When a domain controller specified in the NTLMServer directive responds to an SMB request with:
SMB Session Setup AndX Response, Error: Out of memory (from a WireShark decode. Sorry, don't have the capture)
mod_ntlm does not treat this as a failure and attempt to use the NTLMBackup but instead logs:
NTLM/SMB user "X": authentication failure for "Y"