[Samba] session setup failed: NT_STATUS_NO_IMPERSONATION_TOKEN

[Andrew Bartlett]

On Tue, 2022-07-26 at 16:45 -0400, Luc Lalonde via samba wrote:
> Wow, that did the trick!   I historically joined using 'msktutil'
> with 
> the '--no-pac' option for some reason that I can't recall.
> 
> I retried the same command omitting this option and everything is 
> working great now.
> 
> Why did this work in the past and it no longer works now?
> 
> Thanks

Requiring a PAC is at the core of avoiding the "Dollar ticket attack"
on Samba.

Andrew Bartlett
-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source
Solutions