Score:0

Samba 4 and Windows "Local system account"

ir flag

I have a AWS EC2 Linux instance with configured samba (v4) shares. The idea is to allow passwordless access to the shares from the onprem machines which are running Windows Server 2016. There are ACLs between AWS and onprem equipment and are working as expected.

This is running pretty good, except for one thing: services which are running on the local Windows Server 2016 machines under the "Local system user" are unable to access any of the shares.

So, the passwordless (guest) access is working great when there is a user logged on the Windows Server, however, when the service try to access, it's unable.

Shares are configured as:

[testshare]
   path = /pub/testshare
   guest ok = yes
   read only = no
   create mask = 664
   force create mode = 664
   directory mask = 775
   force directory mode = 775

Global Samba configuration has parameters:

security = user
browseable = yes
guest account = myguestacc
map to guest = Bad User
dfree command = /etc/samba/samba-dfree
dfree cache time = 60

Log is showing nothing interesting, so nothing worth I would write here.

Any ideas would be greatly appreciated.

Thanks.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.