I'm trying to set up SMB file sharing from one Mac running macOS Mojave to another. The serving Mac runs Server.app and an Open Directory master with Local Network Users. The client is bound to the master. The user accounts on the client are 'Mobile Accounts' except for the administrator account on each Mac.
I have a HFS+ volume on the computer that shares, which enabled me to separately test AFP and SMB sharing. AFP sharing of a folder on the HFS+ volume works (with registered user). SMB sharing of a folder on the APFS volume does not work. It looks like an authentication/configuration problem.
Looking on the serving side, I see this in log:
default 10:02:52.426557 +0100 smbd Server requires signing, but not auth-bound to Directory Service
default 10:02:52.427298 +0100 smbd Too many groups requested (2147483647). Can cause performance issues when network directories are involved
default 10:02:52.433288 +0100 smbd Too many groups requested (2147483647). Can cause performance issues when network directories are involved
default 10:02:52.448680 +0100 digest-service digest-request: uid=0
default 10:02:52.448713 +0100 digest-service digest-request: init request
default 10:02:52.452971 +0100 securityd found a non-proper sample, skipping...
default 10:02:52.468923 +0100 opendirectoryd Failed to talk to secd after 4 attempts.
default 10:02:52.472453 +0100 digest-service digest-request: init return domain: ALBUS server: ALBUS indomain was: <NULL>
default 10:02:52.472607 +0100 smbd Server requires signing, but not auth-bound to Directory Service
It does work when I set the "Windows File Sharing" flag for a user on. But that only is possible for Local Directory users not Local Network Directory users. I think I should be able to solve this by solving the smbd Server requires signing, but not auth-bound to Directory Service issue. Or I must find to add the Local Network Directory users to "Windows File Sharing" (but given the lower security of that it is not what I would like).
I've done all the 'normal' things such as rebooting, turning services off and on again (and both), add specific access in Server.app (pf) for SMB and (S)LDAP and I'm now officially out of options.
Best Answer
The answer was here: https://support.apple.com/en-us/HT204021
If you use Directory Utility on the client to have an authenticated binding between the client machine and the server Open Directory, you can mount SMB shares.
There are other workarounds which are either less secure or have poor performance on writing. See the linked support article.