Samba/Printing Authentication Issue

Hi all,

I have a F36 system (samba version 4.16.1) that I’m trying to set up samba network printing on. The printer can be added via the printer GUI or lpadmin, but when printing and authenticating, I get the following:

cli_session_setup_spnego_send: Connect to xxxxxxxxxx as xxxxx@XXXXXXX using SPNEGO
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'spnego' registered
GENSEC backend 'schannel' registered
GENSEC backend 'ncalrpc_as_system' registered
GENSEC backend 'sasl-EXTERNAL' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'ntlmssp_resume_ccache' registered
GENSEC backend 'http_basic' registered
GENSEC backend 'http_ntlm' registered
GENSEC backend 'http_negotiate' registered
Starting GENSEC mechanism spnego
gensec_spnego_client_negTokenInit_step: Could not find a suitable mechtype in NEG_TOKEN_INIT
gensec_update_done: spnego[0x563f51e6e9c0]: NT_STATUS_INVALID_PARAMETER
SPNEGO login failed: An invalid parameter was passed to a service or function.
session setup failed: NT_STATUS_INVALID_PARAMETER

Ubuntu 20.04 system with samba version 4.13.17 is able to authenticate and print fine, and uses NTLMSSP successfully. Both systems are communicating over SMB3_02.

Is there any way I can force samba client to use NTLMSSP? A few of the smb.conf config options that I have tried already have been deprecated.

Thanks

Fixed, fips-mode-setup --enable was the issue in our specific environment.

1 Like