[Samba] session setup failed: NT_STATUS_LOGON_FAILURE

Wed Nov 4 10:28:40 UTC 2015

2015-11-04 17:11 GMT+08:00 Rowland Penny <rowlandpenny241155 at gmail.com>:

> On 04/11/15 06:24, Roger Wu wrote:
>
>> Hi, Rowland,
>>
>> Thanks for your advise. I've been updated the version to 4.2.5, the rpm
>> query is as below,
>> but it still didn't work.
>>
>> [root at testcad16 samba]# rpm -qa | grep samba
>> sernet-samba-4.2.5-19.el6.x86_64
>> sernet-samba-libs-4.2.5-19.el6.x86_64
>> sernet-samba-libsmbclient0-4.2.5-19.el6.x86_64
>> sernet-samba-client-4.2.5-19.el6.x86_64
>> sernet-samba-common-4.2.5-19.el6.x86_64
>>
>> [root at testcad16 samba]# netstat -tulnp| grep mbd
>> tcp        0      0 0.0.0.0:445 <http://0.0.0.0:445>   0.0.0.0:*
>>            LISTEN      27139/smbd
>> tcp        0      0 0.0.0.0:139 <http://0.0.0.0:139>   0.0.0.0:*
>>            LISTEN      27139/smbd
>> tcp        0      0 :::445                      :::*
>> LISTEN      27139/smbd
>> tcp        0      0 :::139                      :::*
>> LISTEN      27139/smbd
>> udp        0      0 172.26.87.255:137 <http://172.26.87.255:137>
>>  0.0.0.0:*                               27094/nmbd
>> udp        0      0 172.26.85.211:137 <http://172.26.85.211:137>
>>  0.0.0.0:*                               27094/nmbd
>> udp        0      0 0.0.0.0:137 <http://0.0.0.0:137>   0.0.0.0:*
>>                        27094/nmbd
>> udp        0      0 172.26.87.255:138 <http://172.26.87.255:138>
>>  0.0.0.0:*                               27094/nmbd
>> udp        0      0 172.26.85.211:138 <http://172.26.85.211:138>
>>  0.0.0.0:*                               27094/nmbd
>> udp        0      0 0.0.0.0:138 <http://0.0.0.0:138>   0.0.0.0:*
>>                        27094/nmbd
>>
>>
>> [root at testcad16 samba]# smbclient -d 3 -L //testcad16
>> lp_load_ex: refreshing parameters
>> Initialising global parameters
>> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
>> Processing section "[global]"
>> added interface eth0 ip=172.26.85.211 bcast=172.26.87.255
>> netmask=255.255.248.0
>> Client started (version 4.2.5-SerNet-RedHat-19.el6).
>> Enter root's password:
>> Connecting to 172.26.85.211 at port 445
>> session setup failed: NT_STATUS_LOGON_FAILURE
>> My smb.conf setting is as followed,
>>
>> # Global parameters
>> [global]
>>         workgroup = TESTSMB
>>         server string = Samba Server Version %v
>>         netbios name = testcad16
>>         security = USER
>> passdb backend = tdbsam
>>         encrypt passwords = No
>>         client NTLMv2 auth = No
>>         client lanman auth = Yes
>>         client plaintext auth = Yes
>>         dns proxy = No
>>         idmap config * : backend = tdb
>>         hosts allow = 127. 172.26.
>>         cups options = raw
>>
>>
>> [homes]
>>         comment = Home Directories
>>         read only = No
>>         browseable = No
>>
>>
>> [printers]
>>         comment = All Printers
>>         path = /var/spool/samba
>>         printable = Yes
>>         print ok = Yes
>>         browseable = No
>>
>>
>>
>>
> OK, you seem to be trying to set up a standalone server, you do realise
> that you will need to create your users on this as well as on the windows
> machines.
>

yes, but I hope samba can use NIS authentication instead of using it's own
database.
Do I need to use smbpasswd to create user accounts again? It's against what
I need...

>
> You might as well remove these lines, they are the defaults:
>
>         security = USER
>         passdb backend = tdbsam
>

Don't I need to set the security level?

>
> You might as well remove this line, it isn't needed on a standalone server:
>
>         idmap config * : backend = tdb
>

I didn't  set these parameters. They are reported by testparm command.
Where can I remove that?

>
> and you don't need to run the winbindd deamon.
>
> You really should remove these lines, you are trying to make windows do
> something with passwords it really doesn't want to do:
>
>         encrypt passwords = No
>         client NTLMv2 auth = No
>         client lanman auth = Yes
>         client plaintext auth = Yes
>
> Rowland
>

I searched some articles on the internet said I need to set above lines for
the samba server and
plaintextpasswords = 1 for windows due to different encrypted methods
between windows and workstation.
I added those lines and It seems worked for samba old version (3.6.23) .
How come it wind up irrelevant for 4.2.5 version?
Don't I need to set anything for this issue?

I've been removed most of these lines you suggested, which means I nearly
set nothing.
but it still didn't work and I got the same message.

[root at testcad16 samba]# smbclient -L //testcad16
Enter root's password:
session setup failed: NT_STATUS_LOGON_FAILURE

Here is my smb.conf setting.

[root at testcad16 samba]# testparm
Load smb config files from /etc/samba/smb.conf
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[homes]"
Processing section "[printers]"
Loaded services file OK.
Server role: ROLE_STANDALONE

Press enter to see a dump of your service definitions

# Global parameters
[global]
        workgroup = SMBTEST
        server string = Samba Server Version %v
        idmap config * : backend = tdb
        hosts allow = 127. 172.26.
        cups options = raw

[homes]
        comment = Home Directories
        read only = No
        browseable = No

[printers]
        comment = All Printers
        path = /var/spool/samba
        printable = Yes
        print ok = Yes
        browseable = No

Regards,
Roger

>

> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>