[Samba] smbclient -k works, but not username + password

[Adam Tauno Williams]

I have shutdown the last Samba4 DC in the domain, so only Windows 2008
DCs remain.

I can access one Samba file server, with either username+password or
kerberos (-k)

To access another file server only kerberos -k works.  Attempting to
access with username+password fails with NT_STATUS_ACCESS_DENIED

$ smbclient -d10 -U adam -W BACKBONE \\\\arabis-
red.micore.us\\cis_packs
...
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x62088215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
  NTLMSSP_NEGOTIATE_VERSION
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
SPNEGO login failed: Access denied
session setup failed: NT_STATUS_ACCESS_DENIED

Configuration of the two servers is identical except for shares.

Any suggestions?

-- 
Adam Tauno Williams <mailto:awilliam at whitemice.org> GPG D95ED383
openSUSE, a LINUX desktop for humans who need to get work done.