I have samba server configured with active directory authentication and after service restart, all shares went down except for user home shares which are still reachable. We got access denied errors when trying to map drive to any share.

smb.conf is ok (nothing has changed there) but in logfiles there are a lot of permission denied. Here is what occures in logfiles when I try to map a drive and get access denied.

user is mendrikaadm
active directory domain is pasteur
ip address of the client is 172.16.101.72

[2016/12/29 10:20:24.552993, 3] ../source3/auth/user_krb5.c:51(get_user_from_kerberos_info)
Kerberos ticket principal name is [mendrikaadm@PASTEUR.MG]
[2016/12/29 10:20:24.556202, 3] ../source3/param/loadparm.c:3650(lp_load_ex)
lp_load_ex: refreshing parameters
[2016/12/29 10:20:24.556285, 3] ../source3/param/loadparm.c:530(init_globals)
Initialising global parameters
[2016/12/29 10:20:24.556391, 3] ../source3/param/loadparm.c:2593(lp_do_section)
Processing section "[global]"
[2016/12/29 10:20:24.556997, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[corbeille]"
[2016/12/29 10:20:24.557095, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[homes]"
[2016/12/29 10:20:24.557194, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[ipm]"
[2016/12/29 10:20:24.557319, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[direction]"
[2016/12/29 10:20:24.557437, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[daf]"
[2016/12/29 10:20:24.557552, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[dsc]"
[2016/12/29 10:20:24.557650, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[dcab]"
[2016/12/29 10:20:24.557762, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[achats]"
[2016/12/29 10:20:24.557906, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[appro]"
[2016/12/29 10:20:24.558038, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[tesita]"
[2016/12/29 10:20:24.558178, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[audit]"
[2016/12/29 10:20:24.558325, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cag]"
[2016/12/29 10:20:24.558464, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[a_cchs]"
[2016/12/29 10:20:24.558621, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[a_cchs_stage]"
[2016/12/29 10:20:24.558770, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[administrati]"
[2016/12/29 10:20:24.558923, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[a_compta_doc]"
[2016/12/29 10:20:24.559073, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[a_finances]"
[2016/12/29 10:20:24.559241, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[a_fundraisin]"
[2016/12/29 10:20:24.559392, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[a_metrologie]"
[2016/12/29 10:20:24.559520, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[a_pao_cdoc]"
[2016/12/29 10:20:24.559643, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[compta]"
[2016/12/29 10:20:24.559751, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[compta_scan]"
[2016/12/29 10:20:24.559873, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[daf_commun]"
[2016/12/29 10:20:24.560020, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[daf_hebergem]"
[2016/12/29 10:20:24.560165, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[daf_pilotage]"
[2016/12/29 10:20:24.560308, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[daf_hotesse]"
[2016/12/29 10:20:24.560451, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[daf_securite]"
[2016/12/29 10:20:24.560590, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[daf_standard]"
[2016/12/29 10:20:24.560736, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[daf_dev]"
[2016/12/29 10:20:24.560875, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[ipm-direction]"
[2016/12/29 10:20:24.561027, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[ipm_cabinet_direction]"
[2016/12/29 10:20:24.561164, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[ipm_bdoc]"
[2016/12/29 10:20:24.561316, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[info]"
[2016/12/29 10:20:24.561468, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[mg]"
[2016/12/29 10:20:24.561611, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[projet]"
[2016/12/29 10:20:24.561760, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[rh_assist]"
[2016/12/29 10:20:24.561900, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[rh]"
[2016/12/29 10:20:24.562042, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc_a]"
[2016/12/29 10:20:24.562183, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc_anapath]"
[2016/12/29 10:20:24.562324, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc_anap_des]"
[2016/12/29 10:20:24.562473, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc_b]"
[2016/12/29 10:20:24.562618, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc_c]"
[2016/12/29 10:20:24.562756, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc]"
[2016/12/29 10:20:24.562898, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc_d]"
[2016/12/29 10:20:24.563034, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc_e]"
[2016/12/29 10:20:24.563170, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc_f]"
[2016/12/29 10:20:24.563308, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc_g]"
[2016/12/29 10:20:24.563452, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc_h]"
[2016/12/29 10:20:24.563596, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc_i]"
[2016/12/29 10:20:24.563743, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc_j]"
[2016/12/29 10:20:24.563889, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc_k]"
[2016/12/29 10:20:24.564029, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc_l]"
[2016/12/29 10:20:24.564174, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc_m]"
[2016/12/29 10:20:24.564316, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc_mo]"
[2016/12/29 10:20:24.564469, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc_n]"
[2016/12/29 10:20:24.564610, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[cbc_scanbac]"
[2016/12/29 10:20:24.564743, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[commun]"
[2016/12/29 10:20:24.564891, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[datasfp]"
[2016/12/29 10:20:24.565031, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[endnote]"
[2016/12/29 10:20:24.565175, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[gescom]"
[2016/12/29 10:20:24.565321, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[zoonose]"
[2016/12/29 10:20:24.565466, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[communication]"
[2016/12/29 10:20:24.565617, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[lhae_cde]"
[2016/12/29 10:20:24.565755, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[lhae]"
[2016/12/29 10:20:24.565911, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[lhae_compta]"
[2016/12/29 10:20:24.566051, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[lhae_labo]"
[2016/12/29 10:20:24.566188, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[lhae_mkt]"
[2016/12/29 10:20:24.566328, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[lhae_product]"
[2016/12/29 10:20:24.566470, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[lhae_prot]"
[2016/12/29 10:20:24.566614, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[qualite]"
[2016/12/29 10:20:24.566758, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[qualite_raq]"
[2016/12/29 10:20:24.566906, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[bactex]"
[2016/12/29 10:20:24.567056, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_arbo]"
[2016/12/29 10:20:24.567196, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_asaq]"
[2016/12/29 10:20:24.567340, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_birdy]"
[2016/12/29 10:20:24.567472, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_cacm]"
[2016/12/29 10:20:24.567586, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_charli]"
[2016/12/29 10:20:24.567715, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[recherche]"
[2016/12/29 10:20:24.567835, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_crp]"
[2016/12/29 10:20:24.567969, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_qualite_crp]"
[2016/12/29 10:20:24.568116, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_etio]"
[2016/12/29 10:20:24.568269, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_grippe]"
[2016/12/29 10:20:24.568412, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_grippe_tb]"
[2016/12/29 10:20:24.568560, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_immi]"
[2016/12/29 10:20:24.568684, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_nsb3_1]"
[2016/12/29 10:20:24.568801, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_nsb3_2]"
[2016/12/29 10:20:24.568928, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_pausens]"
[2016/12/29 10:20:24.569071, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_polio]"
[2016/12/29 10:20:24.569229, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_prizm]"
[2016/12/29 10:20:24.569365, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_rage]"
[2016/12/29 10:20:24.569477, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_rougeole]"
[2016/12/29 10:20:24.569592, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_sbs]"
[2016/12/29 10:20:24.569702, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_tbkids]"
[2016/12/29 10:20:24.569810, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_viro-sent]"
[2016/12/29 10:20:24.569932, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[r_zora]"
[2016/12/29 10:20:24.570042, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[entomo]"
[2016/12/29 10:20:24.570153, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[ipm_comite_biobanque]"
[2016/12/29 10:20:24.570280, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[epid_afribio]"
[2016/12/29 10:20:24.570389, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[epidemio]"
[2016/12/29 10:20:24.570511, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[epid_datamgr]"
[2016/12/29 10:20:24.570624, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[epid_dodin]"
[2016/12/29 10:20:24.570746, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[epid_iccm]"
[2016/12/29 10:20:24.570860, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[epid_iodine]"
[2016/12/29 10:20:24.570973, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[epid_nutrit]"
[2016/12/29 10:20:24.571082, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[epid_perilic]"
[2016/12/29 10:20:24.571199, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[epid_pev]"
[2016/12/29 10:20:24.571311, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[epidemio_htc]"
[2016/12/29 10:20:24.571419, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[epidemio_urec]"
[2016/12/29 10:20:24.571539, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[epidemio_malinea]"
[2016/12/29 10:20:24.571650, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[epidemio_pecadom]"
[2016/12/29 10:20:24.571768, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[epid_saisie]"
[2016/12/29 10:20:24.571881, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[epid_sentine]"
[2016/12/29 10:20:24.572004, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[epid_ssds]"
[2016/12/29 10:20:24.572120, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[helmint]"
[2016/12/29 10:20:24.572239, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[immuno]"
[2016/12/29 10:20:24.572347, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[immuno_labo]"
[2016/12/29 10:20:24.572454, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[les_cadres]"
[2016/12/29 10:20:24.572566, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[les]"
[2016/12/29 10:20:24.572674, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[les_hexa]"
[2016/12/29 10:20:24.572785, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[les_mgr]"
[2016/12/29 10:20:24.572888, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[les_qual]"
[2016/12/29 10:20:24.572995, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[les_stage1]"
[2016/12/29 10:20:24.573112, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[les_tech]"
[2016/12/29 10:20:24.573222, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[myco_cnrm]"
[2016/12/29 10:20:24.573345, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[myco]"
[2016/12/29 10:20:24.573451, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[myco_dq]"
[2016/12/29 10:20:24.573556, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[pal_atelier]"
[2016/12/29 10:20:24.573662, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[pal_at2013]"
[2016/12/29 10:20:24.573769, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[pal_cadres]"
[2016/12/29 10:20:24.573874, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[palu]"
[2016/12/29 10:20:24.573978, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[pal_geno]"
[2016/12/29 10:20:24.574084, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[pal_invitro]"
[2016/12/29 10:20:24.574193, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[pal_stage]"
[2016/12/29 10:20:24.574311, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[pal_terrain]"
[2016/12/29 10:20:24.574416, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[peste_bdd]"
[2016/12/29 10:20:24.574531, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[peste]"
[2016/12/29 10:20:24.574640, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[viro]"
[2016/12/29 10:20:24.574751, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[viro_proj]"
[2016/12/29 10:20:24.574859, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[viro_qual]"
[2016/12/29 10:20:24.574966, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[civ]"
[2016/12/29 10:20:24.575076, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[service]"
[2016/12/29 10:20:24.575181, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[dispensaire]"
[2016/12/29 10:20:24.575299, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[neovac]"
[2016/12/29 10:20:24.575411, 2] ../source3/param/loadparm.c:2610(lp_do_section)
Processing section "[QualiteMateriel]"
[2016/12/29 10:20:24.575601, 3] ../source3/param/loadparm.c:1490(lp_add_ipc)
adding IPC service
[2016/12/29 10:20:24.577322, 3] ../source3/groupdb/mapping.c:830(pdb_create_builtin_alias)
pdb_create_builtin_alias: Could not get a gid out of winbind
[2016/12/29 10:20:24.577384, 2] ../source3/auth/token_util.c:564(finalize_local_nt_token)
WARNING: Failed to create BUILTIN\Administrators group! Can Winbind allocate gids?
[2016/12/29 10:20:24.577787, 3] ../source3/groupdb/mapping.c:830(pdb_create_builtin_alias)
pdb_create_builtin_alias: Could not get a gid out of winbind
[2016/12/29 10:20:24.577848, 2] ../source3/auth/token_util.c:589(finalize_local_nt_token)
WARNING: Failed to create BUILTIN\Users group! Can Winbind allocate gids?
[2016/12/29 10:20:24.578834, 3] ../source3/param/loadparm.c:1440(lp_add_home)
adding home's share [mendrikaadm] for user 'PASTEUR+mendrikaadm' at '/users/%S'
[2016/12/29 10:20:24.580450, 3] ../source3/lib/access.c:338(allow_access)
Allowed connection from 172.16.101.72 (172.16.101.72)
[2016/12/29 10:20:24.582496, 2] ../lib/util/modules.c:196(do_smb_load_module)
Module 'recycle' loaded
[2016/12/29 10:20:24.584883, 3] ../source3/lib/access.c:338(allow_access)
Allowed connection from 172.16.101.72 (172.16.101.72)
[2016/12/29 10:20:24.584935, 3] ../libcli/security/dom_sid.c:209(dom_sid_parse_endp)
string_to_sid: SID @PASTEUR+ipm_epidemio is not in a valid format
[2016/12/29 10:20:24.588094, 3] ../libcli/security/dom_sid.c:209(dom_sid_parse_endp)
string_to_sid: SID @PASTEUR+ipm_epidemio is not in a valid format
[2016/12/29 10:20:24.588352, 3] ../libcli/security/dom_sid.c:209(dom_sid_parse_endp)
string_to_sid: SID @PASTEUR+ipm_epidemio_w is not in a valid format
[2016/12/29 10:20:24.588688, 3] ../libcli/security/dom_sid.c:209(dom_sid_parse_endp)
string_to_sid: SID @PASTEUR+ipm_epidemio is not in a valid format
[2016/12/29 10:20:24.588943, 3] ../libcli/security/dom_sid.c:209(dom_sid_parse_endp)
string_to_sid: SID @PASTEUR+ipm_epidemio_w is not in a valid format

Thx!

... just a shot in the dark here, perhaps, but did you have functioning access before a recent system (i.e. samba, smbclient, tevent ...) update on your server ? I had such a problem and it turned out to be related to an incompatibility between a certain client machine's version of samba and the server's. I had to downgrade the versions of the above packages to 4.4.5.2 on the server.

.. just in case ;-)

Cheers.