SMB-Mount not working with FreeIPA Joined Samba-Server (external Storage App)

The Basics

  • Nextcloud Server version (e.g., 29.x.x):
    • 32.0.6
  • Operating system and version (e.g., Ubuntu 24.04):
    • Rocky Linux 10 with Podman
  • Web server and version (e.g, Apache 2.4.25):
    • Nextcloud AIO
  • Reverse proxy and version _(e.g. nginx 1.27.2)
    • Nextcloud AIO
  • PHP version (e.g, 8.3):
    • Nextcloud AIO
  • Is this the first time you’ve seen this error? (Yes / No):
    • yes
  • When did this problem seem to first start?
    • Replacing Active Directory with FreeIPA
  • Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
    • AIO
  • Are you using CloudfIare, mod_security, or similar? (Yes / No)
    • no

Summary of the issue you are facing:

Hello,
I have been using Nextcloud AIO with an SMB mount to my external Samba server for a very long time. Until now, this Samba server was a member of an Active Directory.
However, after completely switching to Linux and using FreeIPA, the mount no longer works.
All my other systems can mount the filesystem as before, but it doesn’t work with Nextcloud.
It even works if I try the mount directly from the Docker container (nextcloud-aio-nextcloud) using smbclient.
However, in the web interface, I fail and get the following messages in Samba’s debug logs:

Log entries

Nextcloud

{"_route":"files_external.user_global_storages.show","id":"3"}]},{"file":"/var/www/html/lib/base.php","line":1091,"function":"match","class":"OC\\Route\\Router","type":"->","args":["/apps/files_external/userglobalstorages/3"]},{"file":"/var/www/html/index.php","line":25,"function":"handleRequest","class":"OC","type":"::","args":[]}],"File":"/var/www/html/3rdparty/icewind/smb/src/Exception/Exception.php","Line":43},"message":"External storage not available: Storage unauthorized. Invalid request for / (InvalidArgumentException)","exception":{},"CustomMessage":"External storage not available: Storage unauthorized. Invalid request for / (InvalidArgumentException)"}}


SAMBA

[2026/03/30 17:04:01.609040,  3] ../../auth/ntlmssp/ntlmssp_server.c:506(ntlmssp_server_preauth)
  Got user=[testuser] domain=[TEST.ST] workstation=[NEXTCLOUD-AIO] len1=24 len2=250
[2026/03/30 17:04:01.609156,  3] ../../source3/auth/auth.c:202(auth_check_ntlm_password)
  auth_check_ntlm_password: check_ntlm_password:  Checking password for unmapped user [TEST.ST]\[testuser]@[NEXTCLOUD-AIO] with the new password interface
[2026/03/30 17:04:01.609260,  3] ../../source3/auth/auth.c:208(auth_check_ntlm_password)
  auth_check_ntlm_password: check_ntlm_password:  mapped user is: [TEST.ST]\[testuser]@[NEXTCLOUD-AIO]
[2026/03/30 17:04:04.641170,  2] ../../source3/auth/auth.c:353(auth_check_ntlm_password)
  check_ntlm_password:  Authentication for user [testuser] -> [testuser] FAILED with error NT_STATUS_NO_LOGON_SERVERS, authoritative=1
[2026/03/30 17:04:04.641476,  2] ../../auth/auth_log.c:860(log_authentication_event_human_readable)
  Auth: [SMB2,(null)] user [TEST.ST]\[testuser] at [Mo, 30 Mär 2026 17:04:04.641452 CEST] with [NTLMv2] status [NT_STATUS_NO_LOGON_SERVERS] workstation [NEXTCLOUD-AIO] remote host [ipv4:172.31.152.5:51758] mapped to [TEST.ST]\[testuser]. local host [ipv4:172.31.101.2:445] 
  {"timestamp": "2026-03-30T17:04:04.641617+0200", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 3}, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_LOGON_SERVERS", "localAddress": "ipv4:172.31.101.2:445", "remoteAddress": "ipv4:172.31.152.5:51758", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "TEST.ST", "clientAccount": "testuser", "workstation": "NEXTCLOUD-AIO", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "testuser", "mappedDomain": "TEST.ST", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "clientPolicyAccessCheck": null, "serverPolicyAccessCheck": null, "duration": 3043411}}
[2026/03/30 17:04:04.641761,  3] ../../auth/gensec/spnego.c:1426(gensec_spnego_server_negTokenTarg_step)
  gensec_spnego_server_negTokenTarg_step: SPNEGO(ntlmssp) login failed: NT_STATUS_NO_LOGON_SERVERS
[2026/03/30 17:04:04.641824,  3] ../../source3/smbd/smb2_server.c:4074(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_NO_LOGON_SERVERS] || at ../../source3/smbd/smb2_sesssetup.c:148
[2026/03/30 17:04:04.642666,  3] ../../source3/smbd/server_exit.c:230(exit_server_common)
  Server exit (NT_STATUS_CONNECTION_RESET)
[2026/03/30 17:04:07.684805,  2] ../../source3/auth/auth.c:353(auth_check_ntlm_password)
  check_ntlm_password:  Authentication for user [testuser] -> [testuser] FAILED with error NT_STATUS_NO_LOGON_SERVERS, authoritative=1
[2026/03/30 17:04:07.685081,  2] ../../auth/auth_log.c:860(log_authentication_event_human_readable)
  Auth: [SMB2,(null)] user [TEST.ST]\[testuser] at [Mo, 30 Mär 2026 17:04:07.685014 CEST] with [NTLMv2] status [NT_STATUS_NO_LOGON_SERVERS] workstation [NEXTCLOUD-AIO] remote host [ipv4:172.31.152.5:51760] mapped to [TEST.ST]\[testuser]. local host [ipv4:172.31.101.2:445] 
  {"timestamp": "2026-03-30T17:04:07.685273+0200", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 3}, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_LOGON_SERVERS", "localAddress": "ipv4:172.31.101.2:445", "remoteAddress": "ipv4:172.31.152.5:51760", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "TEST.ST", "clientAccount": "testuser", "workstation": "NEXTCLOUD-AIO", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "testuser", "mappedDomain": "TEST.ST", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "clientPolicyAccessCheck": null, "serverPolicyAccessCheck": null, "duration": 6077225}}
[2026/03/30 17:04:07.685465,  3] ../../auth/gensec/spnego.c:1426(gensec_spnego_server_negTokenTarg_step)
  gensec_spnego_server_negTokenTarg_step: SPNEGO(ntlmssp) login failed: NT_STATUS_NO_LOGON_SERVERS
[2026/03/30 17:04:07.685614,  3] ../../source3/smbd/smb2_server.c:4074(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_NO_LOGON_SERVERS] || at ../../source3/smbd/smb2_sesssetup.c:148
[2026/03/30 17:04:07.686556,  3] ../../source3/smbd/server_exit.c:230(exit_server_common)
  Server exit (NT_STATUS_CONNECTION_RESET)