NT_STATUS_LOGON_FAILURE

Adding printers seems as easy as before. But, apparently, there is some permissions issues.
We have several shared printers on a Windows Network.
I can add all of them without any problems, but any print job is blocked.
After having a look on discussion forum and after analysing the error log, as far as I understand the problem, it seems that no authentication is sent with queued jobs to printers.
When adding a network printer, network id and password are required, but when printing, the job is blocked and error log states :
<pre>
I 10/Jan/2008:10:23:45 +0100 Job 180 Authenticated by "".
E 10/Jan/2008:10:23:46 +0100 Job 180 Session setup failed: NTSTATUS_LOGONFAILURE
</pre>
So, apparently, the printer is considered as purely public resulting in a athentication error.
I tried to add printers directly through CUPS interface http://localhost:631, but it leads to the same problem.
Has anyone a workaround to propose?
DD.

I think I have the exact same problem. I've tried to go to http://localhost:631 and add the printer with smb://<username>:<password>@<ip>/<sharename>
It connects just fine and adds the printer to my list.
Each time I try to send a job, CUPS gives me the following errors:
I [14/Jan/2008:15:10:28 +0100] [Job 13] Adding start banner page "none".
I [14/Jan/2008:15:10:28 +0100] [Job 13] Adding job file of type application/postscript.
I [14/Jan/2008:15:10:28 +0100] [Job 13] Adding end banner page "none".
I [14/Jan/2008:15:10:28 +0100] [Job 13] Queued on "officejet" by "preben".
I [14/Jan/2008:15:10:28 +0100] [Job 13] Started filter /usr/libexec/cups/filter/pstoappleps (PID 1473)
I [14/Jan/2008:15:10:28 +0100] [Job 13] Started filter /usr/libexec/cups/filter/pstocupsraster (PID 1474)
I [14/Jan/2008:15:10:28 +0100] [Job 13] Started filter /usr/libexec/cups/filter/rastertogutenprint.5.1 (PID 1475)
I [14/Jan/2008:15:10:28 +0100] [Job 13] Started backend /usr/libexec/cups/backend/smb (PID 1476)
E [14/Jan/2008:15:10:28 +0100] [Job 13] Session setup failed: NTSTATUS_LOGONFAILURE
E [14/Jan/2008:15:10:28 +0100] [Job 13] Session setup failed: NTSTATUS_NO_SUCHFILE
E [14/Jan/2008:15:10:29 +0100] [Job 13] Session setup failed: NTSTATUS_LOGONFAILURE
E [14/Jan/2008:15:10:29 +0100] [Job 13] Tree connect failed (NTSTATUS_ACCESSDENIED)
E [14/Jan/2008:15:10:29 +0100] PID 1476 (/usr/libexec/cups/backend/smb) stopped with status 2!
I am running with CUPS version 1.3.3
I hope somebody has a solution to this, because printing has really been pain since we upgraded to Leopard
:wq!
dpzeh

Similar Messages

  • Check_ntlm_password:  Authentication for user ['name'] - ['name'] FAILED with error NT_STATUS_LOGON_FAILURE

    Hi,
    We are running a Mountain Lion Server with Open Directory / LDAPv3, as far as I can tell.  My responsibility is to get my CentOS 6.3 box running Samba v. 3.5.10-125.el6 to authenticate users against the ML / OD box.  I can ssh to the CentOS box OK and I can get Guest access to the Samba share to go OK too.  Also, the OD passwords on the LDAP server are set to 'Open Directory' so I guess that means that they are encrypted and the Samba server is set to send encrypted passwords.  But when a user tries to properly authenticate using either say via a Mac client Finder [Command-K], or smbclient, the Samba server will generate this message:
    check_ntlm_password:  Authentication for user ['name'] -> ['name'] FAILED with error NT_STATUS_LOGON_FAILURE
    (I am blanking out the user name on purpose).
    Of course there is more to the story, but those are the basics.
    Here are the relevant parts of my smb.conf.  FWIW, the CentOS / Samba box is called Jupiter.
    Thank you,
    NickZ
    [smb.conf]
    [global]
              display charset = UTF-8
              realm = SATURN.MCLEAN.HARVARD.EDU
              netbios aliases = ANL
              server string = Welcome To The Jupiter Samba Server Version 3.5.10-125.el6
              interfaces = lo, em1
              security = SERVER
              update encrypted = Yes
              password server = saturn.mclean.harvard.edu
              smb passwd file = /var/lib/samba/private/secrets.tdb
              passdb backend = ldapsam:ldap://saturn.mclean.harvard.edu
              passwd program = /usr/bin/passwd %u
              unix password sync = Yes
              lanman auth = Yes
              client NTLMv2 auth = Yes
              client use spnego principal = Yes
              kerberos method = system keytab
              log level = 2
              syslog = 3
              log file = /var/log/samba/log.%m
              max log size = 50
              name resolve order = host lmhosts wins bcast
              server signing = auto
              preferred master = Auto
              ldap admin dn = uid=DirAdmin,cn=users,dc=saturn,dc=mclean,dc=harvard,dc=edu
              ldap group suffix = cn=groups
              ldap passwd sync = yes
              ldap suffix = dc=saturn,dc=mclean,dc=harvard,dc=edu
              ldap ssl = no
              ldap user suffix = cn=users
              usershare allow guests = Yes
              idmap backend = ldap:ldap://saturn.mclean.harvard.edu
              idmap uid = 10000-20000
              idmap gid = 30000-40000
              cups options = raw
    [homes]
              comment = Home Directories
              read only = No
    [printers]
              comment = All Printers
              path = /var/spool/samba
              printable = Yes
              browseable = No
    [anl]
              comment = Main ANL Share
              path = /anl
              read only = No
              guest ok = Yes
              hide dot files = No

    Turns out a printer driver installed on an XP (even W2K(?)) was (apparently?) flooding the OS X SMB server to the point of collapse. Uninstalling the "HP Tools" part of the driver cleared it up. The printer is an HP LJ1300. I had downloaded the full driver from HP.com. I don't know if any/all these conditions need to be matched, but: the printer was on the network using an HP print server JetDirect EX Plus, and the computer(s) in question were connecting directly to it (not via a print server). It's been too long ago, but there were always several errors in the System Log (Win XP Event Viewer) that correlated with the errors on the OS X server.
    Proud to say that since that day (10+ months ago) I've not seen it happen again. whew.

  • Samba share problem with OSX client

    hi all,
    I've a well know problem with samba server, in my case linux samba server.
    In my network 4 client Mac OSx with different OS version everyday are usually connect to samba share with smb or network finder, normaly without specifics configuration or other.
    NOW, I've 3 macbook air client with different OS version that do not connect never.
    Server log write WRONG PASSWORD but is not TRUE.
    I've tried every solution without success.
    There is a patch to be applied to client?
    it's just a coincidence that only AIR does not work?
    Thanks in advance
    Regards

    I'm noticing this in the job info as well:
    Session setup failed: NT_STATUS_LOGON_FAILURE
    and the logs show it trying to login as root when I am supplying my domain credentials.
    If I add the printer by IP address it works fine. I tried to delete keychain keys but that didn't work for me.

  • MIT Kerberos + Samba?

    Hi Guys,
    I have MIT Kerberos server installed and working (kinit/klist/pam_krb5...) and have installed the extra/samba package + I've added samba (which is the name of the daemon) into hosts.allow; but my clients aren't allowed in:
    > smbclient -U [email protected] \\\\MYSERVER\share1
    creating lame upcase table
    creating lame lowcase table
    Enter [email protected]'s password: **********
    session setup failed: NT_STATUS_NO_LOGON_SERVERS
    I'm thinking that because the auth method in my smb.conf is set to ADS, then samba is looking for an LDAP server to authenticate over?
    Is is possible to get samba and mit kerberos working in harmony without LDAP?
    Here is my client's smb.conf:
    [global]
    security = ads
    log file = /var/log/smb.log
    password server = 10.0.0.1
    realm = MYREALM.NET
    encrypt passwords = yes
    Here is my server's smb.conf:
    security = ads
    server string = Samba Server
    log file = /var/log/samba/%m.log
    max log size = 50
    password server = 10.0.0.1
    realm = MYREALM.NET
    encrypt passwords = yes
    hosts allow = 10. 127.
    [share1]
    comment = Share 1
    path = /share1
    public = no
    writable = yes
    browsable = yes
    If I run
    smbtree -L 10.0.0.1
    I can see share1
    I don't seem to have any logging whatsoever in my krb5kdc.conf or /var/log/samba/* on the server, or /var/log/smb.log on my client.
    Any help would be most appreciated!
    Thanks
    Last edited by tommed (2010-04-25 10:36:22)

    Also, if I use
    smbclient -k -U [email protected] \\\\MYSERVER\share1
    I get the following error:
    cli_session_setup_blob: receive failed (NT_STATUS_LOGON_FAILURE)
    session setup failed: NT_STATUS_LOGON_FAILURE

Maybe you are looking for

  • How can I move folders full of favorites to tab groups w/o reopening all those sites?

    I have many folders full of website pages in my IE favorites. Some more used folders are on my favorites bar--I click and it drops down a menu of all sites saved. I click one to go to that favorite. It would be difficult to use the bookmarks menu to

  • Business Objects Finance 10.5 Report Formula Stopped Working

    HI I have build reports in Report Designer, in the LAYOUT tab I have a simple formula in one Column A to add Column B and Column C Column B and C are straight forward extracts from the packages and there are figures in column B and C, lately I have b

  • Album's hide feature must be password protected

    Hide feature of album must be password protected.. As currently via navigating to the hidden folder its very easy to retrieve & view the hidden images.. or either the hidden folder be password protected.. To view the content the user must enter the p

  • When logged in multiple times, I get annoying messages from AOL System Msg

    I am using iChat from home and work. In my iChat settings, I have "Allow multiple logins for this account" set. If I log in from work (and am still logged in from home, or vice versa), I get a message from "AOL System Msg" telling me that I am now lo

  • Access to ntlm system

    hello guys, I don't know if this is the right forum to post my question... I have a java web service and I need to access to a pc that required ntlm athentication... I'm a rookie with java Any ideas or sample code to link me? Thank you very much