[Samba] Cannot authenticate the administrator account

Sketch smblist at rednsx.org
Wed Apr 22 10:25:17 MDT 2015

On Wed, 22 Apr 2015, Mike wrote:

> Something almost worked ----
> [root at a10 ~]# echo ${SAMBA_NT_ADMIN_PASS}| smbclient //localhost/netlogon
> -U Administrator -c 'ls'
> Enter Administrator's password:
> Anonymous login successful
> Domain=[CONPAGO] OS=[Unix] Server=[Samba 4.1.17-SerNet-RedHat-11.el7]
> tree connect failed: NT_STATUS_ACCESS_DENIED

I noticed in your original email you are using rfc2307 extensions, but 
there is nothing in your config about winbind.  AFAIK, "smbd" (the samba 
file server) does not talk to the DC (the process named "samba") directly, 
it uses system authentication.  So if getent passwd Administrator does not 
work, you won't be able to log in.  If you're using rfc2307 extensions 
rather than automatic mapping, you will have to give the Administrator 
account a uid (and probably a gid for it's primary group, as well), if you 
haven't already.

More information about the samba mailing list