[Samba] session setup failed: NT_STATUS_NO_IMPERSONATION_TOKEN

Andrew Bartlett
Tue, 26 Jul 2022 20:06:56 -0000

On Tue, 2022-07-26 at 15:43 -0400, Luc Lalonde via samba
wrote:
> Hello all,
>
> I'm having issues configuring a new  Samba server on a Debian-11
> instance (Samba 4.13.13).
>
> What's working:
>
>   * Winbind authentification
>   * NFSv4 exports using gss/krb5
>
> And not working:
>
>   * Samba user homes exports
>
> Here's the error when I try to access the share:
>
> smbclient //fs1.example.com/wadmin -U  -g EXAMPLE.COM
> Password for [EXAMPLE\wadmin]:
> session setup failed: NT_STATUS_NO_IMPERSONATION_TOKEN
>

This means you have configured the AD account that you have created
manually for Samba to refuse to send Samba a Kerberos PAC.

A normal domain join should work.

Andrew Bartlett

--
Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source
Solutions