I have a samba v4.17.5 server working well, I can browse all of the shares from Win 10 clients. The clients and the samba host are members of a domain.
However, when I try to browse the samba server from a Win 2019 server, I get error 0x80070035. The Network "Security:LAN Manager authentication level" is set to "Send NTLMv2 response only. Refuse LM & NTLM" on the Win 2019 server.
My samba server's smb.conf leaves at default (not configured in conf) the following:
- lanman auth
- ntlm auth
- server signing
so the Samba server should be using NTLMv2 by default.
I'm not sure what is causing this. If I browse to the samba server from the win2019 server using the samba server's IP address I get error 0x80004005. I suspect this is NTLM related but I can't figure it out.
Based on this post I tried entering a un/pw into the windows credentials manager on the Win2019server. Interestingly, when I try to browse to the samba host I now get a credentials challenge (popup to enter credentials) but all credentials are refused, even valid local accounts on the samba host.
UPDATE: I realize I was logged into the Win2019server as domain administrator. And for some reason that made samba refuse the connection. I tried the solution described here (adding "min domain uid = 0" to smb.conf) and all started to work!
Can someone explain what this accomplished?