samba - Apr 2012 - NTLMv2 issues

On Fri, 2012-04-13 at 19:41 +0000, Chu, Ronald wrote:
> hey all.  we are running samba 3.5.4 on AIX but when client upgrade to
> Win 7.. none of the client  on window can see the share drive on AIX.
>  
> the error said "window cannot access "servername" ..  i know
it is
> group policy causing the problem  and
>  
> once i took out "computer configuration -> windows settings ->
> security settings -> local policies -> security options -> network
> security:minimum security for NTLMSSP based client" to not defined..
> it started working..
>  
>  
> unfortunate, it is group policy that we can't disabled it or changeing
> it for everyone..
>  
> Do you guys have any idea where i can fix the problem?
Are you using 'security=server'?  security=server is incompatible with
ntlmv2.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org

yes I did

Which one to use 

Thanks

----- Original Message -----
From: Andrew Bartlett [mailto:abartlet at samba.org]
Sent: Friday, April 13, 2012 03:55 PM
To: Chu, Ronald
Cc: samba at lists.samba.org. <samba at lists.samba.org>
Subject: Re: NTLMv2 issues

On Fri, 2012-04-13 at 19:41 +0000, Chu, Ronald wrote:
> hey all.  we are running samba 3.5.4 on AIX but when client upgrade to
> Win 7.. none of the client  on window can see the share drive on AIX.
>  
> the error said "window cannot access "servername" ..  i know
it is
> group policy causing the problem  and
>  
> once i took out "computer configuration -> windows settings ->
> security settings -> local policies -> security options -> network
> security:minimum security for NTLMSSP based client" to not defined..
> it started working..
>  
>  
> unfortunate, it is group policy that we can't disabled it or changeing
> it for everyone..
>  
> Do you guys have any idea where i can fix the problem?
Are you using 'security=server'?  security=server is incompatible with
ntlmv2.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org