[Samba] Fw: Connection fails with Server/Client Signing = Mandatory
hceuterpe at gmail.com
hceuterpe at gmail.com
Fri Sep 28 20:34:55 MDT 2012
One more thing to add:
I'm pretty sure you cannot force signing and still send unencrypted
passwords to third party SMB servers (which Samba is):
Microsoft network client: Send unencrypted password to third-party SMB
Otherwise that also seems to conflict...
On Sep 26, 2012 11:06 AM, "Bill Chockla" <chockla at us.ibm.com> wrote:
> Has anyone had a chance to review this question?
> Thank you,
> ----- Forwarded by Bill Chockla/Durham/Contr/IBM on 09/26/2012 10:04 AM
> From: Bill Chockla/Durham/Contr/IBM
> To: samba at samba.org,
> Date: 09/10/2012 12:52 PM
> Subject: Connection fails with Server/Client Signing = Mandatory
> When I add "server signing = mandatory" to my smb.conf file (AIX V6.1,
> 6100-04-11-1140 running Samba v3.6.5) that has "encrypt passwords = no", my
> windows client no longer can connect. It fails with system error 64.
> The windows system is running XP vers 2002 with service pack 3. The
> security settings are set to:
> Microsoft network client: Digitally sign communications (always)
> Microsoft network client: Digitally sign communications (if server
> agrees) Enabled
> Microsoft network client: Send unencrypted password to third-party
> SMB servers Enabled
> Microsoft network server: Amount of idle time required before
> suspending session 15 minutes
> Microsoft network server: Digitally sign communications (always)
> Microsoft network server: Digitally sign communications (if client
> agrees) Disabled
> Microsoft network server: Disconnect clients when logon hours
> Like wise, when I add "server signing = mandatory" to my smb.conf file that
> has "encrypt passwords = yes" (and "passdb backend = smbpasswd" with valid
> id/password in the smbpasswd file), my AIX client no longer can connect.
> I have added "client signing = mandatory" to smb.conf also and get the same
> results (unencrypted: windows clients cannot connect. encrypted: aix
> clients cannot connect).
> Are there any known problems in v3.6.5 related to these connection
> problems? Are there any fixes in newer releases?
> I have logs with debug level 5 for the connection problem sequences if
> someone needs that information. I can ftp them if someone can give me an
> ftp site, id/password.
> Thank you in advance for your help!
> Bill Chockla
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
More information about the samba