Christoph Badura
2005-Oct-17 21:14 UTC
[Samba] samba-3.0.20a: winbind with "disable netbios = yes"?
Hello, I'm trying to use ntlm_auth and winbindd to authenticate users against a Windows 2003 AD server. Despite having "disable netbios yes", winbindd insists on doing one NetBIOS exchange on UDP port 138 on startup. If I block this port "wbinfo -t", "wbinfo -a username", and ntlm_auth request fail with: error code was NT_STATUS_INVALID_COMPUTER_NAME (0xc0000122) Is this supposed to work? After a quick look at the winbind source code it is not cleat to me that the code ever checks lp_disable_netbios. Regards, -- Christoph Badura, atsec information security GmbH Theodor-Heuss-Ring 1, 50668 Koeln, Germany bad@atsec.com, phone +49 221 57962-48, mobile +49 173 571 3345
Gerald (Jerry) Carter
2005-Oct-17 21:35 UTC
[Samba] samba-3.0.20a: winbind with "disable netbios = yes"?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Christoph Badura wrote:> Hello, > > I'm trying to use ntlm_auth and winbindd to authenticate users against > a Windows 2003 AD server. Despite having "disable netbios yes", winbindd > insists on doing one NetBIOS exchange on UDP port 138 on startup. If I > block this port "wbinfo -t", "wbinfo -a username", and ntlm_auth request > fail with: > > error code was NT_STATUS_INVALID_COMPUTER_NAME (0xc0000122) > > Is this supposed to work? After a quick look at the winbind source code > it is not cleat to me that the code ever checks lp_disable_netbios.Yes. It should work. I'll try to double check tomorrow. cheers, jerry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDVBjOIR7qMdg1EfYRAo6jAKCJyHqz7Vs9JQUFjpPrbIjbw4KhEgCfVKsX mXL3ZAtMKfl5QCklfvrRiiA=Mk12 -----END PGP SIGNATURE-----