d/sssd.conf [sssd] services = nss, pam config_file_version = 2 domains = DOMAIN.LOCAL [domain/DOMAIN.LOCAL] lookup_family_order = ipv4_only krb5_store_password_if_offline = True id_provider = ad access_provider = ad # access_provider = simple override_homedir = /home/%d/%u simple_allow_users = firstname.lastname@example.org,email@example.com simple_allow_groups = domain users, # Uncomment if the AD domain is named differently than the Samba domain ad_domain = domain.local # /etc/nsswitch.conf passwd: compat systemd sss group: compat systemd sss shadow: compat sss gshadow: files hosts: files dns networks: files protocols: db files services: db files sss ethers: db files rpc: db files netgroup: nis sss sudoers: files sss
Thank you, Jesse.