windows can not access samba share - username case senitivity issue [xenial]

[Jason Sauders]

Hi there, Doug. One thing to keep in mind is that each samba user must 
be a local system user on the box hosting the samba shares.

So if you have an Ubuntu box and this Ubuntu box is going to host the 
samba shares, and overall you'd like to have a total of 5 samba users, 
those 5 samba users must also have a local system account on the Ubuntu 
system.

Keep in mind if you have 5 Ubuntu system users, but have configured 0 
users for samba, you effectively have 0 users who can access samba. They 
are not one in the same and are configured independently (though samba 
users require local users to exist to complete the creation process).

I do not believe the password of Doug on the Windows box has anything to 
do with the password of Doug on the Linux box. It all boils down to the 
samba password you configured for Doug. Keep in mind you can have Doug 
on the Linux box with password123 as the password, yet Doug the samba 
user may have password789 as their actual samba password (which would be 
used for file sharing connectivity purposes).

I have noticed Windows seemingly tries to use the local user + local 
password (local to the Windows box) first as credentials for samba 
shares. So if the Windows box is "Doug" with "password123" as the 
password to log in to Windows, and you *also* have "Doug" with 
"password123" as the samba credentials on the Linux box, the Windows box 
will seemingly just "let you in", appearing to use no authentication in 
the process, though it actually did authenticate you in that process via 
assuming to use the local (to Windows) credentials first.

The above is of course just my understanding/experience in the past 
(which may be gray at this point) of it all. I encourage other folks 
reading this message to correct me if this information isn't correct.

Typically I'll add all of my local users to the Ubuntu box first. 
Following that, I add them to samba via 'sudo smb passwd -a username'. 
You'll notice the prompt say "New SMB Password" following. Since my 
wife, myself, etc are always using the same user to log in to our NAS 
(Ubuntu Server 14.04 with samba installed), I'll log in via the file 
manager and do 1) save password forever, 2) bookmark it, 3) rename it in 
an obvious fashion and retain it on the left side of the file manager. 
This creates a 1 click link to hit my NAS in the future.

Hope this helps! Keep us updated.

-J

On 02/06/2016 10:41 AM, Doug Smythies wrote:
> On 2016.02.06 Tom H wrote:
>> On Sat, Feb 6, 2016 at 1:17 AM, Doug Smythies <dsmythies at telus.net> wrote:
>>> I have been attempting to make samba work on an Ubuntu amd64 server 16.04 I am building.
>>> My windows user account name is "Doug". My Ubuntu user account name is "doug". This appears to be the root issue.
>>>
>>> On my 14.04 server:
>>>    check_ntlm_password:  authentication for user [Doug] -> [Doug] -> [doug] succeeded
>>>
>>> On my 16.04 server:
>>>    check_ntlm_password: sam authentication for user [Doug] FAILED with error NT_STATUS_NO_SUCH_USER
>>>    check_ntlm_password:  Authentication for user [Doug] -> [Doug] FAILED with error NT_STATUS_NO_SUCH_USER
>> Can you logon as "doug" from a Linux box?
> I can login as "doug" locally and from other boxes via ssh or whatever.
> If you mean via samba from a different Linux box, then I have never done that.
>
>> Did you create machine accounts?
> Just me, so far. The account "doug" was created during installation.
> And that is the same as my 14.04 test server.
> I have never used the samba username name stuff, and not needing
> to is the whole point of the way I configure samba.
>
> ... Doug
>
>
>