Есть две сети:
192.168.1.0/24 и 172.16.0.0/24.
Есть сервер с самбой в первой сети, включённый в AD.
[global]
workgroup = MYDOMAIN
realm = MYDOMAIN.LOCAL
netbios name = SAMBA
server string = "Global share"
security = ads
encrypt passwords = true
dns proxy = no
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
auth methods = winbind
template homedir = /mnt/samba/%D/%U
template shell = /bin/bash
client use spnego = yes
client ntlmv2 auth = yes
restrict anonymous = 2
domain master = no
local master = no
preferred master = no
os level = 0
domain logons = no
load printers = no
show add printer wizard = no
printcap name = /dev/null
disable spoolss = yes
log level = 2
log file = /var/log/samba/%M.log
smb ports = 139
interfaces = eth0
bind interfaces only = yes
winbind separator = ^
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
winbind nss info = rfc2307
winbind refresh tickets = Yes
winbind normalize names = Yes
idmap config HOME:schema_mode = rfc2307
idmap config HOME:range = 210000-3100000
idmap config HOME:backend = ad
idmap config * : range = 210000-3100000
idmap config * : backend = tdb
invalid users = root
[Docs]
comment = Open share
path = /mnt/samba/Docs
browseable = yes
writable = yes
create mask = 0666
directory mask = 0777
map acl inherit = yes
locking = no
inherit permissions = yes
Открывать файлы на шаре из второй сети невозможно - отваливается по таймауту.
Виндовые шары открываются без проблем.
Спасибо за внимание.
P.S. Samba 3.6.6
