Problem: Share access with ntlm authentication is not possible anymore

Problem:

Example:
Received faxes are automatically saved in a share. that was no longer possible after Errata 1094. (see also)

For share access with an unjoined Windows Client this Issue also applies.
.

Investigation:

smbclient "//$(hostname -f)/faxi" -U faxuser
The access is still possible
smbclient "//localhost/faxi" -U faxuser
The access is no longer possible, if the user uses ntlm to authenticate.

Solution

Temporary workaround:
Add the following lines in

/etc/samba/local.conf
[global]
        winbind use default domain = yes

keywords:
security Update

Mastodon