Problem with WD EX4100 and Samba DC

[tacioandrade]

Hello friends! I have a WD EX4100 NAS running on a client that has a Linux-based Domain Controller.

Last week I integrated the NAS to the Domain, with this process, I managed to pull all the users and groups to the WD EX4100 interface correctly, but I’m facing a problem, I can apply the permissions for these users and groups on the NAS, but when I try accessing via Explorer on Windows it gives a user and password error, even though the password is correct or the user is logging in via SSO because he is in the same domain.

Accessing the NAS, I looked at the Samba logs and this log is repeated with each new login attempt with users, I had to disable AD based authentication and leave only local authentication to get it working again.

The log follows:
[2022/11/07 20:53:19.240453, 3] …/source3/winbindd/winbindd_ads.c:525(enum_dom_groups)
ads enum_dom_groups gave 31 entries
[2022/11/07 20:53:19.241122, 3] …/source3/winbindd/winbindd_msrpc.c:294(msrpc_sid_to_name)
msrpc_sid_to_name: S-1-5-21-4135986584-1217042455-898455706-571 for domain DOMAIN-EXAMPLE
[2022/11/07 20:53:19.246617, 3] …/source3/winbindd/winbindd_msrpc.c:294(msrpc_sid_to_name)
msrpc_sid_to_name: S-1-5-21-4135986584-1217042455-898455706-498 for domain DOMAIN-EXAMPLE
[2022/11/07 20:53:19.252410, 3] …/source3/winbindd/winbindd_msrpc.c:294(msrpc_sid_to_name)
msrpc_sid_to_name: S-1-5-21-4135986584-1217042455-898455706-572 for domain DOMAIN-EXAMPLE
[2022/11/07 20:53:19.259161, 3] …/source3/winbindd/winbindd_msrpc.c:294(msrpc_sid_to_name)
msrpc_sid_to_name: S-1-5-21-4135986584-1217042455-898455706-521 for domain DOMAIN-EXAMPLE
[2022/11/07 20:53:19.265950, 3] …/source3/winbindd/winbindd_msrpc.c:294(msrpc_sid_to_name)
msrpc_sid_to_name: S-1-5-21-4135986584-1217042455-898455706-520 for domain DOMAIN-EXAMPLE
[2022/11/07 20:53:19.272686, 3] …/source3/winbindd/winbindd_msrpc.c:294(msrpc_sid_to_name)
msrpc_sid_to_name: S-1-5-21-4135986584-1217042455-898455706-1219 for domain DOMAIN-EXAMPLE
[2022/11/07 20:53:19.279411, 3] …/source3/winbindd/winbindd_msrpc.c:294(msrpc_sid_to_name)
msrpc_sid_to_name: S-1-5-21-4135986584-1217042455-898455706-553 for domain DOMAIN-EXAMPLE
[2022/11/07 20:53:19.286063, 3] …/source3/winbindd/winbindd_msrpc.c:294(msrpc_sid_to_name)
msrpc_sid_to_name: S-1-5-21-4135986584-1217042455-898455706-516 for domain DOMAIN-EXAMPLE
[2022/11/07 20:53:19.292070, 3] …/source3/winbindd/winbindd_msrpc.c:294(msrpc_sid_to_name)
msrpc_sid_to_name: S-1-5-21-4135986584-1217042455-898455706-519 for domain DOMAIN-EXAMPLE

[tacioandrade]

Friends good night! I ended up finding this article here that informed me that the problem is that by default the WD NAS uses Deny by default, I could only get it to work by creating an ‘Engineering’ share and giving read and write permissions to Domain Users, Domain Admins, Engineering, however I had to give read permission to each of the 20 users of the Engineering group as well.

https://support-en.wd.com/app/answers/detailweb/a_id/11814/session/L2F2LzEvdGltZS8xNjY3ODQ5ODE5L2dlbi8xNjY3ODQ5ODE5L3NpZC9mVUVQTXh0OU1YWGhGNEtRWlBsZG94akdia0tReGFqQ3FLYUdXQnBHV1JYTGkyTjV5d0NiR2kydXhGNzhMTDRJQTBNJTdFM3lwbWo1NEF4Y0NPREltJTdFYzRCbElwNll6UDhkbDZJSHhpQjRIVldhcHZ2WlVYX08yMk1RJTIxJTIx

Is there any way to give permission only to groups and not to each user manually? I ask this because it ends up being very complex to manage, so instead of making my life easier, using the WD NAS is more complex than building a fileserver with Linux, which is smarter.

Another problem I found is that the log /var/log/samba/log.nmbd is getting too big, in a few minutes of testing and with the company out of hours, it has already written 1MB of data. Here’s an example of the log in case any friend knows how to help solve the problem.

[2022/11/09 00:11:02.057755, 3] …/source3/nmbd/nmbd_incomingrequests.c:459(process_name_query_request)
process_name_query_request: Name query from 192.168.4.221 on subnet 192.168.0.5 for name BRTSUPORTEE<00>
[2022/11/09 00:11:02.067404, 3] …/source3/nmbd/nmbd_incomingrequests.c:459(process_name_query_request)
process_name_query_request: Name query from 192.168.2.47 on subnet 192.168.0.5 for name BRT-FROTA<00>
[2022/11/09 00:11:02.067549, 3] …/source3/nmbd/nmbd_incomingrequests.c:459(process_name_query_request)
process_name_query_request: Name query from 192.168.2.47 on subnet 192.168.0.5 for name BRT-FROTA<00>

Thanks in advance for any help you can give me.

[Keerti_01]

Hi @tacioandrade,

Have you opened a Support Case? If not opened, for more information, please contact the WD Technical Support team for the best assistance and troubleshooting:
https://support-en.wd.com/app/ask