Bug 13203 - smbspool can't authenticate on windows domain with empty user password
Summary: smbspool can't authenticate on windows domain with empty user password
Status: CLOSED WORKSFORME
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: Printing (show other bugs)
Version: 4.7.4
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: printing-maintainers
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-01-05 09:02 UTC by tpowa
Modified: 2021-01-11 13:07 UTC (History)
1 user (show)

See Also:

Attachments
smbspool debug 10 logging (22.06 KB, text/plain)
2018-01-05 11:15 UTC, tpowa 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description tpowa 2018-01-05 09:02:12 UTC 
I cannot use cups printing anymore on my windows client since 4.6.x and up to 4.7.4

Here is the command I use to test it's a user which has no password on domain:
DEVICE_URI="smb://USER:@DOMAIN/CLIENT/PRINTER" smbspool 1234 me blub 1 test.ps

ERROR: Session setup failed: NT_STATUS_LOGON_FAILURE
DEBUG: get_exit_code(cli=0x5648dbb86b40, nt_status=NT_STATUS_LOGON_FAILURE [c000006d])
ATTR: auth-info-required=username,password
ERROR: Session setup failed: NT_STATUS_INTERNAL_ERROR
DEBUG: get_exit_code(cli=0x5648dbb86b40, nt_status=NT_STATUS_INTERNAL_ERROR [c00000e5])
ERROR: Session setup failed: NT_STATUS_LOGON_FAILURE
DEBUG: get_exit_code(cli=0x5648dbb86b40, nt_status=NT_STATUS_LOGON_FAILURE [c000006d])
ATTR: auth-info-required=username,password
ERROR: Tree connect failed (NT_STATUS_ACCESS_DENIED)
DEBUG: get_exit_code(cli=0x5648dbb86b40, nt_status=NT_STATUS_ACCESS_DENIED [c0000022])
ATTR: auth-info-required=username,password

Same command on 4.5.7 works and printing is not broken.
Using the administrator account with password works on 4.7.4.

Thanks for your help
Comment 1 Andreas Schneider 2018-01-05 09:56:25 UTC 
Please run smbspool with -d10 so that we get debug output.
Comment 2 tpowa 2018-01-05 10:41:59 UTC 
DEVICE_URI="smb://USER:@DOMAIN/CLIENT/PRINTER" smbspool 1234 me blub 1 -d10 test.ps
ERROR: Session setup failed: NT_STATUS_LOGON_FAILURE
DEBUG: get_exit_code(cli=0x5587d8b15d70, nt_status=NT_STATUS_LOGON_FAILURE [c000006d])
ATTR: auth-info-required=username,password
ERROR: Session setup failed: NT_STATUS_INTERNAL_ERROR
DEBUG: get_exit_code(cli=0x5587d8b15d70, nt_status=NT_STATUS_INTERNAL_ERROR [c00000e5])
ERROR: Session setup failed: NT_STATUS_LOGON_FAILURE
DEBUG: get_exit_code(cli=0x5587d8b15d70, nt_status=NT_STATUS_LOGON_FAILURE [c000006d])
ATTR: auth-info-required=username,password
ERROR: Tree connect failed (NT_STATUS_ACCESS_DENIED)
DEBUG: get_exit_code(cli=0x5587d8b15d70, nt_status=NT_STATUS_ACCESS_DENIED [c0000022])
ATTR: auth-info-required=username,password

Looks pretty the same, do I need to compile the package with debug enabled?
Comment 3 Andreas Schneider 2018-01-05 11:11:35 UTC 
Yes, smbspool doesn't provide that option. You need to set 'log level = 10' in your smb.conf file.
Comment 4 tpowa 2018-01-05 11:15:31 UTC 
Created attachment 13894 [details]
smbspool debug 10 logging
Comment 5 Björn Jacke 2021-01-11 13:07:50 UTC 
you use ntlm1 here, which isn't allowed by default any more. You might also run into SMB2/guest account limitations or so. Generally it's very much recommended to print authenticated only.