[Samba] SMB2 weird behavior with samba 3.6 PDC

[Mark Reidenbach]

I tried enabling SMB2 on our network after upgrading to samba 3.6 and
experienced the following problems.  Commenting out "Max Protocol = SMB2"
makes the windows7 and vista clients happy.

   - [homes] Trying to open a html file in notepad fails on Windows7 Pro
   SP1.  Opening it in Firefox (default browser) or Open Office works ok.
   - [homes] Mozilla Thunderbird insists on downloading all the IMAP headers
   each time it is launched on Vista Pro SP2.
   - [public] Copying files from the local computer or a USB key to samba
   works ok, but Firefox and Chrome are unable to save files to the samba
   shares.  They download files ok (e.g. file.part) but seem to be unable to
   rename the file when the download is complete.
   - [public] Installing programs from samba seems to partially work.
   Installing Itunes 10.4 for 64 bit windows 7 seemed to work but the Apple
   Software Update program was not installed (uninstalling, copying
   iTunes64Setup.exe to the desktop, and running the setup program worked).

My smb.conf is:
[global]
        domain logons = Yes
        domain master = Yes
        preferred master = Yes
        workgroup = SYNERGY

        netbios name = SERVER
        server string = Office Samba Server
        passdb backend = tdbsam
        encrypt passwords = yes

        min protocol = NT1
        max protocol = SMB2

        server schannel = yes
        server signing = mandatory
        lanman auth = No
        ntlm auth = No
        lm announce = No

        client schannel = yes
        client signing = auto
        client ntlmv2 auth = Yes
        client lanman auth = No
        client plaintext auth = No
        client use spnego = No
        client use spnego principal = No

        directory name cache size = 500

        name resolve order = host wins bcast
        add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s
/bin/false -M %u
        logon script = logon.cmd
        logon drive = z:
        logon path =
        logon home = \\server\%U
        dns proxy = No
        wins support = Yes
        time server = Yes
        ldap ssl = no

        log file = /var/log/samba/%m.log
        log level = 3

        bind interfaces only = yes
        interfaces = 192.168.13.150/24 127.0.0.1
        smb ports = 445

        hosts allow = 127.0.0.1, 192.168.13.0/255.255.255.0,
192.168.2.0/255.255.255.0, 192.168.3.0/255.255.255.0,
192.168.100.0/255.255.255.0, 192.168.1.230
        hosts deny = 0.0.0.0/0.0.0.0

        # printing setup
        load printers = Yes
        printing = cups
        printcap = cups
        show add printer wizard = Yes

        # Some defaults to prevent access problems when upgrading (i.e
3.0.23 -> 3.0.24 -> 3.0.25)
        host msdfs = yes
        msdfs root = yes

        kernel change notify = yes
        use sendfile = yes

        # allow enumeration of winbind users and groups
        winbind enum users = yes
        winbind enum groups = yes
        # give winbind users a real shell (only needed if they have telnet
access)
        template shell = /bin/bash

        lock directory = /var/lib/samba

        # Samba 3.6 changes
        idmap config * : backend = tdb2
        idmap config * : range = 1000-20000

[netlogon]
        comment = Network Logon Service
        path = /home/samba/netlogon
        guest ok = Yes
        browseable = No
        read only = Yes

[printers]
        comment = All Printers
        path = /usr/local/samba/printers
        read only = Yes
        create mask = 0777
        guest ok = Yes
        printable = Yes
        browseable = Yes

[print$]
        comment = Printer Drivers
        # this path holds the driver structure after cupsaddsmb command
        path = /usr/local/samba/windows_drivers
        guest ok = no
        browseable = yes
        read only = yes
        write list = root

[public]
        comment = Public Files
        path = /home/samba/public
        strict allocate = yes
        read only = No
        create mask = 0777
        directory mask = 0777
        vfs objects = readahead

[homes]
        comment = Home Directories
        path = /home/samba/homes/%S
        strict allocate = yes
        read only = No
        create mask = 0700
        browseable = No
        valid users = %S