[Samba] Fw: Connection fails with Server/Client Signing = Mandatory

[hceuterpe at gmail.com]

I see an issue with this line
Microsoft network client: Digitally sign communications (always) Disabled
Set both that and the network server policy as enabled and see what
happens. Setting that as disabled only makes sense if the samba setting is
still set to auto. Otherwise, it appears conflicting.
 On Sep 26, 2012 11:06 AM, "Bill Chockla" <chockla at us.ibm.com> wrote:

>
>
> Hello,
> Has anyone had a chance to review this question?
> Thank you,
> Bill
>
> ----- Forwarded by Bill Chockla/Durham/Contr/IBM on 09/26/2012 10:04 AM
> -----
>
> From:   Bill Chockla/Durham/Contr/IBM
> To:     samba at samba.org,
> Date:   09/10/2012 12:52 PM
> Subject:        Connection fails with Server/Client Signing = Mandatory
>
>
> Hello,
> When I add "server signing = mandatory" to my smb.conf file (AIX V6.1,
> 6100-04-11-1140 running Samba v3.6.5) that has "encrypt passwords = no", my
> windows client no longer can connect. It fails with system error 64.
>
> The windows system is running XP vers 2002 with service pack 3. The
> security settings are set to:
>         Microsoft network client: Digitally sign communications (always)
>                 Disabled
>         Microsoft network client: Digitally sign communications (if server
> agrees)                 Enabled
>         Microsoft network client: Send unencrypted password to third-party
> SMB servers             Enabled
>         Microsoft network server: Amount of idle time required before
> suspending session      15 minutes
>         Microsoft network server: Digitally sign communications (always)
>                 Disabled
>         Microsoft network server: Digitally sign communications (if client
> agrees)                 Disabled
>         Microsoft network server: Disconnect clients when logon hours
> expire
>                 Enabled
>
> Like wise, when I add "server signing = mandatory" to my smb.conf file that
> has "encrypt passwords = yes" (and "passdb backend = smbpasswd" with valid
> id/password in the smbpasswd file), my AIX client no longer can connect.
>
> I have added "client signing = mandatory" to smb.conf also and get the same
> results (unencrypted: windows clients cannot connect. encrypted: aix
> clients cannot connect).
>
> Are there any known problems in v3.6.5 related to these connection
> problems? Are there any fixes in newer releases?
>
> I have logs with debug level 5 for the connection problem sequences if
> someone needs that information. I can ftp them if someone can give me an
> ftp site, id/password.
> Thank you in advance for your help!
> Bill Chockla
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>