[Samba] [Solved] Fedora 25 Samba and XP-SP3

[Mike Brown]

On Mon, Jun 12, 2017 at 09:51:53AM +0200, Reindl Harald via samba wrote:
> Am 12.06.2017 um 09:41 schrieb Mike Brown via samba:
>> On Mon, Jun 12, 2017 at 09:28:20AM +0200, Reindl Harald via samba wrote:
>>> Am 12.06.2017 um 09:03 schrieb Mike Brown via samba:
>>>> On Mon, Jun 12, 2017 at 01:53:10PM +1200, Andrew Bartlett via samba wrote:
>>>>> On Sun, 2017-06-11 at 20:08 -0500, Mike Brown via samba wrote:
>>>>>> Yes, I know, XP-SP3 is very old.????It works for what I need it for.????I
>>>>>> have
>>>>>> some programs that will never be updated for Win 7.
>>>>>>
>>>>>> Note that XP-SP3 and Fedora 14 work together just fine, so I'm
>>>>>> guessing that
>>>>>> a newer version of Samba is what is keeping me from logging in from
>>>>>> XP.
>>>>>> But, I do not know what to put in the smb.conf file to allow XP to
>>>>>> mount
>>>>>> a share.
>>>>>
>>>>> Try configuring XP to use NTLMv2 (ideally), or set 'ntlm auth = yes' if
>>>>> you really can't set that for some reason (it is a security policy
>>>>> setting on the client, in local security policies).
>>>>
>>>> Damn firewall.  By default, Samba isn't allowed to connect.  Found it by
>>>> using wireshark to look at the packets and that gave me the clue
>>>
>>> no need for wireshark - normally one does simply "telnet host port" before
>>> even consider debug deeper
>>
>> Not sure I would have gotten the same info back.  Normally it is connection
>> refused when I do something like that.  The wireshark message was more
>> concise.  Either way, it was solved
>
> yeah and when you get connection refused on a TCP port the service is not 
> reachable at all - it's not running or some firewall in front and hence the 
> ICMP "port unrechable" response

With wireshark the response was "Destination unreachable (Host
administratively prohibited)."  The "administratively prohibited" was the
big clue.

MB
-- 
e-mail: vidiot at vidiot.com | vidiot at vidiot.net            /~\ The ASCII
        6082066843 at email.uscc.net (140 char limit)       \ / Ribbon Campaign
Visit - URL: http://vidiot.com/                           X  Against
             http://vidiot.net/                          / \ HTML Email
"You're Sherlock Holmes, wear the damn hat!" - Watson to Sherlock
Sherlock - The Abominable Bride - 1/01/16