[Samba] NT_STATUS_LOGON_FAILURE

[Rowland penny]

On 22/10/2019 22:18, Timothy Brewer via samba wrote:
> Like so many others, I'm having NT_STATUS_LOGON_FAILURE issues. I've tried
> all the fixes I could find to no avail.
> My environment:  Cent 7 (Linux 4.19.72-v7l.1.el7) with Samba 4.9.1, bound
> to AD via Realmd. SSSD for ACL's, winbind for user map.

Sorry but from Samba 4.8.0 the use of sssd with winbind is not 
supported, this is because from 4.8.0 you must run winbind if using 
'security = ADS' and the two interfere with one another.

Just remove sssd and everything should work after you replace 'backend = 
sss' with 'backend = ad' and add 'idmap config <domain>:unix_nss_info = yes'

Rowland