search for: openspecif

Hello, I was reading about secure Dialect negotiation to prevent man-in-middle to downgrade dialects & capabilities. _https://blogs.msdn.microsoft.com/openspecification/2012/06/28/smb3-secure-dialect-negotiation/_ I wanted to ask, is there any option to disable SMB2 to do dialect renegotiation as present in Windows8 clients, as they can control using RequireSecureNegotiate. -- Thanks Amit Kumar !!If you stumble, get back up. What happened yesterday, no...

...thing like this: dn: CN=DC1,OU=Domain Controllers,DC=samdom,DC=example,DC=com msDS-SupportedEncryptionTypes: 31 For every DC & computer in your domain. I think your problem has occurred because you started with a windows 2003 DC, see here for info on this attribute: http://blogs.msdn.com/b/openspecification/archive/2009/09/12/msds-supportedencryptiontypes-episode-1-computer-accounts.aspx?Redirected=true You could try adding it to each computer and see how you go on. Rowland Rowland

Try your search like this: ldbsearch -H /usr/local/samba/private/sam.ldb '(objectclass=computer)' msDS-SupportedEncryptionTypes

...n Controllers,DC=samdom,DC=example,DC=com > msDS-SupportedEncryptionTypes: 31 > > For every DC & computer in your domain. > > I think your problem has occurred because you started with a windows > 2003 DC, see here for info on this attribute: > > http://blogs.msdn.com/b/openspecification/archive/2009/09/12/msds-supportedencryptiontypes-episode-1-computer-accounts.aspx?Redirected=true > > > You could try adding it to each computer and see how you go on. > > Rowland > Rowland > > > >

...le,DC=com >> msDS-SupportedEncryptionTypes: 31 >> >> For every DC & computer in your domain. >> >> I think your problem has occurred because you started with a windows >> 2003 DC, see here for info on this attribute: >> >> http://blogs.msdn.com/b/openspecification/archive/2009/09/12/msds-supportedencryptiontypes-episode-1-computer-accounts.aspx?Redirected=true >> >> >> You could try adding it to each computer and see how you go on. >> >> Rowland >> Rowland >> >> >> >> > There are various...

Hi Tom, Small update. I'am also still looking into this but im not getting much futher.. I am just reading : https://blogs.msdn.microsoft.com/openspecification/2009/12/31/verifying-the-server-signature-in-kerberos-privilege-account-certificate/ Bit older but, im trying to understand more what happens here. And the only "guess" i can make here is . A kerberos ticket, with the wrong encryption type tried to validate. Base on that, but...

On Sat, 14 Oct 2017, Rowland Penny via samba wrote: > On Sat, 14 Oct 2017 05:33:31 -0400 (EDT) > me at tdiehl.org wrote: > >> On Fri, 13 Oct 2017, Rowland Penny via samba wrote: >> >>> On Fri, 13 Oct 2017 11:45:43 +0200 >>> "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: >>> >>>> Hai, >>>>