[Samba] session setup failed: NT_STATUS_NO_IMPERSONATION_TOKEN

Andrew Bartlett abartlet at samba.org
Tue Jul 26 20:06:56 UTC 2022

On Tue, 2022-07-26 at 15:43 -0400, Luc Lalonde via samba wrote:
> Hello all,
> I'm having issues configuring a new  Samba server on a Debian-11 
> instance (Samba 4.13.13).
> What's working:
>   * Winbind authentification
>   * NFSv4 exports using gss/krb5
> And not working:
>   * Samba user homes exports
> Here's the error when I try to access the share:
> smbclient //fs1.example.com/wadmin -U  -g EXAMPLE.COM
> Password for [EXAMPLE\wadmin]:
> session setup failed: NT_STATUS_NO_IMPERSONATION_TOKEN

This means you have configured the AD account that you have created
manually for Samba to refuse to send Samba a Kerberos PAC.

A normal domain join should work.

Andrew Bartlett

Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source

More information about the samba mailing list