[Samba] NTLM Authentication failing after DC updated and restarted. Shares are asking for a password constantly.

[Andrew Bartlett]

G'Day Anthony,

I would look into either allowing SMB1 on your DC or (better) having
Samba use SMB2 to talk to the DC.

For the Samba side, see 'client max protocol = smb2' or 'client ipc max
protocol = smb2'.  I've not checked when we split up the options, and I
don't know if that mode is well tested, but it would be worth a shot.

I realise things are difficult, all the 'you should have upgraded'
doesn't change an ERP system overnight!

You could also see if you can buy Samba+ packages, to get a modern
Samba on your old system: https://samba.plus/rhel

The good folks at SerNet have put a lot of effort into backporting
modern Samba onto these older systems for exactly this kind of reason.

All the best!

Andrew Bartlett

On Fri, 2021-06-04 at 15:40 -0500, Anthony via samba wrote:
> Is there a way to temporarily allow guest access on Windows while we
> work
> to upgrade this server?
> 
> I realize the OS is EOL. It's also running our EOL ERP system that I
> inherited.
> 
> On Fri, Jun 4, 2021 at 3:38 PM Rowland penny via samba <
> samba at lists.samba.org> wrote:
> 
> > On 04/06/2021 21:24, Anthony wrote:
> > > Believe me, I have my worries but up until this week this server
> > > was
> > > out of my control and people responsible for it are no longer
> > > here.
> > > The OS is Red Hat Enterprise Linux Server release 6.3 (Santiago)
> > > We're
> > > not using SMBv1 its on SMBv2.
> > 
> > That explains why you are using Samba 3.6.x, but are you aware that
> > RHEL6 is EOL ?
> > 
> > I suggest you upgrade the OS, this will get you nearer to a Samba
> > supported version.
> > 
> > I think you have run into the problem that Windows no longer allows
> > guest access by default (yes, not even on a Samba server), you have
> > to
> > use a user and password.
> > 
> > Rowland
> > 
> > 
> > 
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> > 
-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source
Solutions