I am using Ubuntu (server) with SSSD to join active directory domain. (using
realm join to join the server to the domain)
The only settings (other than shares) I change in smb.conf are the following:
workgroup = MYDOMAIN client signing = yes client use spnego = yes kerberos method = secrets and keytab realm = MYDOMAIN.FQDN security = ads
which enables me to ssh into the server with active directory users and access SMB shares I have created on them.
unfortunately Ubuntu 20 has broken samba, and the service will no longer start with
security = ads being present in the configuration (ssh with AD users still work).
in log.smbd I see the following errors (when trying to start the service with
security = ads):
[2020/08/24 18:28:58.872952, 0] ../../source3/auth/auth_util.c:1384(make_new_session_info_guest) create_local_token failed: NT_STATUS_INVALID_PARAMETER_MIX [2020/08/24 18:28:58.873055, 0] ../../source3/smbd/server.c:2034(main) ERROR: failed to setup guest info.
I have tried making various configuration changes but nothing seems to work. Am I doing something wrong?