External smb storage fails

smb
external_storage
9.1.x

#1

Steps to reproduce

1.
2.
3.

Expected behaviour

Tell us what should happen

Actual behaviour

Tell us what happens instead

I have, otherwise fully OK samba, but my owncload cannot get to it.
As an external storage smb I choose "Log-in credentials"
On my setup(pretty default) users log into owncloud with an ldap backend, the very same samba uses, yet in samba logs I see:

...
2017/10/05 15:41:00.479585, 5] ../source3/auth/server_info_sam.c:122(make_server_info_sam)
make_server_info_sam: made server info for user cloudadmin -> cloudadmin
[2017/10/05 15:41:00.479709, 3] ../source3/auth/auth.c:249(auth_check_ntlm_password)
check_ntlm_password: sam authentication for user [cloudadmin] succeeded
[2017/10/05 15:41:00.479772, 5] ../source3/auth/auth.c:292(auth_check_ntlm_password)
check_ntlm_password: PAM Account for user [cloudadmin] succeeded
[2017/10/05 15:41:00.479810, 2] ../source3/auth/auth.c:305(auth_check_ntlm_password)
check_ntlm_password: authentication for user [cloudadmin] -> [cloudadmin] -> [cloudadmin] succeeded
[2017/10/05 15:41:00.481148, 2] ../source3/passdb/pdb_ldap.c:2310(init_group_from_ldap)
init_group_from_ldap: Entry found for group: 544
[2017/10/05 15:41:00.481740, 4] ../source3/passdb/pdb_ldap.c:2437(ldapsam_getgroup)
ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))
[2017/10/05 15:41:00.482335, 4] ../source3/passdb/pdb_ldap.c:2437(ldapsam_getgroup)
ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))
[2017/10/05 15:41:00.484920, 4] ../source3/passdb/pdb_ldap.c:2437(ldapsam_getgroup)
ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0))
[2017/10/05 15:41:00.485371, 4] ../source3/passdb/pdb_ldap.c:2437(ldapsam_getgroup)
ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0))
[2017/10/05 15:41:00.485723, 4] ../source3/passdb/pdb_ldap.c:2437(ldapsam_getgroup)
ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))
[2017/10/05 15:41:00.486136, 4] ../source3/passdb/pdb_ldap.c:2437(ldapsam_getgroup)
ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))
[2017/10/05 15:41:00.486525, 4] ../source3/passdb/pdb_ldap.c:2437(ldapsam_getgroup)
ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-11))
[2017/10/05 15:41:00.486979, 4] ../source3/passdb/pdb_ldap.c:2437(ldapsam_getgroup)
ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-11))

Server configuration

Operating system:
Centos 7.4
Web server:
Apache
Database:

PHP version:

ownCloud version: (see ownCloud admin page)
owncloud-9.1.5-1.el7.noarch
php-smbclient-0.9.0-1.el7.x86_64
samba-4.6.2-11.el7_4.x86_64

Updated from an older ownCloud or fresh install:

Where did you install ownCloud from:

Signing status (ownCloud 9.0 and above):

Login as admin user into your ownCloud and access 
http://example.com/index.php/settings/integrity/failed 
paste the results into https://gist.github.com/ and puth the link here.

The content of config/config.php:

Log in to the web-UI with an administrator account and click on
'admin' -> 'Generate Config Report' -> 'Download ownCloud config report'
This report includes the config.php settings, the list of activated apps
and other details in a well sanitized form.

or 

If you have access to your command line run e.g.:
sudo -u www-data php occ config:list system
from within your ownCloud installation folder

*ATTENTION:* Do not post your config.php file in public as is. Please use one of the above
methods whenever possible. Both, the generated reports from the web-ui and from occ config:list
consistently remove sensitive data. You still may want to review the report before sending.
If done manually then it is critical for your own privacy to dilligently
remove *all* host names, passwords, usernames, salts and other credentials before posting.
You should assume that attackers find such information and will use them against your systems.

List of activated apps:

If you have access to your command line run e.g.:
sudo -u www-data php occ app:list
from within your ownCloud installation folder.

Are you using external storage, if yes which one: local/smb/sftp/...

Are you using encryption: yes/no

Are you using an external user-backend, if yes which one: LDAP/ActiveDirectory/Webdav/...

LDAP configuration (delete this part if not used)

With access to your command line run e.g.:
sudo -u www-data php occ ldap:show-config
from within your ownCloud installation folder

Without access to your command line download the data/owncloud.db to your local
computer or access your SQL server remotely and run the select query:
SELECT * FROM `oc_appconfig` WHERE `appid` = 'user_ldap';


Eventually replace sensitive data as the name/IP-address of your LDAP server or groups.

Client configuration

Browser:

Operating system:

Logs

Web server error log

Insert your webserver log here

ownCloud log (data/owncloud.log)

Insert your ownCloud log here

Browser log

Insert your browser log here, this could for example include:

a) The javascript console log
b) The network log 
c) ...

#2

Hey there,

did you have a look at our documentation? Maybe you missed something in your configuration

https://doc.owncloud.com/server/10.0/admin_manual/enterprise/external_storage/windows-network-drive_configuration.html?highlight=wnd