[Samba] Strong Session Key and XP

Gerald (Jerry) Carter jerry at samba.org
Tue Mar 22 11:37:44 GMT 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Gerald (Jerry) Carter wrote:
| Anthony Linux wrote:
|
| ...
| | I did a diff of the default Win XP security settings
| | and what was applied by the template.  Found the
| | culprit:  Domain Member -- Require Strong
| | (Windows 2000 or later) Session Key: Enabled.
| |
| | Once I disabled that, it worked fine.  Users
| | could login now, no problems.
| |
| | So, I wanted to share that tidbit, in case anyone
| | else is having this problem.
| |
| | Also, I was wondering if Samba can satisfy this
| | security setting?  That is, keep the Strong Session
| | Key enabled on the XP workstation and configure the
| | server to comply?  I'm worried that my security people
| | won't like me deviating from their default template
| | -- but if it's the only way to make it work, then so be
| | it.
|
| This is the 128-bit session key right ?  Andrew Bartlett
| was working on that but has since jumped ship to work on
| Samba 4.  So right now, no one is looking at this for
| Samba 3.  But things can change.

I actually could be wrong here.  I went back and looked
at the original bug report and it was a little inconclusive

Andrew, can you help me out here ?  Thanks.





ciao, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCQAOIIR7qMdg1EfYRAizfAJ9Qs49/DMK5fGoU1Fy0NRaTszW/jQCbBd2M
PDroMIVwVHRlz8hdo6GyUCc=
=aVCc
-----END PGP SIGNATURE-----


More information about the samba mailing list