[Samba] NTLMv2 in Samba 3.0

[Andrew Bartlett]

On Thu, 2004-02-12 at 08:27, Chu, Dan wrote:
> I tested NTLMv2 again using the newly created Samba 3.0.2 (I didn't test
> 3.0.1). It still doesn't seem to work. Has anyone successfully made
> NTLMv2 work? If so, can I have a working sample of the smb.conf file? 
> 
> I have included below entries in my smb.conf (among other entries):
> security = server
> password server = NTDomainController

> client ntlmv2 auth = yes

This is not required for pass-though NTLMv2 authentication.

> On both NTDomainController and W2k client, I have Imcompatibilitylevel
> set to 3 or 5 from the Registry Editor for LSA. On NTDomainController,
> it also has both NtlmMinClientSec and NtlmMinServerSec set to 0x00080000
> (to permit only NTLMv2 session security). I just cannot map a drive from
> W2k client to the Samba server running Solaris 8.

Use 'security=domain'.  NTLM2 session security is not compatible with
'security=server'.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20040212/b637d62e/attachment.bin