SMB e AFP funzionano per guest e Administrator ma non per altri utenti

3

Ho problemi a far funzionare il file sharing tra il mio MBPr e Mac Mini, ecco una cronologia di quello che ho provato:

Ho un MacBook Pro (Retina, 15 pollici, Fine 2013) che esegue El Cap 10.11.1 (15B42) e di recente ho acquistato un Mac mini Server (metà 2011) dal mio Aunty su cui era in esecuzione una versione antica di OSX ( e Server) che ho aggiornato a El Cap 10.11.1 (15B42). (probabilmente irrilevante: il server è venuto con un account amministratore per la mia Aunty nel suo nome di cui non mi sono sbarazzato)

Dopo l'aggiornamento ho creato un nuovo account (Derwent) dall'account dell'amministratore con (accesso amministratore, autenticazione locale) e ho effettuato l'accesso con il mio ID Apple, abilitato la condivisione di file SMB e AFP per tutti gli account, assicurando il mio account, Derwent ha avuto accesso a una cartella chiamata Movies.

Potevo accedere a questa condivisione in remoto usando SMB e AFP con l'account guest e, con l'account dell'amministratore, usando terminale e Finder ma non importa cosa facessi, non potevo accedervi usando Derwent. Potrei anche accedere al mio MBPr dal mio mini usando Guest, Administrator e autenticazione locale.

Ho creato un nuovo test dell'account standard con il test della password, in modo tale da essere sicuro che stavo ottenendo la password corretta, (questo account non era connesso a nessun ID Apple) e comunque non funzionerebbe.

Ecco alcuni dump della mia console con diversi metodi di accesso.

Esplorazione diretta della condivisione in Finder e utilizzo di "Connetti come"

Ricevi il messaggio di errore: Access to your account on the server “minimac” has been denied.

Dump della console sul server:

Dec  1 00:24:53 minimac kdc[232]: Got a canonicalize request for a LKDC realm from local-ipc
Dec  1 00:24:53 minimac kdc[232]: LKDC referral to the real LKDC realm name
Dec  1 00:24:53 minimac kdc[232]: AS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for krbtgt/LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:24:53 --- last message repeated 1 time ---
Dec  1 00:24:53 minimac kdc[232]: Client sent patypes: REQ-ENC-PA-REP
Dec  1 00:24:53 minimac kdc[232]: SRP announcing message of size 52
Dec  1 00:24:53 minimac kdc[232]: Need to use PA-ENC-TIMESTAMP/PA-PK-AS-REQ
Dec  1 00:24:53 minimac kdc[232]: AS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for krbtgt/LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:24:53 --- last message repeated 1 time ---
Dec  1 00:24:53 minimac kdc[232]: Client sent patypes: SRP, REQ-ENC-PA-REP, FX-COOKIE
Dec  1 00:24:53 minimac kdc[232]: SRP step 1
Dec  1 00:24:53 minimac kdc[232]: ccsrp server start for user: test
Dec  1 00:24:53 minimac kdc[232]: FAST factor needs more preauth data, feed it
Dec  1 00:24:53 minimac kdc[232]: AS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for krbtgt/LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:24:53 --- last message repeated 1 time ---
Dec  1 00:24:53 minimac kdc[232]: Client sent patypes: SRP, REQ-ENC-PA-REP, FX-COOKIE
Dec  1 00:24:53 minimac kdc[232]: SRP step 2
Dec  1 00:24:53 minimac kdc[232]: SRP pre-authentication succeeded -- test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:24:53 minimac kdc[232]: Client supported enctypes: aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha1-96, des3-cbc-sha1, arcfour-hmac-md5, using aes256-cts-hmac-sha1-96/aes256-cts-hmac-sha1-96
Dec  1 00:24:53 minimac kdc[232]: Requested flags: canonicalize
Dec  1 00:24:53 minimac kdc[232]: Client uses FAST
Dec  1 00:24:53 minimac kdc[232]: FAST strengthen reply key with strengthen-key
Dec  1 00:24:53 minimac kdc[232]: TGS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for cifs/localhost@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D [canonicalize]
Dec  1 00:24:53 minimac kdc[232]: FAST armor protection
Dec  1 00:24:53 minimac smbd[1409]: check_account - [7]:[permission denied] pam_acct_mgmt 
Dec  1 00:24:53 minimac digest-service[1419]: label: default
Dec  1 00:24:53 minimac digest-service[1419]:   dbname: od:/Local/Default
Dec  1 00:24:53 minimac digest-service[1419]:   mkey_file: /var/db/krb5kdc/m-key
Dec  1 00:24:53 minimac digest-service[1419]:   acl_file: /var/db/krb5kdc/kadmind.acl
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: uid=0
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: netr probe 0
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: init request
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: init return domain: MINIMAC server: MINIMAC indomain was: <NULL>
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: uid=0
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: init request
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: init return domain: MINIMAC server: MINIMAC indomain was: <NULL>
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: uid=0
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: od failed with -1561745588 proto=ntlmv2
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: user=MINIMAC\test
Dec  1 00:24:53 minimac digest-service[1419]: digest-request kdc: ok user=MINIMAC\test proto=ntlmv2 flags: ENC_128, NEG_VERSION, NEG_TARGET_INFO, NEG_NTLM, NEG_TARGET, NEG_UNICODE
Dec  1 00:24:53 minimac smbd[1409]: check_account - [7]:[permission denied] pam_acct_mgmt 
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: uid=0
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: init request
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: init return domain: MINIMAC server: MINIMAC indomain was: <NULL>
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: uid=0
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: init request
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: init return domain: MINIMAC server: MINIMAC indomain was: <NULL>
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: uid=0
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: od failed with -1561745588 proto=ntlmv2
Dec  1 00:24:53 minimac digest-service[1419]: digest-request: user=MINIMAC\test
Dec  1 00:24:53 minimac digest-service[1419]: digest-request kdc: ok user=MINIMAC\test proto=ntlmv2 flags: ENC_128, NEG_VERSION, NEG_TARGET_INFO, NEG_NTLM, NEG_TARGET, NEG_UNICODE
Dec  1 00:24:53 minimac smbd[1409]: check_account - [7]:[permission denied] pam_acct_mgmt 

utilizzando il Finder, afp: // test: [email protected]/Movies

Dec  1 00:12:15 minimac kdc[232]: Got a canonicalize request for a LKDC realm from local-ipc
Dec  1 00:12:15 minimac kdc[232]: LKDC referral to the real LKDC realm name
Dec  1 00:12:15 minimac kdc[232]: AS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for krbtgt/LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:12:15 --- last message repeated 1 time ---
Dec  1 00:12:15 minimac kdc[232]: Client sent patypes: REQ-ENC-PA-REP
Dec  1 00:12:15 minimac kdc[232]: SRP announcing message of size 52
Dec  1 00:12:15 minimac kdc[232]: Need to use PA-ENC-TIMESTAMP/PA-PK-AS-REQ
Dec  1 00:12:15 minimac kdc[232]: AS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for krbtgt/LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:12:15 --- last message repeated 1 time ---
Dec  1 00:12:15 minimac kdc[232]: Client sent patypes: SRP, REQ-ENC-PA-REP, FX-COOKIE
Dec  1 00:12:15 minimac kdc[232]: SRP step 1
Dec  1 00:12:15 minimac kdc[232]: ccsrp server start for user: test
Dec  1 00:12:15 minimac kdc[232]: FAST factor needs more preauth data, feed it
Dec  1 00:12:15 minimac kdc[232]: AS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for krbtgt/LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:12:15 --- last message repeated 1 time ---
Dec  1 00:12:15 minimac kdc[232]: Client sent patypes: SRP, REQ-ENC-PA-REP, FX-COOKIE
Dec  1 00:12:15 minimac kdc[232]: SRP step 2
Dec  1 00:12:15 minimac kdc[232]: SRP pre-authentication succeeded -- test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:12:15 minimac kdc[232]: Client supported enctypes: aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha1-96, des3-cbc-sha1, arcfour-hmac-md5, using aes256-cts-hmac-sha1-96/aes256-cts-hmac-sha1-96
Dec  1 00:12:15 minimac kdc[232]: Requested flags: canonicalize
Dec  1 00:12:15 minimac kdc[232]: Client uses FAST
Dec  1 00:12:15 minimac kdc[232]: FAST strengthen reply key with strengthen-key
Dec  1 00:12:15 minimac kdc[232]: TGS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for afpserver/localhost@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D [canonicalize]
Dec  1 00:12:15 minimac kdc[232]: FAST armor protection
Dec  1 00:12:19 minimac WindowServer[185]: send_datagram_available_ping: pid 534 failed to act on a ping it dequeued before timing out.

Utilizzo di Finder, smb: // test: [email protected]/Movies

Dec  1 00:18:05 minimac digest-service[1388]: label: default
Dec  1 00:18:05 minimac digest-service[1388]:   dbname: od:/Local/Default
Dec  1 00:18:05 minimac digest-service[1388]:   mkey_file: /var/db/krb5kdc/m-key
Dec  1 00:18:05 minimac digest-service[1388]:   acl_file: /var/db/krb5kdc/kadmind.acl
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: uid=0
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: netr probe 0
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: init request
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: init return domain: MINIMAC server: MINIMAC indomain was: <NULL>
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: uid=0
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: init request
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: init return domain: MINIMAC server: MINIMAC indomain was: <NULL>
Dec  1 00:18:05 minimac kdc[232]: Got a canonicalize request for a LKDC realm from local-ipc
Dec  1 00:18:05 minimac kdc[232]: LKDC referral to the real LKDC realm name
Dec  1 00:18:05 minimac kdc[232]: AS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for krbtgt/LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:18:05 --- last message repeated 1 time ---
Dec  1 00:18:05 minimac kdc[232]: Client sent patypes: REQ-ENC-PA-REP
Dec  1 00:18:05 minimac kdc[232]: SRP announcing message of size 52
Dec  1 00:18:05 minimac kdc[232]: Need to use PA-ENC-TIMESTAMP/PA-PK-AS-REQ
Dec  1 00:18:05 minimac kdc[232]: AS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for krbtgt/LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:18:05 --- last message repeated 1 time ---
Dec  1 00:18:05 minimac kdc[232]: Client sent patypes: SRP, REQ-ENC-PA-REP, FX-COOKIE
Dec  1 00:18:05 minimac kdc[232]: SRP step 1
Dec  1 00:18:05 minimac kdc[232]: ccsrp server start for user: test
Dec  1 00:18:05 minimac kdc[232]: FAST factor needs more preauth data, feed it
Dec  1 00:18:05 minimac kdc[232]: AS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for krbtgt/LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:18:05 --- last message repeated 1 time ---
Dec  1 00:18:05 minimac kdc[232]: Client sent patypes: SRP, REQ-ENC-PA-REP, FX-COOKIE
Dec  1 00:18:05 minimac kdc[232]: SRP step 2
Dec  1 00:18:05 minimac kdc[232]: SRP pre-authentication succeeded -- test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:18:05 minimac kdc[232]: Client supported enctypes: aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha1-96, des3-cbc-sha1, arcfour-hmac-md5, using aes256-cts-hmac-sha1-96/aes256-cts-hmac-sha1-96
Dec  1 00:18:05 minimac kdc[232]: Requested flags: canonicalize
Dec  1 00:18:05 minimac kdc[232]: Client uses FAST
Dec  1 00:18:05 minimac kdc[232]: FAST strengthen reply key with strengthen-key
Dec  1 00:18:05 minimac kdc[232]: TGS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for cifs/localhost@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D [canonicalize]
Dec  1 00:18:05 minimac kdc[232]: FAST armor protection
Dec  1 00:18:05 minimac smbd[1366]: check_account - [7]:[permission denied] pam_acct_mgmt 
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: uid=0
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: init request
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: init return domain: MINIMAC server: MINIMAC indomain was: <NULL>
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: uid=0
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: init request
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: init return domain: MINIMAC server: MINIMAC indomain was: <NULL>
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: uid=0
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: od failed with -1561745588 proto=ntlmv2
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: user=MINIMAC\test
Dec  1 00:18:05 minimac digest-service[1388]: digest-request kdc: ok user=MINIMAC\test proto=ntlmv2 flags: ENC_128, NEG_VERSION, NEG_TARGET_INFO, NEG_NTLM, NEG_TARGET, NEG_UNICODE
Dec  1 00:18:05 minimac smbd[1366]: check_account - [7]:[permission denied] pam_acct_mgmt 
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: uid=0
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: init request
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: init return domain: MINIMAC server: MINIMAC indomain was: <NULL>
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: uid=0
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: init request
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: init return domain: MINIMAC server: MINIMAC indomain was: <NULL>
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: uid=0
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: od failed with -1561745588 proto=ntlmv2
Dec  1 00:18:05 minimac digest-service[1388]: digest-request: user=MINIMAC\test
Dec  1 00:18:05 minimac digest-service[1388]: digest-request kdc: ok user=MINIMAC\test proto=ntlmv2 flags: ENC_128, NEG_VERSION, NEG_TARGET_INFO, NEG_NTLM, NEG_TARGET, NEG_UNICODE
Dec  1 00:18:05 minimac smbd[1366]: check_account - [7]:[permission denied] pam_acct_mgmt 
Dec  1 00:18:08 minimac WindowServer[185]: send_datagram_available_ping: pid 534 failed to act on a ping it dequeued before timing out.

Uso del Finder, cifs: // test: [email protected]/Movies

Dec  1 00:31:20 minimac kdc[232]: Got a canonicalize request for a LKDC realm from local-ipc
Dec  1 00:31:20 minimac kdc[232]: LKDC referral to the real LKDC realm name
Dec  1 00:31:20 minimac kdc[232]: AS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for krbtgt/LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:31:20 --- last message repeated 1 time ---
Dec  1 00:31:20 minimac kdc[232]: Client sent patypes: REQ-ENC-PA-REP
Dec  1 00:31:20 minimac kdc[232]: SRP announcing message of size 52
Dec  1 00:31:20 minimac kdc[232]: Need to use PA-ENC-TIMESTAMP/PA-PK-AS-REQ
Dec  1 00:31:20 minimac kdc[232]: AS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for krbtgt/LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:31:20 --- last message repeated 1 time ---
Dec  1 00:31:20 minimac kdc[232]: Client sent patypes: SRP, REQ-ENC-PA-REP, FX-COOKIE
Dec  1 00:31:20 minimac kdc[232]: SRP step 1
Dec  1 00:31:20 minimac kdc[232]: ccsrp server start for user: test
Dec  1 00:31:21 minimac kdc[232]: FAST factor needs more preauth data, feed it
Dec  1 00:31:21 minimac kdc[232]: AS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for krbtgt/LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:31:21 --- last message repeated 1 time ---
Dec  1 00:31:21 minimac kdc[232]: Client sent patypes: SRP, REQ-ENC-PA-REP, FX-COOKIE
Dec  1 00:31:21 minimac kdc[232]: SRP step 2
Dec  1 00:31:21 minimac kdc[232]: SRP pre-authentication succeeded -- test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:31:21 minimac kdc[232]: Client supported enctypes: aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha1-96, des3-cbc-sha1, arcfour-hmac-md5, using aes256-cts-hmac-sha1-96/aes256-cts-hmac-sha1-96
Dec  1 00:31:21 minimac kdc[232]: Requested flags: canonicalize
Dec  1 00:31:21 minimac kdc[232]: Client uses FAST
Dec  1 00:31:21 minimac kdc[232]: FAST strengthen reply key with strengthen-key
Dec  1 00:31:21 minimac kdc[232]: TGS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for cifs/localhost@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D [canonicalize]
Dec  1 00:31:21 minimac kdc[232]: FAST armor protection
Dec  1 00:31:21 minimac smbd[1453]: check_account - [7]:[permission denied] pam_acct_mgmt 
Dec  1 00:31:21 minimac digest-service[1454]: label: default
Dec  1 00:31:21 minimac digest-service[1454]:   dbname: od:/Local/Default
Dec  1 00:31:21 minimac digest-service[1454]:   mkey_file: /var/db/krb5kdc/m-key
Dec  1 00:31:21 minimac digest-service[1454]:   acl_file: /var/db/krb5kdc/kadmind.acl
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: uid=0
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: netr probe 0
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: init request
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: init return domain: MINIMAC server: MINIMAC indomain was: <NULL>
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: uid=0
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: init request
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: init return domain: MINIMAC server: MINIMAC indomain was: <NULL>
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: uid=0
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: od failed with -1561745588 proto=ntlmv2
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: user=MINIMAC\test
Dec  1 00:31:21 minimac digest-service[1454]: digest-request kdc: ok user=MINIMAC\test proto=ntlmv2 flags: ENC_128, NEG_VERSION, NEG_TARGET_INFO, NEG_NTLM, NEG_TARGET, NEG_UNICODE
Dec  1 00:31:21 minimac smbd[1453]: check_account - [7]:[permission denied] pam_acct_mgmt 
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: uid=0
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: init request
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: init return domain: MINIMAC server: MINIMAC indomain was: <NULL>
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: uid=0
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: init request
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: init return domain: MINIMAC server: MINIMAC indomain was: <NULL>
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: uid=0
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: od failed with -1561745588 proto=ntlmv2
Dec  1 00:31:21 minimac digest-service[1454]: digest-request: user=MINIMAC\test
Dec  1 00:31:21 minimac digest-service[1454]: digest-request kdc: ok user=MINIMAC\test proto=ntlmv2 flags: ENC_128, NEG_VERSION, NEG_TARGET_INFO, NEG_NTLM, NEG_TARGET, NEG_UNICODE
Dec  1 00:31:21 minimac smbd[1453]: check_account - [7]:[permission denied] pam_acct_mgmt 
Dec  1 00:31:49 minimac kdc[232]: Got a canonicalize request for a LKDC realm from local-ipc
Dec  1 00:31:49 minimac kdc[232]: LKDC referral to the real LKDC realm name
Dec  1 00:31:49 minimac kdc[232]: AS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for krbtgt/LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:31:49 --- last message repeated 1 time ---
Dec  1 00:31:49 minimac kdc[232]: Client sent patypes: REQ-ENC-PA-REP
Dec  1 00:31:49 minimac kdc[232]: SRP announcing message of size 52
Dec  1 00:31:49 minimac kdc[232]: Need to use PA-ENC-TIMESTAMP/PA-PK-AS-REQ
Dec  1 00:31:49 minimac kdc[232]: AS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for krbtgt/LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:31:49 --- last message repeated 1 time ---
Dec  1 00:31:49 minimac kdc[232]: Client sent patypes: SRP, REQ-ENC-PA-REP, FX-COOKIE
Dec  1 00:31:49 minimac kdc[232]: SRP step 1
Dec  1 00:31:49 minimac kdc[232]: ccsrp server start for user: test
Dec  1 00:31:49 minimac kdc[232]: FAST factor needs more preauth data, feed it
Dec  1 00:31:49 minimac kdc[232]: AS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for krbtgt/LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:31:49 --- last message repeated 1 time ---
Dec  1 00:31:49 minimac kdc[232]: Client sent patypes: SRP, REQ-ENC-PA-REP, FX-COOKIE
Dec  1 00:31:49 minimac kdc[232]: SRP step 2
Dec  1 00:31:49 minimac kdc[232]: SRP pre-authentication succeeded -- test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D
Dec  1 00:31:49 minimac kdc[232]: Client supported enctypes: aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha1-96, des3-cbc-sha1, arcfour-hmac-md5, using aes256-cts-hmac-sha1-96/aes256-cts-hmac-sha1-96
Dec  1 00:31:49 minimac kdc[232]: Requested flags: canonicalize
Dec  1 00:31:49 minimac kdc[232]: Client uses FAST
Dec  1 00:31:49 minimac kdc[232]: FAST strengthen reply key with strengthen-key
Dec  1 00:31:49 minimac kdc[232]: TGS-REQ test@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D from local-ipc for cifs/localhost@LKDC:SHA1.861AE3F013165CCB522112A9BD16DAE8ED59CC1D [canonicalize]
Dec  1 00:31:49 minimac kdc[232]: FAST armor protection
Dec  1 00:31:49 minimac smbd[1453]: check_account - [7]:[permission denied] pam_acct_mgmt 
Dec  1 00:31:49 minimac digest-service[1454]: digest-request: uid=0
Dec  1 00:31:49 minimac digest-service[1454]: digest-request: init request
Dec  1 00:31:49 minimac digest-service[1454]: digest-request: init return domain: MINIMAC server: MINIMAC indomain was: <NULL>
Dec  1 00:31:49 minimac digest-service[1454]: digest-request: uid=0
Dec  1 00:31:49 minimac digest-service[1454]: digest-request: init request
Dec  1 00:31:49 minimac digest-service[1454]: digest-request: init return domain: MINIMAC server: MINIMAC indomain was: <NULL>
Dec  1 00:31:49 minimac digest-service[1454]: digest-request: uid=0
Dec  1 00:31:49 minimac digest-service[1454]: digest-request: od failed with -1561745588 proto=ntlmv2
Dec  1 00:31:49 minimac digest-service[1454]: digest-request: user=MINIMAC\test
Dec  1 00:31:49 minimac digest-service[1454]: digest-request kdc: ok user=MINIMAC\test proto=ntlmv2 flags: ENC_128, NEG_VERSION, NEG_TARGET_INFO, NEG_NTLM, NEG_TARGET, NEG_UNICODE
Dec  1 00:31:49 minimac smbd[1453]: check_account - [7]:[permission denied] pam_acct_mgmt 
Dec  1 00:31:49 minimac digest-service[1454]: digest-request: uid=0
Dec  1 00:31:49 minimac digest-service[1454]: digest-request: init request
Dec  1 00:31:49 minimac digest-service[1454]: digest-request: init return domain: MINIMAC server: MINIMAC indomain was: <NULL>
Dec  1 00:31:49 minimac digest-service[1454]: digest-request: uid=0
Dec  1 00:31:49 minimac digest-service[1454]: digest-request: init request
Dec  1 00:31:49 minimac digest-service[1454]: digest-request: init return domain: MINIMAC server: MINIMAC indomain was: <NULL>
Dec  1 00:31:49 minimac digest-service[1454]: digest-request: uid=0
Dec  1 00:31:49 minimac digest-service[1454]: digest-request: od failed with -1561745588 proto=ntlmv2
Dec  1 00:31:49 minimac digest-service[1454]: digest-request: user=MINIMAC\test
Dec  1 00:31:49 minimac digest-service[1454]: digest-request kdc: ok user=MINIMAC\test proto=ntlmv2 flags: ENC_128, NEG_VERSION, NEG_TARGET_INFO, NEG_NTLM, NEG_TARGET, NEG_UNICODE
Dec  1 00:31:50 minimac smbd[1453]: check_account - [7]:[permission denied] pam_acct_mgmt 

Non capisco davvero questi messaggi, ma spero che qualcuno con più esperienza lo farà.

Modifica per chiarimenti:

account name , privileges, appleID           , machine
======================================================
derwent      , Admin     , derwent           , minimac
administrator, Admin     , -                 , minimac
test         , Standard  , -                 , minimac
jacq(deleted), Admin     , jacq              , minimac
derwent      , Admin     , derwent           , ich    


machine, share , user    , access      
======================================
minimac, Movies, derwent , read & write
minimac, Movies, test    , read only   
minimac, Movies, Everyone, read only   
    
posta Derwent 30.11.2015 - 17:40
fonte

1 risposta

1

Verifica se il gruppo SMB-ACL ( com.apple.access_smb ) include gli utenti interessati o uno dei loro gruppi. Questo gruppo è un gruppo di sistemi che è nascosto per impostazione predefinita nella vista Gruppi dell'app Server (mostrale usando "Mostra account di sistema" nel menu di scelta rapida).

    
risposta data 08.01.2019 - 19:40
fonte

Leggi altre domande sui tag