NAS Asustor на LDAP и домен IPA.

# See smb.conf.example for a more detailed config file or
# read the smb.conf manpage.
# Run 'testparm' to verify the config is correct after
# you modified it.
#
# Note:
# SMB1 is disabled by default. This means clients without support for SMB2 or
# SMB3 are no longer able to connect to smbd (by default).

[global]
        workgroup = SAMBA
        security = user

        passdb backend = tdbsam

        printing = cups
        printcap name = cups
        load printers = yes
        cups options = raw

        # Install samba-usershares package for support
        include = /etc/samba/usershares.conf

[homes]
        comment = Home Directories
        valid users = %S, %D%w%S
        browseable = No
        read only = No
        inherit acls = Yes

[printers]
        comment = All Printers
        path = /var/tmp
        printable = Yes
        create mask = 0600
        browseable = No

[print$]
        comment = Printer Drivers
        path = /var/lib/samba/drivers
        write list = @printadmin root
        force group = @printadmin
        create mask = 0664
        directory mask = 0775

Unable to acquire sambaNTPassword and sambaPwdLastSet attributes of certain LDAP users, this may be caused by targeted LDAP server's lack of those attributes or insufficient privileges of the Bind DN in use. Samba service may not work properly for these users.

  check_ntlm_password:  Authentication for user [xxx.xxx] -> [xxx.xxx@xxx.xxx] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
[2024/10/02 16:22:52.281069,  2, pid=15138, effective(0, 0), real(0, 0)] ../../auth/auth_log.c:653(log_authentication_event_human_readable)
  Auth: [SMB2,(null)] user [xxx.xxx]\[xxx.xxx] at [Wed, 02 Oct 2024 16:22:52.281052 AST] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [DESKTOP-xxx-xxx] remote host [ipv4:xxx.xxx.xxx.xxx:41252] mapped to [xxx.xxx]\[xxx.xxx@xxx.xxx]. local host [ipv4:192.168.193.2:445] 
[2024/10/02 16:22:52.281104,  3, pid=15138, effective(0, 0), real(0, 0)] ../../source3/auth/auth_util.c:2245(do_map_to_guest_server_info)
  No such user xxx.xxx [xxx.xxx] - using guest account
[2024/10/02 16:22:52.294144,  2, pid=15085, effective(0, 0), real(0, 0)] ../../source3/winbindd/winbindd_rpc.c:301(rpc_name_to_sid)
  name_to_sid: failed to lookup name: NT_STATUS_NONE_MAPPED
[2024/10/02 16:22:52.295338,  2, pid=15085, effective(0, 0), real(0, 0)] ../../source3/winbindd/winbindd_rpc.c:301(rpc_name_to_sid)
  name_to_sid: failed to lookup name: NT_STATUS_NONE_MAPPED
[2024/10/02 16:22:52.297499,  1, pid=15138, effective(0, 0), real(0, 0)] ../../source3/smbd/service.c:369(create_connection_session_info)
  create_connection_session_info: guest user (from session setup) not permitted to access this share (User Homes)
[2024/10/02 16:22:52.297538,  1, pid=15138, effective(0, 0), real(0, 0)] ../../source3/smbd/service.c:659(make_connection_snum)
  create_connection_session_info failed: NT_STATUS_ACCESS_DENIED

[global]
workgroup = WORKGROUP
server string = 
security = USER
display charset = UTF-8
unix charset = UTF-8
encrypt passwords = yes
passdb backend = ldapsam:ldap://xxx.xxx.xxx.xxx
log file = /home/admin/AS_ServiceDebugLog/samba.log
max log size = 20480
socket options = IPTOS_LOWDELAY TCP_NODELAY
oplocks = yes
deadtime = 15
create mask = 0777
directory mask = 0777
guest account = guest
map to guest = Bad User
restrict anonymous = 0
ntlm auth = yes
hide files = /Network Trash Folder/Temporary Items/lost+found/:2e*/
min receivefile size = 0
server max protocol = SMB3
server min protocol = SMB2
server signing = auto
ldap enabled = yes
local master = no
server multi channel support = no
log level = 2 auth:3
ldap suffix = DC=centrikt,DC=lc
ldap admin dn = UID=xxx.xxx.xxx,CN=users,CN=accounts,DC=xxx,DC=xxx
ldap ssl = start tls
ldap domain suffix = @xxx.xxx
ldap user suffix = CN=users,CN=accounts
ldap group suffix = CN=groups,CN=accounts
ldap id offset = 1000000

[Home]
path = /volume1/home/%u
comment = Home directory
browseable = yes
guest ok = no
valid users = "%U","%D\%U"
write list = "%U","%D\%U"
recycle bin = 1
available = yes
nt acl support = no
encrypt status = 0
auto mount = 0
hide = 0
netdrv info = 0
anonymous access = 3
read list = 
invalid users = 

[User Homes]
path = /share/User Homes
comment = All users' home directories
browseable = yes
guest ok = no
available = yes
anonymous access = 3
encrypt status = 0
auto mount = 0
hide = 0
recycle bin = 1
valid users = "root",@"administrators"
read list = 
write list = "root",@"administrators"
invalid users = 

[Public]
path = /volume1/Public
comment = System default share
browseable = yes
available = yes
nt acl support = no
encrypt status = 0
auto mount = 0
hide = 0
recycle bin = 1
netdrv info = 0
anonymous access = 2
valid users = "root","xxx","guest",@"users"
read list = "sysadm","guest"
write list = "root",@"users"
invalid users = 

[Web]
path = /volume1/Web
comment = Web default shared folder
browseable = yes
available = yes
nt acl support = no
encrypt status = 0
auto mount = 0
hide = 0
recycle bin = 1
netdrv info = 0
anonymous access = 3
valid users = "root","xxx","guest",@"administrators"
read list = "sysadm","guest"
write list = "root",@"administrators"
invalid users =