[Samba] Server Signing prevents Client Access
Philip Mears
philip.mears at infrontusa.com
Tue Apr 12 16:39:17 UTC 2016
I have Samba 3.6.25-45 running with the following configuration. The read-only share should be available to the public without any username/password authentication. The Samba server will not be added to a domain. Client machines might or might not be part of a domain.
If "server signing = disabled", clients can connect to the [test] share. If "server signing = enabled" or "server signing = mandatory" the client can no longer connect. In Windows, they get error "The specified name is no longer available". The machine log has an entry of "auth/auth.c:319(check_ntlm_password) check_ntlm_password: Authentication for user [userX] -> [userX] FAILED with error NT_STATUS_NO_SUCH_USER".
I tried to overcome this with "nobody = *" in smbusers file but this forces a user/pass login prompt which is not desired.
# ############################################################################
[global]
workgroup = GROUP
server string = Samba Server Version %v
passdb backend = smbpasswd
security = user
map to guest = Bad User
username map = /etc/samba/smbusers
smb passwd file = /etc/samba/smbpasswd
guest account = nobody
domain master = no
local master = yes
encrypt passwords = yes
server signing = disabled
client signing = required
load printers = no
log level = 2
max log size = 50
log file = /var/log/samba/%m.log
# ############################################################################
[test]
path = /tmp/test
case sensitive = no
read only = yes
guest ok = yes
More information about the samba
mailing list