samba - Jan 2019 - How to use smbpasswd/login when Microsoft Account is tied to Windows login

Hello,

I try to connect a Windows 10 Microsoft Account which is tied to Windows 
login with my (standalone-)Samba-Server.

With local users i do

adduser username

smbpasswd a smbuser

And this runs for me.


But how is to do with Microsoft Account which is tied to Windows login?

I got these error-message in /var/log/syslog:

   check_ntlm_password:  Authentication for user [testuser.user at gmx.net] 
-> [testuser.user at gmx.net] FAILED with error NT_STATUS_NO_SUCH_USER, 
authoritative
=1
[2019/01/30 11:51:53.584395,  2] 
../auth/auth_log.c:760(log_authentication_event
_human_readable)
   Auth: [SMB2,(null)] user [MicrosoftAccount]\[testuser.user at gmx.net] 
at [Mi,
  30 Jan 2019 11:51:53.584386 UTC] with [NTLMv2] status 
[NT_STATUS_NO_SUCH_USER]
workstation [DONALD] remote host [ipv4:192.168.1.2:50007] mapped to 
[MicrosoftAc
count]\[testuser.user at gmx.net]. local host [ipv4:192.168.1.220:445]
[2019/01/30 11:51:53.584460,  2] ../auth/auth_log.c:220(log_json)
   JSON Authentication: {"timestamp":
"2019-01-30T11:51:53.584425+0000",
"type":
"Authentication", "Authentication": {"version":
{"major": 1, "minor":
0}, "statu
s": "NT_STATUS_NO_SUCH_USER", "localAddress":
"ipv4:192.168.1.220:445",
"remoteA
ddress": "ipv4:192.168.1.2:50007",
"serviceDescription": "SMB2",
"authDescriptio
n": null, "clientDomain": "MicrosoftAccount",
"clientAccount":
"testuser.user
@gmx.net", "workstation": "DONALD",
"becameAccount": null,
"becameDomain": null,
  "becameSid": "(NULL SID)", "mappedAccount":
"testuser.user at gmx.net",
"mapped

ull, "netlogonNegotiateFlags": "0x00000000", 
"netlogonSecureChannelType": 0, "ne
tlogonTrustAccountSid": "(NULL SID)", "passwordType":
"NTLMv2"}}

Thank you!


Tony

On Wed, 30 Jan 2019 15:30:04 +0100
Anton Blau via samba <samba at lists.samba.org> wrote:
> Hello,
> 
> I try to connect a Windows 10 Microsoft Account which is tied to
> Windows login with my (standalone-)Samba-Server.
> 
> With local users i do
> 
> adduser username
> 
> smbpasswd a smbuser
> 
> And this runs for me.
> 
> 
> But how is to do with Microsoft Account which is tied to Windows
> login?
> 
> I got these error-message in /var/log/syslog:
> 
>    check_ntlm_password:  Authentication for user
> [testuser.user at gmx.net] -> [testuser.user at gmx.net] FAILED with
error
> NT_STATUS_NO_SUCH_USER, authoritative
> =1
> [2019/01/30 11:51:53.584395,  2] 
> ../auth/auth_log.c:760(log_authentication_event
> _human_readable)
>    Auth: [SMB2,(null)] user
> [MicrosoftAccount]\[testuser.user at gmx.net] at [Mi,
>   30 Jan 2019 11:51:53.584386 UTC] with [NTLMv2] status 
> [NT_STATUS_NO_SUCH_USER]
> workstation [DONALD] remote host [ipv4:192.168.1.2:50007] mapped to 
> [MicrosoftAc
> count]\[testuser.user at gmx.net]. local host [ipv4:192.168.1.220:445]
> [2019/01/30 11:51:53.584460,  2] ../auth/auth_log.c:220(log_json)
>    JSON Authentication: {"timestamp":
> "2019-01-30T11:51:53.584425+0000", "type":
> "Authentication", "Authentication":
{"version": {"major": 1, "minor":
> 0}, "statu
> s": "NT_STATUS_NO_SUCH_USER", "localAddress":
> "ipv4:192.168.1.220:445", "remoteA
> ddress": "ipv4:192.168.1.2:50007",
"serviceDescription": "SMB2",
> "authDescriptio
> n": null, "clientDomain": "MicrosoftAccount",
"clientAccount":
> "testuser.user
> @gmx.net", "workstation": "DONALD",
"becameAccount": null,
> "becameDomain": null,
>   "becameSid": "(NULL SID)", "mappedAccount":
> "testuser.user at gmx.net", "mapped
> 
> ull, "netlogonNegotiateFlags": "0x00000000", 
> "netlogonSecureChannelType": 0, "ne
> tlogonTrustAccountSid": "(NULL SID)",
"passwordType": "NTLMv2"}}
> 
> Thank you!
> 
> 
> Tony
> 
> 
> 
Where you are entering 'MicrosoftAccount\username' try
'.\username'

Rowland

Am 30.01.2019 um 15:55 schrieb Rowland Penny via samba:
> On Wed, 30 Jan 2019 15:30:04 +0100
> Anton Blau via samba <samba at lists.samba.org> wrote:
>
>
> Where you are entering 'MicrosoftAccount\username' try
'.\username'
>
> Rowland
>
On Windows 10 client, I get no input window for a username. I only get 
the error message in the Samba log.

Therefore, my next idea was to create a user, named user.testuser at gmx.de 
(analogous to the linked Microsoft account). Under Linux I get the error 
message "bad username".


Tony