[Samba] NT_STATUS_ACCESS_DENIED: Access denied (0xc0000022)

Burn Zero burnzerog at gmail.com
Thu Mar 21 06:51:58 UTC 2019


Hi,

Software Versions in use:

OS : CentOS Linux release 7.2.1511 (Core)

samba-winbind-modules-4.4.4-9.el7.x86_64
samba-common-libs-4.4.4-9.el7.x86_64
samba-common-tools-4.4.4-9.el7.x86_64
samba-common-4.4.4-9.el7.noarch
samba-winbind-4.4.4-9.el7.x86_64
samba-libs-4.4.4-9.el7.x86_64
samba-winbind-clients-4.4.4-9.el7.x86_64
samba-client-libs-4.4.4-9.el7.x86_64

I am using FreeRADIUS which connects to windows active directory to
authenticate and authorize Wi-Fi users. Recently, I get so many errors in
FreeRADIUS logs such as:

ERROR: (92) ntlm_auth: ERROR: Program returned code (1) and output
'NT_STATUS_ACCESS_DENIED: Access denied (0xc0000022)

This error disappears when I re-join the Domain controller ( Windows AD )
using the command:

net ads join -U <account_name>


Below is the smb.conf:

   workgroup = DA
   realm = <domain name>
   security = ads
   idmap config * : range = 16777216-33554431
   template shell = /bin/false
   kerberos method = secrets only
   winbind use default domain = true
   winbind offline logon = false

#--authconfig--end-line--
;    workgroup = SAMBA
;    security = user

    passdb backend = tdbsam

I know this is minimal information to guess why it actually happened. But I
do not know where to start with.

Any help is much appreciated.

Thank you.


More information about the samba mailing list