SAMBA:有效用户忽略本地samba用户

Question

我在SLES12域中有一个linux服务器( SP5)。

>smbd -V
Version 4.10.5-git.192.26ffbcd72313.11.1-SUSE-SLE_12-x86_64

访问samba与域用户共享非常好。

不幸的是，如果valid users是活动的，我无法访问本地samba用户的共享。

>useradd -r -g tomcat test
>smbpasswd -a test
>systemctl restart smb.service

>getent passwd test
test:x:480:1002::/home/test:/bin/bash

smb.conf

[global]
    security = ADS
    realm = STL.BWL.NET
    workgroup = STL

    domain master = NO
    local master = NO
    preferred master = NO
    os level = 0

    template homedir = /home/%U
    template shell = /bin/bash
    kerberos method = secrets and keytab
    allow trusted domains = NO

    winbind enum users = YES
    winbind enum groups = YES
    winbind cache time = 10
    winbind use default domain = YES
    winbind refresh tickets = YES

    idmap config STL : backend = rid
    idmap config STL : range = 100000-400000

    idmap config * : backend = tdb
    idmap config * : range = 500000-800000

    ntlm auth = NO
    lanman auth = NO
    client use spnego = YES
    client ntlmv2 auth = YES
    encrypt passwords = YES
    restrict anonymous = 2
    usershare allow guests = NO

    printing = bsd
    printcap name = /dev/null

    map acl inherit = YES
    store dos attributes = YES
    ea support = YES

    public = NO
    browseable = YES
    writeable = YES
    guest ok = NO

    create mask = 0660
    directory mask = 0770

[web]
        path = /web
        valid users = @GRP_R13_QS STL1408

[tomcat]
        path = /web/tomcat
        valid users = test

Answer 1

首先，我可以建议你读“man smb.conf”并删除所有不该出现的行吗？

第二，您的两个共享都是只读的，如果您希望用户写入共享，则在每个共享中添加'read only = no‘

第三，Unix域成员上的本地用户只是，他们无法连接到Samba共享，但是如果在本地登录，他们将能够读取/写入目录。

如果要与用户“test”连接到共享，请从/etc/passwd中删除它，并在AD中创建它。