Jewelyn Catingub
2008-Apr-21 14:00 UTC
[Samba] Samba send SPNEGO if Extended Security is ON
I've checked the samba code (sessetup) and found out that samba always send
spnego packet when Extended Security capability is ON.
(This can't be turned off/on ie. "use spnego = false")
Does it mean I can "never" connect to smb server that doesn't
support spnego if Extended Security is supported by server?
Is my understanding correct?
____________________________________________________________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now.
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
Gerald (Jerry) Carter
2008-Apr-21 14:18 UTC
[Samba] Samba send SPNEGO if Extended Security is ON
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jewelyn Catingub wrote:> I've checked the samba code (sessetup) and found out that samba > always send spnego packet when Extended Security capability is ON. > (This can't be turned off/on ie. "use spnego = false") > > Does it mean I can "never" connect to smb server that doesn't > support spnego if Extended Security is supported by server? > Is my understanding correct?The extended security bit == spnego support. See section 4.1.1 in the SNIA CIFS tech reference. cheers, jerry - -- ====================================================================Samba ------- http://www.samba.org Likewise Software --------- http://www.likewisesoftware.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIDKIrIR7qMdg1EfYRAsTNAKCT1HGkR463ksmWGmvRYE31AJq0KgCfapcM GbAuxzGltsPLa5qIOhdiwqc=0lTR -----END PGP SIGNATURE-----
Jewelyn Catingub
2008-Apr-22 12:02 UTC
[Samba] Samba send SPNEGO if Extended Security is ON
Thanks for your reply. But in Windows, we encountered Raw NTLMSSP (not wrapped by spnego) even if Extended Security bit is ON when there is no KDC in the workgroup. (Well, we are not sure if that was really the reason) Why is that so? ----- Original Message ---- From: Gerald (Jerry) Carter <jerry@samba.org> To: Jewelyn Catingub <jeweldaj@yahoo.com> Cc: samba@lists.samba.org Sent: Monday, April 21, 2008 10:18:19 PM Subject: Re: [Samba] Samba send SPNEGO if Extended Security is ON -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jewelyn Catingub wrote:> I've checked the samba code (sessetup) and found out that samba > always send spnego packet when Extended Security capability is ON. > (This can't be turned off/on ie. "use spnego = false") > > Does it mean I can "never" connect to smb server that doesn't > support spnego if Extended Security is supported by server? > Is my understanding correct?The extended security bit == spnego support. See section 4.1.1 in the SNIA CIFS tech reference. cheers, jerry - -- ====================================================================Samba ------- http://www.samba.org Likewise Software --------- http://www.likewisesoftware.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIDKIrIR7qMdg1EfYRAsTNAKCT1HGkR463ksmWGmvRYE31AJq0KgCfapcM GbAuxzGltsPLa5qIOhdiwqc=0lTR -----END PGP SIGNATURE----- ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
Gerald (Jerry) Carter
2008-Apr-22 12:40 UTC
[Samba] Samba send SPNEGO if Extended Security is ON
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jewelyn Catingub wrote:> Thanks for your reply. > > But in Windows, we encountered Raw NTLMSSP (not wrapped by spnego) > even if Extended Security bit is ON when there is no KDC in the workgroup. > (Well, we are not sure if that was really the reason) > Why is that so?Hmm...What clients ? cheers, jerry - -- ====================================================================Samba ------- http://www.samba.org Likewise Software --------- http://www.likewisesoftware.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIDdy3IR7qMdg1EfYRAnErAKDf1MQHPNcq7Mtt8TKc22DKY5EcjwCg0Ue9 Ta/07h63sBNVc2Vs1pubMFA=8Bw6 -----END PGP SIGNATURE-----
Jewelyn Catingub
2008-Apr-22 13:04 UTC
[Samba] Samba send SPNEGO if Extended Security is ON
----- Original Message ---- From: Gerald (Jerry) Carter <jerry@samba.org> To: Jewelyn Catingub <jeweldaj@yahoo.com> Cc: samba@lists.samba.org Sent: Tuesday, April 22, 2008 8:40:23 PM Subject: Re: [Samba] Samba send SPNEGO if Extended Security is ON -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jewelyn Catingub wrote:> Thanks for your reply. > > But in Windows, we encountered Raw NTLMSSP (not wrapped by spnego) > even if Extended Security bit is ON when there is no KDC in the workgroup. > (Well, we are not sure if that was really the reason) > Why is that so?Hmm...What clients ? Windows clients cheers, jerry - -- ====================================================================Samba ------- http://www.samba.org Likewise Software --------- http://www.likewisesoftware.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIDdy3IR7qMdg1EfYRAnErAKDf1MQHPNcq7Mtt8TKc22DKY5EcjwCg0Ue9 Ta/07h63sBNVc2Vs1pubMFA=8Bw6 -----END PGP SIGNATURE----- ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
Gerald (Jerry) Carter
2008-Apr-22 14:53 UTC
[Samba] Samba send SPNEGO if Extended Security is ON
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jewelyn Catingub wrote:> > ----- Original Message ---- > From: Gerald (Jerry) Carter <jerry@samba.org> > To: Jewelyn Catingub <jeweldaj@yahoo.com> > Cc: samba@lists.samba.org > Sent: Tuesday, April 22, 2008 8:40:23 PM > Subject: Re: [Samba] Samba send SPNEGO if Extended Security is ON > > Jewelyn Catingub wrote: >> Thanks for your reply. > >> But in Windows, we encountered Raw NTLMSSP (not wrapped by spnego) >> even if Extended Security bit is ON when there is no KDC in the > workgroup. >> (Well, we are not sure if that was really the reason) >> Why is that so? > > Hmm...What clients ? > > Windows clientsyes. I figured that. But what versions and service packs? cheers, jerry - -- ====================================================================Samba ------- http://www.samba.org Likewise Software --------- http://www.likewisesoftware.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIDfvgIR7qMdg1EfYRAinKAJ4/7g8moK3Kq98kgK5ykcy/seJOfwCfXisi OU47EbjF9zbpRiqiJudLaH4=4Vjh -----END PGP SIGNATURE-----
Jewelyn Catingub
2008-Apr-22 22:48 UTC
[Samba] Samba send SPNEGO if Extended Security is ON
----- Original Message ---- From: Gerald (Jerry) Carter <jerry@samba.org> To: Jewelyn Catingub <jeweldaj@yahoo.com> Cc: samba@lists.samba.org Sent: Tuesday, April 22, 2008 10:53:20 PM Subject: Re: [Samba] Samba send SPNEGO if Extended Security is ON -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jewelyn Catingub wrote:> > ----- Original Message ---- > From: Gerald (Jerry) Carter <jerry@samba.org> > To: Jewelyn Catingub <jeweldaj@yahoo.com> > Cc: samba@lists.samba.org > Sent: Tuesday, April 22, 2008 8:40:23 PM > Subject: Re: [Samba] Samba send SPNEGO if Extended Security is ON > > Jewelyn Catingub wrote: >> Thanks for your reply. > >> But in Windows, we encountered Raw NTLMSSP (not wrapped by spnego) >> even if Extended Security bit is ON when there is no KDC in the > workgroup. >> (Well, we are not sure if that was really the reason) >> Why is that so? > > Hmm...What clients ? > > Windows clients> yes. I figured that. But what versions and service packs?Client: Windows XP SP2 Server: Windows 2003 Server> cheers, jerry- -- ====================================================================Samba ------- http://www.samba.org Likewise Software --------- http://www.likewisesoftware.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIDfvgIR7qMdg1EfYRAinKAJ4/7g8moK3Kq98kgK5ykcy/seJOfwCfXisi OU47EbjF9zbpRiqiJudLaH4=4Vjh -----END PGP SIGNATURE----- ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
Jewelyn Catingub
2008-Apr-24 14:00 UTC
[Samba] Samba send SPNEGO if Extended Security is ON
Hi Jerry, In section 4.1.1 of the SNIA CIFS tech reference, it is not explicitly says that extended security bit == spnego support. Is it right? ----- Original Message ---- From: Jewelyn Catingub <jeweldaj@yahoo.com> To: Gerald (Jerry) Carter <jerry@samba.org> Cc: samba@lists.samba.org Sent: Wednesday, April 23, 2008 6:48:20 AM Subject: Re: [Samba] Samba send SPNEGO if Extended Security is ON ----- Original Message ---- From: Gerald (Jerry) Carter <jerry@samba.org> To: Jewelyn Catingub <jeweldaj@yahoo.com> Cc: samba@lists.samba.org Sent: Tuesday, April 22, 2008 10:53:20 PM Subject: Re: [Samba] Samba send SPNEGO if Extended Security is ON -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jewelyn Catingub wrote:> > ----- Original Message ---- > From: Gerald (Jerry) Carter <jerry@samba.org> > To: Jewelyn Catingub <jeweldaj@yahoo.com> > Cc: samba@lists.samba.org > Sent: Tuesday, April 22, 2008 8:40:23 PM > Subject: Re: [Samba] Samba send SPNEGO if Extended Security is ON > > Jewelyn Catingub wrote: >> Thanks for your reply. > >> But in Windows, we encountered Raw NTLMSSP (not wrapped by spnego) >> even if Extended Security bit is ON when there is no KDC in the > workgroup. >> (Well, we are not sure if that was really the reason) >> Why is that so? > > Hmm...What clients ? > > Windows clients> yes. I figured that. But what versions and service packs?Client: Windows XP SP2 Server: Windows 2003 Server> cheers, jerry- -- ====================================================================Samba ------- http://www.samba.org Likewise Software --------- http://www.likewisesoftware.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIDfvgIR7qMdg1EfYRAinKAJ4/7g8moK3Kq98kgK5ykcy/seJOfwCfXisi OU47EbjF9zbpRiqiJudLaH4=4Vjh -----END PGP SIGNATURE----- ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
Jewelyn Catingub
2008-Apr-29 14:26 UTC
[Samba] Samba send SPNEGO if Extended Security is ON
Help, anyone? Your responses will be greatly appreciated. Thanks! ----- Original Message ---- From: Jewelyn Catingub <jeweldaj@yahoo.com> To: Jewelyn Catingub <jeweldaj@yahoo.com>; Gerald (Jerry) Carter <jerry@samba.org> Cc: samba@lists.samba.org Sent: Thursday, April 24, 2008 10:00:04 PM Subject: Re: [Samba] Samba send SPNEGO if Extended Security is ON Hi Jerry, In section 4.1.1 of the SNIA CIFS tech reference, it is not explicitly says that extended security bit == spnego support. Is it right? ----- Original Message ---- From: Jewelyn Catingub <jeweldaj@yahoo.com> To: Gerald (Jerry) Carter <jerry@samba.org> Cc: samba@lists.samba.org Sent: Wednesday, April 23, 2008 6:48:20 AM Subject: Re: [Samba] Samba send SPNEGO if Extended Security is ON ----- Original Message ---- From: Gerald (Jerry) Carter <jerry@samba.org> To: Jewelyn Catingub <jeweldaj@yahoo.com> Cc: samba@lists.samba.org Sent: Tuesday, April 22, 2008 10:53:20 PM Subject: Re: [Samba] Samba send SPNEGO if Extended Security is ON -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jewelyn Catingub wrote:> > ----- Original Message ---- > From: Gerald (Jerry) Carter <jerry@samba.org> > To: Jewelyn Catingub <jeweldaj@yahoo.com> > Cc: samba@lists.samba.org > Sent: Tuesday, April 22, 2008 8:40:23 PM > Subject: Re: [Samba] Samba send SPNEGO if Extended Security is ON > > Jewelyn Catingub wrote: >> Thanks for your reply. > >> But in Windows, we encountered Raw NTLMSSP (not wrapped by spnego) >> even if Extended Security bit is ON when there is no KDC in the > workgroup. >> (Well, we are not sure if that was really the reason) >> Why is that so? > > Hmm...What clients ? > > Windows clients> yes. I figured that. But what versions and service packs?Client: Windows XP SP2 Server: Windows 2003 Server> cheers, jerry- -- ====================================================================Samba ------- http://www.samba.org Likewise Software --------- http://www.likewisesoftware.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIDfvgIR7qMdg1EfYRAinKAJ4/7g8moK3Kq98kgK5ykcy/seJOfwCfXisi OU47EbjF9zbpRiqiJudLaH4=4Vjh -----END PGP SIGNATURE----- ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba ________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ