[Samba] Fwd: Re: Windows server 2003 domain authentication with Samba version 4.7.0-git.23.4e3f0fb9d15SUSE-oS13.3-x86_64

[Peter Fodrek,ml.]

----------  Preposlaná správa  ----------

Predmet: Re: [Samba] Windows server 2003 domain authentication with Samba 
version 4.7.0-git.23.4e3f0fb9d15SUSE-oS13.3-x86_64
Dátum: piatok, 10. novembra 2017, 10:32:48 CET
Od: 
Pre: L.P.H. van Belle <belle at bazuin.nl>

Na piatok, 10. novembra 2017 10:07:22 CET L.P.H. van Belle via samba napísali:

> 
> You could try to add AES256 support for win2003, but honistly, why is
> windows 2003 even still in your network if you have samba running? Aes
> addon.

I am new at company  since july 2017 and Windows server is mainatined by third 
party, yet. Some applications have problem with newer MSSQL. Noiw we are 
working  together to switch sahriong from CIFS into NFS but authentification 
remains on  same LDP/KRB as I know

> https://support.microsoft.com/en-us/help/948963/an-update-is-available-to-add-support-for-the-tls-rsa-with-aes-128-cbc
> 
> Ps. That AES addon wont fix the SMB2+ problem with win2003.
> But may help with authenticating problems.

Thank you we will try

Yours faithfully


Peter Fodrek
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> > Peter Fodrek,ml. via samba
> > Verzonden: vrijdag 10 november 2017 9:51
> > Aan: samba at lists.samba.org
> > Onderwerp: Re: [Samba] Windows server 2003 domain
> > authentication with Samba version
> > 4.7.0-git.23.4e3f0fb9d15SUSE-oS13.3-x86_64
> > 
> > Dear Mr. Cardon!
> > Na štvrtok, 9. novembra 2017 18:29:03 CET Denis Cardon via
> > 
> > samba napísali:
> > > > IO would like to ask for help with diagnose why my Samba version
> > > > 4.7.0-git.
> > > > 23.4e3f0fb9d15SUSE-oS13.3-x86_64 in openSUSE Tumbleweed  can not
> > > > authentificate me on Windows server 2003 domain
> > > > 
> > > > in /etc/fstab  I have working combination - smb version
> > 
> > only vorks if set
> > 
> > > > to 1.0
> > > 
> > > windows 2003 support only smb1 protocol, smb2 was introduced with
> > > winvista/win2k8. On version 4.7 Samba has modified the "client max
> > > protocol" to SMB3_11, but "client min protocol" was not
> > 
> > modified [1].
> > 
> > > However, since you are on a rolling release, you are
> > 
> > probably on a very
> > 
> > > recent kernel > 4.13. Your cifs module probably comes from
> > 
> > that kernel
> > 
> > > distrib, and there has been a change on the min protocol version by
> > > default, see the thread on [2].
> > 
> > Thank you for your answer
> > Maybe I write my question in not understandable form.
> > 
> > CIFS mount works, but I can not login via Domain login and
> > password  to the
> > system on openSUSE.
> > I just use fstab to demostrate part of SAMBA settings on my client
> > 
> > I look forward hering from you and anybody else
> > 
> > Yours faithfully
> > 
> > Peter Fodrek
> > 
> > > [1]
> > 
> > https://wiki.samba.org/index.php/Samba_4.7_Features_added/changed
> > 
> > > [2] https://bugzilla.redhat.com/show_bug.cgi?id=1474539
> > > 
> > > > //192.168.1.131/shares  /home/fodrek/shares     cifs
> > > > credentials=/home/fodrek/
> > 
> > cifs.creds,iocharset=utf8,sec=ntlm,cifsacl,user,nosuid,uid=fod
> > rek,gid=use
> > 
> > > > rs,vers=1.0 0 0
> > > > 
> > > > 
> > > > On tyhe server I am detected as operating system
> > > > Name:openSUSE Tumbleweed
> > > > version: 20171104
> > > > Service pack: 4.7.0-git.23.4e3f0fb9d15SUSE-oS13.3-x86_64
> > > > 
> > > > Is it possible to help me with allowing to authentificate me into
> > > > domain,please?
> > > > 
> > > > 
> > > > I look forward hearing from you
> > > > 
> > > > Yours faithfully
> > > > 
> > > > 
> > > > Peter Fodrek
> > 
> > -----------------------------------------

-----------------------------------------