SMB Login Issue

Question

SMB Login Issue

natangallo opened this issue 2 years ago · 13 comments

Describe the bug
Every user user logs in with no issue using web and afp. Using SMB, only some users are able to log in

To Reproduce
Steps to reproduce the behavior:
User name or password fail after SMB login from windows or mac

Answer 1 · 2022-09-06T18:37:37.000Z

Here are Synology SAMBA Logs

/../source3/auth/auth.c:189: [2022/09/06 20:35:12.973776, auth 3, pid=23413] auth_check_ntlm_password
check_ntlm_password: Checking password for unmapped user [my-domGALLERY][designoffice]@[MACBOOKPRO-6B01] with the new password interface
../../source3/auth/auth.c:192: [2022/09/06 20:35:12.973784, auth 3, pid=23413] auth_check_ntlm_password
check_ntlm_password: mapped user is: [my-domGALLERY][designoffice]@[MACBOOKPRO-6B01]
../../source3/passdb/pdb_ldap.c:646: [2022/09/06 20:35:12.979254, passdb 2, pid=23413] init_sam_from_ldap
init_sam_from_ldap: Entry found for user: designoffice
../../libcli/security/dom_sid.c:213: [2022/09/06 20:35:12.979298, all 3, pid=23413] dom_sid_parse_endp
string_to_sid: SID S-1-5-21-2475342291-1480345137-508597502-5316240366 is not in a valid format
../../source3/passdb/pdb_get_set.c:550: [2022/09/06 20:35:12.979307, passdb 1, pid=23413] pdb_set_user_sid_from_string
pdb_set_user_sid_from_string: S-1-5-21-2475342291-1480345137-508597502-5316240366 isn't a valid SID!
../../source3/passdb/pdb_ldap.c:705: [2022/09/06 20:35:12.979315, passdb 1, pid=23413] init_sam_from_ldap
init_sam_from_ldap: no sambaSID or sambaSID attribute found for this user designoffice
../../source3/passdb/pdb_ldap.c:1804: [2022/09/06 20:35:12.979322, passdb 1, pid=23413] ldapsam_getsampwnam
ldapsam_getsampwnam: init_sam_from_ldap failed for user 'designoffice'!
../../source3/passdb/pdb_interface.c:341: [2022/09/06 20:35:12.979329, syno 3, pid=23413] pdb_getsampwnam
getsampwnam account designoffice fail NT_STATUS_NO_SUCH_USER
../../source3/auth/check_samsec.c:458: [2022/09/06 20:35:12.979350, auth 3, pid=23413] check_sam_security
check_sam_security: Couldn't find user 'designoffice' in passdb.
../../source3/auth/auth.c:361: [2022/09/06 20:35:12.979359, auth 2, pid=23413] auth_check_ntlm_password
check_ntlm_password: Authentication for user [designoffice] -> [designoffice] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
../../auth/auth_log.c:812: [2022/09/06 20:35:12.979380, auth_audit 2, pid=23413] log_authentication_event_human_readable
Auth: [SMB2,(null)] user [my-domGALLERY][designoffice] at [Tue, 06 Sep 2022 20:35:12.979369 CEST] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [MACBOOKPRO-6B01] remote host [ipv4:10.10.10.1:62780] mapped to [my-domGALLERY][designoffice]. local host [ipv4:10.10.10.27:445]
{"timestamp":"2022-09-06T20:35:12.979407+0200","type":"Authentication","Authentication":{"version":{"major":1,"minor":1},"eventId":4625,"logonType":3,"status":"NT_STATUS_NO_SUCH_USER","localAddress":"ipv4:10.10.10.27:445","remoteAddress":"ipv4:10.10.10.1:62780","serviceDescription":"SMB2","authDescription":null,"clientDomain":"my-domGALLERY","clientAccount":"designoffice","workstation":"MACBOOKPRO-6B01","becameAccount":null,"becameDomain":null,"becameSid":null,"mappedAccount":"designoffice","mappedDomain":"my-domGALLERY","netlogonComputer":null,"netlogonTrustAccount":null,"netlogonNegotiateFlags":"0x00000000","netlogonSecureChannelType":0,"netlogonTrustAccountSid":null,"passwordType":"NTLMv2","duration":27243}}
../../source3/auth/auth_util.c:2482: [2022/09/06 20:35:12.979438, auth 3, pid=23413] do_map_to_guest_server_info
No such user designoffice [my-domGALLERY] - using guest account
../../source3/smbd/smb2_server.c:2796: [2022/09/06 20:35:12.979569, syno 3, pid=23413] smbd_smb2_request_dispatch
SMB2: cmd=SMB2_OP_SESSSETUP [NT_STATUS_OK]
../../auth/gensec/spnego.c:1444: [2022/09/06 20:35:12.979593, auth 3, pid=23413] gensec_spnego_server_negTokenTarg_step
gensec_spnego_server_negTokenTarg_step: SPNEGO(ntlmssp) login failed: NT_STATUS_NO_SUCH_USER
../../source3/smbd/smb2_server.c:3228: [2022/09/06 20:35:12.979618, smb2 3, pid=23413] smbd_smb2_request_error_ex
smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_LOGON_FAILURE] || at ../../source3/smbd/smb2_sesssetup.c:148
my-domadmin@my-domGALLERY:/$

Answer 2 · 2022-09-06T20:16:01.000Z

This bug (SID XXX is not in a valid format) should be fixed since v1.8.0. Are you using the latest version?

Answer 3 · 2022-09-07T20:15:22.000Z

Sorry, last question. Is there a workaround that can be applied? Il giorno mer 7 set 2022 alle 00:22 Natan ***@***.***> ha scritto:

Hi, Thanks for your reply. Yes, im using the latest. Maybe downgrading ? Was already a know issue? Bests Il giorno mar 6 set 2022 alle 22:16 ahaenggli ***@***.***> ha scritto: > This bug (SID XXX is not in a valid format) should be fixed since v1.8.0. > Are you using the latest version? > > — > Reply to this email directly, view it on GitHub > <#32 (comment)>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AJK62T7PRDWB72PNP6GP2ZLV46RAXANCNFSM6AAAAAAQGCNDRU> > . > You are receiving this because you authored the thread.Message ID: > ***@***.***> > -- Natanaele Gallo | Technical Support REKORDATA TORINO, Via San Paolo, 1 10100 | Tel. 800.011445 | 011.19748100 - Int. 412

-- Natanaele Gallo | Technical Support REKORDATA TORINO, Via San Paolo, 1 10100 | Tel. 800.011445 | 011.19748100 - Int. 412

Answer 4 · 2022-09-07T21:06:34.000Z

Strange... Maybe I mixed up a variable somewhere... Actually, SIDs for users starting with S-1-5-21-2475342291-1480345137-508597502 (config) should no longer appear since v1.8.0.
Could you try setting the environment variable LDAP_SAMBA_USEAZURESID to true? Maybe that works as a workaround.

Answer 5 · 2022-09-14T11:58:25.000Z

the workaround does not work

Answer 6 · 2022-09-18T13:40:00.000Z

That's a bit strange... Do you have any entry in the azure.json file (can be found in the mapped volume) for the sambaSID attribute that doesn't start with S-1-5-21-2475342291-1480345137-508597502 ?

Answer 7 · 2022-09-19T07:38:23.000Z

Thanks for your answer. I need to enable mapped volume first. I’ll let you know any updates on my finding. Il giorno dom 18 set 2022 alle 15:40 ahaenggli ***@***.***> ha scritto:

That's a bit strange... Do you have any entry in the azure.json file (can be found in the mapped volume) for the sambaSID attribute that doesn't start with S-1-5-21-2475342291-1480345137-508597502 ? — Reply to this email directly, view it on GitHub <#32 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AJK62T3INS3DNGOEACOAGDDV64LTVANCNFSM6AAAAAAQGCNDRU> . You are receiving this because you authored the thread.Message ID: ***@***.***>

-- Natanaele Gallo | Technical Support REKORDATA TORINO, Via San Paolo, 1 10100 | Tel. 800.011445 | 011.19748100 - Int. 412

Answer 8 · 2022-09-25T17:52:49.000Z

Without a mapped volume there are sometimes problems with the cache. e.g. the whole cache is missing after each update and so all users would have to log in again normally before they could use smb. In the latest version (v1.8.2) a message should appear if the wrapper is used without a mapped volume. In addition, the version number is now displayed at startup, so you can check whether the latest version is really being used.

Answer 9 · 2022-09-26T14:22:22.000Z

ahaenggli, It's working now. So, now, again to the crucial point. I've updated the image and now I have the 1.8.2 version. The login issues for some users are still there! Thanking you for your time, I would like to send you smb logs, azure.json file and docker log again. Let me know if you find something useful, because for example, for user "barlafante", i receive a new error message, not anymore related to SMBID. Thankyou, and have a nice day. *Natan Gallo* | Technical Support Il giorno dom 25 set 2022 alle ore 19:53 ahaenggli ***@***.***> ha scritto:

…

Without a mapped volume there are sometimes problems with the cache. e.g. the whole cache is missing after each update and so all users would have to log in again normally before they could use smb. In the latest version (v1.8.2) a message should appear if the wrapper is used without a mapped volume. In addition, the version number is now displayed at startup, so you can check whether the latest version is really being used. [image: grafik] <https://user-images.githubusercontent.com/23347180/192157813-2d80efa8-833f-4563-bd03-424375ad90c9.png> — Reply to this email directly, view it on GitHub <#32 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AJK62T22NUWUBRRHAGFZ7GLWACGPZANCNFSM6AAAAAAQGCNDRU> . You are receiving this because you authored the thread.Message ID: ***@***.***>

Answer 10 · 2022-10-11T06:59:10.000Z

Hi, Thanks for your reply. Yes, im using the latest. Maybe downgrading ? Was already a know issue? Bests Il giorno mar 6 set 2022 alle 22:16 ahaenggli ***@***.***> ha scritto:

This bug (SID XXX is not in a valid format) should be fixed since v1.8.0. Are you using the latest version? — Reply to this email directly, view it on GitHub <#32 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AJK62T7PRDWB72PNP6GP2ZLV46RAXANCNFSM6AAAAAAQGCNDRU> . You are receiving this because you authored the thread.Message ID: ***@***.***>

-- Natanaele Gallo | Technical Support REKORDATA TORINO, Via San Paolo, 1 10100 | Tel. 800.011445 | 011.19748100 - Int. 412

Answer 11 · 2022-10-11T07:05:20.000Z

I'm receiving this error, when mapping in the docker shared folder ERROR: 2022-09-19T14:34:32.694Z: helper.js [Error: EACCES: permission denied, open './.cache/users.json'] { stdout 16:34:32 errno: -13, stdout 16:34:32 code: 'EACCES', stdout 16:34:32 syscall: 'open', stdout 16:34:32 path: './.cache/users.json' stdout 16:34:32 } stdout 16:34:32 ERROR: 2022-09-19T14:34:32.694Z: helper.js error in SaveJSONtoFile for file ./.cache/azure.json stdout 16:34:32 ERROR: 2022-09-19T14:34:32.694Z: helper.js [Error: EACCES: permission denied, open './.cache/azure.json'] { stdout 16:34:32 errno: -13, stdout 16:34:32 code: 'EACCES', stdout 16:34:32 syscall: 'open', stdout 16:34:32 path: './.cache/azure.json' stdout 16:34:32 } *Natan Gallo* | Technical Support Il giorno lun 19 set 2022 alle ore 09:38 Natan ***@***.***> ha scritto:

…

Thanks for your answer. I need to enable mapped volume first. I’ll let you know any updates on my finding. Il giorno dom 18 set 2022 alle 15:40 ahaenggli ***@***.***> ha scritto: > That's a bit strange... Do you have any entry in the azure.json file (can > be found in the mapped volume) for the sambaSID attribute that doesn't > start with S-1-5-21-2475342291-1480345137-508597502 ? > > — > Reply to this email directly, view it on GitHub > <#32 (comment)>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AJK62T3INS3DNGOEACOAGDDV64LTVANCNFSM6AAAAAAQGCNDRU> > . > You are receiving this because you authored the thread.Message ID: > ***@***.***> > -- Natanaele Gallo | Technical Support REKORDATA TORINO, Via San Paolo, 1 10100 | Tel. 800.011445 | 011.19748100 - Int. 412

Answer 12 · 2022-10-11T08:36:22.000Z

Hi Ahaenggli Done, no change on the issue behaviour. Thank you. very much for your help. Your supporto very appreciated. Attached you will find the wrapper and smb full logs, Maybe you will find something more Bests *Natan Gallo* | Technical Support Il giorno mer 7 set 2022 alle ore 23:06 ahaenggli ***@***.***> ha scritto:

Strange... Maybe I mixed up a variable somewhere... Actually, SIDs for users starting with S-1-5-21-2475342291-1480345137-508597502 (config <https://github.com/ahaenggli/AzureAD-LDAP-wrapper/blob/main/config.js#L21>) should no longer appear since v1.8.0. Could you try setting the environment variable LDAP_SAMBA_USEAZURESID to true? Maybe that works as a workaround. — Reply to this email directly, view it on GitHub <#32 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AJK62T4GNVHLLW7RZMVN7UDV5D7WJANCNFSM6AAAAAAQGCNDRU> . You are receiving this because you authored the thread.Message ID: ***@***.***>

../../source3/passdb/pdb_syno_multisam.c:531: [2022/09/08 10:44:16.615062, (custom) 2, pid=7125] multisam_init Found entry point. Loading multisam backend 0: smbpasswd ../../source3/passdb/pdb_syno_multisam.c:531: [2022/09/08 10:44:16.615118, (custom) 2, pid=7125] multisam_init Found entry point. Loading multisam backend 1: ldapsam ../../source3/passdb/pdb_ldap_util.c:281: [2022/09/08 10:44:16.615364, all 2, pid=7125] smbldap_search_domain_info smbldap_search_domain_info: Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=MYDOMAIN))] ../../source3/lib/smbldap.c:868: [2022/09/08 10:44:16.615472, all 2, pid=7125] smbldap_open_connection smbldap_open_connection: connection opened ../../source3/lib/smbldap.c:1090: [2022/09/08 10:44:16.657094, all 3, pid=7125] smbldap_connect_system ldap_connect_system: successful connection to the LDAP server ../../lib/util/access.c:369: [2022/09/08 10:44:16.698552, all 1, pid=7125] allow_access Allowed connection from 10.10.10.11 (10.10.10.11) ../../source3/smbd/oplock.c:1422: [2022/09/08 10:44:16.698652, locking 3, pid=7125] init_oplocks init_oplocks: initializing messages. ../../source3/smbd/process.c:1961: [2022/09/08 10:44:16.698702, all 3, pid=7125] process_smb Transaction 0 of length 73 (0 toread) ../../source3/smbd/process.c:1554: [2022/09/08 10:44:16.698719, all 3, pid=7125] switch_message switch message SMBnegprot (pid 7125) conn 0x0 ../../source3/smbd/negprot.c:646: [2022/09/08 10:44:16.701396, all 3, pid=7125] reply_negprot Requested protocol [NT LM 0.12] ../../source3/smbd/negprot.c:646: [2022/09/08 10:44:16.701418, all 3, pid=7125] reply_negprot Requested protocol [SMB 2.002] ../../source3/smbd/negprot.c:646: [2022/09/08 10:44:16.701425, all 3, pid=7125] reply_negprot Requested protocol [SMB 2.???] ../../source3/smbd/smb2_negprot.c:296: [2022/09/08 10:44:16.701496, smb2 3, pid=7125] smbd_smb2_request_process_negprot Selected protocol SMB2_FF ../../source3/auth/auth_generic.c:322: [2022/09/08 10:44:16.701524, syno 3, pid=7125] auth_generic_prepare make_auth_context_subsystem [NT_STATUS_OK] ../../auth/gensec/gensec_start.c:977: [2022/09/08 10:44:16.703230, auth 3, pid=7125] gensec_register GENSEC backend 'gssapi_spnego' registered ../../auth/gensec/gensec_start.c:977: [2022/09/08 10:44:16.703249, auth 3, pid=7125] gensec_register GENSEC backend 'gssapi_krb5' registered ../../auth/gensec/gensec_start.c:977: [2022/09/08 10:44:16.703259, auth 3, pid=7125] gensec_register GENSEC backend 'gssapi_krb5_sasl' registered ../../auth/gensec/gensec_start.c:977: [2022/09/08 10:44:16.703266, auth 3, pid=7125] gensec_register GENSEC backend 'spnego' registered ../../auth/gensec/gensec_start.c:977: [2022/09/08 10:44:16.703272, auth 3, pid=7125] gensec_register GENSEC backend 'schannel' registered ../../auth/gensec/gensec_start.c:977: [2022/09/08 10:44:16.703279, auth 3, pid=7125] gensec_register GENSEC backend 'naclrpc_as_system' registered ../../auth/gensec/gensec_start.c:977: [2022/09/08 10:44:16.703285, auth 3, pid=7125] gensec_register GENSEC backend 'sasl-EXTERNAL' registered ../../auth/gensec/gensec_start.c:977: [2022/09/08 10:44:16.703298, auth 3, pid=7125] gensec_register GENSEC backend 'ntlmssp' registered ../../auth/gensec/gensec_start.c:977: [2022/09/08 10:44:16.703304, auth 3, pid=7125] gensec_register GENSEC backend 'ntlmssp_resume_ccache' registered ../../auth/gensec/gensec_start.c:977: [2022/09/08 10:44:16.703310, auth 3, pid=7125] gensec_register GENSEC backend 'http_basic' registered ../../auth/gensec/gensec_start.c:977: [2022/09/08 10:44:16.703316, auth 3, pid=7125] gensec_register GENSEC backend 'http_ntlm' registered ../../auth/gensec/gensec_start.c:977: [2022/09/08 10:44:16.703322, auth 3, pid=7125] gensec_register GENSEC backend 'http_negotiate' registered ../../auth/gensec/gensec_start.c:977: [2022/09/08 10:44:16.703328, auth 3, pid=7125] gensec_register GENSEC backend 'krb5' registered ../../auth/gensec/gensec_start.c:977: [2022/09/08 10:44:16.703334, auth 3, pid=7125] gensec_register GENSEC backend 'fake_gssapi_krb5' registered ../../source3/auth/auth_generic.c:453: [2022/09/08 10:44:16.703388, syno 3, pid=7125] auth_generic_prepare gensec_set_remote_address: [NT_STATUS_OK] ../../source3/smbd/smb2_server.c:2796: [2022/09/08 10:44:16.703466, syno 3, pid=7125] smbd_smb2_request_dispatch SMB2: cmd=SMB2_OP_NEGPROT [NT_STATUS_OK] ../../source3/smbd/negprot.c:812: [2022/09/08 10:44:16.703482, all 3, pid=7125] reply_negprot Selected protocol SMB 2.??? ../../source3/smbd/smb2_negprot.c:296: [2022/09/08 10:44:16.703806, smb2 3, pid=7125] smbd_smb2_request_process_negprot Selected protocol SMB3_02 ../../source3/auth/auth_generic.c:322: [2022/09/08 10:44:16.703833, syno 3, pid=7125] auth_generic_prepare make_auth_context_subsystem [NT_STATUS_OK] ../../source3/auth/auth_generic.c:453: [2022/09/08 10:44:16.703878, syno 3, pid=7125] auth_generic_prepare gensec_set_remote_address: [NT_STATUS_OK] ../../source3/smbd/smb2_server.c:2796: [2022/09/08 10:44:16.703969, syno 3, pid=7125] smbd_smb2_request_dispatch SMB2: cmd=SMB2_OP_NEGPROT [NT_STATUS_OK] ../../source3/smbd/smb2_sesssetup.c:824: [2022/09/08 10:44:16.742512, syno 3, pid=7125] smbd_smb2_session_setup_send in_session_id 0 ../../source3/auth/auth_generic.c:322: [2022/09/08 10:44:16.742704, syno 3, pid=7125] auth_generic_prepare make_auth_context_subsystem [NT_STATUS_OK] ../../source3/auth/auth_generic.c:453: [2022/09/08 10:44:16.742754, syno 3, pid=7125] auth_generic_prepare gensec_set_remote_address: [NT_STATUS_OK] ../../source3/smbd/smb2_sesssetup.c:881: [2022/09/08 10:44:16.742763, syno 3, pid=7125] smbd_smb2_session_setup_send auth_generic_prepare [NT_STATUS_OK] ../../auth/ntlmssp/ntlmssp_util.c:72: [2022/09/08 10:44:16.742810, auth 3, pid=7125] debug_ntlmssp_flags Got NTLMSSP neg_flags=0x62888215 ../../source3/smbd/smb2_server.c:2796: [2022/09/08 10:44:16.742864, syno 3, pid=7125] smbd_smb2_request_dispatch SMB2: cmd=SMB2_OP_SESSSETUP [NT_STATUS_OK] ../../source3/smbd/smb2_sesssetup.c:824: [2022/09/08 10:44:16.745755, syno 3, pid=7125] smbd_smb2_session_setup_send in_session_id 4210566863 ../../auth/ntlmssp/ntlmssp_server.c:556: [2022/09/08 10:44:16.745795, auth 3, pid=7125] ntlmssp_server_preauth Got user=[MYUSER] domain=[MYLDAPSRV] workstation=[MYCLIENT] len1=24 len2=232 ../../source3/param/loadparm.c:4826: [2022/09/08 10:44:16.745821, all 3, pid=7125] lp_load_ex lp_load_ex: refreshing parameters ../../source3/param/loadparm.c:1069: [2022/09/08 10:44:16.745868, all 3, pid=7125] init_globals Initialising global parameters ../../lib/param/loadparm.c:1895: [2022/09/08 10:44:16.746395, all 1, pid=7125] lpcfg_do_global_parameter WARNING: The "ldap ssl ads" option is deprecated ../../source3/param/loadparm.c:757: [2022/09/08 10:44:16.746457, syno 3, pid=7125] SynoLoadCustomizeConfs Cannot opendir for custom conf ../../source3/param/loadparm.c:3610: [2022/09/08 10:44:16.746477, all 3, pid=7125] lp_do_section Processing section "[global]" ../../source3/param/loadparm.c:3165: [2022/09/08 10:44:16.746506, all 2, pid=7125] lp_include Can't find include file /var/tmp/nginx/smb.netbios.aliases.conf ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.746884, all 2, pid=7125] lp_do_section Processing section "[1 Amministrazione]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.747034, all 2, pid=7125] lp_do_section Processing section "[2 Gestione Artisti]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.747169, all 2, pid=7125] lp_do_section Processing section "[3 Gestione galleria]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.747290, all 2, pid=7125] lp_do_section Processing section "[4 Varie]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.747394, all 2, pid=7125] lp_do_section Processing section "[5 Satelliti]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.747496, all 2, pid=7125] lp_do_section Processing section "[6 Software]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.747597, all 2, pid=7125] lp_do_section Processing section "[7 Gestione generale]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.747699, all 2, pid=7125] lp_do_section Processing section "[Autorizzazioni]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.747800, all 2, pid=7125] lp_do_section Processing section "[Cartella PictureBank]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.747923, all 2, pid=7125] lp_do_section Processing section "[Condivisapro]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.748031, all 2, pid=7125] lp_do_section Processing section "[docker]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.748137, all 2, pid=7125] lp_do_section Processing section "[FTP]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.748257, all 2, pid=7125] lp_do_section Processing section "[NetBackup]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.748359, all 2, pid=7125] lp_do_section Processing section "[People]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.748479, all 2, pid=7125] lp_do_section Processing section "[Piece Unique]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.748584, all 2, pid=7125] lp_do_section Processing section "[ScanXerox]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.748689, all 2, pid=7125] lp_do_section Processing section "[Shared Images]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.748806, all 2, pid=7125] lp_do_section Processing section "[SIAE]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.748930, all 2, pid=7125] lp_do_section Processing section "[Transfer]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.749037, all 2, pid=7125] lp_do_section Processing section "[_BRIDGE]" ../../source3/param/loadparm.c:4927: [2022/09/08 10:44:16.749145, syno 1, pid=7125] lp_load_ex /etc/samba/smb.reserved.conf not found ../../source3/param/loadparm.c:2312: [2022/09/08 10:44:16.749164, all 3, pid=7125] lp_add_ipc adding IPC service ../../source3/param/loadparm.c:757: [2022/09/08 10:44:16.749321, syno 3, pid=7125] SynoLoadCustomizeConfs Cannot opendir for custom conf ../../source3/auth/auth.c:189: [2022/09/08 10:44:16.749413, auth 3, pid=7125] auth_check_ntlm_password check_ntlm_password: Checking password for unmapped user ***@***.*** with the new password interface ../../source3/auth/auth.c:192: [2022/09/08 10:44:16.749424, auth 3, pid=7125] auth_check_ntlm_password check_ntlm_password: mapped user is: ***@***.*** ../../source3/passdb/pdb_ldap.c:646: [2022/09/08 10:44:16.755564, passdb 2, pid=7125] init_sam_from_ldap init_sam_from_ldap: Entry found for user: MYUSER ../../libcli/security/dom_sid.c:213: [2022/09/08 10:44:16.755597, all 3, pid=7125] dom_sid_parse_endp string_to_sid: SID S-1-5-21-2475342291-1480345137-508597502-5491716068 is not in a valid format ../../source3/passdb/pdb_get_set.c:550: [2022/09/08 10:44:16.755611, passdb 1, pid=7125] pdb_set_user_sid_from_string pdb_set_user_sid_from_string: S-1-5-21-2475342291-1480345137-508597502-5491716068 isn't a valid SID! ../../source3/passdb/pdb_ldap.c:705: [2022/09/08 10:44:16.755626, passdb 1, pid=7125] init_sam_from_ldap init_sam_from_ldap: no sambaSID or sambaSID attribute found for this user MYUSER ../../source3/passdb/pdb_ldap.c:1804: [2022/09/08 10:44:16.755633, passdb 1, pid=7125] ldapsam_getsampwnam ldapsam_getsampwnam: init_sam_from_ldap failed for user 'MYUSER'! ../../source3/passdb/pdb_interface.c:341: [2022/09/08 10:44:16.755641, syno 3, pid=7125] pdb_getsampwnam getsampwnam account MYUSER fail NT_STATUS_NO_SUCH_USER ../../source3/auth/check_samsec.c:458: [2022/09/08 10:44:16.755657, auth 3, pid=7125] check_sam_security check_sam_security: Couldn't find user 'MYUSER' in passdb. ../../source3/auth/auth.c:361: [2022/09/08 10:44:16.755666, auth 2, pid=7125] auth_check_ntlm_password check_ntlm_password: Authentication for user [MYUSER] -> [MYUSER] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1 ../../auth/auth_log.c:812: [2022/09/08 10:44:16.755685, auth_audit 2, pid=7125] log_authentication_event_human_readable Auth: [SMB2,(null)] user [MYLDAPSRV]\[MYUSER] at [Thu, 08 Sep 2022 10:44:16.755676 CEST] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [MYCLIENT] remote host [ipv4:10.10.10.11:52887] mapped to [MYLDAPSRV]\[MYUSER]. local host [ipv4:10.10.10.27:445] {"timestamp":"2022-09-08T10:44:16.755754+0200","type":"Authentication","Authentication":{"version":{"major":1,"minor":1},"eventId":4625,"logonType":3,"status":"NT_STATUS_NO_SUCH_USER","localAddress":"ipv4:10.10.10.27:445","remoteAddress":"ipv4:10.10.10.11:52887","serviceDescription":"SMB2","authDescription":null,"clientDomain":"MYLDAPSRV","clientAccount":"MYUSER","workstation":"MYCLIENT","becameAccount":null,"becameDomain":null,"becameSid":null,"mappedAccount":"MYUSER","mappedDomain":"MYLDAPSRV","netlogonComputer":null,"netlogonTrustAccount":null,"netlogonNegotiateFlags":"0x00000000","netlogonSecureChannelType":0,"netlogonTrustAccountSid":null,"passwordType":"NTLMv2","duration":13058}} ../../source3/auth/auth_util.c:2482: [2022/09/08 10:44:16.755795, auth 3, pid=7125] do_map_to_guest_server_info No such user MYUSER [MYLDAPSRV] - using guest account ../../source3/smbd/smb2_server.c:2796: [2022/09/08 10:44:16.755962, syno 3, pid=7125] smbd_smb2_request_dispatch SMB2: cmd=SMB2_OP_SESSSETUP [NT_STATUS_OK] ../../auth/gensec/spnego.c:1444: [2022/09/08 10:44:16.755982, auth 3, pid=7125] gensec_spnego_server_negTokenTarg_step gensec_spnego_server_negTokenTarg_step: SPNEGO(ntlmssp) login failed: NT_STATUS_NO_SUCH_USER ../../source3/smbd/smb2_server.c:3228: [2022/09/08 10:44:16.756005, smb2 3, pid=7125] smbd_smb2_request_error_ex smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_LOGON_FAILURE] || at ../../source3/smbd/smb2_sesssetup.c:148 ../../source3/smbd/smb2_sesssetup.c:824: [2022/09/08 10:44:16.759575, syno 3, pid=7125] smbd_smb2_session_setup_send in_session_id 0 ../../source3/auth/auth_generic.c:322: [2022/09/08 10:44:16.759690, syno 3, pid=7125] auth_generic_prepare make_auth_context_subsystem [NT_STATUS_OK] ../../source3/auth/auth_generic.c:453: [2022/09/08 10:44:16.759738, syno 3, pid=7125] auth_generic_prepare gensec_set_remote_address: [NT_STATUS_OK] ../../source3/smbd/smb2_sesssetup.c:881: [2022/09/08 10:44:16.759747, syno 3, pid=7125] smbd_smb2_session_setup_send auth_generic_prepare [NT_STATUS_OK] ../../auth/ntlmssp/ntlmssp_util.c:72: [2022/09/08 10:44:16.759789, auth 3, pid=7125] debug_ntlmssp_flags Got NTLMSSP neg_flags=0x62888215 ../../source3/smbd/smb2_server.c:2796: [2022/09/08 10:44:16.759824, syno 3, pid=7125] smbd_smb2_request_dispatch SMB2: cmd=SMB2_OP_SESSSETUP [NT_STATUS_OK] ../../source3/smbd/smb2_sesssetup.c:824: [2022/09/08 10:44:16.761019, syno 3, pid=7125] smbd_smb2_session_setup_send in_session_id 3181666257 ../../auth/ntlmssp/ntlmssp_server.c:556: [2022/09/08 10:44:16.761059, auth 3, pid=7125] ntlmssp_server_preauth Got user=[MYUSER] domain=[MYLDAPSRV] workstation=[MYCLIENT] len1=24 len2=232 ../../source3/param/loadparm.c:4826: [2022/09/08 10:44:16.761088, all 3, pid=7125] lp_load_ex lp_load_ex: refreshing parameters ../../source3/param/loadparm.c:1069: [2022/09/08 10:44:16.761126, all 3, pid=7125] init_globals Initialising global parameters ../../lib/param/loadparm.c:1895: [2022/09/08 10:44:16.761570, all 1, pid=7125] lpcfg_do_global_parameter WARNING: The "ldap ssl ads" option is deprecated ../../source3/param/loadparm.c:757: [2022/09/08 10:44:16.761630, syno 3, pid=7125] SynoLoadCustomizeConfs Cannot opendir for custom conf ../../source3/param/loadparm.c:3610: [2022/09/08 10:44:16.761649, all 3, pid=7125] lp_do_section Processing section "[global]" ../../source3/param/loadparm.c:3165: [2022/09/08 10:44:16.761678, all 2, pid=7125] lp_include Can't find include file /var/tmp/nginx/smb.netbios.aliases.conf ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.762051, all 2, pid=7125] lp_do_section Processing section "[1 Amministrazione]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.762170, all 2, pid=7125] lp_do_section Processing section "[2 Gestione Artisti]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.762296, all 2, pid=7125] lp_do_section Processing section "[3 Gestione galleria]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.762398, all 2, pid=7125] lp_do_section Processing section "[4 Varie]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.762500, all 2, pid=7125] lp_do_section Processing section "[5 Satelliti]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.762600, all 2, pid=7125] lp_do_section Processing section "[6 Software]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.762701, all 2, pid=7125] lp_do_section Processing section "[7 Gestione generale]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.762802, all 2, pid=7125] lp_do_section Processing section "[Autorizzazioni]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.762924, all 2, pid=7125] lp_do_section Processing section "[Cartella PictureBank]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.763031, all 2, pid=7125] lp_do_section Processing section "[Condivisapro]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.763136, all 2, pid=7125] lp_do_section Processing section "[docker]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.763255, all 2, pid=7125] lp_do_section Processing section "[FTP]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.763355, all 2, pid=7125] lp_do_section Processing section "[NetBackup]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.763455, all 2, pid=7125] lp_do_section Processing section "[People]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.763555, all 2, pid=7125] lp_do_section Processing section "[Piece Unique]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.763655, all 2, pid=7125] lp_do_section Processing section "[ScanXerox]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.763755, all 2, pid=7125] lp_do_section Processing section "[Shared Images]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.763854, all 2, pid=7125] lp_do_section Processing section "[SIAE]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.763976, all 2, pid=7125] lp_do_section Processing section "[Transfer]" ../../source3/param/loadparm.c:3627: [2022/09/08 10:44:16.764081, all 2, pid=7125] lp_do_section Processing section "[_BRIDGE]" ../../source3/param/loadparm.c:4927: [2022/09/08 10:44:16.764189, syno 1, pid=7125] lp_load_ex /etc/samba/smb.reserved.conf not found ../../source3/param/loadparm.c:2312: [2022/09/08 10:44:16.764223, all 3, pid=7125] lp_add_ipc adding IPC service ../../source3/param/loadparm.c:757: [2022/09/08 10:44:16.764348, syno 3, pid=7125] SynoLoadCustomizeConfs Cannot opendir for custom conf ../../source3/auth/auth.c:189: [2022/09/08 10:44:16.764367, auth 3, pid=7125] auth_check_ntlm_password check_ntlm_password: Checking password for unmapped user ***@***.*** with the new password interface ../../source3/auth/auth.c:192: [2022/09/08 10:44:16.764379, auth 3, pid=7125] auth_check_ntlm_password check_ntlm_password: mapped user is: ***@***.*** ../../source3/passdb/pdb_ldap.c:646: [2022/09/08 10:44:16.809076, passdb 2, pid=7125] init_sam_from_ldap init_sam_from_ldap: Entry found for user: MYUSER ../../libcli/security/dom_sid.c:213: [2022/09/08 10:44:16.809108, all 3, pid=7125] dom_sid_parse_endp string_to_sid: SID S-1-5-21-2475342291-1480345137-508597502-5491716068 is not in a valid format ../../source3/passdb/pdb_get_set.c:550: [2022/09/08 10:44:16.809116, passdb 1, pid=7125] pdb_set_user_sid_from_string pdb_set_user_sid_from_string: S-1-5-21-2475342291-1480345137-508597502-5491716068 isn't a valid SID! ../../source3/passdb/pdb_ldap.c:705: [2022/09/08 10:44:16.809123, passdb 1, pid=7125] init_sam_from_ldap init_sam_from_ldap: no sambaSID or sambaSID attribute found for this user MYUSER ../../source3/passdb/pdb_ldap.c:1804: [2022/09/08 10:44:16.809129, passdb 1, pid=7125] ldapsam_getsampwnam ldapsam_getsampwnam: init_sam_from_ldap failed for user 'MYUSER'! ../../source3/passdb/pdb_interface.c:341: [2022/09/08 10:44:16.809136, syno 3, pid=7125] pdb_getsampwnam getsampwnam account MYUSER fail NT_STATUS_NO_SUCH_USER ../../source3/auth/check_samsec.c:458: [2022/09/08 10:44:16.809150, auth 3, pid=7125] check_sam_security check_sam_security: Couldn't find user 'MYUSER' in passdb. ../../source3/auth/auth.c:361: [2022/09/08 10:44:16.809158, auth 2, pid=7125] auth_check_ntlm_password check_ntlm_password: Authentication for user [MYUSER] -> [MYUSER] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1 ../../auth/auth_log.c:812: [2022/09/08 10:44:16.809175, auth_audit 2, pid=7125] log_authentication_event_human_readable Auth: [SMB2,(null)] user [MYLDAPSRV]\[MYUSER] at [Thu, 08 Sep 2022 10:44:16.809166 CEST] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [MYCLIENT] remote host [ipv4:10.10.10.11:52887] mapped to [MYLDAPSRV]\[MYUSER]. local host [ipv4:10.10.10.27:445] {"timestamp":"2022-09-08T10:44:16.809200+0200","type":"Authentication","Authentication":{"version":{"major":1,"minor":1},"eventId":4625,"logonType":3,"status":"NT_STATUS_NO_SUCH_USER","localAddress":"ipv4:10.10.10.27:445","remoteAddress":"ipv4:10.10.10.11:52887","serviceDescription":"SMB2","authDescription":null,"clientDomain":"MYLDAPSRV","clientAccount":"MYUSER","workstation":"MYCLIENT","becameAccount":null,"becameDomain":null,"becameSid":null,"mappedAccount":"MYUSER","mappedDomain":"MYLDAPSRV","netlogonComputer":null,"netlogonTrustAccount":null,"netlogonNegotiateFlags":"0x00000000","netlogonSecureChannelType":0,"netlogonTrustAccountSid":null,"passwordType":"NTLMv2","duration":49516}} ../../source3/auth/auth_util.c:2482: [2022/09/08 10:44:16.809227, auth 3, pid=7125] do_map_to_guest_server_info No such user MYUSER [MYLDAPSRV] - using guest account ../../source3/smbd/smb2_server.c:2796: [2022/09/08 10:44:16.809328, syno 3, pid=7125] smbd_smb2_request_dispatch SMB2: cmd=SMB2_OP_SESSSETUP [NT_STATUS_OK] ../../auth/gensec/spnego.c:1444: [2022/09/08 10:44:16.809347, auth 3, pid=7125] gensec_spnego_server_negTokenTarg_step gensec_spnego_server_negTokenTarg_step: SPNEGO(ntlmssp) login failed: NT_STATUS_NO_SUCH_USER ../../source3/smbd/smb2_server.c:3228: [2022/09/08 10:44:16.809368, smb2 3, pid=7125] smbd_smb2_request_error_ex smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_LOGON_FAILURE] || at ../../source3/smbd/smb2_sesssetup.c:148

Answer 13 · 2022-10-11T13:57:12.000Z

I think the answers via email got a bit mixed up. What are the current problems?

For "barlafante", are you getting a new error message? What is the error message? Is the error in the docker log or in the samba log?
You wanted to add attachments, maybe this only works if you enter a comment via web and not as a reply via email.
Error: EACCES: permission; Does this message occur regularly? Have you changed the folder permissions on the NAS? With each container restart, the owner should be set correctly and the error should disappear.