[Samba] Strong Session Key and XP
Gerald (Jerry) Carter
jerry at samba.org
Tue Mar 22 11:37:44 GMT 2005
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gerald (Jerry) Carter wrote:
| Anthony Linux wrote:
|
| ...
| | I did a diff of the default Win XP security settings
| | and what was applied by the template. Found the
| | culprit: Domain Member -- Require Strong
| | (Windows 2000 or later) Session Key: Enabled.
| |
| | Once I disabled that, it worked fine. Users
| | could login now, no problems.
| |
| | So, I wanted to share that tidbit, in case anyone
| | else is having this problem.
| |
| | Also, I was wondering if Samba can satisfy this
| | security setting? That is, keep the Strong Session
| | Key enabled on the XP workstation and configure the
| | server to comply? I'm worried that my security people
| | won't like me deviating from their default template
| | -- but if it's the only way to make it work, then so be
| | it.
|
| This is the 128-bit session key right ? Andrew Bartlett
| was working on that but has since jumped ship to work on
| Samba 4. So right now, no one is looking at this for
| Samba 3. But things can change.
I actually could be wrong here. I went back and looked
at the original bug report and it was a little inconclusive
Andrew, can you help me out here ? Thanks.
ciao, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCQAOIIR7qMdg1EfYRAizfAJ9Qs49/DMK5fGoU1Fy0NRaTszW/jQCbBd2M
PDroMIVwVHRlz8hdo6GyUCc=
=aVCc
-----END PGP SIGNATURE-----
More information about the samba
mailing list