Here's a bit of background:

We have a windows server (2003) set up to manage virtually everything; our linux system (gentoo) is only a file server. Recently, a user has been unable to access a shared directory on that file server. They are presented with a login box, but no information seems to work (including admin logins). I tailed the samba logs, which are being given:

[xxxx/xx/xx time, 2] smbd/service.c:make_connection_snum(321)
user 'UserName' (from session setup) not permitted to access this share (ShareName)




Things I'm absolutely certain of (relevant things):

1. The user that is having this problem is a member of the appropriate groups.

2. Other members of this group can access this directory.

3. The user can access other shared directories per his permissions

4. This problem is in no way specific to which machine is used

Things I'm nearly certain of:

1. No changes have recently been made to this user's permissions in Exchange.

2. No other users are experiencing this issue.


this is the .conf, as it pertains to this share:

[ShareName]
path = /x/ShareName/
comment = domain GroupName
writeable = yes
valid users = @DOMAIN+groupname
create mask = 0777
directory mask = 0777
available = yes
browseable = yes
force group = DOMAIN+groupname
force create mode = 0660
force directory mode = 0770
oplocks = true
veto files = /.*/
delete veto files = true

This is relatively equivalent for all other shared folders (the format is identical, only the names are different where appropriate).


I'm stumped at this point. If anyone could tell me where to go from here, I'd really appreciate it.

Thank you,
Sean

EDIT: I'm really sorry, I believe I posted this in the wrong forum. Could someone please move it for me (I promise I'll be more careful from now on )?

Is samba configured to reference active directory in some way? Could we see the [global] portion of your smb.conf file? Is the user able to access other shares on your gentoo server? Does the user have any mapped network drives that may be automatically logging him/her in to the a network share under a different username?

Here's are the [global] configurations (cleaned up, naturally):

[global]
netbios name = server
netbios aliases = server
server string = somethingthatmakessense

socket options = TCP_NODELAY SO_RCVBUF=16384 SO_SNDBUF=16384
idmap uid = 10000-20000
winbind enum users = yes
winbind gid = 10000-20000
workgroup = WORKGROUP
os level = 20
winbind enum groups = yes
socket address = 10.10.1.10
# modified by ajt 4-2-2007 --origina: password server = *
password server = windowsserver.domain.local, *
preferred master = no
winbind separator = +
max log size = 50
# modified by ajt 4-2-2007 -- original: log level = 0
log level = 2
log file = /var/log/samba/log.%m
encrypt passwords = yes
dns proxy = no
realm = DOMAIN.LOCAL
security = ADS
wins server = 10.10.1.250
wins proxy = no


Everything there seems to be set up correctly, and the only change that has been made is commented above (and was made since we started experiencing this problem).

Yes, the user can access other shares on the gentoo server with no difficulty; and no, all users have only one login (remember, this occurs at all stations). To verify this, and as a means of further investigating, I cloned the user's permissions to another account, and had the same problem. As I said, however, this problem started seemingly out of the blue, and rather than telling the user he does not have permissions, he gets a password prompt that won't accept anything.

The user is a member of the group that has access to the share, I'm positive of that.

EDIT: Another user is experiencing these issues, but only one other. Things are described just about the same way, with the same results.