[Samba] Server Signing prevents Client Access

Philip Mears philip.mears at infrontusa.com
Tue Apr 12 16:39:17 UTC 2016


I have Samba 3.6.25-45 running with the following configuration.  The read-only share should be available to the public without any username/password authentication.  The Samba server will not be added to a domain.  Client machines might or might not be part of a domain.

If "server signing = disabled", clients can connect to the [test] share.  If "server signing = enabled" or "server signing = mandatory" the client can no longer connect.  In Windows, they get error "The specified name is no longer available".  The machine log has an entry of "auth/auth.c:319(check_ntlm_password)  check_ntlm_password:  Authentication for user [userX] -> [userX] FAILED with error NT_STATUS_NO_SUCH_USER".

I tried to overcome this with "nobody = *" in smbusers file but this forces a user/pass login prompt which is not desired.

# ############################################################################
[global]

workgroup = GROUP
server string = Samba Server Version %v

passdb backend = smbpasswd

security = user
map to guest = Bad User
username map = /etc/samba/smbusers
smb passwd file = /etc/samba/smbpasswd
guest account = nobody

domain master = no
local master = yes

encrypt passwords = yes
server signing = disabled
client signing = required

load printers = no

log level = 2
max log size = 50
log file = /var/log/samba/%m.log

# ############################################################################
[test]
   path = /tmp/test

   case sensitive = no
   read only = yes
   guest ok = yes


More information about the samba mailing list