[Samba] NT_STATUS_ACCESS_DENIED when issuing smbclient -k

Marlon Franco lonmarlon at yahoo.com
Fri Feb 28 14:45:24 UTC 2020

 Dear Rowland,
setting the SID really show progress
smbclient -k -L //sample.test.de/ now works

now i'm stuck with session setup failed: NT_STATUS_LOGON_FAILURE
even if ntlm auth and client max protocol is set
In the OLD setup i can login even if i dont type a password
smbclient //localhost/netlogon -U 'abcd'Enter abcd's password: 
Anonymous login successful
Domain=[TEST.DE] OS=[Unix] Server=[Samba 3.6.6]smb: \>

now i get session setup failed: NT_STATUS_LOGON_FAILURE even if i type the correct password

based on the logs:ntlmssp_server_auth_send: Checking NTLMSSP password for TEST.DE\abcd failed:  NT_STATUS_NO_SUCH_USER

    On Wednesday, February 26, 2020, 10:06:02 AM GMT+1, Rowland penny via samba <samba at lists.samba.org> wrote:  
 On 26/02/2020 08:19, Marlon Franco wrote:
>   The primary group domain 
> sid(S-1-5-21-2449491038-845518472-943770720-512) does not match the 
> domain sid(S-1-5-21-3914098627-448258
> 429-2114528033) for abcd(S-1-22-1-12658)

All domain members must use the same SID, you can obtain this on the PDC 
with 'net getdomainsid'. You should then be able set the domain SID on 
Unix domain members with 'net setdomainsid 
S-1-5-21-xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz' , replacing the SID with the 
one you obtained on the PDC.


To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

More information about the samba mailing list