Can't connect to SMB share with a space in the Active Directory username

Question

Level 1

4 points

Can't connect to SMB share with a space in the Active Directory username

My Macbook Pro is running Ventura and is connected to my Active Directory domain. I'm unable to use my Windows AD username and password to log into my Windows file server using Finder. The error dialog returned states: "URLs with the type "smb:" are not supported." There is a space in my Windows AD username. Connecting with a user account without a space in the username does work, however. Previous versions of macOS have worked fine with the space in the AD username.

Any ideas? Thanks!

MacBook Pro Apple Silicon

Posted on Nov 18, 2022 7:27 PM

Reply

Answer 1

Top-ranking reply

andrew_241 Author

Level 1

4 points

Dec 1, 2022 10:27 PM in response to andrew_241

Found the problem. It's some sort of Kerberos authentication issue. My Active Directory account had a setting checked to 'This account supports Kerberos AES 256 bit encryption.' It was also causing me problems with the account on my Windows 11 computers. Removing that check solved the issue. It might also have something to do with a Windows Server 2022 update that Microsoft rolled out this past November that deals with Kerberos.

I can now connect to the shares on my fileserver using the space in the username.

Reply

Answer 2

etresoft

Level 9

56,810 points

Nov 22, 2022 5:25 PM in response to andrew_241

Try putting a "\" character before the space. Also try replacing the space with "%20".

Reply

Answer 3

MrHoffman

Level 10

146,839 points

Nov 23, 2022 6:37 AM in response to andrew_241

andrew_241 wrote:

I just tried both those, separately and together, but still no luck.

Try using the shortname for the user, if this is a Mac user, or use whatever the Microsoft equivalent.

Failing that, re-configure the share and reconfigure LDAP to eliminate the space.

Reply

Answer 4

VikingOSX

Level 10

123,554 points

Nov 23, 2022 7:14 AM in response to andrew_241

Since you have tried the normal space escapes, have you tried an underscore in place of the space in the username/password combo?

Reply

Answer 5

MrHoffman

Level 10

146,839 points

Nov 18, 2022 8:54 PM in response to andrew_241

Check with the folks administering the Active Directory server you’re connecting to.

This might be associated with tightened security on the Windows Server involved, or you might need to reference the Windows Server DNS server.

Depending on how you’re connecting, these settings can be a direct local setting or—though you haven’t mentioned VPN usage here—can be part of your VPN client setup. Make sure the SMB server host is fully qualified.

Things can get weird if somebody has configured the network, um, problematically… and is squatting in the .local domain, as some Microsoft local networke unfortunately do, too.

Reply

Answer 6

Nov 18, 2022 7:53 PM in response to andrew_241

Greetings… i think with the new MacOS it may take correcting BIOS maybe? Have you checked over settings and attempted using Directory Utility? Hopefully someone more experienced with the new OS software can explain!

Pretty sure i read that updating Ventura required configuration in someway… Surely its a simple fix.

Regards

https://support.apple.com/guide/directory-utility/welcome-diru2dc0ea09/6.3/mac/13.0?

Reply

Answer 7

andrew_241 Author

Level 1

4 points

Nov 22, 2022 4:04 PM in response to andrew_241

This is what the Console reports:

inErrorInfo = {
    AuthType = Server;
    ErrorNumber = 45;
    ErrorType = 4;
    Scheme = smb;
    ServerName = "server.ad.*****.***";
}

Connecting using a credential without a space in the username does work, however.

Reply

Answer 8

andrew_241 Author

Level 1

4 points

Nov 22, 2022 6:43 PM in response to etresoft

I just tried both those, separately and together, but still no luck.

Reply

Can't connect to SMB share with a space in the Active Directory username

Similar questions