Web lists-archives.com

Re: [Samba] samba, sssd, Active Directory, NT_STATUS_NO_LOGON_SERVERS, NT_STATUS_ACCESS_DENIED




> Now go and ask your question on the sssd-users mailing list, this
> has nothing to do with Samba.


Thank you for the response.

Why do you say this has nothing to do with samba?

The samba logs indicate the problem is with samba.
The sssd logs show everything working except for samba.

I changed my smb.conf to default setting and setting that should not be there (as explained in your previous email) but that did not resolve anything.

When max debug on for sssd I do not see samba even using sssd for authentication information.

Maybe a permissions problem on the AD DC? Although I can auth via ssh?

[2017/04/23 16:38:33.202569,  0] ../source3/auth/auth_domain.c:121(connect_to_domain_password_server) connect_to_domain_password_server: unable to open the domain client session to machine DC-1.CORP.CELADONSYSTEMS.COM. Error was : NT_STATUS_ACCESS_DENIED.

Can you recommend web links on confirming permissions are appropriate on the AD DC?

Maybe switching back to winbind is the right choice? Setting up sssd is just a lot easier.

--
Bob Tanner <tanner@xxxxxxxxxxxxx>                                 | Phone : 952-943-8700
http://www.real-time.com, Linux, OSX, VMware, Windows | Fax      : 952-943-8500
Key fingerprint = 9906 320A 8BB6 64AD 96A7  7785 CBFB 10BF 568B F98C

Attachment: signature.asc
Description: Message signed with OpenPGP

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba