Hi
I have a fresh OMV installation and got the Windows 2012 Active Directory successfully integrated as per this thread. I can see all the users and groups from AD and can assign shares with ACL for AD users.
However, I cannot access the SMB shares from windows 10 clients (who are also the members of the same domain). Tried accessing using \\[omv]\share and it says "We can't sign you in with this credential because your domain isn't available."
This is my smb.conf file
Code
#======================= Global Settings =======================
[global]
workgroup = IDSRU
server string = %h server
dns proxy = no
log level = 2
log file = /var/log/samba/log.%m
max log size = 1000
logging = syslog
panic action = /usr/share/samba/panic-action %d
encrypt passwords = true
passdb backend = tdbsam
obey pam restrictions = no
unix password sync = no
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
pam password change = yes
socket options = TCP_NODELAY IPTOS_LOWDELAY
guest account = nobody
load printers = no
disable spoolss = yes
printing = bsd
printcap name = /dev/null
unix extensions = yes
wide links = no
create mask = 0777
directory mask = 0777
use sendfile = yes
aio read size = 16384
aio write size = 16384
local master = yes
time server = no
wins support = no
security = ads
realm = IDSRU.NET
client signing = yes
client use spnego = yes
kerberos method = secrets and keytab
obey pam restrictions = yes
protocol = SMB3
netbios name = domsvr2
password server = *
encrypt passwords = yes
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = no
idmap config SATAN : backend = rid
idmap config SATAN : range = 1000-999999999999
Idmap config *:backend = tdb
idmap config *:range = 85000-86000
template shell = /bin/sh
lanman auth = no
ntlm auth = yes
client lanman auth = no
client plaintext auth = No
client NTLMv2 auth = Yes
winbind refresh tickets = yes
log level = 3
syslog =3
#======================= Share Definitions =======================
[BS-Lab]
path = /srv/dev-disk-by-label-IDSA/BS-Lab
guest ok = no
read only = no
browseable = yes
inherit acls = yes
inherit permissions = no
ea support = no
store dos attributes = no
vfs objects =
printable = no
create mask = 0664
force create mode = 0664
directory mask = 0775
force directory mode = 0775
hide special files = yes
follow symlinks = yes
hide dot files = yes
valid users = "lee"
invalid users =
read list =
write list = "lee"
Alles anzeigen
Can someone kindly help me
Thanks so much in advance