Hello.
I've just compiled Samba-3.0.0 on Tru-64 5.1b (AKA Digital Unix, AKA
OSF) with base security (no shadow passwords) using the native compiler
and GNU make. In smb.conf I'm forcing NTLMv2 only:
security = user
encrypt passwords = yes
lanman auth = No
ntlm auth = No
client NTLMv2 auth = Yes
client lanman auth = No
client plaintext auth = No
Using smbclient on the samba server, users are able to authenicate
(smbclient -L SERVER -U user%passwd). From a Win95 client, they just get
"The password is incorrect". The Win95 client authenicates against a
2000 server. The pertinent regisrty settings look like:
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\control\LSA]
"LMCompatibility"=dword:00000003
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\control\LSA\MSV1_0]
"NtlmMinClientSec"=dword:00080000
I've verified the Secur32.dll on the Win95 is the 128-bit version, and
that Winsock 2.0 update and DUN 1.3 are installed.
If I use "security = domain" and use "password server = *"
the users
authenicate fine, but I'd rather have this machine be pretty much
stand-alone.
Can someone clue me in, or are Win95 clients just out of luck?
On Wed, 2003-11-26 at 06:48, Mike Grau wrote:> Hello. > > I've just compiled Samba-3.0.0 on Tru-64 5.1b (AKA Digital Unix, AKA > OSF) with base security (no shadow passwords) using the native compiler > and GNU make. In smb.conf I'm forcing NTLMv2 only:> Can someone clue me in, or are Win95 clients just out of luck?Win9X is out of luck, unless you install the 'AD intergration' patch. (I can't recall it's exact name). Win9X can't even do NTLM authentication (only LM), so NTLMv2 is well beyond it's puny powers... Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au Manager, Authentication Subsystems, Samba Team abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/samba/attachments/20031126/66728da4/attachment.bin