[Samba] Fw: Connection fails with Server/Client Signing = Mandatory

[Bill Chockla]

Hello,
Has anyone had a chance to review this question?
Thank you,
Bill

----- Forwarded by Bill Chockla/Durham/Contr/IBM on 09/26/2012 10:04 AM
-----

From:	Bill Chockla/Durham/Contr/IBM
To:	samba at samba.org,
Date:	09/10/2012 12:52 PM
Subject:	Connection fails with Server/Client Signing = Mandatory


Hello,
When I add "server signing = mandatory" to my smb.conf file (AIX V6.1,
6100-04-11-1140 running Samba v3.6.5) that has "encrypt passwords = no", my
windows client no longer can connect. It fails with system error 64.

The windows system is running XP vers 2002 with service pack 3. The
security settings are set to:
	Microsoft network client: Digitally sign communications (always)
		Disabled
	Microsoft network client: Digitally sign communications (if server
agrees)			Enabled
	Microsoft network client: Send unencrypted password to third-party
SMB servers		Enabled
	Microsoft network server: Amount of idle time required before
suspending session	15 minutes
	Microsoft network server: Digitally sign communications (always)
		Disabled
	Microsoft network server: Digitally sign communications (if client
agrees)			Disabled
	Microsoft network server: Disconnect clients when logon hours expire
		Enabled

Like wise, when I add "server signing = mandatory" to my smb.conf file that
has "encrypt passwords = yes" (and "passdb backend = smbpasswd" with valid
id/password in the smbpasswd file), my AIX client no longer can connect.

I have added "client signing = mandatory" to smb.conf also and get the same
results (unencrypted: windows clients cannot connect. encrypted: aix
clients cannot connect).

Are there any known problems in v3.6.5 related to these connection
problems? Are there any fixes in newer releases?

I have logs with debug level 5 for the connection problem sequences if
someone needs that information. I can ftp them if someone can give me an
ftp site, id/password.
Thank you in advance for your help!
Bill Chockla