samba - Jun 2021 - NLA ISSUE FROM WINDOWS10 RDP CONNECTION

I still don't know what Network Level Authentication, which is a very
sensible thing from the details I've seen, becomes on the Samba AD DC
side of things.

Details of what Samba rejects from the Samba logs would be a good
start.

Andrew Bartlett

On Fri, 2021-06-04 at 09:13 +0200, L.P.H. van Belle via samba
wrote:
> @TP starter You should tell more about the setup i think. 
> 
> @Andrew, Network Level Authentication (NLA) 
> 
> And no, i dont know an other solution that disable NLA on win 10. 
> 
> Solution 1: Disabling NLA using Properties.
> Solution 2: Disabling NLA using Registry.
> Solution 3: Disabling using PowerShell.
> Solution 4: Using Group Policy Editor.
> 
> I see this also. 
>
https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/cannot-connect-rdp-azure-vm
> 
> 
> Greetz, 
> 
> Louis
> 
> 
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> > Andrew Bartlett via samba
> > Verzonden: vrijdag 4 juni 2021 8:37
> > Aan: vishwajit maji; samba at lists.samba.org
> > Onderwerp: Re: [Samba] NLA ISSUE FROM WINDOWS10 RDP CONNECTION
> > 
> > On Fri, 2021-06-04 at 11:10 +0530, vishwajit maji via samba wrote:
> > > Hi All,
> > > As mentioned in the subject line , unable to connect to windows
> > > 10
> > > after
> > > adding in the domain, due to NLA issue. Any solution apart from
> > > disabling
> > > NLA.
> > > Or Samba doesn't support NLA feature ?
> > 
> > We would need to know what NLA is to know if we don't support it
> > (but
> > that gives a big hint).  Can you give us a pointer?
> > 
> > Andrew Bartlett
> > 
> > -- 
> > Andrew Bartlett (he/him)       https://samba.org/~abartlet/
> > Samba Team Member (since 2001) https://samba.org
> > Samba Team Lead, Catalyst IT   
> > https://catalyst.net.nz/services/samba
> > 
> > Samba Development and Support, Catalyst IT - Expert Open Source
> > Solutions
> > 
> > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> > 
> > 
> 
> 
-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source
Solutions

On 04/06/2021 08:48, Andrew Bartlett via samba wrote:
> I still don't know what Network Level Authentication, which is a very
> sensible thing from the details I've seen, becomes on the Samba AD DC
> side of things.
>
> Details of what Samba rejects from the Samba logs would be a good
> start.
>
> Andrew Bartlett
>
ER, Samba rejects nothing ?

First, use the correct tool and ensure that the user has a valid ticket, 
then:

rowland at devstation:~/tests$ rdesktop -u rowland -d SAMDOM w10pro
Autoselected keyboard map en-gb
Connection established using CredSSP.

Rowland