samba - Oct 2015 - ntlm_password_check: LM password, NT MD4 password in LM field and LMv2 failed for user username

On 10/01/2015 03:57 PM, David Whitney wrote:
> Hi mourik...are you saying these messages in the logs are new, as in
> suddenly these messages are appearing?
>
> What version of Samba are you running?
>
We're on samba 4.2.4, sernet, on wheezy, AD. Running without any issues 
for more than a year.

I have never noticed them before, and a quick search in the logs doesn't 
reveil older messages. They could be new.

But I have never seen these, and I'm not sure I fully understand them. 
One of the users in question has a windows 8 laptop.

So NOT something old....

Anyone?

If the problem machines are Windows 8 or later machines, it *could *be an
SMB protocol negotiation issue. Windows 8 will attempt to negotiate SMB
3.11, but samba < 4.3 will cap at SMB 3.0. SMB 3.11 support came out with
Samba 4.3.x.

If this is the problem, you could either disable SMB2/3 on the Windows 8
box as noted in https://support.microsoft.com/en-us/kb/2696547, or possibly
consider upgrading to Samba 4.3.x if that's possible. Not sure at all about
the sernet distro/versioning.


On Thu, Oct 1, 2015 at 11:13 AM, mourik jan heupink <heupink at
merit.unu.edu>
wrote:
>
>
> On 10/01/2015 03:57 PM, David Whitney wrote:
>
>> Hi mourik...are you saying these messages in the logs are new, as in
>> suddenly these messages are appearing?
>>
>> What version of Samba are you running?
>>
>>
> We're on samba 4.2.4, sernet, on wheezy, AD. Running without any issues
> for more than a year.
>
> I have never noticed them before, and a quick search in the logs
doesn't
> reveil older messages. They could be new.
>
> But I have never seen these, and I'm not sure I fully understand them.
One
> of the users in question has a windows 8 laptop.
>
> So NOT something old....
>
> Anyone?
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

Hi David,

Thanks for your suggestions. I'll try them out next week, when I'm 
on-site again.

MJ

On 10/01/2015 07:17 PM, David Whitney wrote:
> If the problem machines are Windows 8 or later machines, it /could /be
> an SMB protocol negotiation issue. Windows 8 will attempt to negotiate
> SMB 3.11, but samba < 4.3 will cap at SMB 3.0. SMB 3.11 support came out
> with Samba 4.3.x.
>
> If this is the problem, you could either disable SMB2/3 on the Windows 8
> box as noted in https://support.microsoft.com/en-us/kb/2696547, or
> possibly consider upgrading to Samba 4.3.x if that's possible. Not sure
> at all about the sernet distro/versioning.
>
>
> On Thu, Oct 1, 2015 at 11:13 AM, mourik jan heupink
> <heupink at merit.unu.edu <mailto:heupink at merit.unu.edu>>
wrote:
>
>
>
>     On 10/01/2015 03:57 PM, David Whitney wrote:
>
>         Hi mourik...are you saying these messages in the logs are new, as
in
>         suddenly these messages are appearing?
>
>         What version of Samba are you running?
>
>
>     We're on samba 4.2.4, sernet, on wheezy, AD. Running without any
>     issues for more than a year.
>
>     I have never noticed them before, and a quick search in the logs
>     doesn't reveil older messages. They could be new.
>
>     But I have never seen these, and I'm not sure I fully understand
>     them. One of the users in question has a windows 8 laptop.
>
>     So NOT something old....
>
>     Anyone?
>
>
>     --
>     To unsubscribe from this list go to the following URL and read the
>     instructions: https://lists.samba.org/mailman/options/samba
>
>