Debian samba не пускает пользователей

testparm
Load smb config files from /etc/samba/smb.conf
WARNING: The "idmap uid" option is deprecated
WARNING: The "idmap gid" option is deprecated
Processing section "[share]"
Processing section "[docs]"
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER

[libdefaults]
default_realm = MAG.LOCAL
dns_lookup_kdc = no
dns_lookup_realm = no
ticket_lifetime = 24h
default_keytab_name = FILE:/etc/krb5.keytab

; for Windows 2003
default_tgs_enctypes = rc4-hmac des-cbc-crc des-cbc-md5
default_tkt_enctypes = rc4-hmac des-cbc-crc des-cbc-md5
permitted_enctypes = rc4-hmac des-cbc-crc des-cbc-md5
; for Windows 2008 with AES
; default_tgs_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
; default_tkt_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
; permitted_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
[realms]
 MAG.LOCAL = {
 kdc = rezerv.mag.local
 ;kdc = server2.example.local
 admin_server = rezerv.mag.local
 default_domain = mag.local
 }
[domain_realm]
.mag.local = MAG.LOCAL
mag.local = MAG.LOCAL

Using short domain name -- MAG
Joined 'MAILN' to dns domain 'mag.local'

       map to guest = Bad Password
       winbind enum users  = yes
       winbind enum groups = yes
       # Default idmap config used for BUILTIN and local accounts/groups
       idmap config *:backend = rid
       idmap config *:range = 2000-19999
       idmap config *:base_rid = 0
       # idmap config for domain MAG
       idmap config MAG:backend = ad
       idmap config MAG:schema_mode = rfc2307
       idmap config MAG:range = 20000-99999

[docs]
path = /media/root/date/docs
writeable = yes
available = yes
public = yes
guest ok = yes

[global]
realm = MAG.LOCAL
workgroup = MAG
netbios name = mailn
disable spoolss = Yes
show add printer wizard = No
security = ads
#idmap uid = 10000-20000
#idmap gid = 10000-20000
template shell = /bin/bash
template homedir = /home/%D/%U
winbind use default domain = yes
map to guest = Bad Password
winbind enum users  = yes
winbind enum groups = yes
# Default idmap config used for BUILTIN and local accounts/groups
idmap config *:backend = rid
idmap config *:range = 2000-19999
idmap config *:base_rid = 0
# idmap config for domain MAG
idmap config MAG:backend = ad
idmap config MAG:schema_mode = rfc2307
idmap config MAG:range = 20000-99999


[share]
comment = Write for Domain Users
path = /media/root/date/upload
browseable = yes
writable = yes

disable spoolss = Yes
show add printer wizard = No

password server = MAG.LOCAL

[global]
realm = MAG.LOCAL
workgroup = MAG
netbios name = mailn
#disable spoolss = Yes
#show add printer wizard = No
security = ads
#idmap uid = 10000-20000
#idmap gid = 10000-20000
template shell = /bin/bash
template homedir = /home/%D/%U
winbind use default domain = yes
map to guest = Bad Password
winbind enum users  = yes
winbind enum groups = yes
# Default idmap config used for BUILTIN and local accounts/groups
idmap config *:backend = rid
idmap config *:range = 2000-19999
idmap config *:base_rid = 0
# idmap config for domain MAG
idmap config MAG:backend = ad
idmap config MAG:schema_mode = rfc2307
idmap config MAG:range = 20000-99999
password server = MAG.LOCAL


[docs]
comment = Write for Domain Users
path = /media/root/date/docs
browseable = yes
writable = yes
create mask = 0664
directory mask = 0777
valid users = @"MAG\DOCS", @"MAG\DOCS"
write list = @"MAG\DOCA", @"MAG\DOCS"

[global]
       workgroup = DOMAIN
       security = ADS
       password server = DOMAIN.LOCAL
       realm = DOMAIN.LOCAL
       netbios name = XMPP
       log file = /var/log/samba/%m.%U.log
       max log size = 50000
       unix charset = koi8-r
       dos charset = 866
       map to guest = Bad Password
       dedicated keytab file = /etc/krb5.keytab
       kerberos method = secrets and keytab
       winbind refresh tickets = yes
       winbind trusted domains only = no
       winbind use default domain = yes
       winbind enum users  = yes
       winbind enum groups = yes
       # Default idmap config used for BUILTIN and local accounts/groups
       idmap config *:backend = rid
       idmap config *:range = 2000-19999
       idmap config *:base_rid = 0
       # idmap config for domain DOMAIN
       idmap config DOMAIN.LOCAL:backend = ad
       idmap config DOMAIN.LOCAL:schema_mode = rfc2307
       idmap config DOMAIN.LOCAL:range = 20000-99999
       # Use settings from AD for login shell and home directory
       winbind nss info = rfc2307

[Software]
        path = /usr/smb/soft
        public = yes
        guest ok = yes
        read only = yes
        browseable = yes 

[global]
workgroup = MAG
security = ADS
password server = MAG.LOCAL
realm = MAG.LOCAL
netbios name = MAILN
log file = /var/log/samba/%m.%U.log
max log size = 50000
unix charset = koi8-r
dos charset = 866
map to guest = Bad Password
dedicated keytab file = /etc/krb5.keytab
kerberos method = secrets and keytab
winbind refresh tickets = yes
winbind trusted domains only = no
winbind use default domain = yes
winbind enum users  = yes
winbind enum groups = yes
# Default idmap config used for BUILTIN and local accounts/groups
idmap config *:backend = rid
idmap config *:range = 2000-19999
idmap config *:base_rid = 0
# idmap config for domain DOMAIN
idmap config MAG.LOCAL:backend = ad
idmap config MAG.LOCAL:schema_mode = rfc2307
idmap config MAG.LOCAL:range = 20000-99999
# Use settings from AD for login shell and home directory
winbind nss info = rfc2307

[docs]
 path = /media/root/date/docs
 public = yes
 guest ok = yes
 read only = yes
 browseable = yes 

[2016/05/06 13:14:15.803498,  0] ../lib/util/fault.c:79(fault_report)
  INTERNAL ERROR: Signal 11 in pid 14920 (4.2.10-Debian)
  Please read the Trouble-Shooting section of the Samba HOWTO
[2016/05/06 13:14:15.803513,  0] ../lib/util/fault.c:81(fault_report)
  ===============================================================
[2016/05/06 13:14:15.803536,  0] ../source3/lib/util.c:788(smb_panic_s3)
  PANIC (pid 14920): internal error

wbinfo -g

id <user_name>

root@mailn:/tmp# wbinfo -g
helpservicesgroup
telnetclients
пользователи dhcp
администраторы dhcp
компьютеры домена
контроллеры домена
администраторы схемы
администраторы предприятия
издатели сертификатов
администраторы домена
пользователи домена
гости домена
владельцы-создатели групповой политики
серверы ras и ias
dnsadmins
dnsupdateproxy
debugger users
администраторы организации
пользователи организации
компьютеры сервера терминалов
mail $ acronis remote users
rdp
docs

[global]
    map to guest = Bad Password
       winbind enum users  = yes
       winbind enum groups = yes
       # Default idmap config used for BUILTIN and local accounts/groups
       idmap config *:backend = rid
       idmap config *:range = 2000-19999
       idmap config *:base_rid = 0
       # idmap config for domain MAG
       idmap config MAG:backend = ad
       idmap config MAG:schema_mode = rfc2307
       idmap config MAG:range = 20000-99999

[movie]
path = /home/share
readonly = No
guest ok = Yes
[/code/