I would have liked to know what the problem was. I suspect it had something to do with < the user-account name = “studio” and there is also a user-group called “studio”
Anyway , I created a new user called “studio1” , imported the data from “studio” and deleted the account “studio”
I can not help you in clarifying the case, but the two names have no relation to each other and they can be the same string without any consequences. Even if user studio isn’t even member of the group studio (but others user(s) are).
In fact I think that these days, as default, each user is created with it’s primary group name being the same string as the user name. Earlier the default was to give each created user the primary group users. Of course you are not bound to this default policy, but can create to your needs.
I was trying to use the samba passwords with no success and deleted the Samba user “studio”. Therefore I dismissed this avenue .
But you mentioned Samba (LDAP) , I remember I was doing something. The better word is “exploring”.
Since the same login screen is displayed the Samba system authorization must be active.
production:/ # smbstatus
production:/ # smbstatus
Samba version 4.23.4-git.428.6b48e7eba5bSUSE-oS16.9-x86_64
PID Username Group Machine Protocol Version Encryption Signing
----------------------------------------------------------------------------------------------------------------------------------------
Service pid Machine Connected at Encryption Signing
---------------------------------------------------------------------------------------------
No locked files
production:/ #
production:/ # testparm
production:/ # testparm
Load smb config files from /etc/samba/smb.conf
lpcfg_do_global_parameter: WARNING: The "domain logons" option is deprecated
Loaded services file OK.
Weak crypto is allowed by GnuTLS (e.g. NTLM as a compatibility fallback)
WARNING: 'workgroup' and 'netbios name' must differ.
idmap range not specified for domain '*'
ERROR: Invalid idmap range for domain *!
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions
# Global parameters
[global]
add machine script = /usr/sbin/useradd -c Machine -d /var/lib/nobody -s /bin/false %m$
domain logons = Yes
domain master = Yes
logon drive = P:
logon home = \\%L\%U\.9xprofile
logon path = \\%L\profiles\.msprofile
map to guest = Bad User
os level = 65
preferred master = Yes
printcap name = cups
security = USER
usershare max shares = 100
workgroup = PRODUCTION
idmap config * : backend = tdb
cups options = raw
[homes]
browseable = No
comment = Home Directories
inherit acls = Yes
read only = No
valid users = %S %D%w%S
[profiles]
comment = Network Profiles Service
create mask = 0600
directory mask = 0700
path = %H
read only = No
[users]
comment = All users
guest ok = Yes
inherit acls = Yes
path = /home/studio
read only = No
veto files = /aquota.user/groups/shares/
[printers]
browseable = No
comment = All Printers
create mask = 0600
path = /var/samba/spool
printable = Yes
[print$]
comment = Printer Drivers
create mask = 0664
directory mask = 0775
force group = ntadmin
path = /var/lib/samba/drivers
write list = @ntadmin root
[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
write list = root
production:/ #
What would have been the solution to the problem ?