[Samba] Windows server 2003 domain authentication with Samba version 4.7.0-git.23.4e3f0fb9d15SUSE-oS13.3-x86_64

[L.P.H. van Belle]

Hai, 

You could try to add AES256 support for win2003, but honistly, why is windows 2003 even still in your network if you have samba running? 
Aes addon. 
https://support.microsoft.com/en-us/help/948963/an-update-is-available-to-add-support-for-the-tls-rsa-with-aes-128-cbc

Ps. That AES addon wont fix the SMB2+ problem with win2003. 
But may help with authenticating problems. 

Greetz, 

Louis




> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Peter Fodrek,ml. via samba
> Verzonden: vrijdag 10 november 2017 9:51
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Windows server 2003 domain 
> authentication with Samba version 
> 4.7.0-git.23.4e3f0fb9d15SUSE-oS13.3-x86_64
> 
> Dear Mr. Cardon!
> Na štvrtok, 9. novembra 2017 18:29:03 CET Denis Cardon via 
> samba napísali:
> 
> > 
> > > IO would like to ask for help with diagnose why my Samba version
> > > 4.7.0-git.
> > > 23.4e3f0fb9d15SUSE-oS13.3-x86_64 in openSUSE Tumbleweed  can not
> > > authentificate me on Windows server 2003 domain
> > > 
> > > in /etc/fstab  I have working combination - smb version 
> only vorks if set
> > > to 1.0
> > windows 2003 support only smb1 protocol, smb2 was introduced with
> > winvista/win2k8. On version 4.7 Samba has modified the "client max
> > protocol" to SMB3_11, but "client min protocol" was not 
> modified [1].
> > 
> > However, since you are on a rolling release, you are 
> probably on a very
> > recent kernel > 4.13. Your cifs module probably comes from 
> that kernel
> > distrib, and there has been a change on the min protocol version by
> > default, see the thread on [2].
> > 
> 
> Thank you for your answer
> Maybe I write my question in not understandable form.
> 
> CIFS mount works, but I can not login via Domain login and 
> password  to the 
> system on openSUSE.
> I just use fstab to demostrate part of SAMBA settings on my client
> 
> I look forward hering from you and anybody else
> 
> Yours faithfully
> 
> Peter Fodrek
> 
> 
> > [1] 
> https://wiki.samba.org/index.php/Samba_4.7_Features_added/changed
> > [2] https://bugzilla.redhat.com/show_bug.cgi?id=1474539
> > 
> > > //192.168.1.131/shares  /home/fodrek/shares     cifs   
> > > credentials=/home/fodrek/
> > > 
> cifs.creds,iocharset=utf8,sec=ntlm,cifsacl,user,nosuid,uid=fod
> rek,gid=use
> > > rs,vers=1.0 0 0
> > > 
> > > 
> > > On tyhe server I am detected as operating system
> > > Name:openSUSE Tumbleweed
> > > version: 20171104
> > > Service pack: 4.7.0-git.23.4e3f0fb9d15SUSE-oS13.3-x86_64
> > > 
> > > Is it possible to help me with allowing to authentificate me into
> > > domain,please?
> > > 
> > > 
> > > I look forward hearing from you
> > > 
> > > Yours faithfully
> > > 
> > > 
> > > Peter Fodrek
> 
> -----------------------------------------
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>