Hi, we have just upgraded one of our very old Linux/Samba servers. After the upgrade, the Windows 95/98 clients cannot login to the server anymore. In the log I see 'NT_STATUS_ACCESS_DENIED' messages for these clients. The samba server is setup to use an NT4 PDC as the password server. The security = domain. The Windows 2000 and up clients don't have any problems. But, the Win 9x cannot login. We also have other older samba servers. Various version up till 3.0.20. The win 9x machines don't have any problems logging into those servers. -- View this message in context: http://old.nabble.com/Samba-3.4-Windows-95-98-logon-problem-tp27945229p27945229.html Sent from the Samba - General mailing list archive at Nabble.com.
> we have just upgraded one of our very old Linux/Samba servers to version > 3.4.2. After the upgrade, the Windows 95/98 clients cannot login to the > server anymore. In the log I see 'NT_STATUS_ACCESS_DENIED' messages for > these clients. >The key word here is "very old". Meanwhile, some Samba defaults changed. The default for "client lanman auth" is now "No". If you have Windows 9x clients, you should have the following in your smb.conf file: client lanman auth = Yes From the smb.conf (5) man page: ------------------------------- client lanman auth (G) This parameter determines whether or not smbclient(8) and other samba client tools will attempt to authenticate itself to servers using the weaker LANMAN password hash. If disabled, only server which support NT password hashes (e.g. Windows NT/2000, Samba, etc... but not Windows 95/98) will be able to be connected from the Samba client. The LANMAN encrypted response is easily broken, due to its case-insensitive nature, and the choice of algorithm. Clients without Windows 95/98 servers are advised to disable this option. Disabling this option will also disable the client plaintext auth option. Likewise, if the client ntlmv2 auth parameter is enabled, then only NTLMv2 logins will be attempted. Default: client lanman auth = no -------------------------------
I am not at all familiar with the use of Windows 9x clients, but I suppose that you also need to include the following: lanman auth = Yes
On 2010/03/21 05:42 (GMT-0700) selcuko composed:> we have just upgraded one of our very old Linux/Samba servers to version > 3.4.2. After the upgrade, the Windows 95/98 clients cannot login to the > server anymore. In the log I see 'NT_STATUS_ACCESS_DENIED' messages for > these clients.> The samba server is setup to use an NT4 PDC as the password server. The > security = domain. The Windows 2000 and up clients don't have any problems. > But, the Win 9x cannot login.> We also have other older samba servers. Various versions up till 3.0.20. The > win 9x machines don't have any problems logging into those servers.Maybe http://lists.samba.org/archive/samba/2010-March/154376.html has your answer. -- "The wise are known for their understanding, and pleasant words are persuasive." Proverbs 16:21 (New Living Translation) Team OS/2 ** Reg. Linux User #211409 Felix Miata *** http://fm.no-ip.com/
try to reset the password for the users using w95/98. it usually works. Le 21/03/2010 13:42, selcuko a ?crit :> Hi, > > we have just upgraded one of our very old Linux/Samba servers to version > 3.4.2. After the upgrade, the Windows 95/98 clients cannot login to the > server anymore. In the log I see 'NT_STATUS_ACCESS_DENIED' messages for > these clients. > > The samba server is setup to use an NT4 PDC as the password server. The > security = domain. The Windows 2000 and up clients don't have any problems. > But, the Win 9x cannot login. > > We also have other older samba servers. Various versions up till 3.0.20. The > win 9x machines don't have any problems logging into those servers. >-- Pascal Valois Service Informatique Pole Universitaire L?onard de Vinci
Anybody else having the same problem? Better yet any solution? I know Windows 95 clients are not that common anymore and that what we will try to do as well. But, it is sometimes hard because of some legacy hardware requirements. ________________________________ From: Selcuk Ozturk <sozt65 at yahoo.com> To: samba at lists.samba.org Sent: Mon, March 22, 2010 7:05:57 AM Subject: Re: [Samba] Samba 3.4 Windows 95/98 logon problem The domain controller is an old NT4, not the samba server. The password there works fine because the machines can connect to the PDC's shares no problem. The key here is the "security = domain" setting. When I change it to "security = server" it works fine. Both settings should be essentially same except "domain" is less demanding on the PDC and more fault tolerant. Under both settings, the NT4 PDC is asked to validate the password. But, the first one does not work while the second does. Selcuk ________________________________ From: Pascal Valois <pascal.valois at devinci.fr> To: samba at lists.samba.org Sent: Sun, March 21, 2010 1:37:10 PM Subject: Re: [Samba] Samba 3.4 Windows 95/98 logon problem try to reset the password for the users using w95/98. it usually works. Le 21/03/2010 13:42, selcuko a ?crit :> Hi, > > we have just upgraded one of our very old Linux/Samba servers to version > 3.4.2. After the upgrade, the Windows 95/98 clients cannot login to the > server anymore. In the log I see 'NT_STATUS_ACCESS_DENIED' messages for > these clients. > > The samba server is setup to use an NT4 PDC as the password server. The > security = domain. The Windows 2000 and up clients don't have any problems. > But, the Win 9x cannot login. > > We also have other older samba servers. Various versions up till 3.0.20. The > win 9x machines don't have any problems logging into those servers. >-- Pascal Valois Service Informatique Pole Universitaire L?onard de Vinci -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba