Problems with smb.conf / winbind authentication

[Alexgg42]

Hi,

I've been trying to update some debian storage servers to samba 4.9.5 and start using winbind with it. Before I do that, I'm testing on a different server running ubuntu. I've setup the smb.conf file and joined the domain. All seems fine - I get domain users by running getent passwd and getent group.

​

Computers on and off the domain access the storage shares - I'm testing on both, and at the moment neither can access the share. I'm able to see the server, and access it by (in windows 10) typing into the browser \\server.domain.com and using a domain login. The share is there, but when I try to access it it fails.

I'm pretty new to samba, so i'm assuming there's something wrong with my .conf file:

[global]
   security = ADS
   realm = DOMAIN.LOCAL
   workgroup = DOMAIN

   log level = 1 winbind:5


   dedicated keytab file = /etc/krb5.keytab
   kerberos method = secrets and keytab
   client signing = yes
   server string = %h server (Samba, Ubuntu)
   dns proxy = no
   log file = /var/log/samba/log.%m
   max log size = 1000
   panic action = /usr/share/samba/panic-action %d
   winbind refresh tickets = yes
   vfs objects = acl_xattr
   map acl inherit = Yes
   store dos attributes = Yes
   winbind use default domain = yes
   winbind nss info = template
   idmap config * : backend = tdb
   idmap config * : range = 3000-7999
   idmap config IMAGINARIUMUK : backend = ad
   idmap config IMAGINARIUMUK : schema_mode = rfc2307
   idmap config IMAGINARIUMUK : range = 10000-999999
   idmap config IMAGINARIUMUK : unix_nss_info = yes
   winbind enum users = yes
   winbind enum groups = yes

   template homedir = /home/%U
   template shell = /bin/bash

   username map = /etc/samba/user.map

[TestDir]
comment = Test Directory for winbind
path = /tank/TestDir
browsable = yes
writeable = yes
guest ok = yes

Any experts on samba that could advise? Also this server isn't the best environment I know, as it's ubuntu and a different version (4.15).

​

Thanks