[Samba] NT_STATUS_ACCESS_DENIED when issuing smbclient -k
Rowland penny
rpenny at samba.org
Mon Feb 24 19:36:46 UTC 2020
On 24/02/2020 19:00, Marlon Franco wrote:
> Hi Rowland,
>
> Can we at least make it work in a new server, i need to virtualize
> this first before i moved to Samba AD domain, this conf came from the
> debian wheezy which has a samba 3.6.6 i'm trying to replicate the OLD
> server exactly as much as possible because i might break something.
>
> I tried to changed the security = ads and kerberos method = secrets
> and keytab but still could not work
>
> when i do smbclient -k -L //sample.test.de/ -d 2
> session setup failed: NT_STATUS_ACCESS_DENIED
>
> or you saying it is not possible unless i moved to samba ad?
>
It wasn't very common to use kerberos with a PDC, so I am unsure if it
will work now. However, it could be fallout from the various changes
since 3.6.x, such 'ntlm auth' now defaulting to NTLMv2.
Try setting these options in smb.conf:
ntlm auth = yes
server max protocol = NT1
Rowland
More information about the samba
mailing list