SOLVED Ad auth/ connect not working after upgrade 9.2.1 to 9.3.1

[ObiTobi]

Hi,

I have a native Windows Server 2008R2 running. FreeNAS 9.2.1 works without any problems. User Authentication works, Sharing works.

Today I upgraded my FreeNAS Box to 9.3.1 and AD connection will no more work.

Code:

wbinfo -t
checking the trust secret for domain RJAP.DE via RPC calls failed
error code was NT_STATUS_NO_SUCH_DOMAIN (0xc00000df)
failed to call wbcCheckTrustCredentials: WBC_ERR_AUTH_ERROR
Could not check secret

Code:

host -t srv _ldap._tcp.mydomain.net
_ldap._tcp.mydomain.net has SRV record 0 100 389 myadserver.mydomain.net.

wbinfo -u list ony local users
wbinfo -g returns nothing

Any idea what wrong here?

 

[anodos]

Post /etc/local/smb4.conf

 

[ObiTobi]

Code:

[global]
    server max protocol = SMB3
    encrypt passwords = yes
    dns proxy = no
    strict locking = no
    oplocks = yes
    deadtime = 15
    max log size = 51200
    max open files = 454934
    load printers = no
    printing = bsd
    printcap name = /dev/null
    disable spoolss = yes
    getwd cache = yes
    guest account = nobody
    map to guest = Bad User
    obey pam restrictions = yes
    directory name cache size = 0
    kernel change notify = no
    panic action = /usr/local/libexec/samba/samba-backtrace
    nsupdate command = /usr/local/bin/samba-nsupdate -g
    server string = My NAS
    ea support = yes
    store dos attributes = yes
    lm announce = yes
    hostname lookups = yes
    acl allow execute always = true
    acl check permissions = true
    dos filemode = yes
    multicast dns register = no
    domain logons = no
    idmap config *: backend = tdb
    idmap config *: range = 90000001-100000000
    server role = standalone
    netbios name = MYNASSERVER
    workgroup = MYDOMAIN.NET
    security = user
    pid directory = /var/run/samba
    smb passwd file = /var/etc/private/smbpasswd
    private dir = /var/etc/private
    create mask = 0666
    directory mask = 0777
    client ntlmv2 auth = yes
    dos charset = CP437
    unix charset = UTF-8
    log level = 1
    kernel oplocks = no
    oplocks = False
    veto oplock files = /*.doc/*.DOC/*.docx/*.DOCX/*.docm/*.DOCM/*.dotm/*.DOTM/*.xltm/*.XLTM/*.xltx/*.XLTX/*.xlsx/*.XLSX/*.xlsm/*.XLSM/*.xlsb/*.XLSB/*.xls/*.XLS
/*.ppt/*.PPT/*.pst/*.PST/*.mdb/*.MDB/*.ldb/*.LDB/*.vsd/*.VSD/*.mpp/*.MPP/*.qbw/*.QBW/*.qbb/*.QBB/*.qbI/*.qbl/*.dxf/*.DXF/*.dwg/*.DWG/*.cdr/*.CDR/*.bak/*.BAK/*.o
rd/*.xlo/*.igs/*.ipt/*.ipj/*.slp/*.stp/*.opt/*.xli/*.stl/*.cur/*.sjb/*.log/*.LOG/*.sbs/*.iam/*.idv/*.pcbdoc/*.PcbDoc/*.PCBDOC/*.dbf/*.DBF/*.cdx/*.CDX/

 

[anodos]

In your AD config, change the idmap backend to "rid".

 

[ObiTobi]

I have done but it does not help

 

[ObiTobi]

There is a new Checkbox "Enable" in AD Config Pane. It was not selected.

 

[anodos]

There is a new Checkbox "Enable" in AD Config Pane. It was not selected.

Yup. That'll do it. :D