Thanks for the wireshark tip, I found that the domain wasn't getting included in the NTLMSSP_AUTH packet. cifscreds add -u user@xxxxxxxxxx share allows me to access the mutiuser mount as my user. My question now is, where should that domain be specified so that it's not needed when running cifscreds? The mount already has domain=domain.com set, and in the pam_cifscreds.co module's line in /etc/pam.d/common-session, I tried replacing host=dc.domain.com with domain=domain.com, but still the NTLMSSP_AUTH packet didn't have the domain set. > Ubuntu 18 is from 2018 right? There have been multiple regressions and > fixes related to signing since then. After a quick scan I see these > fixes (from most recent to oldest): Yeah, 18.04 is from 2018, but 20.04 (the most recent LTS release) has the same change in functionality. Should've made that clearer in my initial post.