samba - Mar 2013 - Access to Samba-Shares with "sign communications = mandatory"

Hello Samba-Specialists,

which smb.conf-options do I have to set to get access to a Samba-Share from a
Windows7-Machine, if the Windows7-Machine is very restrictive configured
regarding 'smb-signing'?

Windows7-Configuration:
Microsoft network client: Digitally sign communications (if server agrees):
Enabled
Microsoft network client: Digitally sign communications (always): Enabled
Microsoft network server: Digitally sign communications (if client agrees):
Enabled
Microsoft network server: Digitally sign communications (always): Enabled

The following Settings in smb.conf does not work :-(
server signing = mandatory
client signing = mandatory
server schannel = auto
client schannel = auto

Thanks in advance.

Rgds
Dieter

On Mon, Mar 04, 2013 at 11:01:04AM +0100, d.guthmann at gmx.net
wrote:
> Hello Samba-Specialists,
> 
> which smb.conf-options do I have to set to get access to a Samba-Share from
a Windows7-Machine, if the Windows7-Machine is very restrictive configured
regarding 'smb-signing'?
> 
> Windows7-Configuration:
> Microsoft network client: Digitally sign communications (if server agrees):
Enabled
> Microsoft network client: Digitally sign communications (always): Enabled
> Microsoft network server: Digitally sign communications (if client agrees):
Enabled
> Microsoft network server: Digitally sign communications (always): Enabled
> 
> The following Settings in smb.conf does not work :-(
> server signing = mandatory
> client signing = mandatory
> server schannel = auto
> client schannel = auto
That should work. How does it fail ?

Hello Jeremy,
> > The following Settings in smb.conf does not work :-(
> > server signing = mandatory
> > client signing = mandatory
> > server schannel = auto
> > client schannel = auto
> That should work. How does it fail ? 
I get Errorcode 0x80070043 on Windows7 while accessing.

I want to configure an "Open" Samba-Server - all users on that network
should be able to write on all shares.
So I've configured the following:
/etc/samba/smb.conf:
[global]
 ? ? ? workgroup = Arbeitsgruppe
 ? ? ? security = user
 ? ? ? map to guest = Bad Password
 ? ? ? guest account = guest
 ? ? ? username map = /etc/samba/usermap
 ? ? ? server signing = auto
 ? ? ? client signing = auto
 ? ? ? server schannel = auto
 ? ? ? client schannel = auto
 ? ? ? browseable = yes
 ? ? ? load printers = no
 ? ? ? local master = no
 ? ? ? dns proxy = no
 ? ? ? passdb backend = smbpasswd

/etc/samba/usermap
guest = *

Now I've found a hint that Samba does not support signing, if a
"guest" want to access.
Is that true? Is there a way to configure a comfortable
"public-accessible" Samba-Server without the need to enter a username
or a password while accessing?
Thanks in Advance.

Best Regards
Dieter