VERY Odd SMB Login Issue ...

Question

Level 1

30 points

VERY Odd SMB Login Issue ...

I just setup a Mac Mini with Yosemite Server. It's running well and seems fine, except for one glaring issue.

Using AFP, a Local Network User can login using their either their Full Name (RealName) or their shortname. (Good!)

Using SMB, a Local Network User can only login using their shortname. Any attempt to use the Full Name (RealName) will get shaken off. (Not so good.)

Local Users don't have this problem and can login to network shares with either their Full Name or their shortname.

- Server has a static IP.

- FQDN is set correctly

- OS 10.10.2, fully patched

- Server v4.0.3

- All logins are from Macs.

- Have repaired permissions numerous times, both from the startup drive and the recovery drive.

The System Log reports this:

3/25/15 12:37:02.342 PM digest-service[2988]: digest-request: uid=0

3/25/15 12:37:02.342 PM digest-service[2988]: digest-request: init request

3/25/15 12:37:02.400 PM digest-service[2988]: digest-request: init return domain: <SERVERNAME> server: <SERVERNAME> indomain was: <NULL>

3/25/15 12:37:02.426 PM digest-service[2988]: digest-request: uid=0

3/25/15 12:37:02.426 PM digest-service[2988]: digest-request: init request

3/25/15 12:37:02.481 PM digest-service[2988]: digest-request: init return domain: <SERVERNAME> server: <SERVERNAME> indomain was: <NULL>

3/25/15 12:37:02.594 PM digest-service[2988]: digest-request: uid=0

3/25/15 12:37:02.594 PM digest-service[2988]: digest-request: init request

3/25/15 12:37:02.653 PM digest-service[2988]: digest-request: init return domain: <SERVERNAME> server: <SERVERNAME> indomain was: <NULL>

3/25/15 12:37:02.667 PM digest-service[2988]: digest-request: uid=0

3/25/15 12:37:02.667 PM digest-service[2988]: digest-request: init request

3/25/15 12:37:02.723 PM digest-service[2988]: digest-request: init return domain: <SERVERNAME> server: <SERVERNAME> indomain was: <NULL>

3/25/15 12:37:02.774 PM digest-service[2988]: digest-request: uid=0

3/25/15 12:37:02.879 PM digest-service[2988]: digest-request od: ok user=<SERVERNAME>\<User Name> proto=ntlmv2 flags: ENC_128, NEG_VERSION, NEG_TARGET_INFO, NEG_NTLM, NEG_TARGET, NEG_UNICODE

3/25/15 12:38:33.071 PM Server[388]: CoreAnimation: warning, deleted thread with uncommitted CATransaction; set CA_DEBUG_TRANSACTIONS=1 in environment to log backtraces.

The slapd log reports this:

Mar 25 12:37:02 <serverFQDN> slapd[198]: => bdb_idl_delete_key: c_del id failed: DB_LOCK_DEADLOCK: Locker killed to resolve a deadlock (-30994)

Mar 25 12:37:02 <serverFQDN> slapd[198]: conn=2198 op=3: attribute "entryCSN" index delete failure

Mar 25 12:37:02 <serverFQDN> slapd[198]: => bdb_idl_delete_key: c_del id failed: DB_LOCK_DEADLOCK: Locker killed to resolve a deadlock (-30994)

Mar 25 12:37:02 <serverFQDN> slapd[198]: conn=2198 op=4: attribute "entryCSN" index delete failure

Mar 25 12:37:02 <serverFQDN> slapd[198]: => bdb_idl_delete_key: c_del id failed: DB_LOCK_DEADLOCK: Locker killed to resolve a deadlock (-30994)

Mar 25 12:37:02 <serverFQDN> slapd[198]: conn=2148 op=3: attribute "entryCSN" index delete failure

Any input would be much appreciated, as I am running out of hair to pull out.

Posted on Mar 25, 2015 1:27 PM

Reply

Answer 1

Best reply

sdmichael Author

Level 1

30 points

Mar 26, 2015 10:12 AM in response to sdmichael

Just got off the phone with Apple Enterprise support. I'm told this is expected behavior with Yosemite/SMB3.

Seems completely unintuitive. It's going to cause issues with my less technically savvy users who won't understand why they can't just put in their real name, like before.

The agent I spoke with is going to ask engineering what the idea behind this was. I'll report back when I hear.

Reply