[Samba] session setup failed: NT_STATUS_NO_IMPERSONATION_TOKEN

[Andrew Bartlett]

On Tue, 2022-07-26 at 15:43 -0400, Luc Lalonde via samba wrote:
> Hello all,
> 
> I'm having issues configuring a new  Samba server on a Debian-11 
> instance (Samba 4.13.13).
> 
> What's working:
> 
>   * Winbind authentification
>   * NFSv4 exports using gss/krb5
> 
> And not working:
> 
>   * Samba user homes exports
> 
> Here's the error when I try to access the share:
> 
> smbclient //fs1.example.com/wadmin -U  -g EXAMPLE.COM
> Password for [EXAMPLE\wadmin]:
> session setup failed: NT_STATUS_NO_IMPERSONATION_TOKEN
> 

This means you have configured the AD account that you have created
manually for Samba to refuse to send Samba a Kerberos PAC.

A normal domain join should work.

Andrew Bartlett

-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source
Solutions