[Samba] NT_STATUS_ACCESS_DENIED when issuing smbclient -k

[Rowland penny]

On 24/02/2020 19:00, Marlon Franco wrote:
> Hi Rowland,
>
> Can we at least make it work in a new server, i need to virtualize 
> this first before i moved to Samba AD domain, this conf came from the 
> debian wheezy which has a samba 3.6.6 i'm trying to replicate the OLD 
> server exactly as much as possible because i might break something.
>
> I tried to changed the security = ads and kerberos method = secrets 
> and keytab but still could not work
>
> when i do smbclient -k -L //sample.test.de/ -d 2
> session setup failed: NT_STATUS_ACCESS_DENIED
>
> or you saying it is not possible unless i moved to samba ad?
>
It wasn't very common to use kerberos with a PDC, so I am unsure if it 
will work now. However, it could be fallout from the various changes 
since 3.6.x, such 'ntlm auth' now defaulting to NTLMv2.

Try setting these options in smb.conf:

ntlm auth = yes

server max protocol = NT1

Rowland