samba - May 2004 - SMB Signature problem against WIN2K3 server using samba3.0.0 release( Samba Developers Response requested)

There are many discussions about this problem, but none of the
developers of samba stepped in and gave any good explanation.
 
Is this solved in Samba3.0.0 official release? (In what's new section of
3.0.0rc4, the 14th point is win2k3 security settings related matter. Is
this the fix for SMB signature?)
 
In one of the discussions there is a mention of disabling security
option of Digitally Sign Communications and resetting the Admin password
to make it work with Win2K3.  Is this required for getting samba3.0.0 to
work with win2k3 server?
 
In one of the discussions there is a suggestion to use MIT Krb 1.3.1 for
encryption type match. I am using the correct version only. Here is the
output:
$ strings libkrb5.so | grep BRAND
KRB5_BRAND: krb5-1-3-1-final 1.3.1 20030730
Is this not enough to make samba3.0.0 work?
      
Any other discussions/comments on this problem are appreciated.
 
Thanks
====================================================Ram Panguluri
Member of Technical Staff
Juniper Networks Inc.
====================================================This email contains material
that is confidential. The content of this
email is for the sole use of the intended recipient(s). Any review or
distribution by persons other than the intended recipient(s) without the
express permission of Juniper Networks Inc. is strictly prohibited. If
you are not the intended recipient, please contact the sender and
delete/destroy all copies of this email and any related attachments.
Juniper does not guarantee the accuracy or completeness of third party
materials or information.

On Mon, May 24, 2004 at 04:28:09PM +0530, Ram Panguluri
wrote:
> There are many discussions about this problem, but none of the
> developers of samba stepped in and gave any good explanation.
>  
> Is this solved in Samba3.0.0 official release? (In what's new section
of
> 3.0.0rc4, the 14th point is win2k3 security settings related matter. Is
> this the fix for SMB signature?)
>  
> In one of the discussions there is a mention of disabling security
> option of Digitally Sign Communications and resetting the Admin password
> to make it work with Win2K3.  Is this required for getting samba3.0.0 to
> work with win2k3 server?
>  
> In one of the discussions there is a suggestion to use MIT Krb 1.3.1 for
> encryption type match. I am using the correct version only. Here is the
> output:
> $ strings libkrb5.so | grep BRAND
> KRB5_BRAND: krb5-1-3-1-final 1.3.1 20030730
> Is this not enough to make samba3.0.0 work?
There have been several updates to the SMB signing code since 3.0.0
was released. I'd suggest you upgrade to 3.0.4 and test that first.

Thanks,

	Jeremy.