https://bugzilla.suse.com/show_bug.cgi?id=1220032 https://bugzilla.suse.com/show_bug.cgi?id=1220032#c8 --- Comment #8 from Noel Power <nopower@suse.com> --- I have to confess I am a bit confused by the "obey pam restrictions" settings but it seems that it only is necessary for clear text authentication (which presumably is not the case here) Still having it set in your config had the nasty side affect of triggering the 'new' apparmor error. While this seems pretty much an edge case configuration combination the apparmor error is still valid I suppose and we will adjust the samba apparmor profile to deal with this -- You are receiving this mail because: You are on the CC list for the bug.