[Samba] session setup failed: NT_STATUS_LOGON_FAILURE

[Rowland Penny]

On 04/11/15 06:24, Roger Wu wrote:
> Hi, Rowland,
>
> Thanks for your advise. I've been updated the version to 4.2.5, the 
> rpm query is as below,
> but it still didn't work.
>
> [root at testcad16 samba]# rpm -qa | grep samba
> sernet-samba-4.2.5-19.el6.x86_64
> sernet-samba-libs-4.2.5-19.el6.x86_64
> sernet-samba-libsmbclient0-4.2.5-19.el6.x86_64
> sernet-samba-client-4.2.5-19.el6.x86_64
> sernet-samba-common-4.2.5-19.el6.x86_64
>
> [root at testcad16 samba]# netstat -tulnp| grep mbd
> tcp        0      0 0.0.0.0:445 <http://0.0.0.0:445>   0.0.0.0:*       
>             LISTEN      27139/smbd
> tcp        0      0 0.0.0.0:139 <http://0.0.0.0:139>   0.0.0.0:*       
>             LISTEN      27139/smbd
> tcp        0      0 :::445                      :::*                   
>    LISTEN      27139/smbd
> tcp        0      0 :::139                      :::*                   
>    LISTEN      27139/smbd
> udp        0      0 172.26.87.255:137 <http://172.26.87.255:137>       
>   0.0.0.0:*                               27094/nmbd
> udp        0      0 172.26.85.211:137 <http://172.26.85.211:137>       
>   0.0.0.0:*                               27094/nmbd
> udp        0      0 0.0.0.0:137 <http://0.0.0.0:137>   0.0.0.0:*       
>                         27094/nmbd
> udp        0      0 172.26.87.255:138 <http://172.26.87.255:138>       
>   0.0.0.0:*                               27094/nmbd
> udp        0      0 172.26.85.211:138 <http://172.26.85.211:138>       
>   0.0.0.0:*                               27094/nmbd
> udp        0      0 0.0.0.0:138 <http://0.0.0.0:138>   0.0.0.0:*       
>                         27094/nmbd
>
> [root at testcad16 samba]# smbclient -d 3 -L //testcad16
> lp_load_ex: refreshing parameters
> Initialising global parameters
> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
> Processing section "[global]"
> added interface eth0 ip=172.26.85.211 bcast=172.26.87.255 
> netmask=255.255.248.0
> Client started (version 4.2.5-SerNet-RedHat-19.el6).
> Enter root's password:
> Connecting to 172.26.85.211 at port 445
> session setup failed: NT_STATUS_LOGON_FAILURE
> My smb.conf setting is as followed,
>
> # Global parameters
> [global]
>         workgroup = TESTSMB
>         server string = Samba Server Version %v
>         netbios name = testcad16
>         security = USER
> passdb backend = tdbsam
>         encrypt passwords = No
>         client NTLMv2 auth = No
>         client lanman auth = Yes
>         client plaintext auth = Yes
>         dns proxy = No
>         idmap config * : backend = tdb
>         hosts allow = 127. 172.26.
>         cups options = raw
>
>
> [homes]
>         comment = Home Directories
>         read only = No
>         browseable = No
>
>
> [printers]
>         comment = All Printers
>         path = /var/spool/samba
>         printable = Yes
>         print ok = Yes
>         browseable = No
>
>
>

OK, you seem to be trying to set up a standalone server, you do realise 
that you will need to create your users on this as well as on the 
windows machines.

You might as well remove these lines, they are the defaults:

         security = USER
         passdb backend = tdbsam

You might as well remove this line, it isn't needed on a standalone server:

         idmap config * : backend = tdb

and you don't need to run the winbindd deamon.

You really should remove these lines, you are trying to make windows do 
something with passwords it really doesn't want to do:

         encrypt passwords = No
         client NTLMv2 auth = No
         client lanman auth = Yes
         client plaintext auth = Yes

Rowland