samba - Mar 2010 - Trouble connecting to Samba 3.3.2 on Ubuntu from Win98

Greetings-

Since the last time I tried to connect a Win98 client PC to our Samba PDC I
upgraded the PDC from Debian Sarge and Samba 3.0.26a-1 from samba.org to an
Ubuntu 9.04 server running Samba 3.3.2 from
Ubuntu. I was able to port the smb.conf to the new server only changing the join
domain script to account for Debian/Ubuntu differences to that one line.

I think I recall correctly the steps to connect Win98 to Samba, but it is not
authenticating.

I checked the box to log into a NT domain, and filled in the domain name.

I also filled in the same domain name to the workgroup field "on the next
tab from where I saw the NT domain name question". (Sorry, do not have the
screen in front of me.)

I do not recall it being more complicated than that.

Once Win98 was rebooted, it comes up with a domain style login screen, and will
not accept my password.

The accounts are known good - I can log in from Windows XP / 2000 and Linux
computers just fine.

I see log files for this Win98 client showing up - both a IP addy named log and
a hostname named log, both are zero (0) length.

Possibly did I forget a critical detail somewhere?

TIA!

-- 
Michael Lueck
Lueck Data Systems
http://www.lueckdatasystems.com/

I think you have to set

encrypt passwords = false
  lanman auth = true

which is not enabled by default since it is considered a big security hole.




On 03/15/2010 03:08 PM, Michael Lueck wrote:
> Greetings-
>
> Since the last time I tried to connect a Win98 client PC to our Samba 
> PDC I upgraded the PDC from Debian Sarge and Samba 3.0.26a-1 from 
> samba.org to an Ubuntu 9.04 server running Samba 3.3.2 from Ubuntu. I 
> was able to port the smb.conf to the new server only changing the join 
> domain script to account for Debian/Ubuntu differences to that one line.
>
> I think I recall correctly the steps to connect Win98 to Samba, but it 
> is not authenticating.
>
> I checked the box to log into a NT domain, and filled in the domain name.
>
> I also filled in the same domain name to the workgroup field "on the 
> next tab from where I saw the NT domain name question". (Sorry, do not
> have the screen in front of me.)
>
> I do not recall it being more complicated than that.
>
> Once Win98 was rebooted, it comes up with a domain style login screen, 
> and will not accept my password.
>
> The accounts are known good - I can log in from Windows XP / 2000 and 
> Linux computers just fine.
>
> I see log files for this Win98 client showing up - both a IP addy 
> named log and a hostname named log, both are zero (0) length.
>
> Possibly did I forget a critical detail somewhere?
>
> TIA!
>

On Mon, Mar 15, 2010 at 03:14:47PM -0400, Gaiseric Vandal
wrote:
> I think you have to set
> 
> encrypt passwords = false
No, please NEVER use this one :-)
>  lanman auth = true
That might be required.

Volker

Volker Lendecke wrote:
> On Mon, Mar 15, 2010 at 03:14:47PM -0400, Gaiseric Vandal wrote:
>> I think you have to set
>>
>> encrypt passwords = false
> 
> No, please NEVER use this one :-)
I would not! ;-)
>>  lanman auth = true
> 
> That might be required.
Tried, did not make a difference.

I guess I will crank up the Samba logging level. (shrug)

-- 
Michael Lueck
Lueck Data Systems
http://www.lueckdatasystems.com/

On 2010/03/15 16:50 (GMT-0400) Michael Lueck composed:
> Volker Lendecke wrote:
>>>  lanman auth = true
>> That might be required.
> Tried, did not make a difference.
OS/2 takes that plus two more:

client lanman auth = [Yes,True]
client plaintext auth = [Yes,True]

Likely same on W98.
-- 
"The wise are known for their understanding, and pleasant
words are persuasive." Proverbs 16:21 (New Living Translation)

 Team OS/2 ** Reg. Linux User #211409

Felix Miata  ***  http://fm.no-ip.com/

Michael Lueck wrote:
> Volker Lendecke wrote:
>> On Mon, Mar 15, 2010 at 03:14:47PM -0400, Gaiseric Vandal wrote:
>>>  lanman auth = true
>>
>> That might be required.
> 
> Tried, did not make a difference.
> 
> I guess I will crank up the Samba logging level. (shrug)
As soon as I cranked the logging up to 10, Win98 connected in just great.

Suspicious I set logging back to 1, still logged in.

I commented out the "lanman auth = true" line and Win98 could not log
in.

I put it back in, and Win98 again works.

(shrug) Problem solved with that one line after all. Thanks very much! :-)

Sincerely,

-- 
Michael Lueck
Lueck Data Systems
http://www.lueckdatasystems.com/

Felix Miata wrote:
> OS/2 takes that plus two more:
> 
> client lanman auth = [Yes,True]
> client plaintext auth = [Yes,True]
Interesting... I do use OS/2 on occasion, I have neither of those in my
smb.conf, and it worked while on the Debian Sarge / 2.0.26a configuration.

I have not tried since migrating, so perhaps I will get bit when I do, so thanks
in advance! ;-)

Sincerely,

-- 
Michael Lueck
Lueck Data Systems
http://www.lueckdatasystems.com/