Adam Tauno Williams
2017-Mar-26 19:08 UTC
[Samba] smbclient -k works, but not username + password
I have shutdown the last Samba4 DC in the domain, so only Windows 2008 DCs remain. I can access one Samba file server, with either username+password or kerberos (-k) To access another file server only kerberos -k works. Attempting to access with username+password fails with NT_STATUS_ACCESS_DENIED $ smbclient -d10 -U adam -W BACKBONE \\\\arabis- red.micore.us\\cis_packs ... NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x62088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY NTLMSSP_NEGOTIATE_VERSION NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH SPNEGO login failed: Access denied session setup failed: NT_STATUS_ACCESS_DENIED Configuration of the two servers is identical except for shares. Any suggestions? -- Adam Tauno Williams <mailto:awilliam at whitemice.org> GPG D95ED383 openSUSE, a LINUX desktop for humans who need to get work done.
Adam Tauno Williams
2017-Mar-26 19:26 UTC
[Samba] smbclient -k works, but not username + password
On Sun, 2017-03-26 at 15:08 -0400, Adam Tauno Williams via samba wrote:> I have shutdown the last Samba4 DC in the domain, so only Windows > 2008 DCs remain. > I can access one Samba file server, with either username+password or > kerberos (-k)On the server not working - [root at arabis-red samba]# wbinfo --ntlmv2 -a adam at MICORE.US Enter adam at MICORE.US's password: plaintext password authentication failed Could not authenticate user adam at MICORE.US with plaintext password Enter adam at MICORE.US's password: challenge/response password authentication failed error code was NT_STATUS_ACCESS_DENIED (0xc0000022) error message was: Access denied Could not authenticate user adam at MICORE.US with challenge/response