samba - Oct 2017 - Fwd: Cannot connect to Samba share (4.1.11) from Windows 10

Dear all,

Le 07.09.2015 à 15:52, soonerdave a écrit :
> Windows 10 will try to negotiate SMB3_11, which Samba4 doesn't yet
support
> except in the current 4.3 release candidate. I suspect for now disabling
> SMB2/3 on the Windows 10 client is your best, if not ideal, option.
>
> Instructions for doing.this can be found
> here: https://support.microsoft.com/en-us/kb/2696547
I have the same problem. (Samba 4.1.11 and Windows 10 not able to join 
domain because our best protocol is SMB3_00)

But to be sure I understand correctly :

  * It is possible to modify Windows 10 to use older protocols ?
  * If yes, we should disable SMB3 on Windows 10 ?
  * But if I read the Microsoft document above I don't understand what
    exactly I should do to disable SMB3 ?

Thanks a lot in advance for any help or advice !

Denis

On Tue, 17 Oct 2017 19:31:17 +0200
"\(lists\) Denis BUCHER via samba" <samba at lists.samba.org>
wrote:
> Dear all,
> 
> Le 07.09.2015 à 15:52, soonerdave a écrit :
> > Windows 10 will try to negotiate SMB3_11, which Samba4 doesn't yet
> > support except in the current 4.3 release candidate. I suspect for
> > now disabling SMB2/3 on the Windows 10 client is your best, if not
> > ideal, option.
> >
> > Instructions for doing.this can be found
> > here: https://support.microsoft.com/en-us/kb/2696547
> 
> I have the same problem. (Samba 4.1.11 and Windows 10 not able to
> join domain because our best protocol is SMB3_00)
> 
> But to be sure I understand correctly :
> 
>   * It is possible to modify Windows 10 to use older protocols ?
>   * If yes, we should disable SMB3 on Windows 10 ?
>   * But if I read the Microsoft document above I don't understand what
>     exactly I should do to disable SMB3 ?
> 
> Thanks a lot in advance for any help or advice !
> 
> Denis
> 
> 
You would be better to update Samba, 4.1.x is EOL and not supported by
Samba.

You probably could disable SMB3 on Win10, but you would then be running
an insecure system.

What sort of domain are you running ?

Rowland

Dear Rowland,

Thanks a lot for your anwswer !

Le 2017-10-17 20:16, Rowland Penny via samba a écrit :
> On Tue, 17 Oct 2017 19:31:17 +0200
> "Denis BUCHER via samba" <samba at lists.samba.org> wrote:
>> Le 07.09.2015 à 15:52, soonerdave a écrit :
>> > Windows 10 will try to negotiate SMB3_11, which Samba4 doesn't
yet
>> > support except in the current 4.3 release candidate. I suspect for
>> > now disabling SMB2/3 on the Windows 10 client is your best, if not
>> > ideal, option.
>> >
>> > Instructions for doing.this can be found
>> > here: https://support.microsoft.com/en-us/kb/2696547
>> 
>> I have the same problem. (Samba 4.1.11 and Windows 10 not able to
>> join domain because our best protocol is SMB3_00)
>> 
>> But to be sure I understand correctly :
>> 
>>   * It is possible to modify Windows 10 to use older protocols ?
>>   * If yes, we should disable SMB3 on Windows 10 ?
>>   * But if I read the Microsoft document above I don't understand
what
>>     exactly I should do to disable SMB3 ?
> 
> You would be better to update Samba, 4.1.x is EOL and not supported by
> Samba.
Yes, that would be a the mid-term project (2-3 months), but on a very 
short term (a matter of days) we need to have only 2 Windows 10 machines 
connected to our Samba. All other 80 computers are Windows 7, and it's 
working very well. Sincerely we are very happy with the current system 
and will go to a brand new server (new Debian with latest Samba) only 
when migrating to Windows 10.
> You probably could disable SMB3 on Win10, but you would then be running
> an insecure system.
That's not a problem to us, as it is a 100% internal only network.

Really that's what we really need, I just don't know how to do that on 
Windows 10 ;-)
> What sort of domain are you running ?
"classic primary domain controller" with roaming profiles.

Otherwise said, your suggestions are the good ones (install a newer 
Samba server and so on) but for now the best for us would be to 
understand how to configure Windows 10 not to use SMB3 protocol ?

I know everything is explained in 
https://support.microsoft.com/en-us/kb/2696547 but I didn't understand 
what to do exactly (sorry ! ;-)

Thanks a lot for your help, and for further advices,

Denis