samba - Jun 2021 - NTLM Authentication failing after DC updated and restarted. Shares are asking for a password constantly.

Is there a way to temporarily allow guest access on Windows while we work
to upgrade this server?

I realize the OS is EOL. It's also running our EOL ERP system that I
inherited.

On Fri, Jun 4, 2021 at 3:38 PM Rowland penny via samba <
samba at lists.samba.org> wrote:
> On 04/06/2021 21:24, Anthony wrote:
> > Believe me, I have my worries but up until this week this server was
> > out of my control and people responsible for it are no longer here.
> > The OS is Red Hat Enterprise Linux Server release 6.3 (Santiago)
We're
> > not using SMBv1 its on SMBv2.
>
>
> That explains why you are using Samba 3.6.x, but are you aware that
> RHEL6 is EOL ?
>
> I suggest you upgrade the OS, this will get you nearer to a Samba
> supported version.
>
> I think you have run into the problem that Windows no longer allows
> guest access by default (yes, not even on a Samba server), you have to
> use a user and password.
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On 04/06/2021 21:40, Anthony wrote:
> Is there a way to temporarily allow guest access on Windows while we 
> work to upgrade this server?
>
> I realize the OS is EOL. It's also running our EOL ERP system that I 
> inherited.

Try reading this:

https://docs.microsoft.com/en-us/troubleshoot/windows-server/networking/guest-access-in-smb2-is-disabled-by-default

Rowland

G'Day Anthony,

I would look into either allowing SMB1 on your DC or (better) having
Samba use SMB2 to talk to the DC.

For the Samba side, see 'client max protocol = smb2' or 'client ipc
max
protocol = smb2'.  I've not checked when we split up the options, and I
don't know if that mode is well tested, but it would be worth a shot.

I realise things are difficult, all the 'you should have upgraded'
doesn't change an ERP system overnight!

You could also see if you can buy Samba+ packages, to get a modern
Samba on your old system: https://samba.plus/rhel

The good folks at SerNet have put a lot of effort into backporting
modern Samba onto these older systems for exactly this kind of reason.

All the best!

Andrew Bartlett

On Fri, 2021-06-04 at 15:40 -0500, Anthony via samba
wrote:
> Is there a way to temporarily allow guest access on Windows while we
> work
> to upgrade this server?
> 
> I realize the OS is EOL. It's also running our EOL ERP system that I
> inherited.
> 
> On Fri, Jun 4, 2021 at 3:38 PM Rowland penny via samba <
> samba at lists.samba.org> wrote:
> 
> > On 04/06/2021 21:24, Anthony wrote:
> > > Believe me, I have my worries but up until this week this server
> > > was
> > > out of my control and people responsible for it are no longer
> > > here.
> > > The OS is Red Hat Enterprise Linux Server release 6.3 (Santiago)
> > > We're
> > > not using SMBv1 its on SMBv2.
> > 
> > That explains why you are using Samba 3.6.x, but are you aware that
> > RHEL6 is EOL ?
> > 
> > I suggest you upgrade the OS, this will get you nearer to a Samba
> > supported version.
> > 
> > I think you have run into the problem that Windows no longer allows
> > guest access by default (yes, not even on a Samba server), you have
> > to
> > use a user and password.
> > 
> > Rowland
> > 
> > 
> > 
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> > 
-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source
Solutions