I believe we are seeing the same thing. we are running in an unsupported configuration where we are using sssd+smbd. This is working fine for us, usually. we run commands like:
copy *.pdf \someserver\someshare\somefolder
and will intermittently get an Access Denied error on the windows client.
I was able to install winbind and start it and restart smbd. doing this immediately broke samba access. However, we were able to get successful resolution on users with wbinfo. is there a recipe here for allowing samba to share out folders while the system is joined with sssd?
[global] workgroup = ACME client signing = yes client use spnego = yes kerberos method = secrets and keytab password server = * realm = ACME.WIDGETS.COM security = ads kernel oplocks = yes vfs objects = acl_xattr map acl inherit = yes max connections = 0 max smbd processes = 0
passdb backend = tdbsam idmap config * : backend = tdb idmap config * : range = 10000-49999
printing = cups printcap name = cups load printers = yes cups options = raw
log level = 3 passdb:5 auth:5
[homes] comment = Home Directories valid users = %S, %D%w%S browseable = No read only = No inherit acls = Yes