samba - Jan 2007 - Mac OS X and AD

I have a question about integrating MAc OS X and Windows 2003 AD Domain. Getting
the machine to join the doamin is easy. But when I try to map the home drives, I
can see them but not access them. There was a note that implied this is due to
sending encrypted vs non-encrypted with samba and that Win 2K3 server SP1 broke
that. It says to disable kerberos authentication on the Windows side. Is that
the case or is there a fix for Samba that re-enables this feature. Sorry I
don't have the version of Samba it is using but just wondering if anyone on
the list can point me in the right direction. Thanks!

On 20/01/07, David A. Toth <d_toth@ltu.edu> wrote:
> I have a question about integrating MAc OS X and Windows 2003 AD Domain.
> Getting the machine to join the doamin is easy. But when I try to map the
home
> drives, I can see them but not access them. There was a note that implied
this is due
> to sending encrypted vs non-encrypted with samba and that Win 2K3 server
SP1
> broke that. It says to disable kerberos authentication on the Windows side.
Is that
> the case or is there a fix for Samba that re-enables this feature. Sorry I
don't have
> the version of Samba it is using but just wondering if anyone on the list
can point me
> in the right direction. Thanks!
The best place to ask this sort of question is the macos-x-server list:
        http://lists.apple.com/mailman/listinfo/macos-x-server

-- 
James Peach | jorgar@gmail.com

David A. Toth skrev:
> I have a question about integrating MAc OS X and Windows 2003 AD Domain.
Getting the machine to join the doamin is easy. But when I try to map the home
drives, I can see them but not access them. There was a note that implied this
is due to sending encrypted vs non-encrypted with samba and that Win 2K3 server
SP1 broke that. It says to disable kerberos authentication on the Windows side.
Is that the case or is there a fix for Samba that re-enables this feature. Sorry
I don't have the version of Samba it is using but just wondering if anyone
on the list can point me in the right direction. Thanks!
>   
Known issue with mac os x (using samba 3.0.14) If you want it to work
you will have to disable encrypted communication on the windows server.

Windows Server 2003 Authentication

By deafult Windows Server 2003 will try to encrypt everything sent to
and from it. With this enabled you will not be able to log in to the
share from your Mac.
To fix this there are a couple of options.
Case 1, your server is nothing more than a regular file server. In this
case open up regedit (Start > Run > "regedit" {return}), and
navigate to
HKEY_LOCAL_MACHINE \ System \ CurrentControlSet \ Services \
LanManServer \ Parameter \ RequireSecuritySignature, and set it's value
to "0".
Case 2, your server is also a Domain Controller. In which case you need
to open the DC's Security Policy (Administrative Tools > Domain
Controller Security Policy). Navigate to Local Policies > Secuiry
Options, and disable "Microsoft network server: Digitally sign
communications (always)" & "Microsoft network server: Digitally
sign
communications (if client agrees)". Reboot your sever, and you should be
good to go.

-- 
Best Regards
Rune T?nnesen