OMV joined in ActiveDirectory but shares not accessible

decibel83 · May 11th 2018, 5:13pm

Hi,
I installed a new OpenMediaVault system and I joined it into an Active Directory domain (managed by Samba 4 installed on another server) following the guide at Guide how to join OpenMediaVault 3.x in an Active Directory domain.

It worked good and I can browse my AD users in the OVM web interface and in the console:

Source Code

root@fileserv:/# getent passwd my.user
my.user:*:1616401116:1616400513:My User:/home/domain.com/users/my.user:/bin/bash

I correctly see the OVM system listed into the computers in the AD domain.

I configured and activated Samba adding the extra options:

Source Code

password server = *
realm = DOMAIN.COM
dedicated keytab file = FILE:/etc/krb5.keytab
kerberos method = dedicated keytab
security = ads
allow trusted domains = yes
template shell = /bin/bash
template homedir = /home/domain.com/users/%U
# Performance improvements
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
client ntlmv2 auth = yes
client use spnego = yes
obey pam restrictions = yes

Display All

I restarted Samba and it's up and running, but I cannot browse shares from a Windows 10 client joined into the Active Directory domain.
When I try to browse \\fileserv, I get these errors listed in the attached log file.

Can you help me please?

Thank you very much!
Bye

donh · May 11th 2018, 5:52pm

Your user id 1616401116:1616400513 is out of the range of login.defs. You need to edit /etc/login.defs from 60000 to something like UID_MAX 33554431 and for gid.

I am not sure if that guide uses sssd or not. If so look at my sssd.conf in this post. forum.openmediavault.org/index…Directory-LDAP-Revisited/ Or you may be able to set it in smb extras.

decibel83 · May 11th 2018, 6:12pm

donh wrote:

Your user id 1616401116:1616400513 is out of the range of login.defs. You need to edit /etc/login.defs from 60000 to something like UID_MAX 33554431 and for gid.

I already changed this into /etc/login.defs:

Source Code

UID_MAX 2000000000
GID_MAX 2000000000

donh · May 11th 2018, 10:07pm

What version of omv? Can you connect from machines other than win 10?

decibel83 · May 16th 2018, 4:34pm

donh wrote:

What version of omv? Can you connect from machines other than win 10?

OpenMediaVault 4.1.6.

No, I cannot connect from any client.

donh · May 16th 2018, 5:34pm

Try the script in this thread. forum.openmediavault.org/index…Directory-LDAP-Revisited/ What version of ad server?

decibel83 · May 17th 2018, 2:30pm

donh wrote:

Try the script in this thread. forum.openmediavault.org/index…Directory-LDAP-Revisited/ What version of ad server?

Active Directory is managed by a Samba 4.6.7-Ubuntu.

donh · May 17th 2018, 4:22pm

I have not used a samba ad before. If you have an easy guide I may try to setup one in a vm.

I added a thread in the guide you used. Maybe the author will see it and look at it.

Since you have given very few details its hard to help much. Look at this thread maybe. centos.org/forums/viewtopic.php?t=52872

decibel83 · May 17th 2018, 5:49pm

Do you advise me to use winbind instead of sssd?

donh · May 17th 2018, 6:41pm

I am only guessing because I have little to go on. I used to use winbind to connect to windows ad. One person said realmd caused problems and I could not get that working with windows either. Have not tried lately.